{"report_id":"cac81a2c-2ad5-478e-9c8e-04d853f3bd57","version":0,"status":"done","tags":[],"date":"2026-09-13T19:14:27Z","url":{"schema":"http","addr":"kwatannn.com/","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"172.67.175.133","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kwatannn.com/","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"title":"Blackwell's, books for life and for learning Blackwell's","dom":{"size":180915,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (409)","md5":"6337bae73e0bdb4f19a324551af93155","sha1":"09f68a513573cc554bc9eac9ea4ef4a5186042d0","sha256":"da47d154a105463949a15d206a0968a57ba45e124d97f81a937aae16fd13c18f","sha512":"563e47a06f52d0791b941ddbda32fbe512197ea7be4edb73943675219cf801b7b70bad38558bc92eb99093052175ba0321b2c268b37676eb49d1bf3c7cc07be2","ssdeep":"3072:EX8z85Tb4Ok3IGRz83jxv4H7slJZU7LndZ/RiEn0:EX8z85TbU0","tlshash":"c6047173d0f1243b5116a0e92aa29f1b7fd1d90bc54ba808b7ed1788afd6ce59c0724d","dom_hash":"domhashd5433172a8171858223c5f1e6951004f","first_seen":"2026-06-09T00:38:02.726922Z","last_seen":"2026-09-18T21:16:35.253106Z","times_seen":27,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kwatannn.com/","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"172.67.175.133","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T19:14:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"kwatannn.com","ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-15","domain_rank":0,"first_seen":"2026-07-12T16:00:40.579671Z","last_seen":"2026-09-13T18:52:52.088553Z","alert_count":430,"request_count":86,"received_data":1400409,"sent_data":47180,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.472Z","timestamp":1789326837472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEPam%2Fw3dr0UIdkB5xuNlgMVG7%2Bf5Hi2SFwoFOg1VuyVBcBpzBdx40OfKFVaBe0muzhTteZikz0%2Fiy%2FbGuKwTqLUz9HXmKdACaGh5h8YygtViOohbKCuk%2FL0mFho8ak%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978de3931d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"287169bff93a2836d29645ee581a6cc4","sha1":"934aa80935ffd3f062cc8f8d552886caaea9d0a4","sha256":"f03a14f405d74d731660494fb3d352d67d02d23e6e6e7e6143aff5052f822516","sha512":"c69b6e02e2a85f4248e8f297d89ca64b3c046ae4e387237110e69048611cd2630017b08ef0899d6a11fdf9f91cb3a297242cab8c0ac1081652fdcc8e034b8f6a","ssdeep":"192:Vj9jhjOZK/OaaUl8Pzlzzn81B89R7vlCeNA:J//Fu8AR7vlCeG","tlshash":"12e1aaa7f9f915be11938272316a7b193ee49013da6704a576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.701919Z","last_seen":"2026-09-13T19:14:30.701919Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.ttf","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.568Z","timestamp":1789326837568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.ttf HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2Fzz1ry2wyxV5r0d%2BvbScrmIOUQeoVErBiDIdV2fLTd7S%2Be94GC3xGfzCRBtoaqfMSNw%2FXlKyV%2FU2O2OOE5lk6q3RDB491CwHILhoH4LdNfTvluoy81Gp73ws50ONW4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978ded972d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"75982037fae46a85965ccfff405523e8","sha1":"ecc775786c23fca8fd19146ce54bb7a48c977247","sha256":"9ec20ee6d1ec3270d4f8ffcc4c2ef48fe9b1c6c6678c491609bc7cad0d291217","sha512":"d5b6b362f72c898dc080fe4666e37963ca0bb06cc3dbfba959634ef0fb6dbd2e6b488783b78ff3bfe546a1fa8e51689b9a132e8458d16de86223aba7562bdb21","ssdeep":"192:Vj9jhjOZK/OaaUl8PzLzzn81B89v7vlCeNA:J//FM8Av7vlCeG","tlshash":"6ce1ba63f9f915be11938272316a7b193ee49013da6604e576edc1720f8df81fe03284","first_seen":"2026-09-13T19:14:30.703135Z","last_seen":"2026-09-13T19:14:30.703135Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/bw-footer.png","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.217Z","timestamp":1789326837217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bw-footer.png HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-3783\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJIpRZXFRELm5iGa9rsO3bugAkb3ugeAIG2cSlOyt%2FPwn5yJxiGXUJBANcGE8UzTYKJ7tjFX3tbsEfnwwbykD2xWf3MCh7KzcKMtETMaCXUNL%2BSv87RSNqkPhxKMuzI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dca8b0d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14211\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14211,"size_decoded":14977,"mime_type":"image/png","magic":"PNG image data, 147 x 73, 8-bit/color RGBA, non-interlaced","md5":"1ad257d2e97009a09a709b959d554721","sha1":"f99e123704ab48c2d343016a914e5d4954c555ff","sha256":"992fea1bf0dea6081aa1cb955ff4fe637342c8252bae9be2b9314ad334bb0a0e","sha512":"cbffb3532deaa5ce0aab5269156916d882b99a66636159bb291c2c0931767652d093018f3a09890c0e82b7cc2be769a908c9845c1f9ef709edbe79fe1509ea32","ssdeep":"192:CLC7XCB5RUoW9d75btRwCIY2AgkOBdQzon1NahkZNhm80Y3vSERErsbOOXExDxsC:C+GIMY27dQzonCMPm80Y3vSECrJzDiUF","tlshash":"b052d02f29339f309986cfec6ce3ef495836a5cc2120d7549e18c66263d5e606b64cb6","first_seen":"2026-05-31T00:41:42.982949Z","last_seen":"2026-09-18T21:16:35.294055Z","times_seen":34,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/print.css","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.331Z","timestamp":1789326837331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/print.css HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLIlxvBL6dq9HAogjMeq0iLJof7B1i1wnc25lrvEeR6BOE1ic6egKjX9fRDj9Wz2laKFV%2BycMJ%2F9aIjMRh8yinuYfJ%2FCcwCCfBTmju67TGAh4uPMjN89S8DwfERbuj8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a3a978dd58e9d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"4e85c45a874b589d5f306e0f2ccfdf64","sha1":"cbde3175bb775cbae7e2333b24e4f93650f683c2","sha256":"e4be2cb95cd270b29ba33b9fb731c28416ea259a1308225dfa4679c92d7fe0e0","sha512":"2945cfb2f151949edc93485f8327691bd05ee49924ce1fadd0ff0885695498502c43ee3ba6ad8ed74b26e88b8796c6d44b1399fb0cdd6177ae85c23e7b5f7369","ssdeep":"192:Vj9jhjOZK/OaaUl8PzVzzn81B89h7vlCeNA:J//F+8Ah7vlCeG","tlshash":"54e1ba63f9f915be11938272316a7b193ee49013da6604e576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.704958Z","last_seen":"2026-09-13T19:14:30.704958Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/spotlight.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.349Z","timestamp":1789326837349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/spotlight.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vx%2Fy1B0SW37otaarSeENo2YOS2UpCZrlsJ3XiAI3ySVA7yT488e2kfeQAgyi00AIipLHm7CgZ%2FNCH05rcHlcbgOV3HaZx6mcIcwm9bniamqey%2FmNvFnEUN2CVscFOzg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd78edd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7923,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b03d55a90e06a5af2416380d39a8b556","sha1":"1aaa437fb07bc0ba0340d67d2dab0102745c2504","sha256":"a9af7ac5b560cb95396b393f9cb9c6269d8af5aaa8e0f68ea45827648aed1968","sha512":"4b6df2564f5fa1504fb82dad9c64c98df9bb2f4573dccf6a72ec5fddf1df10f70738380af3010c94c0720b8e591e4d2a9cc189213d1c350dd1978624e9ff278c","ssdeep":"192:Vj9jhjOZK/OaaUl8Pz+zzn81B8967vlCeNA:J//FD8A67vlCeG","tlshash":"34e1ba63f9f915be11938272316a7b193ee49013da6604e576edc1760f8ef81fe03284","first_seen":"2026-09-13T19:14:30.7075Z","last_seen":"2026-09-13T19:14:30.7075Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9780099547952.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.179Z","timestamp":1789326837179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780099547952.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1542\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uxhtxhINGD%2F6zTBi6%2BQNTLGKpwNT79mDdJZ29y8RLAvTt%2FQLeXONJn1DrB1YM8fgFrpAYDX7hrUbvWIbY2kQz%2FQUlaJgQ2tEd6ISu%2FeUD8BMci%2ByQ73sXjfn%2FuR2FA8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc687fd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5442\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5442,"size_decoded":6218,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 129x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c819c2c0937a8e36253e39732b1acc7e","sha1":"5654586b55f0f0ed304e1e5f081432f5daea4154","sha256":"b73bed4de83a77b2fcf815e1e510146efb1241f97245c41d4adc650c182e72eb","sha512":"e09a5bb29388801b5fdafd9fa2f770e88a68d4a778ebf3925a21a8b92abce0ec9cd208337bbcccd3aa8131338a6206adee8d186919c644fe05feb5b26b164685","ssdeep":"96:dGBVUwRyl+Yt/4OgggB0Bw5XIxhVVMGXrOdZJqmPu+71d1J:4QwRWL/4OkuBmIxnVMGXi1571dj","tlshash":"ddb1adcb2d0ac08874a098e04b0eb93bc977eb55448d7e02b8b732b9e901f4d61942df","first_seen":"2026-05-31T00:41:42.946098Z","last_seen":"2026-09-18T21:16:35.306846Z","times_seen":34,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9781806491872.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.190Z","timestamp":1789326837190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781806491872.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1610\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsjP%2Fxkql2PqxLbCg5OF23wtcaz09G75mGvATL6Z50yMeR1JRoPgbCHDwhKHznzks7qQ%2FdljJ7ml1rfosBNh58zUBrC4WqbhJG%2BkOEwKHPKjQo8b4RsEPwzH2jL4u8k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc788cd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5648\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5648,"size_decoded":6416,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 176x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0c500c162c9418d7243780515d8b0d51","sha1":"e9c6896fbfb4a2b2cd8e09537e0eec44aa4d1d6f","sha256":"ac0c3219c7af285b1e0d537737c09200932d5755ffbc9a0fa053414432e5f64d","sha512":"20ad4dabbbbd2c0a7811fdca93f54a09e6547b0e8b310eba07d7572cb0be941c2da5bf8bf3b84f6a6653c5c1146bc06ed9dce0cd2f187fa988089e91f2a508b7","ssdeep":"96:rcbG2oG3re7wuB8cwWEBtdKd4MrYTQAwl3I8Hdr6eJZbx02nWVFNbaIXSH:rcbG2oG3y0uB8ZWEBtl0A+5fWyk3aIX4","tlshash":"a1c18e5fc6803b4bcf1cb28d19b87840961c99872252ca279d35393a66f5e04d6b3dcb","first_seen":"2026-05-31T00:41:43.01913Z","last_seen":"2026-09-18T21:16:35.331Z","times_seen":34,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9780356524313.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.200Z","timestamp":1789326837200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780356524313.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1b6a\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GoQVpPF62Dbbu%2BQu%2FymLObQDd6gkmuYAR8hiAAru1%2F2vOM%2BPEW7zmUBQKlu9%2F3nvR7dzANnRrkUsancc33CbFlzonU15SsrY1pJHAyqWIVuf%2FApksR2JvEZw1gWDBVw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc8899d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7018\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7018,"size_decoded":7792,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 128x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2c9e8de9211b3bf98ba53d8515b186ac","sha1":"395ac5800b97cd1a8b8a2d2e231b4272160727f8","sha256":"c58b9b75ceafd3051120588053171b0d2696c493c63ecdb5887b6a39113333e7","sha512":"fc8f9facb3d6871d783093406b1fe539d70156e8ab64d9dd82c3487d9cd8262cffc9aad08ff98a0c155434485de16fd1afbec2cbb422de547ae7e1695bc16505","ssdeep":"192:XZCmaOrV7QLyhCGmj9ma+W6LzTVO4FLKKRgYKbFgGX:XZCRQV7QL+CGJ/xO4F5gp2g","tlshash":"05e1ae966354d67482a00fa9428a907bed3e2a77d8901275b60e999e81b19a124b092b","first_seen":"2026-05-31T00:41:42.991149Z","last_seen":"2026-09-18T21:16:35.292568Z","times_seen":34,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/curator3_large.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.205Z","timestamp":1789326837205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_large.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-f670\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8PekYH528PxSl6dC%2FhCXezsU4qAMh7Iomm1HWEGS%2Bc1aYyhlke%2FPQCatlUxpUyw1mmEor%2B0pdOfZ5GxRXhP%2BhyFm%2FVtXZMUgF6c0g4NpMdj84zoIejNoaMh6zGMWLEw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc98a0d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63088,"size_decoded":63863,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e250989d624c3cd94949aa56f2587cc7","sha1":"7f8b250f73cdb2533ffcf618f7c7a3d2e9eb9020","sha256":"f2886439568465f92d84aaefb38c50d60d5d86e2e51966f6756bc3c53bf08b70","sha512":"f39b38c56bc7561ab92438c3780abf9e7b0a23665b714e234371192eeb3bc1a51adc2987f106e25252929e2c96482adf01f8daaa11eb106588d8d19ad9fdf93a","ssdeep":"1536:SSRQZ8aC253+skqjAonEoJbWv+r3CmkotCPWjx:SSRux+sJnEoJbWQCTotCOjx","tlshash":"c953022a380443b19276f2e18e2f9dd464e68a613765214f6dbd27c4ec909e39cfe506","first_seen":"2026-05-31T00:41:42.964196Z","last_seen":"2026-09-18T21:16:35.310034Z","times_seen":34,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/master_card_icon.jpg","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.361Z","timestamp":1789326837361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/master_card_icon.jpg HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vuWa%2FszAh3IpBvyPGih9xeUdzK8aJ8zC0fcEplJ1xL%2F0XPzgPZY%2Fedh4KSagQAFBjQzqNwzSPavy1OQRJXsHveLQxWy184IR3sMO01U5TE3e1u1eiOLHGz%2FHZB1viJk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd88f7d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7925,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7c273b73a728602317ac0f0916c02b95","sha1":"fcc561e8ab6e7b8656560e34c7946b822f890ab4","sha256":"79a6602326fd11892e605a517f7a614bc9990b028a507f122d3407ea17261ea7","sha512":"692a30bd6946709d60b0f50f348779c9c86a0bba28e4fed7f6281ebef9c48ccdc899e86803c7951d3e671ae50bb3b192bce63c6d98efee59cdf8e988c994fbe6","ssdeep":"192:Vj9jhjOZK/OaaUl8PzRzzn81B89Z7vlCeNA:J//Fm8AZ7vlCeG","tlshash":"d3e1ba67f9f915be11938272316a7b193ee49013da6604e576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.712125Z","last_seen":"2026-09-13T19:14:30.712125Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.148Z","timestamp":1789326837148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/styles.css HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6PcLZHdPlHIE%2BYhEdxJW1VOJtNdn8EpW%2FGgg7CazTeAbXzUEkStXBeFNk810ml9W%2BEi6wtLTM1c%2BH%2Ff8A%2F4rKdgvlUES%2B4vOLfvunxehbrl%2B5%2BYQQAmxGymv%2Bz2rHc%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-5e619\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 1368\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc385cd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386585,"size_decoded":66529,"mime_type":"text/css","magic":"ASCII text, with very long lines (59968)","md5":"67762074c308b81060a683cd606813a4","sha1":"7dd509ec4f1cd1439bd282580c4b26faeeb12d8d","sha256":"c627ee19335f9b9012f20803948a8685d4d84c666e00f1a64902b9dab280faa9","sha512":"0119061b09def59e79493f345d647b4d6c96fd82f514c21c41db4fb92244cf65db14c4a0d8ab1618473580f5efd12ef768cafd8d1b22847975029befc01185d6","ssdeep":"3072:f9jvh6Cok6+SG7RouMYK6taix9FKDh+AM3vbjNFBDzOrFlNQOKOJ0duP+7xVG3lW:flvh6CX6+S+xcMdGqElc/RRiVP7fq","tlshash":"2b84f9129b38103cf127816ef1e27bdc36149017d2970bf6f997963acbca5a24a3275d","first_seen":"2026-05-31T00:41:43.014629Z","last_seen":"2026-09-18T21:16:35.290232Z","times_seen":34,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/close.svg","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.165Z","timestamp":1789326837165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/close.svg HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wp8eC5NKO7%2FIdynU5lTc5S%2FD7ay0SoBEgCcPH2zaA8QqeZFFrn0oaA4YyPeIYycZaphPTwz%2B7jwIyrZgK8Eo%2FHzeun1n7mF8fhg1qjegF05qpid7yih0mq2qD1m%2B3Fc%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-541\"\r\nage: 1368\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a978dc5864d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":1439,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"463a29230026f25d47804e96c507f787","sha1":"f50e0eac87bb8f5cff8f7d8ccb5d72aedda7e78d","sha256":"a049e1abe441835a2bcf35258936072189a0a52d0000c4ed2094e59d2afd189b","sha512":"83f065b7b10e906ef8bf40dd907da4f0eb0f4c28ee2d8b44e418b15f1c06884a579957b2bc27418fac5759825d394819ff0ac48d784b9f05564b8edab25d9426","ssdeep":"","tlshash":"2c21e5fc520853f49d587e98a8623077954514bbbf9db8c8928c847788c53dd4ec8d58","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-09-19T06:06:00.248046Z","times_seen":69459,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9781464270154.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.184Z","timestamp":1789326837184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270154.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1bac\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hYPP2yg4nYcZFAuyEdtBZFCSUNpLEcKo3MurO%2FJWe%2FwwZf8tTe9iFiXYktMGW7LxRw62GWnC43RQse6X45DuXB666TPTPzyTkEzBK3Rh9KcvLqwfHkvoDMr%2Fk9nOnQw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc7886d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7084,"size_decoded":7852,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"84046100347aa9e6f4079c67de1ff93c","sha1":"9e3ce6368f1bbdf1b6c010d43062c82302af3ba1","sha256":"7eb0b725e294cc0fae0f15120acedc36b7b82ac3750b5f5ec1f198a748ad7066","sha512":"9fda9ec08cae84b082538ab288cbdda39db57625cc4e4fdf86129859398f3eea22ff67d1051d28b70a4bab70cc5f9126d2537979492f1a6922b292b07900b570","ssdeep":"192:4s/az4LFIrMamLJvOgWd+TQ+QrOAC2+WmSIozvCN4W5:4s/aELFKCLJOp+L325VzCr5","tlshash":"68e19e03ce7f13617599b3bd7cbbb7ca1e4481d271899f64a6dc164d86930f22e64680","first_seen":"2026-05-31T00:41:43.01608Z","last_seen":"2026-09-18T21:16:35.336267Z","times_seen":34,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9780008786267.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.193Z","timestamp":1789326837193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008786267.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-12b0\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c3Rn%2BSh%2BV9ZfdtfOgND6SW1m7T0dlCW2Vey5oojIBfspYugIY0zqScQKRHXGh9t2%2FIgHdCmNjxlwcSZ4DFxF3k16cvYKt%2F8dcYBti99yCua1Zu4ZZdxGrcxl%2BnS954k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc8891d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4784,"size_decoded":5556,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 168x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0211a939b7dfb48eb580e19ca1f9faad","sha1":"738a6383c1d098efeb95ba792ccbbaaacc33d86b","sha256":"4348dbdcf200104f9da60b23f5983ebbd4ab43a970f3ea36d9e42d692b506f3a","sha512":"4044da07b5d88b2c0928d6750f2c47fabce57e76bd9c6d3c657e3f2949bbf708bed3edef7db611e1cc59e5f76f84c6c869876e7f08d564e91811be3337a65957","ssdeep":"96:I9CFvb0C/B8iNDyoamRfayY5JGSWgAsg5e0sbbJYlNp5CyFp5Zyy7mOmK:I9C9bLZ8i1yJYyyRskiJYlT5lZyhO1","tlshash":"d7a17eb76e917fbf31d4a9ff8506c8415c2a7314eac807312192ab099cf4488f0a7369","first_seen":"2026-05-31T00:41:43.047075Z","last_seen":"2026-09-18T21:16:35.313617Z","times_seen":34,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/2100000299980.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.194Z","timestamp":1789326837194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/2100000299980.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-17ba\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWPxT5kUGrKdIbTklosk4SZG5w3EBW3uQP%2BzScsDSF3TcZuaLC7uuEJA%2Bk6SBlEvd1jHFymT%2Br0B9b7wBQqUhAKqEKJdKwU%2FSVPASTsxX%2Bw7tbrhciGbbUuMHXV7%2FTg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc8895d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6074,"size_decoded":6848,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3e066d88aa3f2ce539f3f7b6c6f3de33","sha1":"df295c7222ce107d89baa2da4978be14abaaaf6d","sha256":"5e266f60dbed9e568f17ecccdbbd9df7640b70bc2953ec76e0d94cbd55b5bff3","sha512":"57847ac4f8001befcdf0383cec7d488a18ddb40fc286c10b713dcec5355233ee009c2aedfbb0f7cdd886d160629fd61969642b51a58b7a3ffbe84ce7b09debc5","ssdeep":"96:Az4WpaMjTl52VRda7WwljXjj/twWHvCt1yYiH/UqxnejmtuXyy:gvYMjTPOR07WOTP/twqkmXrtMH","tlshash":"67c19f30b0955144b638a8e2ed5f3551655e00ee871abcdd23d8b5fc74f7fe1a962210","first_seen":"2026-05-31T00:41:43.008951Z","last_seen":"2026-09-18T21:16:35.258957Z","times_seen":34,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42-1.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.208Z","timestamp":1789326837208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42-1.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1130\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wU7sBQsTqv%2FeB6JECbibIIePtQk7V9I981JCkPdaivMBEj9jG%2BAxjYx5fYp57YG2JRjghmOIfaMq6gxVQ1BMiLnIhTZBVMFglZCwBQ7HzRR1Mb8zwugudYMedmTq25Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc98a6d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4400,"size_decoded":5166,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d1ae280dc4bac71f494ad3e2460b15","sha1":"e4714c74aeb28c8e67124391835fe9680af9cb17","sha256":"a2fe1eadff7c503ede190c334fdefa6d911ec21b96114350e7b481d6d032c288","sha512":"513a7afa3e95d536289d9e85205a70c73497b675d5c371c834d83b8fa03bf06b6dba5d24eaa4f304c061205d12443b4105fd25cc77d64541b9585e8941593be4","ssdeep":"48:s+MflsXlf/lulel4wlwx+6MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVwyKzJgWj98LeF:sbN26MT0D5MdtbZPAVwzV6skjfGV","tlshash":"f1912ab6ef76e7a6ed71d77440f37be1a2d7b238c33166d26020ab1412841c16b8e09d","first_seen":"2026-05-31T00:41:42.966321Z","last_seen":"2026-09-18T21:16:35.275062Z","times_seen":34,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.eot","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.396Z","timestamp":1789326837396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.eot HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dt9MdDIkzWUe4MYaFjBCijOuy%2F8OhjiDaK6wdyxNz5wK3eOU5AIllGQcMHdYywy4qqglb%2BILAjOS%2BMyfzhef%2B9%2FBxUuKDTq8CnMcNEACVsP49weASnmeRVy1u4rV6sA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978ddc90dd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"10ae69dc2b1f56278d3167abc4d26c8b","sha1":"34ff7804627d9040272fdc15d79b46346e1436a8","sha256":"e0e9efd1ae02262025af3559cdac966843fd51393e7f085fabc8bc41210aae76","sha512":"9e99ca94f0ab4c0fc21281840a2d06525428683f119edd322e9062064351393afc4e5664837b832383753936a60e485b5ed947c01df34794e7202adc4c76734c","ssdeep":"192:Vj9jhjOZK/OaaUl8PzEzzn81B89E7vlCeNA:J//F18AE7vlCeG","tlshash":"f7e1ba63f9f915be11938272316a7b193ee49013da6608e576edc1720f8df85fe03285","first_seen":"2026-09-13T19:14:30.716738Z","last_seen":"2026-09-13T19:14:30.716738Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.eot","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.400Z","timestamp":1789326837400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.eot HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SCtM5HDwWxlp00DikgqLblsAWgB55QDLVufOFgDxeT3ewYaA%2Fw1q0%2BOoCQY8QOGUxEdYLM8d1OaNXkq6GDGMZ6p7l7i3mUxaiFLnfdT2PJZjgRFbUhTQRs9aYP7JMWY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978ddc913d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"82a602c360c0b60631b8965d302a39b7","sha1":"d12401aa6fee2c6ab7828a0119a432f47bec0bc3","sha256":"d9244aa75652da842fad8ecf136792762ad3456d20a05c99323e7b87dfa675fa","sha512":"0eb304347d201f715d786887666dbe16952c121cbc2566deebadc7012acfd2086cd037dcf76f6f1090a40872c7ec7ec995e43cc41b6eca0343190951c1fd09ed","ssdeep":"192:Vj9jhjOZK/OaaUl8Pzwzzn81B89k7vlCeNA:J//F18Ak7vlCeG","tlshash":"56e1ba67f9f915be11938272316a7b193ee49013da6604e576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.71769Z","last_seen":"2026-09-13T19:14:30.71769Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff2","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.428Z","timestamp":1789326837428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff2 HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEbKCtwcmj8g6LUAW0piWbOzuOq9ButrBU75wznXW3ickoQdTmVvTBY%2Bt4KyHdBgKy%2FECNJoQJYOUg5COavf02wfTjOI1O8CuGUvL7vfinq6OjIw1d6vY5Wv%2B7chOXI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978ddf917d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b358d11892883d3bd8ae0976b2d48779","sha1":"fa399e8bb87761f677b9f481bdfe4fa660d55f61","sha256":"4e7521848c11cc4c9230ca82752609773a4b196cf47f96acb23a50f54a95bd39","sha512":"2ef13ec7eb0bc56cbb510e1fa343f605cd66f10ed428b16b1f212a4cf829c78ba681e5a25e0f46ee360adc3cc4d8f292e1462316f53274239e5b52916007f8bf","ssdeep":"192:Vj9jhjOZK/OaaUl8PzHzzn81B89L7vlCeNA:J//FY8AL7vlCeG","tlshash":"f7e1ba63f9f915be11938272316a7b193ee49013da6704a576edc1720f8ef81fe07284","first_seen":"2026-09-13T19:14:30.71868Z","last_seen":"2026-09-13T19:14:30.71868Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.470Z","timestamp":1789326837470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UIWXBWWfIty97IK4crnH9kUa4774SWffE5wjCZcJfVgKRP%2BnXUffqhEsVtGnTi4RN5HFeFF7q7LoSyc0UaQToQQ3DVv%2FxP00Jt7JNzFSSREeLpO10bDf6Md9k0UOTKc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978de392ed2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"4ad8cdb7553afc544e734effde14cf57","sha1":"3ba8f1d25fcf43f68c43abb6cc371abc84909874","sha256":"2ea903ca8e06f16822ac345b828250d3131f5852c88ce04e5ba6ca59d8b2d587","sha512":"b071545e3fb3b216790c3955c00de1d20c8a5be697a01018c4a9e01629409e7ccf768cfc5805da422a2212a658a1bdf4b3b4d4e0ed1f3abcf8afb0898292649d","ssdeep":"192:Vj9jhjOZK/OaaUl8PzKzzn81B89m7vlCeNA:J//Fv8Am7vlCeG","tlshash":"f8e1baa3f9f915be11938272316a7b193ee49013da6604e576edc1760f8df81fe03284","first_seen":"2026-09-13T19:14:30.719669Z","last_seen":"2026-09-13T19:14:30.719669Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.510Z","timestamp":1789326837510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53losonZtRTDgODDoUWW8EB9FbEeC2xwAQY36cnwxHu47dJT25fuhxSjCYIfLv%2B7lVH%2FGaEJxcCEj6%2F97H4S6YUozJ1hKhxYTgLJOB1LhsobCAtXzO8JZVe8Og5DGA4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978de7942d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8e52ebb6d18bb64c2719b379c68419da","sha1":"78d28822a82307ae29016dfcf628aa66217a14a8","sha256":"4365c1f03de9e978f08164cd7cbe87ab3dc9dfc2d3fa2fc5f0d4b2de95588fe0","sha512":"1b8da08905ea350f02e7b541929c5b85e38896737563d6af0d0053c8923cab3d7ca071772ac27776a9f04f08e96e53cdcf40161c9076590cf0bcb2ea2d8dddde","ssdeep":"192:Vj9jhjOZK/OaaUl8Pzjzzn81B8937vlCeNA:J//Fk8A37vlCeG","tlshash":"b0e1aa67f9f915be11938272316a7b193ee49013da6604a576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.720713Z","last_seen":"2026-09-13T19:14:30.720713Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.145Z","timestamp":1789326837145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/font-awesome.min.css HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEH6qrZYNq%2BubRsE0MWlgZf7OCEK%2FxZAuNesPWq6Z92jOk7tC18pFQhU%2FOd%2BmPLP%2B9ch9RfSAqZTx1pQIx%2FGKF8dYKyNMs7%2FHpWX6RY5IxAXGfgvcSE1adjZdPh0YGA%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-7853\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 1368\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc3856d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30803,"size_decoded":7791,"mime_type":"text/css","magic":"ASCII text, with very long lines (30640)","md5":"3b08091d72505c0e7057bcd09490f794","sha1":"5da5416e9b459e2e5151dbb4a7e6548d3e277744","sha256":"7fc22d7e1ab1998fffa9f184255a4aa196b624377400dea39b6a1680b9c5bdb0","sha512":"4bfecbf5f4028453f31e564f1a72b794c2b062adab8ac09b05d91cf53ee61820ba3dc9886a5f55c47bffdaf73ff3b81a1e699ef7f24807d78e5e4376e4a81aeb","ssdeep":"384:Du5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:Mlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"fbd241e8e54c01d66731c48bff81b36862bafb3dc5854da9f01f290c29d22a552c5fb9","first_seen":"2023-04-10T10:49:20Z","last_seen":"2026-09-18T21:16:35.266722Z","times_seen":64,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9781035438518.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.193Z","timestamp":1789326837193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781035438518.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1d38\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYLdfNAv2oxig15QkxaPQcqGvuMDpA8TAyaamN5OaREU97Hef%2FRH66THENND9PMMsffCc5QAqlIhQ9HOsk92OwZ7I4%2FNGCwy3zeZQEnfv92MkdTPAaY9LHWjuG5LUk0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc7890d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7480,"size_decoded":8246,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fffb864a6a941d7a8dfa9b2587aa650c","sha1":"0df5b617093b5f7f5c4503b3a4301dadcd89bbbf","sha256":"503bfb6b2ab6da62c8873099d456f90d59a9120ba80ba7153f1b9b82f2c4d622","sha512":"d0fd8c5d2608b16bced0b42af3919c1b81e522c541f52245a51d9982466f414ff70e62caf042f0ba81657f9efd1166cfb98e1039b8e21baa147e404a279f0252","ssdeep":"192:8QTo93olKEm935/kQeRM6GLx+2r8hZVsIE:8rrEm931eRMrLxxgriF","tlshash":"15f19f26d639e9fac729b0616fde342dd60b998f11b14da410b53f2618d960c12e83fe","first_seen":"2026-05-31T00:41:43.061491Z","last_seen":"2026-09-18T21:16:35.303249Z","times_seen":34,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/curator3_small1.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.206Z","timestamp":1789326837206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_small1.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1e50\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMLg4hBsbxODlaCU%2FFDyvsE%2FIXeY08Sgb%2FSxO2bgiKdNY2K%2B3677%2BC%2FDfTFSLRAa26dPMYa1KF2TuIcbOrejmhGzwqXs%2FAyPem2BJDvTBPWnv0mMlHzF0JY1mqL9S5w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc98a1d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7760,"size_decoded":8536,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4cd0503ff9155ee31875c650ce5c546a","sha1":"af3e5103e4619f3ff0bfebeb05e89148aa37871a","sha256":"6b7d00c5d85e2342d5df2b4cbf3beb03c62defb5edade2cfe541f495e576df15","sha512":"5c85bc4e8173de02307ea10e9cd8b171ef0c6da3152c232ff4ad6ba212d3e3a71c2a5a77c2251d0f9531ab70aa59532a568c2accc116e8f254a054334f6cb85e","ssdeep":"192:OCwfp09+YcKfrccQ3fpzLv6R6NXyUdAmZw:Os3rEp64NfA","tlshash":"95f1af4d8b0707b7f828023c7681472a3a54d056e2bb971760027ab599b62c63adb3f8","first_seen":"2026-05-31T00:41:43.021398Z","last_seen":"2026-09-18T21:16:35.298146Z","times_seen":34,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/bag_icon.svg","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.347Z","timestamp":1789326837347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bag_icon.svg HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=30TVoEeHi6bWI50GA9%2BattfEtshhtFMAiwiuFIxPDyGZ6uy1r7dR5%2FfkkV5yPzaQysTwtsIXz5PKMeE7bOie9GUopEnNZmk9Umtf2LR4kRnajvgibow%2BXDJA72kRi8g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd78ecd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7923,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d690ad4249fe09ab9097f7eda10e41e9","sha1":"6b4003b855e373f338aa8da19cba21c873c71851","sha256":"090618c71ec6f092e63e53e93c0c122835ae03e0a4102de19174c0c46ae41d4c","sha512":"85671d37da2939e061f0f6535570f27af5bb5861048643202729fdb046151e7003b5fbfa4851114c7b7dd28234a26aaf88d7cee96e1480e3d5ef6f8ca330afeb","ssdeep":"192:Vj9jhjOZK/OaaUl8Pzhzzn81B89h7vlCeNA:J//Fe8Ah7vlCeG","tlshash":"37e1baa3f9f915be11938272316a7b193ee49013da6604a576edc1760f8ef81fe03284","first_seen":"2026-09-13T19:14:30.723512Z","last_seen":"2026-09-13T19:14:30.723512Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/BA_icon.jpg","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.364Z","timestamp":1789326837364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/BA_icon.jpg HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9BJHEtn0ySk9aX0r6UiqASwNscptsr7HRk0bdYLfPgHZhWO4vTB65vc%2FsqwgMui6vEOeY96PcgyGlczQ1GHCpG6vjOXBXJIQ0%2FEBXrtbHcY4yBPLtKJ%2BWdi7p2850SY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd98fcd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7923,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"894d621aa6c24eee812b12a96b0eaece","sha1":"db9e6b0d1e01470d60d95c50c27bf8ee54f93064","sha256":"16848cd173d53926f06c4a041626fa87d4169a1d6484b61c7e44edf1b05d14c3","sha512":"5e30e41a411bec0d752f7e0b081e017089c06d8f15bfd287d8e3258edf51cda653f5e9b5964700c163bf42fafab1b5c124be421a0dc7933a5e9997496a31bf5c","ssdeep":"192:Vj9jhjOZK/OaaUl8Pzazzn81B8967vlCeNA:J//FD8A67vlCeG","tlshash":"82e1aaa7f9f915be11938272316a7b193ee49013da6604e576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.724458Z","last_seen":"2026-09-13T19:14:30.724458Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/favicon-16x16.png","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.433Z","timestamp":1789326837433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/favicon-16x16.png HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6OUmkOGyGURjWivyAy%2FkSwLdqcGw5GxZhSH72AlAbt94S7ZR1trD3SBUl3covQxBsHSM%2BC3uN1%2BMhnPZXDgC4XoMO%2Bgpd4HkS1LY%2B71gvOOEh3unyGi2UcDx%2BrFoNU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3a978de392cd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7932,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d9c3d60dcaa95b8b0431a9be51a60bc5","sha1":"55249a9fe9eed1b1e0d61df859fe8309ae946b3e","sha256":"9f8565aa12f56ad6a9be887202fed055770c8998c9f01f4215052c1e1e0ece24","sha512":"7451c591e9b0ea41492b5f86405570b8ee9cc3f271ddbe1f1823c669d29316cc0b159f1bd9e4ee65b330730ec4979f4ab37fce1d31d543237e11057bc107cb92","ssdeep":"192:Vj9jhjOZK/OaaUl8PzIzzn81B89M7vlCeNA:J//FN8AM7vlCeG","tlshash":"b5e1aaa7f9f915be11938272316a7b193ee49013da6604a576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.725672Z","last_seen":"2026-09-13T19:14:30.725672Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.ttf","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.469Z","timestamp":1789326837469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.ttf HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AU%2FI8GPFP4R07K2CntlFRaaUf4SxXp%2BxsaDNzS1002UUYwct8J4LFESGV%2FSCKGylN7l6d3avRux7UwOtZ2qSrHAHvQKtAhQL34%2Bis2U4Hy6IUrekFIB8r150jj1pZiI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978de392dd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d5d75f17a7bf264424c62ef29c42b7a2","sha1":"407529ba87bc111279d211bee5aeb746df21fc12","sha256":"7139683a4ccbafe72b0e29564d923013982b4a979701fb6c8ade0d69c2a99c48","sha512":"bc18014b136d5832f32d97ff2e523b006835774fb56355565a845e0fef14c11a14822cb49c69ab7b3eb1eee7e63d8846125c3441f9754a07bc407c3fd6706a17","ssdeep":"192:Vj9jhjOZK/OaaUl8Pzfzzn81B89f7vlCeNA:J//Fc8Af7vlCeG","tlshash":"e6e1aa67f9f915be1193c272316a7b193ee49013da6604a576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.72666Z","last_seen":"2026-09-13T19:14:30.72666Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/2100000299201.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.189Z","timestamp":1789326837189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/2100000299201.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1744\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7uDF9mTUHqL5OPR7z8eDLMmQHUB9m16xV%2BKZwNoMg6SLn26HlXtPf%2B29TGCKSMLrgFswpMN%2BEcd82BFR3y5NWh3hLaWgzpZx4gDHFmneku6Yc9NdhFP6MxIEvziC%2Bo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc788bd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5956,"size_decoded":6726,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f99ad3c720c83975b7f5aa0958626ec","sha1":"a244d6e58ca1fdd2f8121db1709bac5950158d57","sha256":"6b954afbabe0ed0840eb1f20bb52711d829e2d525ee56e2954a2bc8fc7a606bd","sha512":"8d5b1b7619ec8ddf2f561e7f44a45f63155eef9120f8f9fe801a65f5820a33630099f1db17c2f05f3ab2f7cbac149d0402f096aaa519bb315d48fa3aee9f7f37","ssdeep":"96:MM6c2QWS35YIgX5z0ahKuIU3Nuv7Hwe+oY86UFP3KuDqcYRMVuWZPzrx:pMQnm89U3Nuvzwe+f86UZDGgVuuzrx","tlshash":"1dc18d092dc2ecd29487efb5f18451ebe24ec5b5ca83a8444e28f103e05d774d3926e7","first_seen":"2026-05-31T00:41:43.007065Z","last_seen":"2026-09-18T21:16:35.307382Z","times_seen":34,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/favicon-194x194.png","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.432Z","timestamp":1789326837432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/favicon-194x194.png HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WtmYECVtvcbrw6%2FxJFi4tgCo0y9LGMnRzf8%2BEBwV6PTk0wtaCO4%2B7M0XmxqR2xI%2BY6j01jh6fkWZkGAnIjdLfMr5wfXInnzWeL%2B4O13aj84%2B3tnwKFLwlZzLXMS4B5A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3a978de392bd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7932,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"358f0270551f64add25d00f6aa5662a8","sha1":"0bc7600ab5cfdc748a0c5a1e273abcbe1fecd8ae","sha256":"747ef80bfd1982fd3363111f94ffe81d39de13478f3eaace470268feb2381743","sha512":"3f802aa867520c1e10dce8e12fc9c7be270e5b2e177ee8ddae715b879d708905573d288e899fafe0079916a5d1ab5ce2aa2c4c9a3b7c81bc53bd977528cbaef5","ssdeep":"192:Vj9jhjOZK/OaaUl8PzFzzn81B8917vlCeNA:J//Fi8A17vlCeG","tlshash":"84e1aa67f9f915be11938272316a7b193ee49013da6604a576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.728106Z","last_seen":"2026-09-13T19:14:30.728106Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9781464270161.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.182Z","timestamp":1789326837182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270161.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1d42\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xeZrTrALBKaIxoSP7cWIrKf0rLaLX5OzFOZjVZO8EitRnDMQ5qkRVF%2BgxeQPyLPUNXk1i7CoxWjFT4frC21Aa7cEE2okPFtYelWnP%2FZnNRpLAMA95zCX77sNg%2FgOsZA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc6884d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7490\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7490,"size_decoded":8258,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d798f5ad64b1b809fc2aa3490af734f7","sha1":"e7abaca716033dc2fb42cb9a0b941a18d72544de","sha256":"bce52953e9d93c018782ca8a7baad7bc5c4bacdfefaacdd6408072905060b18c","sha512":"ab37a338164a155260afbced41248e2a256b7ed63ac75e338aa6aed1a3be89fa4bdc7a2048cc7ab3535d44e675b35b3dbac5a7f382cbbe8570899055b2022f78","ssdeep":"192:XTww/n4In84jB3qpKVkf17brMWWTeekJSZp7SPRiVrPwiWS:8w/n4InLjBofJbrMXTXkCeOMiWS","tlshash":"a0f19f1050f35470b425f5f7f246e62f9e45767ca6a7c30519610072bfaa87f8e7288c","first_seen":"2026-05-31T00:41:42.961649Z","last_seen":"2026-09-18T21:16:35.290833Z","times_seen":34,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9781460769102.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.186Z","timestamp":1789326837186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781460769102.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13d0\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQ0TnUFEjwj7gVle3P61Qlw3lsw4wYJbL0UklbpTdPkLsE5lmvjITZkSOm0aTBmNNWxAeApF4NjG7Sawngrd8mNof7NCwB8fypIMDkO1DtSiV87BA23HMgQsBV3rCrQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc7888d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5072\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5072,"size_decoded":5834,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 145x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6f80810ccf2482155e5226e786d61bfc","sha1":"d453fa3bf80e1fc3e25f329576460bd9f7746503","sha256":"0207de0fe2867ace7b1ae471a6ffcc4150a4fe231ee9a8e54d7ada9aff947871","sha512":"18c020e5a7c294d88cbdd5538443f3c309005ea9f942ce62b7e9d8912f8531c2db27cf33ad70c42b0e2ac08dcd9e5d79ae5857d123df1797bce21b7530872ae7","ssdeep":"96:7XkSoD/KliFRZzfF9AEUNj4U8NIVnnrG6S9G3p7AfGw35HNVUmkEl:7XkSoD/9vhF9AEUmU8D6H5Tw35HNVUGl","tlshash":"c8a16d9a2d1a67d08b647e36c9b9bd357f06ca2103d00e230fec8a940e2a9d75f531cc","first_seen":"2026-05-31T00:41:43.03614Z","last_seen":"2026-09-18T21:16:35.25837Z","times_seen":34,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9781837841202.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.196Z","timestamp":1789326837196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781837841202.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-19c6\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p7ErqcVUhcf1YSkVwUxuLLyu6HdsmbwePXP%2BuXU1mEymgtRpDngLDm%2BJN6NaoX7Ztd3i5xXB3jBZIdkhULNwZl3v2pHNfZW5pWtW5gsdrdYWJ6vhQQ8MzCPBvaXKUw8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc8896d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6598\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6598,"size_decoded":7364,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 132x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5340f69bd5b6f6db956c59308cfa3b13","sha1":"5971de8c4175e962c85af1d387ce397946c630fe","sha256":"b46c2109d2dc7ed13ceac8119690492f200dbf894825f9f2123b999184e2af34","sha512":"7b7983041273b0450a08363522a17c97a69dda11422b91d132630f223b03698310ca22bf25f17556f6a609db00b69a18c9e61ce3d0436b6266a51ab3faa6d56b","ssdeep":"96:djskTZbRFmTrW59WW1lKDuCK85bEB1g04zrGsuZipSleZCOqZDdwiP8Or:jbjmHWm4yuCXw/AQHl1RPwW8+","tlshash":"4ad18f038bc9bea18b346b9727f168ad0679e1a5d05cb688f4dd4b262d341de7317c22","first_seen":"2026-05-31T00:41:43.048895Z","last_seen":"2026-09-18T21:16:35.331595Z","times_seen":34,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/curator4_small1.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.211Z","timestamp":1789326837211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_small1.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-293e\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=im1VW8g6Py4HF57VaQJjxoNuZBjl7wC34eCwVniVLL0sC5SlE1RPGqr9%2FWDFpXiXyMo1XyBgyPGRzGw0lC8D6tJRaC%2FYTF5Q9T4cLpSqdc4Q5W8y8pkWVCYCaVU3HvU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc98aad2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10558\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10558,"size_decoded":11325,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d888f94dca4f1af2f6f5c64b7bb23c28","sha1":"7eaf5c0a16946fbe16e6ff3ed3a8e2789f3190be","sha256":"6acb16ba8f327be88369340cdf25a222b7105865c98ecd546967abfe086130ce","sha512":"ea0a6eeb59dd534440a8ab6d985e82d9f193f0949b100924be807cb8d44b5eb6b8b199df3008498bf784f832bdad90a1f57e926d56dd923ec158f036bd0560d7","ssdeep":"192:igo22U6NVL5W+YveJbvaoUcyTrWY/L/qIVjWQsJGNyXVxtYLQrhRKhtA0K:ro21E5W+ceJbybcEjzhVgDX1hRKhtW","tlshash":"8a22bf0543070852e971783763b72b063a09ede54bc7d29fd24ffde06aa16c9873ca54","first_seen":"2026-05-31T00:41:43.029405Z","last_seen":"2026-09-18T21:16:35.31595Z","times_seen":34,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/nbt_icon.jpg","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.363Z","timestamp":1789326837363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/nbt_icon.jpg HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LnQB5M0AH1gYFAv8s88olOiwiv0qn8xVHxEh3GcppHxMPQKT7csbXopouqtFWUj2Obt%2F9jy2pizitxsk3nJwGn05jBoBHkXyo0gQjUIzkmK9fHF6c9TKnaac7IOtn9M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd98fbd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7919,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ef7df4bd00826b53571a57cb02f0a59e","sha1":"560035c69d98bbe8821dd75078db97344c78bdd5","sha256":"2ffe58006b7db92b530e8812ffb902a91adf5e8bcbafdd815fe1a98b26c97e5a","sha512":"4f5675d39bfc9c0309a039928be9092055dbfe2e6144686da6a148f688be8aa0cdd012eac9f827fbf497f3bd887861b0247609fae3d5850515cdafb66acf3c6f","ssdeep":"192:Vj9jhjOZK/OaaUl8Pzvzzn81B89j7vlCeNA:J//Fg8Aj7vlCeG","tlshash":"d3e1ba67f9f915be11938272316a7b193ee49013da6604e576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.731547Z","last_seen":"2026-09-13T19:14:30.731547Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/leaflet.css","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.147Z","timestamp":1789326837147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/leaflet.css HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EslV0%2Bh3LaYeHIRDxw7pEGSb2k9YAk1rW9pChzxtohGp%2FmpNPISHLuElcLbelv7W42lnEReL%2BHzK82Rr4d%2B%2FOJqUSCDJPmUm3cKwjg9ivXQztUq8q4Jonq4gXN10Ljg%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-36db\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 1368\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc385ad2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14043,"size_decoded":4004,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"fd104bd9927537c7da974dfbd3fe6df4","sha1":"157ea54624c93eff49d15df7d6998336e5c32cd2","sha256":"9b92af244b62fbda54b5e34693d4450879d0c807a323c575c7b352c3af18f531","sha512":"cdce3c9e98cc5591feba0d87bdfe82f0204a6178531b7047150695f91cfbd7af62b00250f259017f5ded224e78422d6fc8254f17e3e5b289f33e58bd9d1e2c0b","ssdeep":"192:60zo0Oh9MVx1lvqrC04i11bsHnLtcOEAY0x4m8yT2OAAnVh7l4d+yEcBLDLatMWK:3Ujh9MV5HLtcpAVnTSAnVh1mLDLUK","tlshash":"b752d217b73a33a8d2257219f7b08a33bd2a506191a7c7fdb9cce714839885d2c530e9","first_seen":"2025-11-03T16:06:01.418394Z","last_seen":"2026-09-18T21:16:35.268395Z","times_seen":35,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/curator1_small1.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.170Z","timestamp":1789326837170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_small1.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13c2\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tmGps%2Brm5vyBT5auqxeKiEpFLdWdf9bRQOw2yJA56TsYjJ0eFRqS2gfK3MmtbnqBoh%2BPXt9AK8VwBEUnGKytBKOFErGyi%2F%2FQs6Ow%2FgkdoZXDgCSYGQP%2BhK796vmKDQE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc5869d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5058\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5058,"size_decoded":5832,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9fdbf73fd154ad9f4bcff2e168a3f96","sha1":"c7028a4533fd81a568d205ae8c8573e623ad7d9a","sha256":"3f0bea9d91d3afef5c635df6926fd1830d2b3578ba86d127dc8f6a5ceb339b07","sha512":"a5d7db91970c157aa4c2f722ce68a88f08348c9fb490ed440efbbf6a56784d3692c1be270fe7e4c48eb6e02ae437782bd6f4499728ffd4880de69e41b3bc01d8","ssdeep":"96:ir/07Rb6b+NzAlCLfIhDYKDufK+PKxbM00iEoxM0OtW0gALlqE7I9MZw:irrlofIhDYYoyjla0OtWZA5zM","tlshash":"4aa18d168b02d796d50343b834b75e025315ada90f6f6357222933b16adfa787e0d837","first_seen":"2026-05-31T00:41:43.031178Z","last_seen":"2026-09-18T21:16:35.302733Z","times_seen":34,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/curator1_small2.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.171Z","timestamp":1789326837171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_small2.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-19f2\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SaXa9PDTZ3HdPXSBl2LkQi8n%2FQ%2BEvvggZdu4yFt6q%2B6DdcLxXqWP5Pz9Tym46r1l%2FVU6SeIdvyio6J7F8xcksQklTbn64YBUqRsSg3d%2B%2FWKOCIGFJqU0XLO9VIdpbTc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc586bd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6642,"size_decoded":7416,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e1d0f219827824cc4f8180f8beadaf4","sha1":"c955486e58c7d3d4b9883efb925ff79494f2caee","sha256":"c246b980d29a6be37b918a4a2df1d2eb7435fcdf1b1eecba29221b9bdaae16a6","sha512":"860c32a0f3e9d48b5f84d22d18e2988d3176785b95f6712ee90e1b484736e9727633d8918a91b5d96f095bd3e2986cfdbaa4a5f3145fe5bb33c237b86107069a","ssdeep":"192:Es/NIwDZ6H/XVM4EyH29mo732lq63rIdxIf:zVIwDZ6HrH2Mo7T63rKuf","tlshash":"88d1ae4ac7f0db14c19901729ad217c53b5ce408aa01f3db9aa01ef02dfeba1be57557","first_seen":"2026-05-31T00:41:43.042285Z","last_seen":"2026-09-18T21:16:35.328751Z","times_seen":34,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9780008742768.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.178Z","timestamp":1789326837178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008742768.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-108e\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9yfepGFKQQvX8qfK11TxknZsf1RkhhQERlWnFQA%2BF34wpF70wytt%2BRZYv%2F2kiM3uxp8vn2NlUC6o5djlLhP%2F3GS%2BfxDBATemQ4YhtWHCEj3Tbt5Yag3aW%2BX9uPKnhDc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc687cd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4238\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4238,"size_decoded":5012,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"12f344b12572c48a1dec23efb1ea60c9","sha1":"2064126257f3e8a450367ba6a74f3fafb42d9224","sha256":"d6b0b14d999fface3aa820e7a07b36b3b9ff15eaa30bc65ccc13a7fa025789f0","sha512":"f1e54ea7d4f39b15ba410d4aeee39ea17f9c7322586cb8166b8ed8ce3cae7d4b8c2b3cde448e8a2a33b294860ece6443ba2d658e9f75f568abc5a845cee88252","ssdeep":"96:5ZOjymXzFOSvUgjnjGxr0TpA9YKJ77qVzFMCgXni/I9ifOjzA:5gyG0KdjI+A9YKJApMC6nN9ifOI","tlshash":"5e916caad3c7ecdf4c4ac8d5845ec442c752ae1e551c3c468780a86fa61d3fbc291c8d","first_seen":"2026-05-31T00:41:42.94418Z","last_seen":"2026-09-18T21:16:35.285356Z","times_seen":34,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9781399641760.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.191Z","timestamp":1789326837191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781399641760.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1bba\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hxjIB3RVOHvKYHUoQh65H7v3zmhHDTQvLf%2Blyv6cUtj9YCliT7AZv%2FE5r9ItNNdrtR8MlKJPZo53wVqJa1nm1BiGmgwZz%2BHNmksjakc%2F4lSYxu%2Bj94FTTTbEeSy1Mxs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc788ed2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7098\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7098,"size_decoded":7870,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f7af56e693f4791907f039f929207e4","sha1":"8029e8f5e7988bb4df725f10e5f7c6be7cef4f3b","sha256":"596d12c7cb5e366be49f6ab8321537332457c3dc126082ca65edbf83efa14286","sha512":"581792bc638f79a83670aa4639e2215aea1f7d927c7eef6b4b0fb367f99ba09028ebdaf688d13dba190d57dccdf7486980f0d77bbfb3cacd4ee9bc6f92665a4d","ssdeep":"192:34UXLcQYNr1r1KHSNZHRoBN30mLpQo4zgzqbuk:7X1YsHSfReNQog","tlshash":"a8e18d1356f6571c3f8355066fb18f8e2ac9d462f51298d6ea068af9cc000d179ec68e","first_seen":"2026-05-31T00:41:43.045664Z","last_seen":"2026-09-18T21:16:35.277308Z","times_seen":34,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/paypal_icon.jpg","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.362Z","timestamp":1789326837362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/paypal_icon.jpg HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhDqbcXDzy3OAWEyuNBw8ECO0xQmNXzKaZ2IRJ%2B0Mq09OSRHJXpMrzOXdYzTdCj9t0DKQJm5WSSL4N42ZKnJPRqXG4eir8hKK0DWQ2QY6N1MOeivufJaMZk48ycej%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd88f8d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7921,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e7ba0ec0605e0de34ae23a64222ce033","sha1":"b0a2b482bc90c3d3419bcbdc3b40e3b771fc9c0c","sha256":"172ed385ece8339fe1c6ba8bb7e196ebaaf7b047010c150c42292de0ed0ae321","sha512":"64dba83102be58af29908084e2cc0f3903a71ee01733037df74a09e83c383a5169ba217c892a8429dd7f1785c22aa7fdba8845fe4b6bf58a95facd9aefd852af","ssdeep":"192:Vj9jhjOZK/OaaUl8PzGzzn81B89q7vlCeNA:J//Fz8Aq7vlCeG","tlshash":"cfe1ba67f9f915be11938272316a7b193ee49013ea6604e576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.735694Z","last_seen":"2026-09-13T19:14:30.735694Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/8cdf1f6a8091ed7f5ea028f6acac3ad0df019bbb","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.431Z","timestamp":1789326837431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/8cdf1f6a8091ed7f5ea028f6acac3ad0df019bbb HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oMn%2Bz6oWYEKlmPCV1igVvu6mk7q%2Fkb1AoMQu2O%2FWkRhS%2B9QrrX8HeQj4ze8%2BDD1g3YzGlS7Rtgo8U1zYx572aCML1saamar7QTUfWQbRHLbCtrAoA7uhhqp6a2IgfME%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978ddf91ad2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a70b9e502d3e0b143009cf4c1eeca682","sha1":"e95809e47e2a57061a5f8d6f52ac5ac9cd57835b","sha256":"ce6812b3de881e49b6e837c012dfa731b511118eb9ae93e1b833e232a0dda54d","sha512":"476d0794997f7ec8383eff5d7919eaaa97bcc1d770764ad3a705539b6fc20974c2dcd6f639a531e41b72d7d03cb966875dd12216e70be66161f0c35b7bd07fd2","ssdeep":"192:Vj9jhjOZK/OaaUl8Pzdzzn81B89Z7vlCeNA:J//FG8AZ7vlCeG","tlshash":"14e1ba63f9f915be11938272316a7b193ee49013daa604e576edc1721f8ef81fe03284","first_seen":"2026-09-13T19:14:30.736633Z","last_seen":"2026-09-13T19:14:30.736633Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/curator4_small2.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.212Z","timestamp":1789326837212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_small2.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1844\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bC0bDhj0AlUxEMUsDPKMHvr4Xu3Jl1RIKG%2FByGiiV48UU09qWU27ItI8%2BsFJJnetwwr0Cw8ydjLQABwylcfwIK8rKF4L%2FE62vX1n7MYRfDXDHn9GeULqDxRDkP8NG%2Fk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc98abd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6212\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6212,"size_decoded":6982,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6490bf93e085254ce40f825f146f6887","sha1":"591cc281801f908bcf617b358ff9e34ed4e7b7cb","sha256":"a5952d160adda35809569b8c91d0f2236f3cb78102201f0876746de39e9efd84","sha512":"30fbf3460c1712510a4cf9e67f015bd26935b4f576fcaf1990f864267d33621eb48cd410d40d243f5e39fa908479ea1c235a38268ddc544c699db26b5a6ad186","ssdeep":"96:Ml1B48H7/0grV6OPBpKvTh3u7XqL7eyx1Sc5KBQxTBUxLv/lHiishKNx4wL7X5HZ:J8H7/0grz7ABpMnSBUxDV/4+Jcbkomo8","tlshash":"efd17e5777a25bb2db47cbbc844aabc296f0c085d302c763a0419a707d627d67e5b06c","first_seen":"2026-05-31T00:41:42.922905Z","last_seen":"2026-09-18T21:16:35.32414Z","times_seen":34,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/xum7xsv.css","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.146Z","timestamp":1789326837146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/xum7xsv.css HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjTLW10CuDobXCrUUXGKbqFDvnDjbW4EZgtYrx6GvBa1yV2pqbSH58kGSSt%2FODOvoV6jdtyxfYFib%2FxRh1MkcFUK5SgoLv5eWKiZWVHd5zG3kQvV4E%2FKRHwgB974HGA%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-21cf\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 1368\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc3859d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8655,"size_decoded":1760,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"be163cab92c6fbc846d795b8b449d345","sha1":"3b206d887b7e16400cc02cd3ddde49d16bad9e39","sha256":"4c0708600858cec279d9184cd69af294c157afab97ee61ae27c901ed9db917f0","sha512":"83f52f96efd1cb29b9ccdcc91ecdf4b4208b6bae2bf143260749dbff1ab73fe50f5dde53e9b0535f13ebd6637c1018b57fa80caca92bbec9bf6efb48e9745a05","ssdeep":"192:pK+wqM1MoMRMUM3M0DMvMQDMQDM6M6MnMUMGMiMiMtMOMwMvMHMzM4MCMsMbMZM8:aXWhyd80oExxHHMdz//er5Es4RflwqFe","tlshash":"3402f821845ac5d2e0928eb135c7ff256d0eb42aa4d558129b39cca8dcb7cb793c5f1c","first_seen":"2026-05-31T00:41:42.959575Z","last_seen":"2026-09-18T21:16:35.26755Z","times_seen":34,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/curator2_small2.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.176Z","timestamp":1789326837176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_small2.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-17f4\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1EcxX23Pe24uVTJf2Tltg11w%2BUG47n%2FVeImcPmEaLRDKO2ElZyUZUN9QZ7U%2FvWaaRvDdXkNAeVNWHh4%2Fe%2Blio7Rd2RhZxJz5GvBZtPA8XVzc%2BB00qNR9Wiu0m3pfqEY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc6879d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6132,"size_decoded":6906,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 169x169, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7dd25b1f725f8881b8af4c3f5a4736d5","sha1":"e3af29cb8c06613c9643cc50046a5f046e19284a","sha256":"a5351364ff0f9a3ebb5f8d9839698b0ce6bd0b6eb4e67ca46c09b137c059d0d5","sha512":"651cc520147ac1e5ab0f80894c53c1f6708f6b2aff6b50437dab46507c9cbdab03376fdfa143dbd3619e46e600adef1a46a99b00605de99537a2eeb0c5cb5f3f","ssdeep":"96:DKiLcVAorQiVU+Y6kg+oYJcUn9snVIAZwrag3LPpVsVorkvREJqw/iL9OtS8feW/:PS3ki1Y6kglY+fnuAZGFVSSkvUKJYVft","tlshash":"f5c1a0f60503739225c7b5f574420891b4bfdf7c8d32782862439261caf6b0d1b65b68","first_seen":"2026-05-31T00:41:43.027852Z","last_seen":"2026-09-18T21:16:35.297539Z","times_seen":34,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.429Z","timestamp":1789326837429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yt9%2BgqnIRtlFNyEYNSJNLLTOiid08JYkLdrcuB0ZvWqicTRvvn2zpUA9FndNJppVQrtJ8z02Cc%2BfyKHp0KMt4PmQkTo6oSyjWGCl7wGxhvtqPugVdPc8GbuJ27w6hUI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978ddf918d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8465a4b656ec249009949b77a232731e","sha1":"a414430ef04af918243540a3b5030c70c27bd1b7","sha256":"9572ec2d451facf54be0973b40b33d07e41b1d5534edeb5b97956f564b828b80","sha512":"4e6c53ac552b5166885434f7ef9fdb22f3f5789fbc295afe9e99c6286e5e4fce5bc9e49cc83507101c54214607922ebacad84b75f48b8cd5d6614071baa3679a","ssdeep":"192:Vj9jhjOZK/OaaUl8Pzozzn81B89I7vlCeNA:J//FZ8AI7vlCeG","tlshash":"94e1bb67f9f915be11938172316a77193de49013da6608e576edc1710f8ef85fd03184","first_seen":"2026-09-13T19:14:30.739409Z","last_seen":"2026-09-13T19:14:30.739409Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff2","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.434Z","timestamp":1789326837434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff2 HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Pwvg1bcvJ9ruuEXOIARbgX5TzhYt%2BW1aKTAoyv5RSrp8Rg%2FVvl6sDNabHKBJYgZ7Df3aJjasX7FzoSwrGHcXqkdOVcmvuoj%2BQSTQIT2yRd7jDNHP%2FRJ4PW2UEsZkJM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978de091dd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e013f9b8603646ffc83bba0febe44196","sha1":"b438f240a657fd80ec7ce7fa28e4103b97969447","sha256":"59dbe78f56a71fb9e87198875e5c63414e10ec7c8fd69b065151899d8b2db57b","sha512":"1b6c9fe93ecad1f0e3a7deb7d45513d44446aef61f7667f577b8aa30e14a2f0044d2598c0ea553ad13afbd8318eb929e6a77a0edb7ecb859722f8c324a5d11b1","ssdeep":"192:Vj9jhjOZK/OaaUl8Pz3zzn81B89n7vlCeNA:J//FU8An7vlCeG","tlshash":"d6e1aa67f9f915be11938272316a7b193ee49013ea6604a576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.740532Z","last_seen":"2026-09-13T19:14:30.740532Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/curator2_large.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.174Z","timestamp":1789326837174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_large.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-981a\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjlBonWQgjNmXUyM2LzIEMSNNvvmTYDn31fDviTomtfs2hc8viUvgt%2Fvic2a%2FOhqolAjs03C4JgxIhQ8ApyWfM9XnJO1N%2F%2FapXT02UuDucATfF7U6Pfwv3Zb3KeCFKk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc6874d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38938,"size_decoded":39709,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26d1e28ed0b59a4f25b32d68472e07d5","sha1":"de23bf053714ee4e141bb15138685c1106474cbf","sha256":"32640ea6db2db244ca4c762c0a4c15551205d482f67f69088ecc550acf71f42d","sha512":"c04309d24ab68dd18c1da3fe483595134295b2bf7b510cedcc3d5bff6c6a66d16bc5f00122c00bcb7fa5ccce97ccc2c5eecb76dc94ab13c344452bb39c9e1f46","ssdeep":"768:YiHDthph40a/CN1IljltcvWeRHgOSyZnDxcmMCAKA/8yYc+h5Bjg1ipur:3Ly/ZjrceejSypxcHCTfh5tgP","tlshash":"0a03f153a765a428d534a1f0dfad4dc1e3a9c638c99f03231a1a89a9b5c2cc717bfc61","first_seen":"2026-05-31T00:41:43.057572Z","last_seen":"2026-09-18T21:16:35.322435Z","times_seen":34,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/mariasantaTedesco_42x42.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.177Z","timestamp":1789326837177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/mariasantaTedesco_42x42.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1140\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jt0QBDgHnztWcasiNibagkMmp6w3biLcEnNPLuaSRzS%2FHfSuNf%2FEt%2F8d9C7dG1dfXKdHdP7XqOBDyu4zTar2UrQX32qT5eqZ3RGxARB%2BUP4G7nK0J8oN9xcrQ9SU9Tc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc687bd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4416,"size_decoded":5186,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"220abbdc16433ba82f70610a217f0ba7","sha1":"c7fd50a83dadcd55f75336b31fe79a72dcfd6a01","sha256":"61d68ab0bd120f0fd52c9301c5482a00204f57339d75041a6148cc43f18465b5","sha512":"97af15da3427755496afce682d5f8b3df8ae61897179c9e531bbb3e1a034ddc2307b2507fc7d872478cca652514f0ef9d982d907005cfbeb083816fd3375bc2a","ssdeep":"96:a6MT0D5MdtbZPAVwzVwmPYFjR8PD5xxHOSj:EYNMtKwZmR875j","tlshash":"b7913a799fa2e362d732d23868f06f81a3a2a13d932243477574627049d21c5af8f08f","first_seen":"2026-05-31T00:41:43.032903Z","last_seen":"2026-09-18T21:16:35.301258Z","times_seen":34,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9781464270130.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.183Z","timestamp":1789326837183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270130.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1db4\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QK2kU2pxvY8kNelxv40RGOyDU9FEBGS1TSQZdVO7hOIwqEkriPV1hxcdrvDDmA7p9ghJKWzIyVpIsqjoCUwXLWSd9ImbuO00DCgk66yuEr4H%2Fl%2Bon39DE5a0u0qc6mU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc7885d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7604,"size_decoded":8370,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"47157b14047d5fc2b284dec14a192c12","sha1":"d4bd1c52b0554e064c30f74fe6f279508e3f7271","sha256":"889f1a274a043b4e17bc2c71ec13467a989f70b5100f37390d0bc58c0c0e0c24","sha512":"6f4128ea5a06c5cac96ac1b823501c69dd9172cd5b36e9102bd40d86e23890b36721252f152334635b74c78b36dbaddad7357670340885aa89ae483b2282af33","ssdeep":"192:hmWm62EERDBRo1s5p0QnHmxptGYISh4+Tapu5mT7LVWXz/m:oa5ERDBRo1M0mGhGYI44cousT7Lu/m","tlshash":"1ff19fda9441f3887c5004b58cd8bb471e4bd5aa82d918fe8dae2c398ffe707600c91b","first_seen":"2026-05-31T00:41:42.98755Z","last_seen":"2026-09-18T21:16:35.291468Z","times_seen":34,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9783989780279.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.202Z","timestamp":1789326837202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9783989780279.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-c80\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X9K8WT53%2Fk93FdNrddoNHQt5xIEghPoE7Ytmxw7XuoR1HqAZCaEEoS0zcFi0dGL4trbJsLT3V7RnppM9DKS8TXWQcmpMCm89WRwGSbf2C7uWnOQnkP%2Bfr%2FAoZfTXVYU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc889cd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3200,"size_decoded":3967,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 152x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fbd43f82fcaa28768d944b68d483f2dc","sha1":"189b96b9865610d1792a617626c918236747a65b","sha256":"16d62fda8cc5811e4f2ff2e78fd88524d9bf99a3ada2ac4da576e3f427704ea7","sha512":"0ba6800a6dfb7c599f0fed4fd8b484621e8dff3dc1e71b5b880ecce94ad25e855a9782522391c7e85f65314c81da4ab6705bf2b56e9bc06aa3c5a1edfdad005c","ssdeep":"","tlshash":"25616c2f2731336bcf9551c79eefccde118e94b27da1ebf980120c902196442bd9aa48","first_seen":"2026-05-31T00:41:43.050619Z","last_seen":"2026-09-18T21:16:35.278125Z","times_seen":34,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/library_icon.jpg","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.365Z","timestamp":1789326837365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/library_icon.jpg HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=caYXWlObKZNv%2F6unCCw0cVhZeyLyiNiUCfOUJ1xGQqjCp4zdwJpBcupkg6g8B1K2ASwQyMSAETcV0%2FFTRluNySMuM8aeHJM%2F3PLITEtb3xQoSv2bOrIsfXQtXaCKx0s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd98fed2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7923,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ad7fa23e77a9c4455e823e7e72d15966","sha1":"2cf59a1ac0ffe0e7c445402ab16dd03b8c186757","sha256":"c125e703075c72c2b29e9f1f98a1637ba7ccf60cd8e8c65878164b90eec94abb","sha512":"a956e190be0c74934b4931bf61731b5a4712dbb663d5ea3f364caf98c579b4665f608ea5d855657835fdbcd65511f2caba4978e6d33686e14c1c9bcc3663987a","ssdeep":"192:Vj9jhjOZK/OaaUl8PzYzzn81B89o7vlCeNA:J//FZ8Ao7vlCeG","tlshash":"b7e1ba67f9f915be11938272316a7b193ee49013da6604e576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.743706Z","last_seen":"2026-09-13T19:14:30.743706Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/0477e48f455cbfe729f90389d3fd8aaca6cc483b","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.395Z","timestamp":1789326837395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/0477e48f455cbfe729f90389d3fd8aaca6cc483b HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q99Vva9og4jROJ2RhJsFuyTI%2B8qHuEq0e1QuPvWA%2FmlMbU9wH%2FogXycDlxizr7p%2FSLhPzz9LU47fV5dp5l67K4wA4lmYivSyCxrUllu8wiJBdXYiwlewLcx4C9oqkOg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978ddc90cd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"57959dea6454ced4b9d0644c6911ccd2","sha1":"41d5299b5e892deb098792f6a6cb6d7d7f9a9004","sha256":"895eec4b74f79dab3370f304c21b17b79aa7673d319d69dd61ab5c0aa1435f19","sha512":"921761efee7656a307a6a2bc7108359ff8a4cd510ac408c36f591cebd2b4abd21ea079af3d932116a4ef5d9c6207d90d9b46e87903b1e3ab8c87e079f3b32c9e","ssdeep":"192:Vj9jhjOZK/OaaUl8PzDzzn81B89X7vlCeNA:J//FE8AX7vlCeG","tlshash":"67e1baa3f9f915be11938272316a77193de49013da6608a576edc1710f8df85fd03184","first_seen":"2026-09-13T19:14:30.745387Z","last_seen":"2026-09-13T19:14:30.745387Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/4b91a4be79efe579a1fb7336cf4850c0bc396d4a","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.398Z","timestamp":1789326837398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/4b91a4be79efe579a1fb7336cf4850c0bc396d4a HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbLvLTopGMkA4SRjccFucaBYvuJk3r3wGn3JW%2BYX%2B%2BHzECjyWZmfPlVMqBFD%2B6hIxrQsqYPIEzysCbrFNjiX7Tw8NQDey2obrKij%2FtPM2x6rV0NViRKztN9wGCne75w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978ddc910d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"5f361c6864037fb38a46604256021e1a","sha1":"2b3409a265db3ecad27d8bd6eda748a0ef6dc777","sha256":"26ad27b008413dd806e44ce19efd6925a068f397135d2f3f50086a734a50c2f8","sha512":"7016a4581d4a5685d0ae190983be8217a90348b5a66a91fe3103a3ccb9f8bfcab8cc0fbe4b38f00716e455e5d1e7d47b39115057af76d4082126e0ea6b1645b5","ssdeep":"192:Vj9jhjOZK/OaaUl8PzDzzn81B89L7vlCeNA:J//FY8AL7vlCeG","tlshash":"38e1ba67f9f915be11938272316a7b193ee49013da6604e576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.74633Z","last_seen":"2026-09-13T19:14:30.74633Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/4de03de2f7b820f96b0cfb5a673d9f9616885e6d","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.399Z","timestamp":1789326837399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/4de03de2f7b820f96b0cfb5a673d9f9616885e6d HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7HiSKBvZ4k8xzsrqIP3mpwISseV6wuQ0zbp%2FPEn8V%2BPJVGEVNoZsAPNN0%2FnkpWAXChRi5OiSCK9xZ6tR6UVC%2B%2BTuZsxy8wzKmI98hjl5%2BGIwYCpwnWs5vI51oI%2BYvc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978ddc911d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7934,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7cedafd0d36ea6758e728622b3ea4b96","sha1":"07e72ea0d579f6b77213e5e98ad36010123294be","sha256":"15e4a77bddecd200f2b25d1af139af46a6b806385bad01023c9f50f9a0523d1c","sha512":"74ba6445bc7d238b4af035ca9b0994c84f9fe2192807435a0382d3bf51561a1043734afc5979e6825778c3499a02069fc7e6358ffa417b85c3a353069c7a1e01","ssdeep":"192:Vj9jhjOZK/OaaUl8Pzezzn81B89C7vlCeNA:J//F78AC7vlCeG","tlshash":"c8e1baa7f9f915be11938272316a7b193ee49013da6604e576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.747218Z","last_seen":"2026-09-13T19:14:30.747218Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/immiHargreaves_42x42.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.214Z","timestamp":1789326837214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/immiHargreaves_42x42.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-11ba\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjwvV0L9nY2CVgKEo%2F%2BgskqTmViIGRTyzxAbQhVQrUp1jsv58Qeu7ZDysagN0SiBga%2F%2FRHcOL60xboPpupTWPjosM4hnhKyWd0aQ2Yzd4LKLH9OqrwMBFC%2Bc4uGwtDA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dca8aed2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4538,"size_decoded":5310,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28af5e8191e063f09209056b34729f2b","sha1":"3b9338f317e9d94010f084533b8d9d6a4e35208f","sha256":"90cc20b58e581a8f484de2efc86452cac922c601f1cd8c773574477cba80ecb6","sha512":"f832980020b496c1213e446562ab25c9e6c2bbf78c3ae25841a3b1f63855360bceb3eb9442b543a612bf495c09428795f6c07e8d9f84f6c8b9c7ea6e1954aeb4","ssdeep":"96:CbN26MT0D5MdtbZPAVwzV9kiTK4kMqLlDq7:C2YNMtKwUiwtly","tlshash":"c0913bb6cfb6c396e931eb3c94f23bd0a1d17629d3623b94313cd6298a411815f4e09e","first_seen":"2026-05-31T00:41:43.022604Z","last_seen":"2026-09-18T21:16:35.310628Z","times_seen":34,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9780241814307.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.198Z","timestamp":1789326837198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780241814307.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13b4\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NILQwjgXj2F3uLXq5FnmtUXXAadaOkI30aHNAnv0mGTvHAkxHYSeN4MUdA6JXCUH5jwEvb%2BLiexPcd2yHfMwQdBQnlXifLKtYw4x5s4nUyE7ABuNss00gpKLjMGEa%2Fw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc8898d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5044\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5044,"size_decoded":5810,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1c6306c59442c52b2575559313d67fdc","sha1":"a8a234e49f7461b4f132fefbd7a67bafa6be1cec","sha256":"8b5ad49bc71fa6bcefe2776b2afc35382760216eba9b38d2388ec25781a8cf4c","sha512":"f3f8165e59f4f6d48cefc752716b294da69f44996ba1f19d0c9e8b96c795a1b4fdc5c944b42c90e49d9e4be62f0c60cb7b6843ffb33ab7c6b70d47b3bc6240fe","ssdeep":"96:UWI7lZ3tnN4H4A7rg7ex7UmBUV01HlqMs2ypsAo+eOGgZr8h649op9KXXPDcaGe6:syVng7IqVUHa2QsfaEY9KXLO","tlshash":"c8a19e7dda70ce31fbb9cc9f89431435e1a1d16992ec86100c52b5d87ee4c62a8e055c","first_seen":"2026-05-31T00:41:42.891795Z","last_seen":"2026-09-18T21:16:35.309459Z","times_seen":34,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/curator3_small2.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.207Z","timestamp":1789326837207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_small2.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-243a\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BzO3hh6FnhAJ8e%2FERlo2w9p%2Bfd%2BMJLYJGdiUli6y%2BVQPbEo%2Bhwlr5qHu0euY%2FMyS3tAG3QU9iY%2FHGhIxYAowkJgYtM7gZ4FgFsg3mpOW5IEoeknd1HAdB62WstZFvQ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc98a4d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9274\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9274,"size_decoded":10050,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b56ebd4f940c08743e4db58ca9660d08","sha1":"af2614ec97ed6f871eeaa53e26e99e7b9b7ee0cc","sha256":"9fe04f757e7cd082869c6e2aa6e5b720f31038c1290960d1b7c0eb2d8fdec012","sha512":"b8d685eb8c3f02eb44e48ae4dae7bf83fa4900991e5b23689fc9cd3d803eec8ace88a9bac7c7a49bda5cef4e7a179affa3f63e25d1cffa3237af74b11f306445","ssdeep":"192:qiNNyQYslchhQeOLN7jbWM9xCOVjo29RHXRcd8P:5yQYrOLRjy8xCV+5XqI","tlshash":"3e129daabf35d1a1c720957f4cc30a9006e1d39962c55eda3b705640ae5aeb0f6ad720","first_seen":"2026-05-31T00:41:42.993504Z","last_seen":"2026-09-18T21:16:35.303739Z","times_seen":34,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/bg_sticker.png","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.354Z","timestamp":1789326837354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bg_sticker.png HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyk%2BDnOV%2Fo0FJ1lyurgL%2BV3gUmsfMD3CoMWn%2F1Pq%2F8M672dyulkX0TEkljAcWsrlHkh7PYr%2Bby61emo5c%2F2McOj%2Bok9bMqiBTc%2FUgKWZGBS8LiOJ7RfBgK9K%2Bdxv%2BfY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd88f1d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7939,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"4b51587b81cdf4b77f1a5d24fe23bd97","sha1":"cd7d09ba5d21fdb13542d3e0850690d72456258d","sha256":"22bd99aac8085b0bbcc75e61cf0a74ce326f6b091b2cf9507d4d217a0a2d274c","sha512":"f419a07954fc40c8a27f68938522391ca247085b996ec1365c638edc3b201dc6c0d7f9af26c7f2436825d97f0a39fa6c8911fd58c4e7252d5db700a99d5dee89","ssdeep":"192:Vj9jhjOZK/OaaUl8PzTzzn81B89b7vlCeNA:J//FI8Ab7vlCeG","tlshash":"fee1ba67f9f915be11938272316a7b193ee49013da6604e576edc1760f8df81fe03284","first_seen":"2026-09-13T19:14:30.749743Z","last_seen":"2026-09-13T19:14:30.749743Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff2","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.483Z","timestamp":1789326837483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff2 HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZ8SJkKo73Ptz01qepIIvE2gDbDlVHjOyACmrmR9vmLDJcoH23%2FEQq1ce3ZLjgbS56kYFgtiol9its5uXj0undtczWkP7tGjcFtQdnO7I%2FBty1AHRqHEVxEi4JYDDpo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978de5937d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"94bb7a09e3404ba33b027cc6c0086f13","sha1":"34d717d4aeacc60b17eb24d3610030d466da4eda","sha256":"9100e25f9c23fad10df8bebfe714de3d7453996bdb2a7f000d8bcaecde81b773","sha512":"6995d024ea8e50d851da6cb717a61d2a3aed0c18c49f1b77de4d4507201a6e3f5545c84a482449d7e2da179c3fb2e2a531e60890932b47e63e3ae2e84c4d9a36","ssdeep":"192:Vj9jhjOZK/OaaUl8PzNzzn81B89F7vlCeNA:J//Fy8AF7vlCeG","tlshash":"49e1aa67f9f915be11938272316a7b193ee49013da6604a576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.750652Z","last_seen":"2026-09-13T19:14:30.750652Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.ttf","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.505Z","timestamp":1789326837505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.ttf HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfRsl49oB9MLCYrPd%2BCvDyel%2FpmFLcO7KSTaQGpyC2ST64%2FuURAFIlPxj4IHsQ6oAZLyBF7EWK%2BxUgNC5GcKakmg9RvGE0rdsRGHW9%2FfkRmOh6%2FakYLwbctnbNchD2Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978de7940d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7932,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e1dc3d58f16c8592b83d6805c9076c85","sha1":"be2da785268ea5630955e9942c75b394a6cceed7","sha256":"bb5d1d3bbbebe70147e7d465923dbf4a18bd15ebb94297d1c289591d976f288a","sha512":"a2813f4632a182305aa6ad09a0de9a2e44001fbf361b7b0d7786623868d3388db71db7751f4801237f7daf683080265d926ea16e272fc25f95e857dd0ac09d1d","ssdeep":"192:Vj9jhjOZK/OaaUl8Pztzzn81B89J7vlCeNA:J//FW8AJ7vlCeG","tlshash":"66e1aa67f9f915be11938272316a7b193ee49013da6604a576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.751607Z","last_seen":"2026-09-13T19:14:30.751607Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/curator2_small1.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.175Z","timestamp":1789326837175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_small1.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1540\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7a2B%2FbxbFayXmA3P1pMLIsb0wqRDTXFEk8PdILmhR8t5NddDDFIHQbrN81KVyeOo1OVDLoz%2BROp3PRZpDrAv4ble5W84OPcqMCBtro5XygMk3zPA%2Fd%2BGMScWDl8x0gQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc6875d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5440,"size_decoded":6210,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 169x169, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f86db9ac4278a1acbcf4c216f1b69c4","sha1":"077c096ac64f0fc98c04416018775fc0981bb510","sha256":"1c7f9586e5f195de2bf73b79fda7848d0c298c525a70b205b1d883e6e4d17635","sha512":"4ba547ceb5a84cfbcbb4d22a17fa3e51ff3e2eb8c8c72f93148c6b2c491b5c1b3e70c209522b5ad761ff116d5ba09c79be57f318d5fd50b3a66e39b675f11f90","ssdeep":"96:CJcc64Z5uMXbRdp50YoDBpoQeE1dNgXhvpQ6J9zlOPZOnqgE9Xi5:CJc89bRdpJU4Qx1d2XVO6Dlkw5","tlshash":"69b19e82dc847165d80ab7891b2c1df81804400e9357f7e692b196f277b6e4af9529c2","first_seen":"2026-05-31T00:41:43.026391Z","last_seen":"2026-09-18T21:16:35.276594Z","times_seen":34,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9781529971491.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.187Z","timestamp":1789326837187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529971491.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-a50\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1L7YRC2wbz0LpM%2BPzaOeHh3DPu7sXb7HvbsfeC9KbW21m40yMTzl0hO96JabQD80GEbh%2Bc49Hl1UrY547%2FRTByIQcBgM6icOgFqklFuVS6YJm5t9%2BA0Z6rSEHoyMPTo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc7889d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2640,"size_decoded":3409,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 128x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"75153d6a781df04acc22d2383cb954b2","sha1":"52366027b5c5de5a199124d1d8dbcc2d8d3ce16e","sha256":"07bd5dd5e4044e1ed117492589da9580dab1aa407bfc819859a9ac482a754e1e","sha512":"398b0aa56728d059b8689f6850478aef1ecb37c785c6204b389907eab95a35461c820ce9ee319df9a33faf8d8aa8bf988ba786c9e717a977415be530d6bf91f1","ssdeep":"","tlshash":"4f513a9278d4c71729bf249ac7511029c23561d2f5dae1f216efa82e846b123ca73d33","first_seen":"2026-05-31T00:41:42.980347Z","last_seen":"2026-09-18T21:16:35.312411Z","times_seen":34,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/spotlight2.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.357Z","timestamp":1789326837357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/spotlight2.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k47iX%2FxLRGa%2BvdPYeUFEggoLMYmJZ%2BE2GRvP0s3dly8iCV%2FXWMbzyq04V21J0YqlAZ377U1Z%2BSdBDWAYfrJxdQzoPmRMc%2BsvSkrKT2n6KzdswnpFc5QZRkInwLiqIT4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd88f2d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7929,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"6e124234e0b3d8e90d1b5f00edf9cbb1","sha1":"8828dfb3098442b3d88d97b45e097cdf52427c2f","sha256":"9d36dd485896a65bf0d00349c91dcc14988d11213b02c778f4e79cdd83355b38","sha512":"4a88ef75524c4e361b29a8cebb8a7fa64b83b2f6a1521ec0ddbe8647660a15b58d3a8c617a40df6fc4bdbf9b4d817edaaf805549788bc428755048c6dbc55f0f","ssdeep":"192:Vj9jhjOZK/OaaUl8PzAzzn81B8907vlCeNA:J//Fl8A07vlCeG","tlshash":"48e1ba67f9f915be11938272316a7b193ee49013da6604e576edc1720f8ef85fe03284","first_seen":"2026-09-13T19:14:30.753913Z","last_seen":"2026-09-13T19:14:30.753913Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/curator4_large.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.210Z","timestamp":1789326837210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_large.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1042c\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ORB5UxEvPKJ09MVLvAzTbfT7Z1jRX4hIrBUEDfUVZ%2Be3%2FnkwXGD0JscNhEyj8vWMYtt7o2aLujBFzimxBwd2uWe%2B36tZSkoysaNibzLh%2FEC9%2FabC0j4PpUsb%2BWxYJx8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc98a9d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66604,"size_decoded":67380,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"209342ee4495300403a420ec217a7dc0","sha1":"24e48c12a74b9af9e22b730769507c8b456f227a","sha256":"a415b0d14189a9df6ae94f5e984058a28bb2ff2710e1599d7bf1e4a4f7e12dc7","sha512":"21215c8c974f26b2195a979e533cb4f7fd28288cb319b8b28e49defac2e7c55d63e99ef55f9e8040e48a97b2c52586f9023c2a58ffd14ba00510ada334a0cfa5","ssdeep":"1536:MAnnrnDRyeOTKEv6+BEuv2U0+FXbN6AM7ZDXUYxWemnQ:M4rD5OTKF+BE82zULN6A63x5+Q","tlshash":"a85302747a024805ec15ccbb1959c0aa6ec3e4b19652ca9fb131e7b22dd424cbc7577a","first_seen":"2026-05-31T00:41:43.009917Z","last_seen":"2026-09-18T21:16:35.332199Z","times_seen":34,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/tiny-slider.css","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.152Z","timestamp":1789326837152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/tiny-slider.css HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=As7X6Y%2FFAvpGdInUaFvwthdZNMYFBx2VnR%2FSzH08rnuJpCMZ9RqOIL0rVjRfpZ1bjhN31w6LKs0YAuwZjDNemDZUnm6i6iHyKmyxxz44yasmdXpTSfH%2BLxEygcl3eYw%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-882\"\r\nage: 1368\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a978dc385fd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2178,"size_decoded":1537,"mime_type":"text/css","magic":"ASCII text, with very long lines (2121)","md5":"afcf365e904cab0605984cb0e73114aa","sha1":"d362d2d6f372813e6e66009f005b459e40bbab1d","sha256":"e9b8906a8b7540b8accfd2a491c0821d6bd6d8ccbd4ab53a56da8906ff028423","sha512":"78cc5d6927f95d6dd95b5c190ab588b4eda367b03d161b997e355dcedafb66c28d3a6b7a4d43134207e9368551c9f3c4e52f410b4038b2e5f3b064ab00e59ca1","ssdeep":"","tlshash":"4841a82983603648d5e3d7207af89a298539fd95fe334cde264dbf024742b5a1012ed8","first_seen":"2023-04-07T01:27:14Z","last_seen":"2026-09-18T21:16:35.256803Z","times_seen":3791,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/css2.css","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.153Z","timestamp":1789326837153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/css2.css HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nV7pw898cx9QyyCd5zkdowVnXRxI%2FndkhUt8gzTiiCOA2JupUzBDu4AD0yllcAQziZuoFAA%2FUUyvDGj7qebxRxsazV41%2FRjF15sPQxvhCX7c7OIcjZ3EHMg4dbe2BDU%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-426\"\r\nage: 1368\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a978dc3860d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1062,"size_decoded":1165,"mime_type":"text/css","magic":"ASCII text","md5":"6ed0439a1181b1ac6a0eb4ed36d6e299","sha1":"026be2e0a572a9630521aedb1542d2ce9fe41788","sha256":"1396c870c8ac48dc90e1ad30efca84c4f7f04e83dd364d118ed7a943d783e9e2","sha512":"bcaa52b611040d57778389ef4417deb4ec1d54c034324a00af8f63df3d62ea627b702a9687f5864550ee6b1b82739c2e4038c4c2cf14ec0e00852c1b085a7035","ssdeep":"","tlshash":"f411ab50086a9600e7971cd627cebe379d5eb1407045d9386ffe1888ac5ac64b3a5f0d","first_seen":"2026-05-31T00:41:42.942414Z","last_seen":"2026-09-18T21:16:35.300735Z","times_seen":34,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/x.svg","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.215Z","timestamp":1789326837215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/x.svg HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vaYqdlhyqtr6rSdK4Mj4VuyGzPK0eTf2SKzV2FtkVgdmrPOMU3%2FDQoSY%2F77q6ToOkBNkbhK4wfuEovG6ggBuhKuVfAnXIIFesUDNsWa8YgeUYP0NpMJNbSfWwzZuSs8%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-111\"\r\nage: 1368\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a978dca8afd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":960,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c02017aed158c45f6c61f4eab014d709","sha1":"2d749d823898858f20a59128f752d9ec638586aa","sha256":"ca1c3ca0d832d6d19064dad0918d6d5ee2f49ec7a7139568a26f831e8e1dbed4","sha512":"7fc0a75256c5e1332dee6a2c1df60abb86eaa640796ab5f8b63786180ae8c696d64b971934478a9d5038949f718729381056d9c0657924d3a743c7fca4d75a7e","ssdeep":"","tlshash":"d9d02b18c38547255e5489f45f246eb0166a74c651485278fc6006a0b2092d29d754fa","first_seen":"2026-05-31T00:41:42.953459Z","last_seen":"2026-09-18T21:16:35.302227Z","times_seen":34,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/p.css","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.305Z","timestamp":1789326837305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/p.css HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/xum7xsv.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXJ%2FEkWuS8FngvrW0z8TVxUXzCBzf1Cw5gcGzjKgmkznp1LbrJNOAfi21lFDgDrN%2FYqcr8jjF2gZP9NRiPunzIfSFLNH8470yMdnLCXuZWwROoAzuEcNQdEPyiSHW4c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3a978dd38d5d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"2de24a225a98704bac950fc57d12540e","sha1":"6f476fd919ccc87eb413aaacba0bbdeee0ce885a","sha256":"7dfe7da3d2a731dea598db7bdf323f540f02fa312e96636c05e1f5af1cac3a73","sha512":"9379d2a5d0ac881b550ade02f6ded81547e043ca7a41d906f9f735fe13afc7f4e92b4bfda402cb0408c92a732a88f1fabc4de4d28b96ff033f72c2066f4929d4","ssdeep":"192:Vj9jhjOZK/OaaUl8PzQzzn81B89w7vlCeNA:J//FR8Aw7vlCeG","tlshash":"12e1baa7f9f915be11938272316a7b193ee49013da6604e576edc1720f8df81fe03284","first_seen":"2026-09-13T19:14:30.75736Z","last_seen":"2026-09-13T19:14:30.75736Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/bg_news-letter.jpg","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.358Z","timestamp":1789326837358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bg_news-letter.jpg HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rA5akUxfjlOEsfOFl8efPalBrs%2FqV4%2BDAtm%2FQiaN%2BBooBirqMQ7G2oZbfCe2JX0XC9BNvL6gs%2Fmj5Zmn0KNGp05BnShlNMRFprNGqcagavF2EO6p3q3%2F9bDIpezrXjg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd88f4d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7929,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"43bd3f756a2158c25012408bea10206b","sha1":"16e6f59a589f385237f5c71cf12a6e4e80dad9ca","sha256":"ff53b562acdddb1449213b413d42a3a1683865fa52fc59ba89d2bfda9749a210","sha512":"47d25817e79f8e87bf541d14f989f640914566be48437f1f00e276eedf8b3797e226cabac67be214752263a50761af6b3499c0df28ecb34bfaeaf5d346ce5ec3","ssdeep":"192:Vj9jhjOZK/OaaUl8PzCzzn81B89O7vlCeNA:J//FH8AO7vlCeG","tlshash":"c3e1ba63f9f915be11938272316a7b193ee49013da6604a576edc1720f8df81fe03284","first_seen":"2026-09-13T19:14:30.758735Z","last_seen":"2026-09-13T19:14:30.758735Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/amex_icon.gif","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.359Z","timestamp":1789326837359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/amex_icon.gif HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YKCIZHZ%2Bj1OWbsR54kLl3oTwUQXx6h7suytRp61SF58i%2FRjJ9Jm6mmDbkE1zXraUBvH3nV%2Bdy2o3nINY%2BjQjVi1Fz0vapaT5yaGwonOxPTD%2Ffpe8CWiDnJy4VAS4ZzI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd88f6d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7927,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"76fb680072830ccc47b30d77dbc6f711","sha1":"8257c3949313acaf45e66dc46b6c032dc250cef8","sha256":"15fded84d6e14b8f7410b7cc7c20207314d90ddf091c885a85bf73516fb24fbf","sha512":"fecda926dbf831e5d4569a0d533aea36fc0f616b530d64a3219eaab3832ec58e68b94e11ed7f829c66a52332d48425a915c008c82ff3cb95ecd9f8859b046d01","ssdeep":"192:Vj9jhjOZK/OaaUl8PzUzzn81B89A7vlCeNA:J//FB8AA7vlCeG","tlshash":"57e1ba63f9f915be11938272316a7b193ee49013da6604e576edc1720f8df81fe13284","first_seen":"2026-09-13T19:14:30.759835Z","last_seen":"2026-09-13T19:14:30.759835Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9780008711719.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.192Z","timestamp":1789326837192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008711719.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1c24\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2F5sTQnRZDHryhBdvXhtkUDBqWAjHQUeLJxy7t2QCZlm87Htbsf52oLSlCdqRzqUi0TXr%2FqEK%2BPNXDt3PQJesUnqilf%2F2guG0NFs4fWdV8OvD2me82PIwlCwleDJlg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc788fd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7204\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7204,"size_decoded":7972,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"36f559627659f5f654ba09fec17f2b16","sha1":"78bf493d46038e9232680fb7eed979a9bf13ef34","sha256":"390e64f03b0b5eb487f2c08e57406c56a22ee37700c7da1c75985dcf4a0770b2","sha512":"dfde682bd29ff884819c4775e93ad20f94f6fb70ae0e96d164b4ba116c9f510ecd42489be93448f5769c9743166ba8563d2e677916c7a6f255ad8924123663ae","ssdeep":"192:sU5TRC21V8iAHM8QB4nSXNa4ecurcfhPf5F75p6x0G:s69j1VFAHFI4SdaNrgPHH6uG","tlshash":"ace1c11e50a5cf1c4063b03ac75e1ad809b6910ed8b7574b437155abc93ac4c3ff9e06","first_seen":"2026-05-31T00:41:43.008044Z","last_seen":"2026-09-18T21:16:35.307921Z","times_seen":34,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/icon_right-arrow.png","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.353Z","timestamp":1789326837353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/icon_right-arrow.png HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4rUcWeSZjsMn7vYeOeKRwkif%2BWt0PmvvAY0ie7yVfS8xoCdRyrgfcj3%2FDGmLFJqjmAustvtfFdTf%2BAkeSAgfnc2hLJnPB6z9E%2FeafffndxGhgjA5d1Tj5m9TajAteQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd78f0d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7925,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b889bd21baf2fd027e61115d641b80b3","sha1":"fd5825346c1170f6cdec736a9177396e167883d1","sha256":"e0ec1abcedc9e52cc0d026fca4081e8fad8b2f029e4b0918e84bca987d24d2c1","sha512":"01ecb4974483aed6297304c38627c7364111b87af4e8b30e3d8ab9cc5c579140c55e86750cb8916e454ca9d1c0512f05536530f3cc25c511407ac6b914cceace","ssdeep":"192:Vj9jhjOZK/OaaUl8PzDzzn81B89r7vlCeNA:J//F48Ar7vlCeG","tlshash":"49e1ba67f9f915be11938272316a7b193ee49013ea6604e576edc1720f8ef85fe03284","first_seen":"2026-09-13T19:14:30.761331Z","last_seen":"2026-09-13T19:14:30.761331Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.ttf","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.506Z","timestamp":1789326837506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.ttf HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEx1l4Vzph6T0sqXrcrEs67%2BJVU%2BqPGvT%2B2Wd0YxpC8%2BE8U3j7uNLp7gMb%2FiMPRey9vQSoFKCtJaddlph2zzvzEqG8AysWiqqVaSy4St%2BVtxt7kOUdKNjrUkx7sF8A0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978de7941d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7932,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b6a82d20d05b09f3f185597e96219717","sha1":"7cab97896a519e1ca08d759f390978f759e4dd0e","sha256":"49be69c25858dd8288096e461279923b42ff25252b58f947b12f9c6332ba34b2","sha512":"2768514b5561ce0d23c89b2648a3e39774373989cd234c029bd9d8927150c826b9df5ce55652602057d6eaf97a82c7ea5e8fa480913e5ea2081c9581943ad0fa","ssdeep":"192:Vj9jhjOZK/OaaUl8PzQzzn81B89w7vlCeNA:J//Fx8Aw7vlCeG","tlshash":"0de1ba63f9f915be11938272316a7b197ee49013da6604a576edc1720f8df81fe03284","first_seen":"2026-09-13T19:14:30.76238Z","last_seen":"2026-09-13T19:14:30.76238Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T19:13:56.634Z","timestamp":1789326836634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kKooTXmD4cx2jo3sZSRiKEa7viUC3jGTsYjDU3R%2F%2BwVh7jnnM7dRFzObOJwCgChLt8%2BAELPGI4AE1IQHBtKLICFR3hd3f05KuptJA%2FLNQJBYsyuPHUDNuqVgNTBsLUY%3D\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 13 Sep 2026 19:13:56 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3a978d94f95d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":192197,"size_decoded":24419,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5d22dea302fb1a1fe62f1150a00e6bb2","sha1":"29a5ce0231619da4b9a81082e5b171720650b888","sha256":"ffb7db2048fd23acc3e1e12398538d962842c71e90e4f91e1c8e0dd10d4e1fdf","sha512":"166b3d3c5cfb6857af9a6f8f6f49b7d9c0ec9182fccb49601eb7f603b20df29f0cec406253d79958116b67037f82dea2392aeef7964afef621a32605559925eb","ssdeep":"3072:6XCz85TbwOk3iaxHEznzhgPn8lx50Xv3Jxfd6cTU:6XCz85Tb2U","tlshash":"1614a273d4f1247b111aa0e92aa29b1f7fd1d90bc54b6808b3ed1788afd6ce59c0724d","first_seen":"2026-05-31T00:41:43.040662Z","last_seen":"2026-09-18T21:16:35.255994Z","times_seen":31,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":6,"connect":34,"send":0,"wait":278,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.173Z","timestamp":1789326837173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1130\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJW8Z2IL%2FxiQjwWxPEMsEVxTy3%2F6QrsVse6DEW0VrM6oVppbGnEuYYAv%2B5TkLhE2aUPGND0UxtnD9DnEt6emuNCWWrkobePmMguvhs%2BducMufqcCU0QMpF%2BgEDkAV2w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc5873d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4400,"size_decoded":5172,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d1ae280dc4bac71f494ad3e2460b15","sha1":"e4714c74aeb28c8e67124391835fe9680af9cb17","sha256":"a2fe1eadff7c503ede190c334fdefa6d911ec21b96114350e7b481d6d032c288","sha512":"513a7afa3e95d536289d9e85205a70c73497b675d5c371c834d83b8fa03bf06b6dba5d24eaa4f304c061205d12443b4105fd25cc77d64541b9585e8941593be4","ssdeep":"48:s+MflsXlf/lulel4wlwx+6MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVwyKzJgWj98LeF:sbN26MT0D5MdtbZPAVwzV6skjfGV","tlshash":"f1912ab6ef76e7a6ed71d77440f37be1a2d7b238c33166d26020ab1412841c16b8e09d","first_seen":"2026-05-31T00:41:42.966321Z","last_seen":"2026-09-18T21:16:35.275062Z","times_seen":34,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9781464270147.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.180Z","timestamp":1789326837180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270147.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1b8a\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W8rf5ZjCkwVLC7BhQTtRYGbJcaRDK491W1lWF46U2hzLG9oCGR9IKjR3bBX5w9SQLb%2B8rgYiWweKONwc5LtFGxbPO81yASZxwWFUSiOLwNtQwFK5GHVyTu3RcNgpLAM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc6881d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7050,"size_decoded":7814,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0d2771def8c2f62b74a480c9398aa7cf","sha1":"302e866f9c70096223d8bd11af19b82b892213a3","sha256":"030da5c184a909748be039d43da18dd8884dd23c07524282b0caf55de98ba185","sha512":"3ad12b59ac8fecb58e6942cb38f763599d9b56d8c15a6a8e65b0c04fe30f69ca7e6075ce856b3060da0860439fce4587e584b17d3b64c9e5a21ff0801d5a0d91","ssdeep":"192:844627SoHeOiHP9klzIrEtklz9LtBv8WvBAsRNVye1A6H:B/Cb7iHPwzs/nZWsJyUH","tlshash":"5ae19e0e911986b4362dc7b37c769050aed7333099a7646f80b01dbd62a26d6b5389ce","first_seen":"2026-05-31T00:41:43.034659Z","last_seen":"2026-09-18T21:16:35.301741Z","times_seen":34,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9781529957457.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.188Z","timestamp":1789326837188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529957457.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1e50\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcOoPL5fDj59hqnc8FDJ3JQnOGsVAp3k6PwK58woWpPAf2IT6BCnnm55dXIRTnXsD1pNzdL4rikpv5sGq54BHgJYr%2FwWxdZPiyozXzBcqe%2BTCW8sy1430Ibpo8vug%2B4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc788ad2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7760,"size_decoded":8528,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 156x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dc97c253ade1a493bc9eed66c506a802","sha1":"8b8db1d9aa794c69fd1d14cf77a95c9ce10c8502","sha256":"c525a169b03b301c30fe6b3871b414440fc4ea65fe6c12671e349f2466e7488e","sha512":"4b5a0f167b603b42c7abe1c6ea0dd1d0e999eb7b69c34a45186874732cbe3371773236ec9397e9ffcc07cdf604cd90257167ee3f7b2da0262f0d3ae1d527cbd6","ssdeep":"192:ZAxB4CbkKbzMR+x+MMxOzOrvavtcX3YAD+f7y:ZEyCbBMR+xtMxOeavty3Y6y7y","tlshash":"17f1bfe233d98095b52914ad4d830bb46fcbcdfdd3492f2551f36822a1a074e987e813","first_seen":"2026-05-31T00:41:43.00146Z","last_seen":"2026-09-18T21:16:35.329383Z","times_seen":34,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9780349436418.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.200Z","timestamp":1789326837200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780349436418.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-f48\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQHzk6X6mejhxlhFC%2BufSoHK8XyEyw8FLo%2FDJ7uz2GM961Wkxs7B%2Fr0ZQ8cTiAzwbk%2BXexvxbXY%2Fif6jCFs8tMWaOLdEtIB6sIJxp0GKP1h6ErgFvmWcE7Ly92DreqE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc889ad2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3912,"size_decoded":4683,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 127x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e0a72781c0ba71a4b4d516d647ba3834","sha1":"007366df1d5682ee45375d45c1078864ab996b99","sha256":"f7e5ff34087cb5512cccd87aa19e412fee0911d00fe1fa53d050be637a361e3b","sha512":"ada64d66b04697b485e831672101bf9df1d8fce5987847e06d640bc5a81b5f77edeadb70d916b728b24afb642c119ac537d198bb28b3f8a5559ed08c83b06c22","ssdeep":"","tlshash":"c6816cf4b8aa555cd88c8df561da060b7cd2f0365a60e767c7e7b4eb1c01456602d9c3","first_seen":"2026-05-31T00:41:43.059055Z","last_seen":"2026-09-18T21:16:35.293289Z","times_seen":34,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9781761453069.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.201Z","timestamp":1789326837201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781761453069.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1c7a\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0HSlGZRIXw38%2F6nEQdpJbOKb0ucEdC106DbuWfB04eZ3%2Ba7RKOCqftv0BUg9LJKW%2F4rIX9DwElPPPremXQYiwVCfBYLoGXG6Fjllzy%2FiznoJwVLt6ss75H02dPBcuGo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc889bd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7290,"size_decoded":8060,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed09e340c745eb497d740c5afae0490b","sha1":"6dc5a10a3130bc558d08478f254ec2aecc623fe2","sha256":"e962d5a33e30cee7a96bdee6585310c425b2e48ea47a3f8f880b0adbd266f311","sha512":"b65b15a3476145b750572b29205de60e1cb831d9b255f3e5d0098d13a7a0922bbc529b891580fe08ca8fa4ca1714100b9078e494a92ad763ecc6baae7bafaec3","ssdeep":"192:ZpJBtcs76hX6TDtNi/9ire4/sr/bysFx9Xv0GmZmNH:ZpJBwhX6TO/+eVzPT9X5mkH","tlshash":"b2e18dbe0b2707b46217eebe653a362553040dd14a0bf28d94a0c455b3678b729f7e8c","first_seen":"2026-05-31T00:41:42.948681Z","last_seen":"2026-09-18T21:16:35.323025Z","times_seen":34,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9781529984781.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.204Z","timestamp":1789326837204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529984781.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-14f8\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q9u0Y%2F%2Fj3rfn%2BDW74npcWSjzS6ssvB5TTkMewEqUuEk2b5meBI%2F6qA17N5agNpJXR%2FdKoM5A%2F8QDNysCD7fEJ%2B4lsoNxn4AqYZKTPmWWGsGYv%2BVYk5JA0DVpDMgamFQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc989ed2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5368,"size_decoded":6146,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 157x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5f9d467a6c9d42dbca48d0431628bfab","sha1":"45e75ea05e88c43f58744d5a478b52836263bc84","sha256":"8ff03dc074891963655c8faf0c0192a7d9967ca62694e2f922618520601b98ac","sha512":"f4855a168c52a616e6a2fb9e07a256d87498a6f48edab2f4f25b4c0a59a1f20fd97bf43f412895f6d7fce80dfc5e2dc1fa14fe3a5a5f614240dd235c09698c90","ssdeep":"96:o16Ff4KR/SU/6/jJWM9ZcoIZ4nIKQCZsZe3VJRTPJu5gN89F:LFfJAUoXHjHIA2elJRTPk5ga3","tlshash":"b8b18e3cb06de2cdb335713138948b038b996798b26c36f996524dcd47c99218937f19","first_seen":"2026-05-31T00:41:42.950892Z","last_seen":"2026-09-18T21:16:35.323565Z","times_seen":34,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/visa_icon.jpg","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.360Z","timestamp":1789326837360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/visa_icon.jpg HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWq1ylhXIF7ythzh%2FPL6%2B9WoJeKi6Fwqcjrog2a8BP2TWpYzk%2Fc%2F%2FTK0Wv5MT%2FFtlXh3dPWtSaoAiSgeWzhOwe98UTXDxQZtk0SM4m6hOqlnuWznjDGYziEwcjFJeMo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd88f5d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7929,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"da55ca0128f2547522bed959ab868626","sha1":"156e77e3932bc284170d2b506b81ac46dd6b0126","sha256":"cf5e445b1a70b8387a802fa7e90dedef357653b012105367c5ca96da73d28e43","sha512":"7375ab8c27a543c572b8795867d4c24d213b1a488a75e58a911354aeb5ab183b90b4f8301b6b0d28c9e6f9fb58e18fd1d0ea19cc921297228ef1f9eae99f68c8","ssdeep":"192:Vj9jhjOZK/OaaUl8PzXzzn81B89H7vlCeNA:J//F08AH7vlCeG","tlshash":"70e1ba63f9f915be11938272316a7b193ee49013da6604a576edc1720f8df81fe03284","first_seen":"2026-09-13T19:14:30.768199Z","last_seen":"2026-09-13T19:14:30.768199Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/icon_left-arrow.png","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.351Z","timestamp":1789326837351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/icon_left-arrow.png HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkZ%2F6HDvOvtSq%2B6UiUikvxpHF5kXpKElVk64Tdbd3djEtHa8t65gYvYsBzxb2dxLyB%2BkoWkJErjGKJDw6KW3SB8dlAhEu1DZ7J%2FrdV19ZDdRSKDt066RwCjSZEvwkzo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3a978dd78efd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7925,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"33f6ea54f60b488bdfe123a12b4d6721","sha1":"ffa370c209a04118df0f2c3a3890a6ce5b88d9bc","sha256":"b764e0b69d14361d92f45bdc3f35dc00f5e0550ce803a7d88b97f487d91365af","sha512":"472179134c941e768108d17dd14255c13c2f3397f4769f057eafd1dcdd1bc18e2221ba8cd1a0b306cb9eacee9625d40236629f3de4949ac1fd862d9ef4ca8485","ssdeep":"192:Vj9jhjOZK/OaaUl8PzQzzn81B8987vlCeNA:J//F98A87vlCeG","tlshash":"44e1ba63f9f915be11938272316a7b193ee49013da6604e576edc1760f8ef85fe03284","first_seen":"2026-09-13T19:14:30.769097Z","last_seen":"2026-09-13T19:14:30.769097Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/curator1_large.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.169Z","timestamp":1789326837169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_large.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-a5e2\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCqbq22tKmLaPLfh8G%2FnjeMncWSVtCZgLUQi1NFN64N53bGo%2FXCQUEdHM1plhMcbi5qdVErwqLG8974kujAqz3f5Whdn0BKgoLAfHhIbSWZ94fnM6gRo2ii1c9iBwd4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc5868d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42466\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42466,"size_decoded":43233,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3768885f6fc214b05c6211221789e2fc","sha1":"572d63687f5865ad86c29e4f3571f2c67fdcbc56","sha256":"196685f77404a439b769363d3376ea2ad42bed786d0e408c4aa94b967ac6ce45","sha512":"445019826b9d23593b49efee18ec4833d96f095d9882dfd2dde181f86870990359b69905e3f5d9e615cc57d19c26a5675b4ccb7bc56a5a3bf629f7485224f90c","ssdeep":"768:LXTJe1vRmFWPuF1Ab7Zo3xDXm/3MyftBr8Ga9cgaEJP8OyFI67ux39BF3G:LX1e1JmcPu3Ab7ZEXm5ftJaOgaEJP8zl","tlshash":"2a1302068b7bee06ed36777151cff808b6b75b454b31020369a6139469a1ff0a78f827","first_seen":"2026-05-31T00:41:43.005745Z","last_seen":"2026-09-18T21:16:35.257629Z","times_seen":34,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/9780141185071.webp","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.197Z","timestamp":1789326837197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780141185071.webp HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-8d0\"\r\nexpires: Wed, 23 Sep 2026 18:51:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gM%2BEN7KGHx70XO6YFMOc4zhIgtrM3h1hl6lg9hmsD0LxhquRcmq7B%2F7zK4nGqg4iGltKZO3fxzv7%2FhUeC5ftBXmbtN39YcP0DFnFBesi4v0GQUIUxN%2FWNBkOIonteJg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a978dc8897d2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2256,"size_decoded":3025,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d39919b6dfd8e6394587420f3c63777f","sha1":"49348bf761994d39c6e00e03e5d2e1786ee442ff","sha256":"b56d30f4638cf364e64e5c4563438ca65492a172352eb8454249452e4bad693c","sha512":"818d010026dceb30cff93f6c3696dbcda9c62bffacc98bfc29edc861892b8cb23c545be1d05a5facd26c06b397cd7ba00faeb370d2643c24842b4af7232d141f","ssdeep":"","tlshash":"f6414b8903ee24e1c581406567a50942e3068ebb9e0421886c33cde754e4a7cf08f825","first_seen":"2026-05-31T00:41:42.930585Z","last_seen":"2026-09-18T21:16:35.308822Z","times_seen":34,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kwatannn.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff2","fqdn":"kwatannn.com","domain":"kwatannn.com","tld":"com"},"ip":{"addr":"104.21.96.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwatannn.com/","date":"2026-09-13T19:13:57.397Z","timestamp":1789326837397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwatannn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:59:21 GMT","end":"Mon, 09 Nov 2026 08:59:20 GMT"},"fingerprint":{"sha1":"83:84:A2:8A:45:62:0E:4C:6D:2A:CD:68:0B:4E:5B:AF:67:58:78:41","sha256":"1F:9B:CD:6F:7C:E3:2A:7F:ED:CD:2F:39:46:B3:F2:EE:C1:39:5B:36:BA:FD:B8:9C:06:95:20:98:79:3C:B7:67"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: kwatannn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kwatannn.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 13 Sep 2026 19:13:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ALmoFiAZIIBsGsZQepAGgv72SxHE5DVbUQrRwbd53R7eCvwo7tJGBkGMO3ytkpfTJemx4%2FxETj2dS%2B4DsjydXwLrVKQ9WFxqGMGNE9d5U9O8Ro8dhLDHWOOhql1Go88%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a978ddc90fd2d0-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7175,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0f14902b3aec21a53ce18c1e173e3ef8","sha1":"b8489730333f71498dcfe3e4688a7ae7d080d1ad","sha256":"8ee2f5b60a9d1190f45666dddd427553ffba54a1cdb8365e5f17e24613174103","sha512":"eb837a5d56b75ef7755a086ad7e6e6b4b3088b44132855c40143ea2de26dae50daf55ed188c4d843be5ab9d4ed0235a32753bfe6bf3fcc2ddf1363c8ec3eb74c","ssdeep":"192:Vj9jhjOZK/OaaUl8Pzyzzn81B89i7vlCeNA:J//F78Ai7vlCeG","tlshash":"11e1ba63f9f915be11938272316a7b193ee49013da6608e576edc1720f8df85fe03284","first_seen":"2026-09-13T19:14:30.77113Z","last_seen":"2026-09-13T19:14:30.77113Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kwatannn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kwatannn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}