{"report_id":"f5017f5e-7c52-4abe-b9bc-1730f8576a1d","version":0,"status":"done","tags":[],"date":"2026-09-18T21:04:34Z","url":{"schema":"http","addr":"qwlqlw.com/","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"104.21.19.133","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"qwlqlw.com/","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"title":"Blackwell's, books for life and for learning Blackwell's","dom":{"size":180915,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (409)","md5":"6337bae73e0bdb4f19a324551af93155","sha1":"09f68a513573cc554bc9eac9ea4ef4a5186042d0","sha256":"da47d154a105463949a15d206a0968a57ba45e124d97f81a937aae16fd13c18f","sha512":"563e47a06f52d0791b941ddbda32fbe512197ea7be4edb73943675219cf801b7b70bad38558bc92eb99093052175ba0321b2c268b37676eb49d1bf3c7cc07be2","ssdeep":"3072:EX8z85Tb4Ok3IGRz83jxv4H7slJZU7LndZ/RiEn0:EX8z85TbU0","tlshash":"c6047173d0f1243b5116a0e92aa29f1b7fd1d90bc54ba808b7ed1788afd6ce59c0724d","dom_hash":"domhashd5433172a8171858223c5f1e6951004f","first_seen":"2026-06-09T00:38:02.726922Z","last_seen":"2026-09-20T22:19:31.436427Z","times_seen":39,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"qwlqlw.com/","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"104.21.19.133","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-23T21:04:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"qwlqlw.com","ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-17","domain_rank":0,"first_seen":"2026-06-10T18:14:01.857492Z","last_seen":"2026-09-18T20:39:06.407859Z","alert_count":86,"request_count":86,"received_data":1399633,"sent_data":46838,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/spotlight.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.486Z","timestamp":1789765441486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/spotlight.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2Bl1jkPQ9U7p21ABB1ncpUH4bu%2Bc%2BweIMJgYY%2Ft94xBlqScn84mcstOpcelpokz4fCf6HGbhijfhXtuFu8WenaDCjxqL9x%2BRyjQB8yl3y7OYreDEd4UbkRdy2x6q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf94859b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7915,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"07a5d3565b5c338783733159a22469b5","sha1":"740b8929a0c9af8afd0ed1de5c1f93ef8914c580","sha256":"46ebf04d19f543d92deb3fa387528ad55ba4a605bac34691c188a3e08b0bb4fa","sha512":"e913010a68a636af8f5c982cfbe96136242d5846c91799d8c827840bc049d63981bb239b5fa4660ea932129b6413fe5ff655bb047e93198644bf530c22f2b3dd","ssdeep":"192:Vj9jhjO9K/OaaUl8Pztz+F81B89l7vlCeNA:d//FzuAl7vlCeG","tlshash":"e8e19867f9f925be1093827331aa77193de48013daa708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.304294Z","last_seen":"2026-09-18T21:04:37.304294Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.266Z","timestamp":1789765441266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/styles.css HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lJPH1UttFOhp4QL1kSl5kkv5iV6LukVRL38XrTHX9gcg8HguOC2oovd2XloLZBp4ZqEWcudQUykkCnYCJhEpKloAtOj%2Bc55N2URz2jIxqwp1bduQAsbU%2FivJBgHb\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-5e619\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 1673\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf7e818b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386585,"size_decoded":66507,"mime_type":"text/css","magic":"ASCII text, with very long lines (59968)","md5":"67762074c308b81060a683cd606813a4","sha1":"7dd509ec4f1cd1439bd282580c4b26faeeb12d8d","sha256":"c627ee19335f9b9012f20803948a8685d4d84c666e00f1a64902b9dab280faa9","sha512":"0119061b09def59e79493f345d647b4d6c96fd82f514c21c41db4fb92244cf65db14c4a0d8ab1618473580f5efd12ef768cafd8d1b22847975029befc01185d6","ssdeep":"3072:f9jvh6Cok6+SG7RouMYK6taix9FKDh+AM3vbjNFBDzOrFlNQOKOJ0duP+7xVG3lW:flvh6CX6+S+xcMdGqElc/RRiVP7fq","tlshash":"2b84f9129b38103cf127816ef1e27bdc36149017d2970bf6f997963acbca5a24a3275d","first_seen":"2026-05-31T00:41:43.014629Z","last_seen":"2026-09-20T22:19:31.460981Z","times_seen":46,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/curator2_small1.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.296Z","timestamp":1789765441296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_small1.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1540\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dq0h8bJj0iYJ9BqNZs7Dv1rzx5desVH6%2FVPKjidKw%2FSYCYloIsto71%2FXt%2BgVEnmB8vH1AJnccgYPi7W2e5lMmjfKZRBxMsYgxQEBYVwWsNQuPlMGLeXQ%2FJ8E80dw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf81825b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5440,"size_decoded":6206,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 169x169, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f86db9ac4278a1acbcf4c216f1b69c4","sha1":"077c096ac64f0fc98c04416018775fc0981bb510","sha256":"1c7f9586e5f195de2bf73b79fda7848d0c298c525a70b205b1d883e6e4d17635","sha512":"4ba547ceb5a84cfbcbb4d22a17fa3e51ff3e2eb8c8c72f93148c6b2c491b5c1b3e70c209522b5ad761ff116d5ba09c79be57f318d5fd50b3a66e39b675f11f90","ssdeep":"96:CJcc64Z5uMXbRdp50YoDBpoQeE1dNgXhvpQ6J9zlOPZOnqgE9Xi5:CJc89bRdpJU4Qx1d2XVO6Dlkw5","tlshash":"69b19e82dc847165d80ab7891b2c1df81804400e9357f7e692b196f277b6e4af9529c2","first_seen":"2026-05-31T00:41:43.026391Z","last_seen":"2026-09-20T22:19:31.547015Z","times_seen":46,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/2100000299201.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.309Z","timestamp":1789765441309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/2100000299201.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1744\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tuRhw8RwvxswphzmgRlLCOiD8IZa%2Fpn1i145focVM2mkMzm31noWwKlzhmDNibRYJ7FIekdlrGM2vNviyvobFwFXI7AB%2Bya44K44gUhaWeQeuTtqfu6SX8x8Y8js\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf83832b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5956,"size_decoded":6716,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f99ad3c720c83975b7f5aa0958626ec","sha1":"a244d6e58ca1fdd2f8121db1709bac5950158d57","sha256":"6b954afbabe0ed0840eb1f20bb52711d829e2d525ee56e2954a2bc8fc7a606bd","sha512":"8d5b1b7619ec8ddf2f561e7f44a45f63155eef9120f8f9fe801a65f5820a33630099f1db17c2f05f3ab2f7cbac149d0402f096aaa519bb315d48fa3aee9f7f37","ssdeep":"96:MM6c2QWS35YIgX5z0ahKuIU3Nuv7Hwe+oY86UFP3KuDqcYRMVuWZPzrx:pMQnm89U3Nuvzwe+f86UZDGgVuuzrx","tlshash":"1dc18d092dc2ecd29487efb5f18451ebe24ec5b5ca83a8444e28f103e05d774d3926e7","first_seen":"2026-05-31T00:41:43.007065Z","last_seen":"2026-09-20T22:19:31.452457Z","times_seen":46,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/2100000299980.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.315Z","timestamp":1789765441315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/2100000299980.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-17ba\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UrLzDDQ1g8Kf8QT583PY9ldzQCCUVMFaoTsTXnF4t4fGVAtzzNNaL%2B0bKbMo6o59nQpHPGTFMMV7yAkxSayJ406xOoDZ7i064RXgt1z8AmEAZJpgddeuqO7PR6Gy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf83838b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6074,"size_decoded":6832,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3e066d88aa3f2ce539f3f7b6c6f3de33","sha1":"df295c7222ce107d89baa2da4978be14abaaaf6d","sha256":"5e266f60dbed9e568f17ecccdbbd9df7640b70bc2953ec76e0d94cbd55b5bff3","sha512":"57847ac4f8001befcdf0383cec7d488a18ddb40fc286c10b713dcec5355233ee009c2aedfbb0f7cdd886d160629fd61969642b51a58b7a3ffbe84ce7b09debc5","ssdeep":"96:Az4WpaMjTl52VRda7WwljXjj/twWHvCt1yYiH/UqxnejmtuXyy:gvYMjTPOR07WOTP/twqkmXrtMH","tlshash":"67c19f30b0955144b638a8e2ed5f3551655e00ee871abcdd23d8b5fc74f7fe1a962210","first_seen":"2026-05-31T00:41:43.008951Z","last_seen":"2026-09-20T22:19:31.447664Z","times_seen":46,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/immiHargreaves_42x42.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.331Z","timestamp":1789765441331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/immiHargreaves_42x42.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-11ba\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bREbg8X1hTrxCKnzzaLCuHuRtutI%2FgP665o1va%2Bgh4ZxIsk52K0EDu%2FRJ9vlvcYdD7Ob1RZBpojJEaHHu7OWcgpYPfDWn7YxWkmtrgqqD%2BgmbpIaGPt2zkj%2BcZJH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf85848b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4538,"size_decoded":5304,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28af5e8191e063f09209056b34729f2b","sha1":"3b9338f317e9d94010f084533b8d9d6a4e35208f","sha256":"90cc20b58e581a8f484de2efc86452cac922c601f1cd8c773574477cba80ecb6","sha512":"f832980020b496c1213e446562ab25c9e6c2bbf78c3ae25841a3b1f63855360bceb3eb9442b543a612bf495c09428795f6c07e8d9f84f6c8b9c7ea6e1954aeb4","ssdeep":"96:CbN26MT0D5MdtbZPAVwzV9kiTK4kMqLlDq7:C2YNMtKwUiwtly","tlshash":"c0913bb6cfb6c396e931eb3c94f23bd0a1d17629d3623b94313cd6298a411815f4e09e","first_seen":"2026-05-31T00:41:43.022604Z","last_seen":"2026-09-20T22:19:31.516105Z","times_seen":46,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.eot","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.548Z","timestamp":1789765441548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.eot HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUi%2BBsv7%2BlVp0%2BAZdXxPQzao06OwqG7va8oLZpBOJ5oVkl0k%2Br6aMdh8923oDIHO%2BnFegabEDOOCNYntQuk8u2rgFDZABJw6zYzOX1rMP9XyZu2bdA9rpGKmk2cs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cf9b86cb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f6180413a573884d59a6393c3a0dad2d","sha1":"522f2ed0f7eec3361b0e58ccbac5833e87708a11","sha256":"5e46b1ed0e361d3f9e0141e6983bc841c88c1c3d202dfb02f66092a8e78d75c9","sha512":"755211172772bc762594542cabab91b5ea549395ccbcc365eafe736bbb02070339453355a0fcdb51df6dbdd7d391b0aaa24cf80f606a51571008717142eba8f7","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzcz+F81B8987vlCeNA:d//FYuA87vlCeG","tlshash":"09e19866f9f925be1093827331aa77193de48013dea708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.309262Z","last_seen":"2026-09-18T21:04:37.309262Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/curator3_small2.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.326Z","timestamp":1789765441326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_small2.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-243a\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2F2Rypw8zolAb8VkHHcsXk8fTMTOcnjSsZ%2FmxOUSkXyCAOYr3jAPrIscZ5GmpjKQQs2dYT09poZC%2F%2Fh2gsjAWyYYvYEbeS7vzLG9l4bF4ycMepBbWIC04fJVwqdV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf84843b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9274\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9274,"size_decoded":10038,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b56ebd4f940c08743e4db58ca9660d08","sha1":"af2614ec97ed6f871eeaa53e26e99e7b9b7ee0cc","sha256":"9fe04f757e7cd082869c6e2aa6e5b720f31038c1290960d1b7c0eb2d8fdec012","sha512":"b8d685eb8c3f02eb44e48ae4dae7bf83fa4900991e5b23689fc9cd3d803eec8ace88a9bac7c7a49bda5cef4e7a179affa3f63e25d1cffa3237af74b11f306445","ssdeep":"192:qiNNyQYslchhQeOLN7jbWM9xCOVjo29RHXRcd8P:5yQYrOLRjy8xCV+5XqI","tlshash":"3e129daabf35d1a1c720957f4cc30a9006e1d39962c55eda3b705640ae5aeb0f6ad720","first_seen":"2026-05-31T00:41:42.993504Z","last_seen":"2026-09-20T22:19:31.51531Z","times_seen":46,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/curator4_small1.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.329Z","timestamp":1789765441329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_small1.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-293e\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2B%2B24fVNssFzI5qNjGjJQ0sV7ojEU4d5U0ll9%2FpusrgZlJaVbAFPS39DBL2kQ%2FDe1Xk4m3OEZacn3Uxg4094Pr%2BBQM0hpTzJffDnKXwyuPnQDPIRRtQtVZcYyGWK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf85845b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10558\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10558,"size_decoded":11325,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d888f94dca4f1af2f6f5c64b7bb23c28","sha1":"7eaf5c0a16946fbe16e6ff3ed3a8e2789f3190be","sha256":"6acb16ba8f327be88369340cdf25a222b7105865c98ecd546967abfe086130ce","sha512":"ea0a6eeb59dd534440a8ab6d985e82d9f193f0949b100924be807cb8d44b5eb6b8b199df3008498bf784f832bdad90a1f57e926d56dd923ec158f036bd0560d7","ssdeep":"192:igo22U6NVL5W+YveJbvaoUcyTrWY/L/qIVjWQsJGNyXVxtYLQrhRKhtA0K:ro21E5W+ceJbybcEjzhVgDX1hRKhtW","tlshash":"8a22bf0543070852e971783763b72b063a09ede54bc7d29fd24ffde06aa16c9873ca54","first_seen":"2026-05-31T00:41:43.029405Z","last_seen":"2026-09-20T22:19:31.528768Z","times_seen":46,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/4b91a4be79efe579a1fb7336cf4850c0bc396d4a","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.551Z","timestamp":1789765441551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/4b91a4be79efe579a1fb7336cf4850c0bc396d4a HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2IF%2FT9QPkZBT5xlFq9TAryT3xbdxNFpz59k97IbrTGLPwbHHS6v0PQW59iI1M4QRnUTBWtg%2BRjPIaCTZHZzbOYzrp7lZjv%2FQSTWyplWgn%2FmUJNFfZa1731BwBnw7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cf9b86eb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7916,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ff09f3666425777ffb31d7f5fef2c1d3","sha1":"24e07c492c033bf272f0ae0b2e3148bb275a496e","sha256":"e48e03648ca9e486aa126789525349e7b5b7b109610c62796bef315c669b4439","sha512":"6a6e2c04f6049bb89919edd9c23420b936564b2869cf456060c649f946e46ae2525fd562cdf014ee70fb37fea2643553a9afe4b04f3e33112f705a8374ce316b","ssdeep":"192:Vj9jhjO9K/OaaUl8Pz6z+F81B89S7vlCeNA:d//FWuAS7vlCeG","tlshash":"40e19867f9f925be1093827331aa77193de48013daa708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.312953Z","last_seen":"2026-09-18T21:04:37.312953Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.646Z","timestamp":1789765441646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zzQYZYDD97GqUGJh5WuJ3lIcTIs5gubDKrSe2MQVIb9siZsRDBarcc9DXuv8e668i3jWBP0dJxcmkpu9WMaSIFsBWx1xOIdOMLLtd6gFtRCIYDBvwmJxtcSkGFe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cfa4885b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7908,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a65b14b31114454c14ebdf81dee6028e","sha1":"1a68754974b9038a5f1cd228e8e88a40c7ab1b09","sha256":"5dfec5dd5de555771e25afac614c3a921aea3c0d20e9987de7720e3c4e808dec","sha512":"da18c2964de29b044083be96f75a511d9bd03420df61977dcdbe0ec37c73dcd169eb5ab45c6012582b4b01fa738a72659f6fbd0dbd63c4527cbaf0b7ef52302c","ssdeep":"192:Vj9jhjO9K/OaaUl8Pz6z+F81B89C7vlCeNA:d//FGuAC7vlCeG","tlshash":"d6e19867f9f925be1093827331aa77193de48013daa708a576edc1760f8ef85ed07284","first_seen":"2026-09-18T21:04:37.314506Z","last_seen":"2026-09-18T21:04:37.314506Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-18T21:04:00.897Z","timestamp":1789765440897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mD36NJtDJzzGDzcBYp7OSlHapGI8E8wIWNlwvJvf%2F9H%2BsZxqbZ85L6Unt%2F7lpRNCD6srNfH%2F34I4NxltMd7FXEEEJCPsNaweepA%2BGWN8GlEgYRJREuZ9FE88AUZP\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 18 Sep 2026 21:04:01 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3d34cf5dff6b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192197,"size_decoded":24415,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5d22dea302fb1a1fe62f1150a00e6bb2","sha1":"29a5ce0231619da4b9a81082e5b171720650b888","sha256":"ffb7db2048fd23acc3e1e12398538d962842c71e90e4f91e1c8e0dd10d4e1fdf","sha512":"166b3d3c5cfb6857af9a6f8f6f49b7d9c0ec9182fccb49601eb7f603b20df29f0cec406253d79958116b67037f82dea2392aeef7964afef621a32605559925eb","ssdeep":"3072:6XCz85TbwOk3iaxHEznzhgPn8lx50Xv3Jxfd6cTU:6XCz85Tb2U","tlshash":"1614a273d4f1247b111aa0e92aa29b1f7fd1d90bc54b6808b3ed1788afd6ce59c0724d","first_seen":"2026-05-31T00:41:43.040662Z","last_seen":"2026-09-20T22:19:31.48542Z","times_seen":43,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":7,"connect":23,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9780099547952.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.300Z","timestamp":1789765441300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780099547952.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1542\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6%2FS4JtBgoHxEtG%2B%2FHqYCh3c6A%2BOei41iav2WoP%2By84AMbOaNxcxCnoOqs0j1ZF2ZGu%2Fwo68ry4ZE5V50RcpBXpV%2Bm7Nl1CXIg1pxWS%2Fp0BaeMUNiENl3wbUUlrp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf82829b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5442\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5442,"size_decoded":6214,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 129x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c819c2c0937a8e36253e39732b1acc7e","sha1":"5654586b55f0f0ed304e1e5f081432f5daea4154","sha256":"b73bed4de83a77b2fcf815e1e510146efb1241f97245c41d4adc650c182e72eb","sha512":"e09a5bb29388801b5fdafd9fa2f770e88a68d4a778ebf3925a21a8b92abce0ec9cd208337bbcccd3aa8131338a6206adee8d186919c644fe05feb5b26b164685","ssdeep":"96:dGBVUwRyl+Yt/4OgggB0Bw5XIxhVVMGXrOdZJqmPu+71d1J:4QwRWL/4OkuBmIxnVMGXi1571dj","tlshash":"ddb1adcb2d0ac08874a098e04b0eb93bc977eb55448d7e02b8b732b9e901f4d61942df","first_seen":"2026-05-31T00:41:42.946098Z","last_seen":"2026-09-20T22:19:31.479626Z","times_seen":46,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9781464270161.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.302Z","timestamp":1789765441302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270161.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1d42\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bdmq%2BnhFGUjy5oafyNOyRn9XFusDFeJAxbA3b2kREWy65R6Ou2gcTDgHQEPEoztKz641HrXDAG%2BZgx63%2BK0hvhpFskt46Bd4FcsqwIZe54sn%2F0gkM2k%2Fse7F2aJC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf8282bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7490\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7490,"size_decoded":8256,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d798f5ad64b1b809fc2aa3490af734f7","sha1":"e7abaca716033dc2fb42cb9a0b941a18d72544de","sha256":"bce52953e9d93c018782ca8a7baad7bc5c4bacdfefaacdd6408072905060b18c","sha512":"ab37a338164a155260afbced41248e2a256b7ed63ac75e338aa6aed1a3be89fa4bdc7a2048cc7ab3535d44e675b35b3dbac5a7f382cbbe8570899055b2022f78","ssdeep":"192:XTww/n4In84jB3qpKVkf17brMWWTeekJSZp7SPRiVrPwiWS:8w/n4InLjBofJbrMXTXkCeOMiWS","tlshash":"a0f19f1050f35470b425f5f7f246e62f9e45767ca6a7c30519610072bfaa87f8e7288c","first_seen":"2026-05-31T00:41:42.961649Z","last_seen":"2026-09-20T22:19:31.526797Z","times_seen":46,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9781529971491.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.306Z","timestamp":1789765441306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529971491.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-a50\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mx9guxDK2B4F%2FJ1aZehPcNP%2FHnhSHhk%2B9drlGjqO0lLaF8RmjkqjMPX4n7JWqn2IqzMacbyNzewXeiboOD2VDgRFMmGcjBoIrtSGMLVzzIeAXmY4BbajrixPVGFU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf8282fb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2640,"size_decoded":3401,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 128x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"75153d6a781df04acc22d2383cb954b2","sha1":"52366027b5c5de5a199124d1d8dbcc2d8d3ce16e","sha256":"07bd5dd5e4044e1ed117492589da9580dab1aa407bfc819859a9ac482a754e1e","sha512":"398b0aa56728d059b8689f6850478aef1ecb37c785c6204b389907eab95a35461c820ce9ee319df9a33faf8d8aa8bf988ba786c9e717a977415be530d6bf91f1","ssdeep":"","tlshash":"4f513a9278d4c71729bf249ac7511029c23561d2f5dae1f216efa82e846b123ca73d33","first_seen":"2026-05-31T00:41:42.980347Z","last_seen":"2026-09-20T22:19:31.497019Z","times_seen":46,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/bag_icon.svg","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.480Z","timestamp":1789765441480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bag_icon.svg HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OmyGVrZwH7YDD3cwRrXpWOvlNMoAG%2FdAGaFTWfEzxS%2B%2BbX16%2B%2F30b48AIyWxC2T5Fe4p8g4y5krOqRNvO2QK7KbTnLxpMzRWCJgZ9RNnl2BuwmmKw3NDe1gtbgT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf94857b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7915,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8fdeea1d28b1f1709e5cc0f8995d493c","sha1":"71781189fb8ac7914396b348c11a362113143a0c","sha256":"c6d378fba2e67c1407b707b92a4c68adb53a15eb95009a782f09e4effc8e2a05","sha512":"d9d71b857dee857bf19fe7accb6d7625464b365b131ed95efed34ada6613306a5daf6c0fa038cfa1d5bbaf9c598d9dfb4d43b07636b31547caa95bd99fab14a4","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzzz+F81B89D7vlCeNA:d//FhuAD7vlCeG","tlshash":"fde19867f9f925be1093827331aa77193de48013daa708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.318816Z","last_seen":"2026-09-18T21:04:37.318816Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/icon_right-arrow.png","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.492Z","timestamp":1789765441492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/icon_right-arrow.png HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FeU5h08aAWlFhLWDxy9bft9vaATYr1Fhq10cvgCfMixKckqQUICZui1e%2BGjqfgUn6S7YF009MALvGBMzet6sHgyqpbXOs9SpiVJRqHiHmTnCp6sqpETZWoBTZcbw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf9585cb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7909,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"228378ddc1ccb94c380a7f3538a4f134","sha1":"f7e1a839ad8f84eac70faece7f41c6aa653ce599","sha256":"efb0d6af54b66c06c1e14074a9826ac2b1f7a265ae98f8074b13ad250865c175","sha512":"830a91e3c6d20dfc2eee9a2df604ca8aa5fb0e43ab5831ba6a763d09439cc28c4852dd6971630f33f5322759e83a42571ab4c2b3fc9dd78686a91a1ffe269b09","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzgz+F81B89A7vlCeNA:d//FEuAA7vlCeG","tlshash":"9ee19866f9f925be1093827331aa77197de48013daa708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.320567Z","last_seen":"2026-09-18T21:04:37.320567Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.677Z","timestamp":1789765441677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jNgW0oNH2SghMsfz0gm6LqtwQ1bKeenR73Zj5OXluh4GnapBD5F%2BtX0u%2Fm3Q1%2Bmt8aw8vjhCCwBFjyp6LMKupoDT%2Blq6vBLnW5Uv5IwBsCLrN10Fu3%2Bf%2Fc8ngvGi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cfa788db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"da52b6fd0dc9529f75d4a6d1a311f4b6","sha1":"e4a1a5e4b7ee9cb202e1d88715f5dd223a7b88d9","sha256":"a31df9edf175583fc5fc82f66ea30080700186b1c039e84f511098d260ae033d","sha512":"5491c2182f487b324c23c659012794a2e0b636cf24a5d2423d6f8d799d2e3f4a8fb4c48045c4606fac1b82d13d76a6dec950b9245074a42ab8d6ea8400e58e50","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzqz+F81B89y7vlCeNA:d//F2uAy7vlCeG","tlshash":"47e19866f9f925be1093827331aa77193de48013dea708a576edc1720f8ef85ed07285","first_seen":"2026-09-18T21:04:37.322187Z","last_seen":"2026-09-18T21:04:37.322187Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/curator2_small2.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.297Z","timestamp":1789765441297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_small2.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-17f4\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YM55SRhw2bq%2BTwfc34IvonvVrK%2BjiTBrMR60dt6RXq4eQVrhESBllnUGCfqndIVFGKcUVqHCbHfuaf3L%2FcuveeoAeCcD3n9Wi9PrbBpbSRhkhCoZ5089pvUcLU%2F%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf81826b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6132,"size_decoded":6898,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 169x169, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7dd25b1f725f8881b8af4c3f5a4736d5","sha1":"e3af29cb8c06613c9643cc50046a5f046e19284a","sha256":"a5351364ff0f9a3ebb5f8d9839698b0ce6bd0b6eb4e67ca46c09b137c059d0d5","sha512":"651cc520147ac1e5ab0f80894c53c1f6708f6b2aff6b50437dab46507c9cbdab03376fdfa143dbd3619e46e600adef1a46a99b00605de99537a2eeb0c5cb5f3f","ssdeep":"96:DKiLcVAorQiVU+Y6kg+oYJcUn9snVIAZwrag3LPpVsVorkvREJqw/iL9OtS8feW/:PS3ki1Y6kglY+fnuAZGFVSSkvUKJYVft","tlshash":"f5c1a0f60503739225c7b5f574420891b4bfdf7c8d32782862439261caf6b0d1b65b68","first_seen":"2026-05-31T00:41:43.027852Z","last_seen":"2026-09-20T22:19:31.45621Z","times_seen":46,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9780349436418.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.320Z","timestamp":1789765441320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780349436418.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-f48\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrXKBF1BkRYdT9LGMbk0xMlUSq6CSfvPYGqEp%2Fq3GLl%2FLiZRi32Gu9%2BmzM7pfPoku%2FX5oe84cFXtYG5YAWQW%2BgeFcXTHLmUJ2HDk206MrNwlGtVVctWdf%2FyxAQbc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf8483db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3912,"size_decoded":4679,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 127x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e0a72781c0ba71a4b4d516d647ba3834","sha1":"007366df1d5682ee45375d45c1078864ab996b99","sha256":"f7e5ff34087cb5512cccd87aa19e412fee0911d00fe1fa53d050be637a361e3b","sha512":"ada64d66b04697b485e831672101bf9df1d8fce5987847e06d640bc5a81b5f77edeadb70d916b728b24afb642c119ac537d198bb28b3f8a5559ed08c83b06c22","ssdeep":"","tlshash":"c6816cf4b8aa555cd88c8df561da060b7cd2f0365a60e767c7e7b4eb1c01456602d9c3","first_seen":"2026-05-31T00:41:43.059055Z","last_seen":"2026-09-20T22:19:31.456684Z","times_seen":46,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/nbt_icon.jpg","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.507Z","timestamp":1789765441507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/nbt_icon.jpg HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=omEX%2FYlaObKDFSF1P7NoUa70oMdngSD8MpqXmAFGkAgsXlvaSnaMIXwhkNhLbfS1hhLAd7nmB1AgShJ7wmRN3Qk5NTdiE5kr1j3Om1Zv22gZzTn9QkXpYNuzOCkK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf96864b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7907,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a5fbe1efef10792bc17150fb00dd19d3","sha1":"38bbd362ad4a109dc5b7aa2c325693d9e104b821","sha256":"d666c732c7fbfb5e63647e2612c8c50a92d61c68e8b307bf839910905d56ba38","sha512":"fcc679166ea909d6ce19616d4fc68986a5bee3a7d94ccd91e25028135dc7fdf033badc1e86e34baca7be0a2e0e6a378c5c17382a5a72b5c9fd05b8146a146cbf","ssdeep":"192:Vj9jhjO9K/OaaUl8PzDz+F81B89/7vlCeNA:d//FVuA/7vlCeG","tlshash":"7ae19866f9f925be1193827331aa77193de48013dea708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.325144Z","last_seen":"2026-09-18T21:04:37.325144Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/4de03de2f7b820f96b0cfb5a673d9f9616885e6d","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.553Z","timestamp":1789765441553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/4de03de2f7b820f96b0cfb5a673d9f9616885e6d HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KPdFnpISp71XTuQa%2BBIccc0%2Fp3rIASn1xBDtLpRFyQKtTHLzNIrboC8vDT04iyVmSA6OtLtuhoEa9snB7tiZ0yT1HUMNFtxnrwV6NK3%2BP%2BDSPU3z5clyAvb74JQc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cf9b870b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7916,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8f39828fc0f4f2d471f09ab9fb320859","sha1":"cd0c0f2e441ee20c8fb1604d040408393d370481","sha256":"b65ff43896401fd31d858395f0155a20e796943a191d8f49cc16fd8ac00a9192","sha512":"ff00f70163733036bda99721400dcf5357b39263773a48fdd7b495c807ae9ae820d7dd7ac5331c152df739ae9e6fbf8e4167a6754d8de8b610db59a2591122b6","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzcz+F81B89Y7vlCeNA:d//FMuAY7vlCeG","tlshash":"0de19966f9f915be10938273316977193de48013eea704a576edc1720f8df85ed07284","first_seen":"2026-09-18T21:04:37.326459Z","last_seen":"2026-09-18T21:04:37.326459Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/favicon-194x194.png","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.678Z","timestamp":1789765441678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/favicon-194x194.png HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LCTlM7g35Qwt%2Bz2RpWruszrdEZuoXHNhF8DTppcpO6yYka6fLjo9vNFTe3DjWWoRc%2Bdy2l1oeC3e0BUmQfodi9e6yqXQkhykIKN%2FPGCqX%2FXgGmbDEupcnMJUQL6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3d34cfad894b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7916,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d99fa7a24b150aaedd342d21f9606469","sha1":"e6fc2ab25342c8b4d36bed2f6ce292355d9b1c14","sha256":"4b249bcd762f092e246092977d750867cd050c03b615ee5c0a35a5b7975396d1","sha512":"7a0fd52297145cfcc999945358a090b2545f3c5ea9d47691d8f5d42717983646f435e872a76c3a505db57fcaa35bbb37d02d38046bd0e5dca75298e0d17a0522","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzgz+F81B89k7vlCeNA:d//FwuAk7vlCeG","tlshash":"29e19866f9f925be1193827331aa77193de48013daa708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.327708Z","last_seen":"2026-09-18T21:04:37.327708Z","times_seen":1,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/favicon-16x16.png","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.679Z","timestamp":1789765441679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/favicon-16x16.png HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FU4TfG3sdzgGpebQjA9bNZGgbMXE%2BtUWQ5N%2BlyMKu%2FuV%2FU50no6HOXpffvLzLBZ5FjW3FVNnZHi3dgY4UdOIpNfzDHqWB%2BRn%2FsmQBnhGOStO5HrjP%2FDco5ivmLLd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3d34cfad895b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"73b96b73cd4d8e98ac0271a2b261d884","sha1":"d26872dd70562c59691a7768a94e4cbf8a62ab38","sha256":"60042ebf3ae1d7a374e8c3bcb2a33cb754a131c61681c971e0442b28a15f91c3","sha512":"9f073dd94299eab751507bda79d0ea584a660bb066ac5582cd677e0abac716d08806f5bc646dc5c438fbac94d99b8a87458274830ae84a30f8d372c4b9d25219","ssdeep":"192:Vj9jhjO9K/OaaUl8Pz9z+F81B89N7vlCeNA:d//FruAN7vlCeG","tlshash":"23e19866f9f925be1093827331aa77197de48013dea708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.328957Z","last_seen":"2026-09-18T21:04:37.328957Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/css2.css","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.271Z","timestamp":1789765441271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/css2.css HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bL17Dx4KrBn%2Bok9bDywhQoZflnAs%2FcBwO6qG4T3qIEGWYDUqNGXX6BGDeBn70Aws5peU8NdRc8lPbuzGde00CP5ENDaLblijygRbW%2B73n6hNpCyvQpwgYm2H8sLd\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-426\"\r\nage: 1673\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34cf7f81ab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1062,"size_decoded":1156,"mime_type":"text/css","magic":"ASCII text","md5":"6ed0439a1181b1ac6a0eb4ed36d6e299","sha1":"026be2e0a572a9630521aedb1542d2ce9fe41788","sha256":"1396c870c8ac48dc90e1ad30efca84c4f7f04e83dd364d118ed7a943d783e9e2","sha512":"bcaa52b611040d57778389ef4417deb4ec1d54c034324a00af8f63df3d62ea627b702a9687f5864550ee6b1b82739c2e4038c4c2cf14ec0e00852c1b085a7035","ssdeep":"","tlshash":"f411ab50086a9600e7971cd627cebe379d5eb1407045d9386ffe1888ac5ac64b3a5f0d","first_seen":"2026-05-31T00:41:42.942414Z","last_seen":"2026-09-20T22:19:31.455525Z","times_seen":46,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9781806491872.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.310Z","timestamp":1789765441310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781806491872.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1610\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kgc4Vy99SyLJl4Hrz8BKHFkaWTKw98Rh9hlO5HNN0Oq5LvwU6AwfwNYeJ9hPMGGP1kG6TGJ7rD5zxU%2FpeiA5tcSU%2Bb%2BIWDVLIoTlqV%2Fu9oFyHaLFmdFlCUaxgMAO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf83833b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5648\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5648,"size_decoded":6412,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 176x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0c500c162c9418d7243780515d8b0d51","sha1":"e9c6896fbfb4a2b2cd8e09537e0eec44aa4d1d6f","sha256":"ac0c3219c7af285b1e0d537737c09200932d5755ffbc9a0fa053414432e5f64d","sha512":"20ad4dabbbbd2c0a7811fdca93f54a09e6547b0e8b310eba07d7572cb0be941c2da5bf8bf3b84f6a6653c5c1146bc06ed9dce0cd2f187fa988089e91f2a508b7","ssdeep":"96:rcbG2oG3re7wuB8cwWEBtdKd4MrYTQAwl3I8Hdr6eJZbx02nWVFNbaIXSH:rcbG2oG3y0uB8ZWEBtl0A+5fWyk3aIX4","tlshash":"a1c18e5fc6803b4bcf1cb28d19b87840961c99872252ca279d35393a66f5e04d6b3dcb","first_seen":"2026-05-31T00:41:43.01913Z","last_seen":"2026-09-20T22:19:31.520551Z","times_seen":46,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/0477e48f455cbfe729f90389d3fd8aaca6cc483b","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.545Z","timestamp":1789765441545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/0477e48f455cbfe729f90389d3fd8aaca6cc483b HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZPv57VB9SI4AamX9m%2FzYKT8njb3upWxoDqjLiaeEcaLS%2Fv%2BwhUooQNCzbiZvfnsOEqpkAtQfXkdgrPdnp%2Fx8%2F0xRwoukrxL9BqhuegMzydQdHD%2Bm4qZKnI%2Bg5msx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cf9a86bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3810789162517469e35cb087e98a7852","sha1":"d0fc5b4b721d020966b2b3a7d4293e8ee11a80fe","sha256":"d29afdbb31b70977fa16269d8c6f98a348a68fe505a4668da4b787a0a9f3e86f","sha512":"5cf432ff61bf28470382fca0820ef25c624fbc3876e0a3b7952d31fb45ff5fee2670e219344002a35c8fb35ae99a65f955c3691b57d3abc80a139f9e498ac464","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzcz+F81B89s7vlCeNA:d//FouAs7vlCeG","tlshash":"13e19867f9f915be1093817331a9b7193de49013daa704a576edc1720f8df85ed07284","first_seen":"2026-09-18T21:04:37.331435Z","last_seen":"2026-09-18T21:04:37.331435Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/xum7xsv.css","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.263Z","timestamp":1789765441263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/xum7xsv.css HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G1LiHdynpViKR0N1LXtCCpU5kTFRSTYspGE1PjVIVpxAixXaCQf3GZkyjPy%2BAg6prUhVt4jCfr6dzyC2boL06ATlz3t9rgk8E7eGKYHMbT4Gdy0rrhlgXPQxqSKO\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-21cf\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 1673\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf7e816b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8655,"size_decoded":1750,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"be163cab92c6fbc846d795b8b449d345","sha1":"3b206d887b7e16400cc02cd3ddde49d16bad9e39","sha256":"4c0708600858cec279d9184cd69af294c157afab97ee61ae27c901ed9db917f0","sha512":"83f52f96efd1cb29b9ccdcc91ecdf4b4208b6bae2bf143260749dbff1ab73fe50f5dde53e9b0535f13ebd6637c1018b57fa80caca92bbec9bf6efb48e9745a05","ssdeep":"192:pK+wqM1MoMRMUM3M0DMvMQDMQDM6M6MnMUMGMiMiMtMOMwMvMHMzM4MCMsMbMZM8:aXWhyd80oExxHHMdz//er5Es4RflwqFe","tlshash":"3402f821845ac5d2e0928eb135c7ff256d0eb42aa4d558129b39cca8dcb7cb793c5f1c","first_seen":"2026-05-31T00:41:42.959575Z","last_seen":"2026-09-20T22:19:31.454915Z","times_seen":46,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/close.svg","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.288Z","timestamp":1789765441288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/close.svg HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3TJN%2B2IjJ%2BHFUpJyf5o%2BNSeaBWrPTOcfYTokrDcX500TTF59%2FtEVKY7Nx6PunO%2Bjr16%2BN3V7MYZizuz1kuKlzwVWhLtJcI7PU7c78X2CcYxJOxJXCGEQLMjX71S1\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-541\"\r\nage: 1673\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34cf8081eb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":1435,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"463a29230026f25d47804e96c507f787","sha1":"f50e0eac87bb8f5cff8f7d8ccb5d72aedda7e78d","sha256":"a049e1abe441835a2bcf35258936072189a0a52d0000c4ed2094e59d2afd189b","sha512":"83f065b7b10e906ef8bf40dd907da4f0eb0f4c28ee2d8b44e418b15f1c06884a579957b2bc27418fac5759825d394819ff0ac48d784b9f05564b8edab25d9426","ssdeep":"","tlshash":"2c21e5fc520853f49d587e98a8623077954514bbbf9db8c8928c847788c53dd4ec8d58","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-09-21T02:49:35.340413Z","times_seen":69638,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/x.svg","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.331Z","timestamp":1789765441331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/x.svg HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sonIHBcPd1u05Yii72408%2Fc8gZfuaRPG0xsI7%2BBpTo1cmNbkASPPh8ANrMmmT8LFmrkR2OQ7HvGoW5RDkEyvIxMDNLmw89ekw449zTlEHTVnRJrICxgjK%2B9%2Fz4y4\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-111\"\r\nage: 1673\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34cf85849b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":958,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c02017aed158c45f6c61f4eab014d709","sha1":"2d749d823898858f20a59128f752d9ec638586aa","sha256":"ca1c3ca0d832d6d19064dad0918d6d5ee2f49ec7a7139568a26f831e8e1dbed4","sha512":"7fc0a75256c5e1332dee6a2c1df60abb86eaa640796ab5f8b63786180ae8c696d64b971934478a9d5038949f718729381056d9c0657924d3a743c7fca4d75a7e","ssdeep":"","tlshash":"d9d02b18c38547255e5489f45f246eb0166a74c651485278fc6006a0b2092d29d754fa","first_seen":"2026-05-31T00:41:42.953459Z","last_seen":"2026-09-20T22:19:31.529424Z","times_seen":46,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/bw-footer.png","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.333Z","timestamp":1789765441333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bw-footer.png HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-3783\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iufipRIOxSe%2BAucbayMnvk4U2Ogg8tYYZSY51Sm7q6Igv9UOCzfQ67EIK%2FcX4c0CEAy%2FpL5FRQy8%2FYYjUDtaUb3GfvRpx6Km2LJNDtfQUC34CiD%2FdlJL590STxvc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf8584ab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14211\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14211,"size_decoded":14977,"mime_type":"image/png","magic":"PNG image data, 147 x 73, 8-bit/color RGBA, non-interlaced","md5":"1ad257d2e97009a09a709b959d554721","sha1":"f99e123704ab48c2d343016a914e5d4954c555ff","sha256":"992fea1bf0dea6081aa1cb955ff4fe637342c8252bae9be2b9314ad334bb0a0e","sha512":"cbffb3532deaa5ce0aab5269156916d882b99a66636159bb291c2c0931767652d093018f3a09890c0e82b7cc2be769a908c9845c1f9ef709edbe79fe1509ea32","ssdeep":"192:CLC7XCB5RUoW9d75btRwCIY2AgkOBdQzon1NahkZNhm80Y3vSERErsbOOXExDxsC:C+GIMY27dQzonCMPm80Y3vSECrJzDiUF","tlshash":"b052d02f29339f309986cfec6ce3ef495836a5cc2120d7549e18c66263d5e606b64cb6","first_seen":"2026-05-31T00:41:42.982949Z","last_seen":"2026-09-20T22:19:31.516884Z","times_seen":46,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/print.css","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.458Z","timestamp":1789765441458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/print.css HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VV0IrXL2ikmesXzjAyACyWb4Xl9yY%2ByQOXLn%2BVFS2B2PCRZZ2%2B3TQl0g%2FASp3s%2FYjX1v3286AMFpklBgD8kVK%2Fwnx3c07Q%2FBati%2FOwV9ALAr8bqCZ4rKpp4lTBdQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a3d34cf92855b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"50070ea80125cac0230d355cbd46e64c","sha1":"597c15aa5b44f70bc5d832b4db453f767d9a96dc","sha256":"ebca4b0d1f0dfc2698ee99675eecbf91a2c3e13e9e0a87832b1cd6eb42cb196c","sha512":"2e2bdfef730191ed4dfe50eac2e7fa0282e6f084e879c6df2a4f00a9d9481945dd8f67383104f5b13546ed063914e93ff40cd95e365d6d26e25626cc4c840e6f","ssdeep":"192:Vj9jhjO9K/OaaUl8PzHz+F81B89j7vlCeNA:d//FBuAj7vlCeG","tlshash":"8fe19866f9f925be1093827331aa77193de48013dea708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.335022Z","last_seen":"2026-09-18T21:04:37.335022Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/bg_sticker.png","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.494Z","timestamp":1789765441494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bg_sticker.png HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1v7sg3Dh5ih4E%2FLIpqceQf7EO02IahieC7HOvtiCBZnT8YI9Z5x1wwaSzx2Nddz5bsYmfB3KQjG%2BQ7tcb3zpkop6BdGNyn0pnrajE%2B3nlfVAmwxGiS7W5DMeu9yB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf9585db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7911,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"288b16eb59b134893d7210068c2710c7","sha1":"22f938e0cc6938b5be3b0bdb6e03f09d6b531d52","sha256":"e3bb0788ddf2bdc7e42546068062d93112c3cca0f0cab8a49a5836dd54dd66d7","sha512":"b999ba301b453ed50c676427e7a974fcce1d9e1fe574538430803f69575cc04e29326e274e60df09f84972d645aac30a86001272cc5bf155e11d7ef470d5ef39","ssdeep":"192:Vj9jhjO9K/OaaUl8PzLz+F81B89H7vlCeNA:d//FtuAH7vlCeG","tlshash":"d5e19866f9f925be1093827331aa77197de48013daa708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.336065Z","last_seen":"2026-09-18T21:04:37.336065Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.eot","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.554Z","timestamp":1789765441554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.eot HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykAUf1pgZjHtbIgP5vIZB7Czi0T8AjVb30MKdxkbd9oBlhmP4XWuGho2UOiqCVafvEEMDip6PipF8GZrNUxwFscYIH5r5rkymSnTLy4mAdETGpoUwHJlSEFT468M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cf9b871b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7908,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"9944bdf158413fcef61d9f53368d70a0","sha1":"291dfa8af68b677d6bc6f754c8b18bcfe34d2232","sha256":"8e7b858ca6ab1185aed20fee9f109ad852ae52aec63cca3804e759133687f9cf","sha512":"71a40a0f07f98809f828442482e2ab1b83f8231967f695d15b378dea7eb9df0d678875e06836286544837e71906a65aa5bcfdbc352b8f6998027add97a30d28f","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzpz+F81B89B7vlCeNA:d//F3uAB7vlCeG","tlshash":"48e1a866f9f925be1093827331aa77193de48013dea708a576edc1760f8ef85ed07284","first_seen":"2026-09-18T21:04:37.348414Z","last_seen":"2026-09-18T21:04:37.348414Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/8cdf1f6a8091ed7f5ea028f6acac3ad0df019bbb","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.604Z","timestamp":1789765441604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/8cdf1f6a8091ed7f5ea028f6acac3ad0df019bbb HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FHY1zH%2FCaeaZbMdDeoi55U3xThrYo9CkNDaz8eGYgTpEtxJIVZ1h97dxup8TAA1fD2Eqj%2BTvRhhqf3JxZ9t2hLkn7vUs3e3R4iy%2Fd5XI9lD3edGTNIho1KIFpdG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cfa0875b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7916,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"4158819fdc1434d42c9a8123656b3cdf","sha1":"a33f5191fea09673a7628c4d7410dd6c0b540209","sha256":"ea23aae5b8b3b1b2dd311f858d21dc368f9af9ad0df7de33e9f3f2383dc23627","sha512":"ed926f6cb306d829bf316822d249f44b94b20d7eef08a7291a9b2a332d31accdcfa7e74d9c90b0c33450667b5987c6b68b73890be4afc251bb6864b11fdbf492","ssdeep":"192:Vj9jhjO9K/OaaUl8PzPz+F81B89L7vlCeNA:d//FZuAL7vlCeG","tlshash":"05e1a966f9f915be11938173316977193de48013dea704a576edc1720f8df85ee07284","first_seen":"2026-09-18T21:04:37.349444Z","last_seen":"2026-09-18T21:04:37.349444Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.294Z","timestamp":1789765441294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1130\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PcTa%2FFe5IJnvDraTZsQYG7eARpmSdZ%2FaP3B4Uhl3s0ivDfg3B6plVeMBAuzFiFDE4a%2FLLpjBeb8BxHEC0NiGOLbxNVJRc3tRM%2FmA8Gs4F38HjWENQ5cLLAWLyiyK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf81823b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4400,"size_decoded":5164,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d1ae280dc4bac71f494ad3e2460b15","sha1":"e4714c74aeb28c8e67124391835fe9680af9cb17","sha256":"a2fe1eadff7c503ede190c334fdefa6d911ec21b96114350e7b481d6d032c288","sha512":"513a7afa3e95d536289d9e85205a70c73497b675d5c371c834d83b8fa03bf06b6dba5d24eaa4f304c061205d12443b4105fd25cc77d64541b9585e8941593be4","ssdeep":"48:s+MflsXlf/lulel4wlwx+6MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVwyKzJgWj98LeF:sbN26MT0D5MdtbZPAVwzV6skjfGV","tlshash":"f1912ab6ef76e7a6ed71d77440f37be1a2d7b238c33166d26020ab1412841c16b8e09d","first_seen":"2026-05-31T00:41:42.966321Z","last_seen":"2026-09-20T22:19:31.465161Z","times_seen":46,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/mariasantaTedesco_42x42.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.298Z","timestamp":1789765441298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/mariasantaTedesco_42x42.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1140\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxPS4HAnOAqY9b0u%2FHUNZEL%2FOs1rsA1C30iVFQVwNpFx154a1izIyB1zEKDJyYe5iULVhmstuCTvk%2BPt5cFNZQZ9tWjnhmiESv6nmwXcqttpLKNeByy%2By4OJqErE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf81827b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4416,"size_decoded":5180,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"220abbdc16433ba82f70610a217f0ba7","sha1":"c7fd50a83dadcd55f75336b31fe79a72dcfd6a01","sha256":"61d68ab0bd120f0fd52c9301c5482a00204f57339d75041a6148cc43f18465b5","sha512":"97af15da3427755496afce682d5f8b3df8ae61897179c9e531bbb3e1a034ddc2307b2507fc7d872478cca652514f0ef9d982d907005cfbeb083816fd3375bc2a","ssdeep":"96:a6MT0D5MdtbZPAVwzVwmPYFjR8PD5xxHOSj:EYNMtKwZmR875j","tlshash":"b7913a799fa2e362d732d23868f06f81a3a2a13d932243477574627049d21c5af8f08f","first_seen":"2026-05-31T00:41:43.032903Z","last_seen":"2026-09-20T22:19:31.525488Z","times_seen":46,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9781464270154.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.304Z","timestamp":1789765441304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270154.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1bac\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=krygGNykHZOZ3JR7Choi6w8PL%2BMLXjHWR1dpenIMjplmVLCFm2pbWe5R3jEPvcR2sj8DPKutyFZ7nwNx%2FT%2BuYVj1%2BKMkhWVvc1MmnR7zp%2FL5hWuWp6NP8%2BmATjWA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf8282db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7084,"size_decoded":7852,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"84046100347aa9e6f4079c67de1ff93c","sha1":"9e3ce6368f1bbdf1b6c010d43062c82302af3ba1","sha256":"7eb0b725e294cc0fae0f15120acedc36b7b82ac3750b5f5ec1f198a748ad7066","sha512":"9fda9ec08cae84b082538ab288cbdda39db57625cc4e4fdf86129859398f3eea22ff67d1051d28b70a4bab70cc5f9126d2537979492f1a6922b292b07900b570","ssdeep":"192:4s/az4LFIrMamLJvOgWd+TQ+QrOAC2+WmSIozvCN4W5:4s/aELFKCLJOp+L325VzCr5","tlshash":"68e19e03ce7f13617599b3bd7cbbb7ca1e4481d271899f64a6dc164d86930f22e64680","first_seen":"2026-05-31T00:41:43.01608Z","last_seen":"2026-09-20T22:19:31.511428Z","times_seen":46,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.609Z","timestamp":1789765441609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmM0YsicJxMHtFyRtlwPboE6sP5M%2FiptEks%2BFPZP4puyrW%2FNebp1UavsD5cHLKBTgVDzpY4n7h9vXxNNXF%2BbenpU%2Bn2rVyHnpxCQ57Soj2wVISHrtJSF0YypH%2Bxr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cfa1877b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"bc3e290cae50d33f48c6974a2c046d09","sha1":"9e369bbfa5f567d14e6ad69f4043e3efbe8a4161","sha256":"b18c6720d21ff63c9e2f68dbc395cf8116337660b414ea0793a214d6fc5e51e5","sha512":"9890d1018f0ad7183337228712f886cac35e30dfa413983447820cc6b7e82d6a29ea4d31e93cef8532fa82269cefa8bdf31dceeab4651d3316cc1255a6aafcb7","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzuz+F81B8967vlCeNA:d//FOuA67vlCeG","tlshash":"19e19866f9f915be10938173316977197de48013eaa708a576edc1720f8df85ed07284","first_seen":"2026-09-18T21:04:37.353223Z","last_seen":"2026-09-18T21:04:37.353223Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9780008742768.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.299Z","timestamp":1789765441299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008742768.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-108e\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MoJzISaqhZu9nB5MOs5ev6Y3KS3%2BrftxInQ2BylEJ8T279KCf59X%2BaR40tIoXuOW6JZW2lIccHn019enkukJmzuZ0SSdKLRHv%2Bqq3CSS3gtC2pSVjE%2B5GvIwg%2BkZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf82828b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4238\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4238,"size_decoded":5004,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"12f344b12572c48a1dec23efb1ea60c9","sha1":"2064126257f3e8a450367ba6a74f3fafb42d9224","sha256":"d6b0b14d999fface3aa820e7a07b36b3b9ff15eaa30bc65ccc13a7fa025789f0","sha512":"f1e54ea7d4f39b15ba410d4aeee39ea17f9c7322586cb8166b8ed8ce3cae7d4b8c2b3cde448e8a2a33b294860ece6443ba2d658e9f75f568abc5a845cee88252","ssdeep":"96:5ZOjymXzFOSvUgjnjGxr0TpA9YKJ77qVzFMCgXni/I9ifOjzA:5gyG0KdjI+A9YKJApMC6nN9ifOI","tlshash":"5e916caad3c7ecdf4c4ac8d5845ec442c752ae1e551c3c468780a86fa61d3fbc291c8d","first_seen":"2026-05-31T00:41:42.94418Z","last_seen":"2026-09-20T22:19:31.526164Z","times_seen":46,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9781837841202.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.316Z","timestamp":1789765441316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781837841202.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-19c6\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TbsLmoMoJtzFWS%2B0mo6XVocZLsqGpG8cN8w0nAzgGMaMzhxnyi1HxZNbJPEaETbqkD5qxuJMVzG70DfRlc%2Bf7Z8SfSsqf06ITpp1tkEwIjueCIUCQwTHMJDK7fW6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf83839b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6598\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6598,"size_decoded":7358,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 132x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5340f69bd5b6f6db956c59308cfa3b13","sha1":"5971de8c4175e962c85af1d387ce397946c630fe","sha256":"b46c2109d2dc7ed13ceac8119690492f200dbf894825f9f2123b999184e2af34","sha512":"7b7983041273b0450a08363522a17c97a69dda11422b91d132630f223b03698310ca22bf25f17556f6a609db00b69a18c9e61ce3d0436b6266a51ab3faa6d56b","ssdeep":"96:djskTZbRFmTrW59WW1lKDuCK85bEB1g04zrGsuZipSleZCOqZDdwiP8Or:jbjmHWm4yuCXw/AQHl1RPwW8+","tlshash":"4ad18f038bc9bea18b346b9727f168ad0679e1a5d05cb688f4dd4b262d341de7317c22","first_seen":"2026-05-31T00:41:43.048895Z","last_seen":"2026-09-20T22:19:31.43731Z","times_seen":46,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff2","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.550Z","timestamp":1789765441550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BdkwaxluV6i0BrkD1DHMpIVZZcazgYQBhNaMqS%2BzQZ42nlnOWBqbGvTxdp%2BgzWkldZLg90Zd%2FLC9GVg38BBN3Q%2BuRxMHodo%2BnC%2Bn93YBcHtkPTq6nZMPeV1vdpvy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cf9b86db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"acc2b0504212da76ba3628fdf1ab61f5","sha1":"c807d429435aaf70858695a630d603d098738354","sha256":"1e91b0198a9fbcc85f0b97e98e23fbd19cda6b382bd2faca04c6351d970ef744","sha512":"23cd2c838df58003842f911925c20543fbd820bc18d2ac678ef4b26fc4efd08b844c67d7ff3f57ee5efdb18d8b827324ee87250496b2d550169a8ebba9e370c3","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzvz+F81B8977vlCeNA:d//FJuA77vlCeG","tlshash":"1ee19866f9f925be1093827331aa77193de48013dea708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.35583Z","last_seen":"2026-09-18T21:04:37.35583Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff2","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.610Z","timestamp":1789765441610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff2 HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75%2BIwhgcrVoMWxBnlqrzfm4D93h5wTvKiisxQGZyLkYjkZHEGrzpTHfuICmgKz5lY5rJWsQInjEtIL1hkdlbG%2FKY4iXTbpLkD%2FEgsne8NXmAwO8y04rPIeO1pAp2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cfa1879b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7914,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"835e961c5f00a41d4229959eaf8c0d47","sha1":"72ef7b64bc19cd56753095f43507bf83f7d10254","sha256":"a4c3633817755d4e93bceef27ac82e328372e0ff982e2d35324f06507f258483","sha512":"284b522e367b5166fd9c7a474f6c4d78e551d28a98e7069304f41d3f04195f6cc47f87196d118b2739d95fd84e96049a3e8cf93ba115cc024d3e433054980c42","ssdeep":"192:Vj9jhjO9K/OaaUl8PzQz+F81B89c7vlCeNA:d//FYuAc7vlCeG","tlshash":"afe19966f9f915be10938173316977197de48013eea708a576edc1720f8df85ed07284","first_seen":"2026-09-18T21:04:37.356933Z","last_seen":"2026-09-18T21:04:37.356933Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.ttf","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.694Z","timestamp":1789765441694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.ttf HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4H1jQnbZl22ISLh9agh7ZNVf3Fk6taEDDMehvWfFlzdfxreFVx1CbMhzcRuTW97jluRTTtj9e2DGYKvhnO9qz2p2Qi5M2G94ViKuw56cCPbW%2FfBucLmKIvHWeGzQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cfa9891b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7910,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"4946fa6cf8fc3975158724329c5883d8","sha1":"a1b65f532cd20e364d93a0a1756c8b2175ddb4eb","sha256":"38cfb215682e92f07cae572da43009878429a1f03f8df4a1c3ca96e4203eb72c","sha512":"b4f98a0b171ef3a1e217f97111061270f28ec0bd1b4ecbe14d051f3f9c9f73c0f16bfdfd6185e61d2b8e7d0f0627cbb864888b67dace0c754ecaae123320b2e0","ssdeep":"192:Vj9jhjO9K/OaaUl8Pziz+F81B89q7vlCeNA:d//FeuAq7vlCeG","tlshash":"f8e19866f9f925be1093827331aa77193de48013dea708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.358993Z","last_seen":"2026-09-18T21:04:37.358993Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/leaflet.css","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.265Z","timestamp":1789765441265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/leaflet.css HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e6%2F47DXnfNzeOyB4lRt%2BOuk9SLQQz%2Bd%2B%2Bwhr0fdXuHMIRsa%2B%2Blg7I6dnDCpP1nlJRgKwDrhx0Yfr0%2FDi7YexHzsOtA%2FK8z7nDcRrJnKMjzcEvjc0g3FDawjXtmuK\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-36db\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 1673\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf7e817b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14043,"size_decoded":4006,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"fd104bd9927537c7da974dfbd3fe6df4","sha1":"157ea54624c93eff49d15df7d6998336e5c32cd2","sha256":"9b92af244b62fbda54b5e34693d4450879d0c807a323c575c7b352c3af18f531","sha512":"cdce3c9e98cc5591feba0d87bdfe82f0204a6178531b7047150695f91cfbd7af62b00250f259017f5ded224e78422d6fc8254f17e3e5b289f33e58bd9d1e2c0b","ssdeep":"192:60zo0Oh9MVx1lvqrC04i11bsHnLtcOEAY0x4m8yT2OAAnVh7l4d+yEcBLDLatMWK:3Ujh9MV5HLtcpAVnTSAnVh1mLDLUK","tlshash":"b752d217b73a33a8d2257219f7b08a33bd2a506191a7c7fdb9cce714839885d2c530e9","first_seen":"2025-11-03T16:06:01.418394Z","last_seen":"2026-09-20T22:19:31.442067Z","times_seen":47,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9781460769102.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.305Z","timestamp":1789765441305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781460769102.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13d0\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMmRuoiOUIeygGNVyxQw42VpprcA0tijdIqZd8tHDFl95tkznDdw5jkzsHvMNko3D1kAscI8vNEmCMVfMBp96sO9bJyXcOOeooZh8arp4gCN2Z5D9d9m5krOyZjz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf8282eb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5072\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5072,"size_decoded":5828,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 145x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6f80810ccf2482155e5226e786d61bfc","sha1":"d453fa3bf80e1fc3e25f329576460bd9f7746503","sha256":"0207de0fe2867ace7b1ae471a6ffcc4150a4fe231ee9a8e54d7ada9aff947871","sha512":"18c020e5a7c294d88cbdd5538443f3c309005ea9f942ce62b7e9d8912f8531c2db27cf33ad70c42b0e2ac08dcd9e5d79ae5857d123df1797bce21b7530872ae7","ssdeep":"96:7XkSoD/KliFRZzfF9AEUNj4U8NIVnnrG6S9G3p7AfGw35HNVUmkEl:7XkSoD/9vhF9AEUmU8D6H5Tw35HNVUGl","tlshash":"c8a16d9a2d1a67d08b647e36c9b9bd357f06ca2103d00e230fec8a940e2a9d75f531cc","first_seen":"2026-05-31T00:41:43.03614Z","last_seen":"2026-09-20T22:19:31.548232Z","times_seen":46,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9781529957457.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.308Z","timestamp":1789765441308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529957457.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1e50\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sq4Mkj1loSxNnTB7jIO6LiLmb1HR8Y8Orsa1wG41s7uE8yXkLQud0tBRvN823i4X3TEHnmKjz%2BiZMYSfXdzlQKqJ7hhRvXXZyoldtTftFyF8RQRut0u04cl1zCvG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf82831b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7760,"size_decoded":8518,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 156x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dc97c253ade1a493bc9eed66c506a802","sha1":"8b8db1d9aa794c69fd1d14cf77a95c9ce10c8502","sha256":"c525a169b03b301c30fe6b3871b414440fc4ea65fe6c12671e349f2466e7488e","sha512":"4b5a0f167b603b42c7abe1c6ea0dd1d0e999eb7b69c34a45186874732cbe3371773236ec9397e9ffcc07cdf604cd90257167ee3f7b2da0262f0d3ae1d527cbd6","ssdeep":"192:ZAxB4CbkKbzMR+x+MMxOzOrvavtcX3YAD+f7y:ZEyCbBMR+xtMxOeavty3Y6y7y","tlshash":"17f1bfe233d98095b52914ad4d830bb46fcbcdfdd3492f2551f36822a1a074e987e813","first_seen":"2026-05-31T00:41:43.00146Z","last_seen":"2026-09-20T22:19:31.503923Z","times_seen":46,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9783989780279.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.322Z","timestamp":1789765441322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9783989780279.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-c80\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0pjnHYoShCbP4gpAsSZX92tYhhHdhs63v%2BTwRRIgnKW5iSxIQQt%2BF4TDuNz2qhMw5UPBk9QBVmXgDdMW8sqnh85ekts1oYAJHO2mtBI%2Fp%2FP8uVMwKo2BzY%2FGfymq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf8483fb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3200,"size_decoded":3965,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 152x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fbd43f82fcaa28768d944b68d483f2dc","sha1":"189b96b9865610d1792a617626c918236747a65b","sha256":"16d62fda8cc5811e4f2ff2e78fd88524d9bf99a3ada2ac4da576e3f427704ea7","sha512":"0ba6800a6dfb7c599f0fed4fd8b484621e8dff3dc1e71b5b880ecce94ad25e855a9782522391c7e85f65314c81da4ab6705bf2b56e9bc06aa3c5a1edfdad005c","ssdeep":"","tlshash":"25616c2f2731336bcf9551c79eefccde118e94b27da1ebf980120c902196442bd9aa48","first_seen":"2026-05-31T00:41:43.050619Z","last_seen":"2026-09-20T22:19:31.443603Z","times_seen":46,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/curator3_small1.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.325Z","timestamp":1789765441325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_small1.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1e50\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JIytQqCU9Ju6ThqsZSlLNboUs1QMEXGNqCs1%2FOSUrsA4S2U0JgXCEbY%2F6dWJoVZq1n%2FCCU1jQtB7FO8tZ5LJ7iDW4V85P1NfbYMeeGBi60tz9PCXh2xo3rZj979d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf84842b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7760,"size_decoded":8522,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4cd0503ff9155ee31875c650ce5c546a","sha1":"af3e5103e4619f3ff0bfebeb05e89148aa37871a","sha256":"6b7d00c5d85e2342d5df2b4cbf3beb03c62defb5edade2cfe541f495e576df15","sha512":"5c85bc4e8173de02307ea10e9cd8b171ef0c6da3152c232ff4ad6ba212d3e3a71c2a5a77c2251d0f9531ab70aa59532a568c2accc116e8f254a054334f6cb85e","ssdeep":"192:OCwfp09+YcKfrccQ3fpzLv6R6NXyUdAmZw:Os3rEp64NfA","tlshash":"95f1af4d8b0707b7f828023c7681472a3a54d056e2bb971760027ab599b62c63adb3f8","first_seen":"2026-05-31T00:41:43.021398Z","last_seen":"2026-09-20T22:19:31.438686Z","times_seen":46,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42-1.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.326Z","timestamp":1789765441326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42-1.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1130\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikMXP7m5JplbRXnf8xLaFzBp7UlMcvvzyvtRz98iTEPFKilUN2AKDYehMARgOmaHBOCZzo5Lg9Hp%2B%2BJ5O2L4bYlSC2gbGjfcnBaAIBZ3EkYWX%2FKe5RqUbTZ6XDKa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf84844b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4400,"size_decoded":5162,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d1ae280dc4bac71f494ad3e2460b15","sha1":"e4714c74aeb28c8e67124391835fe9680af9cb17","sha256":"a2fe1eadff7c503ede190c334fdefa6d911ec21b96114350e7b481d6d032c288","sha512":"513a7afa3e95d536289d9e85205a70c73497b675d5c371c834d83b8fa03bf06b6dba5d24eaa4f304c061205d12443b4105fd25cc77d64541b9585e8941593be4","ssdeep":"48:s+MflsXlf/lulel4wlwx+6MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVwyKzJgWj98LeF:sbN26MT0D5MdtbZPAVwzV6skjfGV","tlshash":"f1912ab6ef76e7a6ed71d77440f37be1a2d7b238c33166d26020ab1412841c16b8e09d","first_seen":"2026-05-31T00:41:42.966321Z","last_seen":"2026-09-20T22:19:31.465161Z","times_seen":46,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/curator4_small2.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.330Z","timestamp":1789765441330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_small2.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1844\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yAPaGAN1l2bXTCqcTR2LcpVSwQ%2F2DHiwN9%2BdBDUIN7ovQ2VzDnmSpsYZcC2%2FcnRZBcIwc0yPWhSqAgCRUQOsawxX%2FWQxhBg%2BaX23mznXolpNAajucrTXHzQFbDcF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf85847b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6212\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6212,"size_decoded":6978,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6490bf93e085254ce40f825f146f6887","sha1":"591cc281801f908bcf617b358ff9e34ed4e7b7cb","sha256":"a5952d160adda35809569b8c91d0f2236f3cb78102201f0876746de39e9efd84","sha512":"30fbf3460c1712510a4cf9e67f015bd26935b4f576fcaf1990f864267d33621eb48cd410d40d243f5e39fa908479ea1c235a38268ddc544c699db26b5a6ad186","ssdeep":"96:Ml1B48H7/0grV6OPBpKvTh3u7XqL7eyx1Sc5KBQxTBUxLv/lHiishKNx4wL7X5HZ:J8H7/0grz7ABpMnSBUxDV/4+Jcbkomo8","tlshash":"efd17e5777a25bb2db47cbbc844aabc296f0c085d302c763a0419a707d627d67e5b06c","first_seen":"2026-05-31T00:41:42.922905Z","last_seen":"2026-09-20T22:19:31.457272Z","times_seen":46,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/spotlight2.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.496Z","timestamp":1789765441496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/spotlight2.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=slDzQ8bcpNBejYAXaJvKtSed5tSIpm7sFiASWETL4QGGt%2B6Xia6QZtcc8e3CCJriOCiYAaizjrtg6W%2Fa9dbFsbfxxZjmWpLPIoUJrw4DAlTszdkXqbRK%2BVfGL7t3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf9585eb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7911,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a07ca2f7f4bfa3c755a2a45b23a6d96c","sha1":"6bef49e295014d3234778cefd94ce6535d6927e9","sha256":"299340afc2171a9632a3228ffb8b6a0b888d998d64e9c86778a1a5569e39180e","sha512":"b94064cf465babadc71c8ea35944640c9e067f79289b27737769482cb742ec2e19301404ac2bbe7b49097174c2c4c0b306df4895c7b23bb950fabbb153c650f5","ssdeep":"192:Vj9jhjO9K/OaaUl8PzGz+F81B89O7vlCeNA:d//F6uAO7vlCeG","tlshash":"29e19866f9f925be1093827331aa77197de48013daa708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.367817Z","last_seen":"2026-09-18T21:04:37.367817Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/curator1_small2.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.292Z","timestamp":1789765441292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_small2.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-19f2\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ydoiW5LJDPHRGLHhOEg4elKYho%2FwiHUnj4meH3M%2B1i6hEusMMYQtDKVZsVkCpiNGA1Mt97sK748JAr0m2kSSR9y0pM7dtv9UJzVVDpU5uAYuZE%2BGqzGrmyB%2F92DY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf81822b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6642,"size_decoded":7406,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e1d0f219827824cc4f8180f8beadaf4","sha1":"c955486e58c7d3d4b9883efb925ff79494f2caee","sha256":"c246b980d29a6be37b918a4a2df1d2eb7435fcdf1b1eecba29221b9bdaae16a6","sha512":"860c32a0f3e9d48b5f84d22d18e2988d3176785b95f6712ee90e1b484736e9727633d8918a91b5d96f095bd3e2986cfdbaa4a5f3145fe5bb33c237b86107069a","ssdeep":"192:Es/NIwDZ6H/XVM4EyH29mo732lq63rIdxIf:zVIwDZ6HrH2Mo7T63rKuf","tlshash":"88d1ae4ac7f0db14c19901729ad217c53b5ce408aa01f3db9aa01ef02dfeba1be57557","first_seen":"2026-05-31T00:41:43.042285Z","last_seen":"2026-09-20T22:19:31.510722Z","times_seen":46,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/curator4_large.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.328Z","timestamp":1789765441328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_large.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1042c\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LIquDfvDsni%2F8XZFBwgU44JKGdL3K9V9w%2FPr7PiWSoBgIwHd55YOQskbXrfcGYzv%2BEkCcFl2yed61POgBAMEZhED0NR7ymrvvuW963vsGM3kgIHwF09UQBMmLwcK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf85846b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66604,"size_decoded":67368,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"209342ee4495300403a420ec217a7dc0","sha1":"24e48c12a74b9af9e22b730769507c8b456f227a","sha256":"a415b0d14189a9df6ae94f5e984058a28bb2ff2710e1599d7bf1e4a4f7e12dc7","sha512":"21215c8c974f26b2195a979e533cb4f7fd28288cb319b8b28e49defac2e7c55d63e99ef55f9e8040e48a97b2c52586f9023c2a58ffd14ba00510ada334a0cfa5","ssdeep":"1536:MAnnrnDRyeOTKEv6+BEuv2U0+FXbN6AM7ZDXUYxWemnQ:M4rD5OTKF+BE82zULN6A63x5+Q","tlshash":"a85302747a024805ec15ccbb1959c0aa6ec3e4b19652ca9fb131e7b22dd424cbc7577a","first_seen":"2026-05-31T00:41:43.009917Z","last_seen":"2026-09-20T22:19:31.475108Z","times_seen":46,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/bg_news-letter.jpg","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.497Z","timestamp":1789765441497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bg_news-letter.jpg HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qpyy9CDVgHYYUnMDFvy7I4UaMydsADP8LRL%2B7K4pfbTgLcPjr7agqLXi9OGBQ0B5dhT8V6TXjOu%2BE61BUvQzBSwCozSGvngODDZCjwEm4nq%2BIFWWe3N8wyzcIW8H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf9585fb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7911,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"68c413c5f9c3167cc4ba4aedb3a7ed28","sha1":"36287d80cfc186f937238146ec0224196218518b","sha256":"4b6c7c63a8af72d7b7bef2fd08f12323af49060d0a42c9897b9f3fd79de297d4","sha512":"e912ef85e509333a4b789cfa1bed527ca1e0b0b5e4ff0e3eec4abee3f4dca6870492bdf32ff35df7c71a375c205dec73bef571015a1a512764d656e8001ac9bb","ssdeep":"192:Vj9jhjO9K/OaaUl8PzJz+F81B89F7vlCeNA:d//FzuAF7vlCeG","tlshash":"e1e19866f9f925be1093827331aa77193de48013daa708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.370646Z","last_seen":"2026-09-18T21:04:37.370646Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/BA_icon.jpg","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.509Z","timestamp":1789765441509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/BA_icon.jpg HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vltfw1NtWxaU%2FDl76U40ylpUqLUVxCkcMgkiwd1%2BZE4M3RFqOBBFtZ%2BHdsV7ddStUf0IGqBvFBGicODCCDN%2FDywGKDxMZQbKrQjYWcQ49BaFUxINBLKV%2BJDnI9Dm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf97865b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7915,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"913d176cb6ca6954e7993231203f4dae","sha1":"ef9d6222045e65a806b48b144fa6581fbc89a8f4","sha256":"3172b3e37121afc0b1ae26079a88d2f9a062206802310068883b9a32478c0316","sha512":"1eeeef6027681ecd5f7b42e8c06095e3a1a0bce4266b8cfc2a8210145b9df65a4181a5684105cc50f2c93fd157fa9d10b033dc437326c76102e4cd21c8c95913","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzpz+F81B8957vlCeNA:d//FfuA57vlCeG","tlshash":"ebe19866f9f915be10938173316977193de48013eaa704a576edc1720f8df85ed07285","first_seen":"2026-09-18T21:04:37.371857Z","last_seen":"2026-09-18T21:04:37.371857Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff2","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.606Z","timestamp":1789765441606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff2 HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fao3Fri3IIxFTYmdUw3ojnG3%2BCjKwrSXocBzYAEhZ7I4vyxFXWhGfv%2FN2h08b0mEYBeAPWxb%2F5aOn0E2K8VPA10OWS82Fclbrvyxn62KwGW9QGk9aQowdcAkZEyc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cfa0876b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7914,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"cc44130ca8420a3ecae273c687c2917a","sha1":"ffb5173ce71caae0dfeee7e78e2540c1ef0643c6","sha256":"5d3cb7a5be46fc392fd1745e4769a03e893de7f2236381814f80233779a5ba2f","sha512":"a6aedadd464e74df0a5834878c9bbb2bc65f651a130dbd05d35a612b97b81ecbfedc3f49ab9e8e2456752a8a584343011cc694c6dc4e9cb46d0a41c854851613","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzgz+F81B89Q7vlCeNA:d//F0uAQ7vlCeG","tlshash":"94e1a966f9f915be10938173316977197de48013dea704a576edc1720f8df85ee07284","first_seen":"2026-09-18T21:04:37.372928Z","last_seen":"2026-09-18T21:04:37.372928Z","times_seen":1,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff2","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.641Z","timestamp":1789765441641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff2 HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kIG1fM8n%2FCB4l%2BE07BRlPiPsCqMLwNtccm1rcHOHk%2B%2BXo8KfG%2FbVP%2F%2BNpUl3YXYQ4xNULjIiXR%2Bn9H0u7%2FQomk7vqdjsynBVlwf%2B73wHIxHrkYxlzvgArwYgijyP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cfa4883b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"c3f505009adeb55994272b61a5b1b98f","sha1":"75ff70351755ec496a70bb9d9c426ef4b9feb748","sha256":"0cbd9b3322cb4026be3c3be86cb40bf0c12c434df40a703878fde9800918e19a","sha512":"cdd0cf920398513c0ec9ac212cb6104f7898928555d82208d932bf140eec0c94b24b05c042b0f6fed146421f2ce91535a1bb8ecca887f19331694e60af2ce864","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzcz+F81B89s7vlCeNA:d//FIuAs7vlCeG","tlshash":"f2e19867f9f925be1093827331aa77193de48013daa708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.374243Z","last_seen":"2026-09-18T21:04:37.374243Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.262Z","timestamp":1789765441262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/font-awesome.min.css HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Coef8Yi8QgeBhcXCRmCxYUnaphaWISYNZ4C1mMbRcX6DgFW2rq%2BlCwG087afy2904TiZjSyOlq3pCeEBvdyZ7WI0FBcpMkfBB3YvwAZSDN678m03ZxuiKkxXuXIX\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-7853\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 1673\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf7e815b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30803,"size_decoded":7773,"mime_type":"text/css","magic":"ASCII text, with very long lines (30640)","md5":"3b08091d72505c0e7057bcd09490f794","sha1":"5da5416e9b459e2e5151dbb4a7e6548d3e277744","sha256":"7fc22d7e1ab1998fffa9f184255a4aa196b624377400dea39b6a1680b9c5bdb0","sha512":"4bfecbf5f4028453f31e564f1a72b794c2b062adab8ac09b05d91cf53ee61820ba3dc9886a5f55c47bffdaf73ff3b81a1e699ef7f24807d78e5e4376e4a81aeb","ssdeep":"384:Du5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:Mlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"fbd241e8e54c01d66731c48bff81b36862bafb3dc5854da9f01f290c29d22a552c5fb9","first_seen":"2023-04-10T10:49:20Z","last_seen":"2026-09-20T22:19:31.531296Z","times_seen":78,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/tiny-slider.css","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.269Z","timestamp":1789765441269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/tiny-slider.css HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zp9QkDhosT%2BEFvSe9mGSKZwpQDUfZV%2B9N5Ni0fb0WVa9Kq2SBaXbObl5t3YPM5rdBrmQn87LWJLsjOa0la%2Bt0mIdmj7aKJ3JHeGJXaDf6pXMilSsnfa1UkttTogI\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-882\"\r\nage: 1673\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d34cf7f819b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2178,"size_decoded":1531,"mime_type":"text/css","magic":"ASCII text, with very long lines (2121)","md5":"afcf365e904cab0605984cb0e73114aa","sha1":"d362d2d6f372813e6e66009f005b459e40bbab1d","sha256":"e9b8906a8b7540b8accfd2a491c0821d6bd6d8ccbd4ab53a56da8906ff028423","sha512":"78cc5d6927f95d6dd95b5c190ab588b4eda367b03d161b997e355dcedafb66c28d3a6b7a4d43134207e9368551c9f3c4e52f410b4038b2e5f3b064ab00e59ca1","ssdeep":"","tlshash":"4841a82983603648d5e3d7207af89a298539fd95fe334cde264dbf024742b5a1012ed8","first_seen":"2023-04-07T01:27:14Z","last_seen":"2026-09-21T02:30:31.399524Z","times_seen":3809,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9781761453069.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.321Z","timestamp":1789765441321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781761453069.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1c7a\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U5MqpghrLuJe9SXmiCgNpTVwDXBVPJbjlDO651stJFbD%2Bj04dOo4l%2FGPzj96ZiqWTxwmbW%2BCwCaUBsJ%2FyzoI4R5t26oNZ%2Fj8xbzOXBsHDxUJbgiVhhqutIKbuEp5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf8483eb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7290,"size_decoded":8056,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed09e340c745eb497d740c5afae0490b","sha1":"6dc5a10a3130bc558d08478f254ec2aecc623fe2","sha256":"e962d5a33e30cee7a96bdee6585310c425b2e48ea47a3f8f880b0adbd266f311","sha512":"b65b15a3476145b750572b29205de60e1cb831d9b255f3e5d0098d13a7a0922bbc529b891580fe08ca8fa4ca1714100b9078e494a92ad763ecc6baae7bafaec3","ssdeep":"192:ZpJBtcs76hX6TDtNi/9ire4/sr/bysFx9Xv0GmZmNH:ZpJBwhX6TO/+eVzPT9X5mkH","tlshash":"b2e18dbe0b2707b46217eebe653a362553040dd14a0bf28d94a0c455b3678b729f7e8c","first_seen":"2026-05-31T00:41:42.948681Z","last_seen":"2026-09-20T22:19:31.484785Z","times_seen":46,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/visa_icon.jpg","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.503Z","timestamp":1789765441503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/visa_icon.jpg HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3kqBxcFEIqwXrLgFTuF0Q8I3Tx26NCNMyJj2c3jIywW4NuKirK%2FKXVn31vEseMNfKEp0SECNX33GPJfbiz4QNgdF2raFmML3QCJUHydMjkP0hjp4nRJeVGHNAdJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf96861b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7907,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"391a86802ddbf620f0b762c6bd1ced10","sha1":"6963a82bdd8882526a684d6e7879b57beb511504","sha256":"d5ef5749b024f7d4a3d5482ce69c673d1da150b267f901ebcaf5bb8c7cc27a74","sha512":"d5692c038cc4ab24557f7ac66ff2dac575117d636f6142405dcc3d5457f288ba857b88b225a970020b9397cf9609b65ccf5951b14f547a2fbfdd6399bda3ab22","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzyz+F81B89q7vlCeNA:d//F+uAq7vlCeG","tlshash":"f9e19866f9f925be1093827331aa77193de48013dea708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.378988Z","last_seen":"2026-09-18T21:04:37.378988Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/curator2_large.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.295Z","timestamp":1789765441295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_large.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-981a\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E3bQEZXCKfn1GBm8sWkv49vbBHYz8a8cOMkstEzvpzT6zaYZz%2BWTcXc%2FkQb4PTeT1z7Ii%2FxYNYzp%2B3fuOkREi0bVSFtE4LyEOjL%2B7zD2mx8bUv7IiMm4ZshXoEWq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf81824b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38938,"size_decoded":39705,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26d1e28ed0b59a4f25b32d68472e07d5","sha1":"de23bf053714ee4e141bb15138685c1106474cbf","sha256":"32640ea6db2db244ca4c762c0a4c15551205d482f67f69088ecc550acf71f42d","sha512":"c04309d24ab68dd18c1da3fe483595134295b2bf7b510cedcc3d5bff6c6a66d16bc5f00122c00bcb7fa5ccce97ccc2c5eecb76dc94ab13c344452bb39c9e1f46","ssdeep":"768:YiHDthph40a/CN1IljltcvWeRHgOSyZnDxcmMCAKA/8yYc+h5Bjg1ipur:3Ly/ZjrceejSypxcHCTfh5tgP","tlshash":"0a03f153a765a428d534a1f0dfad4dc1e3a9c638c99f03231a1a89a9b5c2cc717bfc61","first_seen":"2026-05-31T00:41:43.057572Z","last_seen":"2026-09-20T22:19:31.486083Z","times_seen":46,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9781399641760.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.311Z","timestamp":1789765441311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781399641760.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1bba\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSxWpK1o8D6AOSiZokUyqCwlSZZgr7hOVB%2Fq1WxHSOLp6TO2D648IGpJxcl4295zkLpp%2BOBW0k2bARqk55FKbJg%2FPHwtvAizBDMAweFDJw0f3E8aY9ewbIoNPDk8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf83834b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7098\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7098,"size_decoded":7860,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f7af56e693f4791907f039f929207e4","sha1":"8029e8f5e7988bb4df725f10e5f7c6be7cef4f3b","sha256":"596d12c7cb5e366be49f6ab8321537332457c3dc126082ca65edbf83efa14286","sha512":"581792bc638f79a83670aa4639e2215aea1f7d927c7eef6b4b0fb367f99ba09028ebdaf688d13dba190d57dccdf7486980f0d77bbfb3cacd4ee9bc6f92665a4d","ssdeep":"192:34UXLcQYNr1r1KHSNZHRoBN30mLpQo4zgzqbuk:7X1YsHSfReNQog","tlshash":"a8e18d1356f6571c3f8355066fb18f8e2ac9d462f51298d6ea068af9cc000d179ec68e","first_seen":"2026-05-31T00:41:43.045664Z","last_seen":"2026-09-20T22:19:31.453092Z","times_seen":46,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9780008711719.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.312Z","timestamp":1789765441312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008711719.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1c24\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gMFi90C1uxb2Xv4h3q4aFOb5MvtMA20%2FS44znspnX8HGqBDdp1VK7ULXE4cUReHPvWGB0SdQJImMtYYDsRh6b0KcK0%2ByD1R8LyU%2FZxvdVdqrcyptqna7ukKeUnAu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf83835b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7204\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7204,"size_decoded":7966,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"36f559627659f5f654ba09fec17f2b16","sha1":"78bf493d46038e9232680fb7eed979a9bf13ef34","sha256":"390e64f03b0b5eb487f2c08e57406c56a22ee37700c7da1c75985dcf4a0770b2","sha512":"dfde682bd29ff884819c4775e93ad20f94f6fb70ae0e96d164b4ba116c9f510ecd42489be93448f5769c9743166ba8563d2e677916c7a6f255ad8924123663ae","ssdeep":"192:sU5TRC21V8iAHM8QB4nSXNa4ecurcfhPf5F75p6x0G:s69j1VFAHFI4SdaNrgPHH6uG","tlshash":"ace1c11e50a5cf1c4063b03ac75e1ad809b6910ed8b7574b437155abc93ac4c3ff9e06","first_seen":"2026-05-31T00:41:43.008044Z","last_seen":"2026-09-20T22:19:31.504684Z","times_seen":46,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9780241814307.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.318Z","timestamp":1789765441318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780241814307.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13b4\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xxD7aN8eTBvLpQojLn9FEUw9N9vJBQPqDdv0c4oI%2FV4eJvsZJhc1YVcEtNODcj17TQl%2BVuxnADTnH5Tgl3gguvl9tOWc8I%2FElrVyPhYQ6dXB48qZSG8%2FML9i%2BGbc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf8383bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5044\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5044,"size_decoded":5810,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1c6306c59442c52b2575559313d67fdc","sha1":"a8a234e49f7461b4f132fefbd7a67bafa6be1cec","sha256":"8b5ad49bc71fa6bcefe2776b2afc35382760216eba9b38d2388ec25781a8cf4c","sha512":"f3f8165e59f4f6d48cefc752716b294da69f44996ba1f19d0c9e8b96c795a1b4fdc5c944b42c90e49d9e4be62f0c60cb7b6843ffb33ab7c6b70d47b3bc6240fe","ssdeep":"96:UWI7lZ3tnN4H4A7rg7ex7UmBUV01HlqMs2ypsAo+eOGgZr8h649op9KXXPDcaGe6:syVng7IqVUHa2QsfaEY9KXLO","tlshash":"c8a19e7dda70ce31fbb9cc9f89431435e1a1d16992ec86100c52b5d87ee4c62a8e055c","first_seen":"2026-05-31T00:41:42.891795Z","last_seen":"2026-09-20T22:19:31.474366Z","times_seen":46,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/library_icon.jpg","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.510Z","timestamp":1789765441510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/library_icon.jpg HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9MZ3NPJYWYwYTMR3w1BMu6LR%2B1BnyMyA4WCeZ144d9Kpy9rw6T1BBT6BnkBH%2FiiI8qLZeaQUdcRhHUY1gv3YLCEdnaIXK4hgPGPJFusTsE260Be5NefwamRxakeI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf97866b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7909,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e76ab7f9ab9438734bc20c80b6d81f65","sha1":"9a191ab1dd6fd7f396b85672cd8e9f78cf9a3d92","sha256":"bc4af53e9c0f5bec010cbfb859accb922f518298d7ee766f8de131e74ed4b1c4","sha512":"0dda081a87d55581c880234017f532cfca04c1cd84489781fbac0890b83d77276fbb1bf6910a9d88329bdd6781f3df97fa22a794016c3f3e511df61995f33348","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzmz+F81B89C7vlCeNA:d//FmuAC7vlCeG","tlshash":"bee19966f9f915be10938173316977193de48013eea704a576edc1720f8df85ed07285","first_seen":"2026-09-18T21:04:37.384326Z","last_seen":"2026-09-18T21:04:37.384326Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.ttf","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.640Z","timestamp":1789765441640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.ttf HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wBJ1AuZ6WKexT2CxyTRDb3Oj7T69P1gZtlws8F%2BHksRb7grJ9WJsXmr5xqTYDN%2FEbamzVXKmXzngCozVuj5Xias5NbSsg2%2FM692nAoJ%2BrOkhQYXKUXX2TWE7%2F84a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cfa4882b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7918,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"916511418442535cf7f4b5924e010ec2","sha1":"880d167afc8c440bb451e50c17d9e4eda68d5ca9","sha256":"807d0474f6bb80c780abdddb08e596d7ab5088f9591723327f03137654f9a5c8","sha512":"fe718b83b17b7bc3b78942738ddbde1aff59637497fa2e3e9335faa0f6bc9e12b2bdb9e9065ea871d0e8d18dd6a99ca57072f9708aa792c768aeec9b70585e83","ssdeep":"192:Vj9jhjO9K/OaaUl8Pzpz+F81B8917vlCeNA:d//FDuA17vlCeG","tlshash":"08e19867f9f925be1093827331aa77193de48013daa708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.386868Z","last_seen":"2026-09-18T21:04:37.386868Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.675Z","timestamp":1789765441675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqzZNHm%2FamArROlwUuZXVmxU13iOZtMpbJB2zeWbaPVkvrj8Zx1XWGWhgjm%2F8IWEPIXsoZcisbymOIykhnimM%2Fu8EAzcuTUU9b%2Bz8Hm2SVV9vPFWXgeabhy24R%2BK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cfa788cb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7918,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a83ee814cfc7332cf2f3fc51a2cbc0d5","sha1":"928340d8b2135fb2474368e297f7cd38accd1e49","sha256":"914cf47972283873315f8f8a38e025d684d836ed769165b3cd6e78ae75dcb65a","sha512":"ed817e378a796648ac0ce404f62d440aa123bdfc7509f33d9df70ba176af3a0e6c1802a240c81b906747235049158c387de6a60c34bcbe561b95a10c658775ac","ssdeep":"192:Vj9jhjO9K/OaaUl8PzZz+F81B89l7vlCeNA:d//FzuAl7vlCeG","tlshash":"6ce19866f9f925be1093827331aa77193de48013dea708a576edc1720f8ef85ed07285","first_seen":"2026-09-18T21:04:37.388119Z","last_seen":"2026-09-18T21:04:37.388119Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.ttf","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.681Z","timestamp":1789765441681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.ttf HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rSJukmd7QMfJpGbNvxmjHPrD0%2F1pjgq2XDAKQ%2FdkGXH%2B3hcZMlePYuJSuarbqOrlJKObgEC4cUdPWw7Pl%2BPCVzKQUJF6I4ri3UqwONPQlm%2BztEyrZwCxzBliBdzR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cfa888eb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7918,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ba1641ddab36eecb8df850061508baeb","sha1":"b845cff9731daa90a7abddb852f820e133b3bd16","sha256":"e101800e702e1447f1e73879f11a515c3cd1e670d1a0091db807b8855d3ecfce","sha512":"76c9762ffc95636d3d8f69b44ece869365dfc69606290162080fcf2c1614a9ab4e5281dbb69c24260f5bd9ead791f2e8365204fdea823a7c2024b50f7bdf9cff","ssdeep":"192:Vj9jhjO9K/OaaUl8Pz2z+F81B89e7vlCeNA:d//FKuAe7vlCeG","tlshash":"94e19866f9f925be1093827331aa77193de48013dea708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.389608Z","last_seen":"2026-09-18T21:04:37.389608Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/amex_icon.gif","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.501Z","timestamp":1789765441501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/amex_icon.gif HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q8zVY7SMj81rNAx5ZePgnBUwna3xSpuTFtfVs5ZiouIxQeFSgjjRPlX1HWeiJjeegHi4GO0xPLf36MNdveyO4mos3uXVjRnq%2BljNe98oQk4WPsbhSpuXwzUpQe5b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf96860b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7907,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3bde3f217b2baac99af7ace70dc2066a","sha1":"6c86081477f6951493d72b80a880390a4333c79c","sha256":"a8f182ff90baa96e73562d598ed5a303c177b08254965e73a3f3c9f845d11d64","sha512":"b3e1bfea989ac5f374515dcf8c6cf42089216fba1c083a2272b37aa7d3cdd0ffe835ecf207a8a5ae9328d30c82fee5cb48b905c8c62b16e190dde7074e3058aa","ssdeep":"192:Vj9jhjO9K/OaaUl8PzHz+F81B89z7vlCeNA:d//FxuAz7vlCeG","tlshash":"0be19966f9f915be10938273316977193de48013eea704a576edc1720f8df85ed07284","first_seen":"2026-09-18T21:04:37.391876Z","last_seen":"2026-09-18T21:04:37.391876Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/paypal_icon.jpg","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.506Z","timestamp":1789765441506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/paypal_icon.jpg HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3RJBf9Bi1KiqQtANF%2BwGMQY8RQVLJaR1ESWdSxfaxoCpX20m8QfMWXp8Gs6%2BqPP90kczoxEwphU6iqf1PJ%2FvZdAAfcjfcJbr8fmDC9bHczwkz5is0SWgLtuwTMS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf96863b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7911,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8347c4aa6f2a1ea0fa4d8ad9508ecaac","sha1":"231df1ca9ce26a7b213658945358deacc0d6e5e8","sha256":"88388e29d6ff5e8ef3c011f97e2bb4665b0936f05dc6d906cdc0225b34cd6b56","sha512":"47f7e6010d544396b99e020e0b91ca2d85e78c1737564bfda4c180d42115250c97779beaa474c8d11036e14dc7493c445df439881c55f4258f9c05aa4953bfae","ssdeep":"192:Vj9jhjO9K/OaaUl8PzYz+F81B8947vlCeNA:d//FMuA47vlCeG","tlshash":"a1e19866f9f925be1093827331aa77193de48013dea708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.39593Z","last_seen":"2026-09-18T21:04:37.39593Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9781464270147.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.301Z","timestamp":1789765441301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270147.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1b8a\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ATsSqaiuHCd1dONltBNeJ7txlIHOWyugygePa6aOHnXY6TOEjFHm9ZHtQx8OYlRHV8DDb3f%2FhchKbAvRRBNPJ6brXyQUOCRT9msdM9ksDHheNEi4txr1COSy57VF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf8282ab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7050,"size_decoded":7808,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0d2771def8c2f62b74a480c9398aa7cf","sha1":"302e866f9c70096223d8bd11af19b82b892213a3","sha256":"030da5c184a909748be039d43da18dd8884dd23c07524282b0caf55de98ba185","sha512":"3ad12b59ac8fecb58e6942cb38f763599d9b56d8c15a6a8e65b0c04fe30f69ca7e6075ce856b3060da0860439fce4587e584b17d3b64c9e5a21ff0801d5a0d91","ssdeep":"192:844627SoHeOiHP9klzIrEtklz9LtBv8WvBAsRNVye1A6H:B/Cb7iHPwzs/nZWsJyUH","tlshash":"5ae19e0e911986b4362dc7b37c769050aed7333099a7646f80b01dbd62a26d6b5389ce","first_seen":"2026-05-31T00:41:43.034659Z","last_seen":"2026-09-20T22:19:31.495511Z","times_seen":46,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9781035438518.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.313Z","timestamp":1789765441313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781035438518.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1d38\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zl97LLiGFDaVgoyCV9MP%2BoONtyl6ZPKK%2BfGeRRAHKr8c69xvMNwe%2BrpnH%2Fan12nYdbMPEE4aMBi6SpUOUJORyTIOm6046CbsyDSNqLhj3qFbu6IHMo3WzpCCkjbv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf83836b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7480,"size_decoded":8244,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fffb864a6a941d7a8dfa9b2587aa650c","sha1":"0df5b617093b5f7f5c4503b3a4301dadcd89bbbf","sha256":"503bfb6b2ab6da62c8873099d456f90d59a9120ba80ba7153f1b9b82f2c4d622","sha512":"d0fd8c5d2608b16bced0b42af3919c1b81e522c541f52245a51d9982466f414ff70e62caf042f0ba81657f9efd1166cfb98e1039b8e21baa147e404a279f0252","ssdeep":"192:8QTo93olKEm935/kQeRM6GLx+2r8hZVsIE:8rrEm931eRMrLxxgriF","tlshash":"15f19f26d639e9fac729b0616fde342dd60b998f11b14da410b53f2618d960c12e83fe","first_seen":"2026-05-31T00:41:43.061491Z","last_seen":"2026-09-20T22:19:31.527474Z","times_seen":46,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9780141185071.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.317Z","timestamp":1789765441317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780141185071.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-8d0\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ed6KuERszRECT1HQ%2BrKQL8kprtGQQjpkZasDQgGkk4W5YqDr2CNHV%2FQo3G7tDJgWuVWkAekkI%2FnXy5AG%2FDqy%2BWaXmigY%2BSjAJctJBkSBIBNCE%2BthsfpmXEUPuHbb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf8383ab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2256,"size_decoded":3025,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d39919b6dfd8e6394587420f3c63777f","sha1":"49348bf761994d39c6e00e03e5d2e1786ee442ff","sha256":"b56d30f4638cf364e64e5c4563438ca65492a172352eb8454249452e4bad693c","sha512":"818d010026dceb30cff93f6c3696dbcda9c62bffacc98bfc29edc861892b8cb23c545be1d05a5facd26c06b397cd7ba00faeb370d2643c24842b4af7232d141f","ssdeep":"","tlshash":"f6414b8903ee24e1c581406567a50942e3068ebb9e0421886c33cde754e4a7cf08f825","first_seen":"2026-05-31T00:41:42.930585Z","last_seen":"2026-09-20T22:19:31.514467Z","times_seen":46,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/master_card_icon.jpg","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.505Z","timestamp":1789765441505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/master_card_icon.jpg HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbACM%2FOfQGAN8%2BUguIvbA3SenJ3ZDIUQRgegNkCq7IRqzfIq9Gn6drtsEE466X%2BLoV3fht%2F%2B%2F35H9oYVOuXVK24Of6UzwlY68smeG8NYNIhHriz9KlF8W4tVGozx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf96862b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7917,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"2184b6380c6448bea4fb818337c1efa6","sha1":"b585a5b1c2dcae8da547248fa64f665ad46f354f","sha256":"1f6ecc529b0a13106138be8c31bc2eb1371feb251a789b569403d50d4388e6fb","sha512":"b52a6991d325c1dde8b7c19c95e129e409cf4d6f974a574a4307730618a1408df2e420e71ad273c8cf12f62b5fd8498b32e1bc285aa9b4bd4fba2a05359fca8c","ssdeep":"192:Vj9jhjO9K/OaaUl8Pz1z+F81B89h7vlCeNA:d//F3uAh7vlCeG","tlshash":"49e19866f9f925be1093827331aa77193de48013daa708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.399534Z","last_seen":"2026-09-18T21:04:37.399534Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9781464270130.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.303Z","timestamp":1789765441303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270130.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1db4\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNw3WIYyeyGhkKd4gXdydwidN%2B2fONlHC%2FK0tBRP43b3gsB8Lj%2Ff2Sc6WwiX6l2hzfrQrmwzxCvASmaS0l4MTTz6%2F8nl4dpHIEhCJf65cKBqGon5NuVdDgZdscxn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf8282cb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7604,"size_decoded":8368,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"47157b14047d5fc2b284dec14a192c12","sha1":"d4bd1c52b0554e064c30f74fe6f279508e3f7271","sha256":"889f1a274a043b4e17bc2c71ec13467a989f70b5100f37390d0bc58c0c0e0c24","sha512":"6f4128ea5a06c5cac96ac1b823501c69dd9172cd5b36e9102bd40d86e23890b36721252f152334635b74c78b36dbaddad7357670340885aa89ae483b2282af33","ssdeep":"192:hmWm62EERDBRo1s5p0QnHmxptGYISh4+Tapu5mT7LVWXz/m:oa5ERDBRo1M0mGhGYI44cousT7Lu/m","tlshash":"1ff19fda9441f3887c5004b58cd8bb471e4bd5aa82d918fe8dae2c398ffe707600c91b","first_seen":"2026-05-31T00:41:42.98755Z","last_seen":"2026-09-20T22:19:31.442679Z","times_seen":46,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9780008786267.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.314Z","timestamp":1789765441314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008786267.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-12b0\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlh2o99kU0hXl25bR1fjXX8bK1wfxGEvuJZl886or8NA6wAaE1wdQEl8cbPebj2Nbocl82bY6kDqHPGurTwEkQBcD1TkV%2F5htov9zazkrfXRg%2BHlEQXHIuykhWOe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf83837b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4784,"size_decoded":5544,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 168x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0211a939b7dfb48eb580e19ca1f9faad","sha1":"738a6383c1d098efeb95ba792ccbbaaacc33d86b","sha256":"4348dbdcf200104f9da60b23f5983ebbd4ab43a970f3ea36d9e42d692b506f3a","sha512":"4044da07b5d88b2c0928d6750f2c47fabce57e76bd9c6d3c657e3f2949bbf708bed3edef7db611e1cc59e5f76f84c6c869876e7f08d564e91811be3337a65957","ssdeep":"96:I9CFvb0C/B8iNDyoamRfayY5JGSWgAsg5e0sbbJYlNp5CyFp5Zyy7mOmK:I9C9bLZ8i1yJYyyRskiJYlT5lZyhO1","tlshash":"d7a17eb76e917fbf31d4a9ff8506c8415c2a7314eac807312192ab099cf4488f0a7369","first_seen":"2026-05-31T00:41:43.047075Z","last_seen":"2026-09-20T22:19:31.521258Z","times_seen":46,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9780356524313.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.319Z","timestamp":1789765441319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780356524313.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1b6a\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jzDtPTQMifhrDaoEFaw6yM94K1KXLA4dryJu0NWbdFyFdQTPHYwbpnvbN6%2BR7%2BrSy%2BXT3TvTyt8njzumZk%2BNhSKJaLIZI0jNyQQOoYpqEy1mRJFW9z3M8xOBAVav\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf8483cb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7018\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7018,"size_decoded":7782,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 128x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2c9e8de9211b3bf98ba53d8515b186ac","sha1":"395ac5800b97cd1a8b8a2d2e231b4272160727f8","sha256":"c58b9b75ceafd3051120588053171b0d2696c493c63ecdb5887b6a39113333e7","sha512":"fc8f9facb3d6871d783093406b1fe539d70156e8ab64d9dd82c3487d9cd8262cffc9aad08ff98a0c155434485de16fd1afbec2cbb422de547ae7e1695bc16505","ssdeep":"192:XZCmaOrV7QLyhCGmj9ma+W6LzTVO4FLKKRgYKbFgGX:XZCRQV7QL+CGJ/xO4F5gp2g","tlshash":"05e1ae966354d67482a00fa9428a907bed3e2a77d8901275b60e999e81b19a124b092b","first_seen":"2026-05-31T00:41:42.991149Z","last_seen":"2026-09-20T22:19:31.480176Z","times_seen":46,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/icon_left-arrow.png","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.490Z","timestamp":1789765441490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/icon_left-arrow.png HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SIbpBYyqD9H4W3MjijfI4NoI6LWtOpr%2FsSyx5X3lcdZxHNSQw1gU2sjJ0UjE1yw2CnuUgvOMvJQHLIqysA20gtvcXo%2FD1RVhkWLBgIqfk9sIlEpgEWV01aL2h8k6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d34cf9585bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7909,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"6d88835bb8fd523167d10eb05b04e265","sha1":"6b2491b4664f00a483543810552e85701ceb43c1","sha256":"814e41f5004e7f0819b7264a6b0713044ad688da6dd66d5411f9bd4407cf6eec","sha512":"360f4c1a959198a4dacd7f07a186e83ff476110548b2d20b84a24f21844b3eaee4cc017189b1e9f7ef3e89f6374a9f5819de70ce051e063a788b5dea38d7cfec","ssdeep":"192:Vj9jhjO9K/OaaUl8Pz9z+F81B89J7vlCeNA:d//FvuAJ7vlCeG","tlshash":"b4e19866f9f925be1093827331aa77197de48013daa708a576edc1720f8ef85ed07284","first_seen":"2026-09-18T21:04:37.405892Z","last_seen":"2026-09-18T21:04:37.405892Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.ttf","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.693Z","timestamp":1789765441693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.ttf HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BO65gZl6odj%2FPrhwnhWaJBjCQFrZFvfhfP6ggPmZJcxJ%2B%2BqrL4SvqOzruJh0YGLi8DucTf2G%2BlxInEpzlsXEL1xGJEStWrGVdxqKEwlyHI37AsfddeXXmLpj16w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d34cfa9890b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7916,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8fa29ba86034f3c8fb9b90b428071487","sha1":"29b0e1bbc60371f0fec44c9ce6d7561c0b83d003","sha256":"0a1d9721827da084c172679af168b3a50db8fc565161a0c986e85636c596210e","sha512":"c3bd672556475a74a7f6d1f9e79826299af6e5da4b9ec185187dfb2b5aed686500c32755feed07bc7626a925a1539a6ed6778216a2982be63f15a7452e0edef3","ssdeep":"192:Vj9jhjO9K/OaaUl8Pz3z+F81B89z7vlCeNA:d//FRuAz7vlCeG","tlshash":"0ee19966f9f915be11938173316977193de48013eea708a576edc1720f8df85ed07284","first_seen":"2026-09-18T21:04:37.407361Z","last_seen":"2026-09-18T21:04:37.407361Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/curator1_large.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.289Z","timestamp":1789765441289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_large.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-a5e2\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1AK6TP6Z%2ByVLEO8iCfu%2B9D7JoGVeHfyV4GJ7lhLb6KwwW7LoPmbHgc3Rj7zqGbiaO0bYr0sQxQuc9Oej0buMumkdtg%2FKkBapXBqtoFB6YnQyxrkDoT%2FM4Y%2FAdh0a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf81820b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42466\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42466,"size_decoded":43233,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3768885f6fc214b05c6211221789e2fc","sha1":"572d63687f5865ad86c29e4f3571f2c67fdcbc56","sha256":"196685f77404a439b769363d3376ea2ad42bed786d0e408c4aa94b967ac6ce45","sha512":"445019826b9d23593b49efee18ec4833d96f095d9882dfd2dde181f86870990359b69905e3f5d9e615cc57d19c26a5675b4ccb7bc56a5a3bf629f7485224f90c","ssdeep":"768:LXTJe1vRmFWPuF1Ab7Zo3xDXm/3MyftBr8Ga9cgaEJP8OyFI67ux39BF3G:LX1e1JmcPu3Ab7ZEXm5ftJaOgaEJP8zl","tlshash":"2a1302068b7bee06ed36777151cff808b6b75b454b31020369a6139469a1ff0a78f827","first_seen":"2026-05-31T00:41:43.005745Z","last_seen":"2026-09-20T22:19:31.484172Z","times_seen":46,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/curator1_small1.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.290Z","timestamp":1789765441290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_small1.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13c2\"\r\nexpires: Mon, 28 Sep 2026 20:36:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ed%2BSwBOq3dSNMxSRJp4Gg9TKHn18FxS%2B5d3Qw9u2AWFmjZuSMENML44vcAh86x64LP5tS7%2BlRMEjNXv%2FxY7QJwWLxo5sTY99xU0Vuh8xgaS5yyWmc3ooqLKGbT8k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf81821b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5058\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5058,"size_decoded":5822,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9fdbf73fd154ad9f4bcff2e168a3f96","sha1":"c7028a4533fd81a568d205ae8c8573e623ad7d9a","sha256":"3f0bea9d91d3afef5c635df6926fd1830d2b3578ba86d127dc8f6a5ceb339b07","sha512":"a5d7db91970c157aa4c2f722ce68a88f08348c9fb490ed440efbbf6a56784d3692c1be270fe7e4c48eb6e02ae437782bd6f4499728ffd4880de69e41b3bc01d8","ssdeep":"96:ir/07Rb6b+NzAlCLfIhDYKDufK+PKxbM00iEoxM0OtW0gALlqE7I9MZw:irrlofIhDYYoyjla0OtWZA5zM","tlshash":"4aa18d168b02d796d50343b834b75e025315ada90f6f6357222933b16adfa787e0d837","first_seen":"2026-05-31T00:41:43.031178Z","last_seen":"2026-09-20T22:19:31.513347Z","times_seen":46,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/9781529984781.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.323Z","timestamp":1789765441323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529984781.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-14f8\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMgYzldzJTns58rxmlL9V60xARB7tpQqTNfvWQuYqwt7zJDGB8%2F95T2%2BGmMBXHv9tkJ%2BT%2FUUHDGZbBwmsvX4iFvpqjKrsYzDDCKRc3j%2BCF9hpA9FIar5Dy86KxdL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf84840b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5368,"size_decoded":6134,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 157x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5f9d467a6c9d42dbca48d0431628bfab","sha1":"45e75ea05e88c43f58744d5a478b52836263bc84","sha256":"8ff03dc074891963655c8faf0c0192a7d9967ca62694e2f922618520601b98ac","sha512":"f4855a168c52a616e6a2fb9e07a256d87498a6f48edab2f4f25b4c0a59a1f20fd97bf43f412895f6d7fce80dfc5e2dc1fa14fe3a5a5f614240dd235c09698c90","ssdeep":"96:o16Ff4KR/SU/6/jJWM9ZcoIZ4nIKQCZsZe3VJRTPJu5gN89F:LFfJAUoXHjHIA2elJRTPk5ga3","tlshash":"b8b18e3cb06de2cdb335713138948b038b996798b26c36f996524dcd47c99218937f19","first_seen":"2026-05-31T00:41:42.950892Z","last_seen":"2026-09-20T22:19:31.438015Z","times_seen":46,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/curator3_large.webp","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.324Z","timestamp":1789765441324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_large.webp HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-f670\"\r\nexpires: Mon, 28 Sep 2026 20:36:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dxpgaBHQ8pUv04d6nuKlP2vGczF8Wn5c7u0NpvSqHrTYmS2oqX1dRGdG3vLJSFt4dlhz37JBjMgHGtLtURd1PR6EQR6Rr2clt8VYbND%2FriFxVeq9ylqqJ%2BtJvJw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d34cf84841b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63088,"size_decoded":63849,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e250989d624c3cd94949aa56f2587cc7","sha1":"7f8b250f73cdb2533ffcf618f7c7a3d2e9eb9020","sha256":"f2886439568465f92d84aaefb38c50d60d5d86e2e51966f6756bc3c53bf08b70","sha512":"f39b38c56bc7561ab92438c3780abf9e7b0a23665b714e234371192eeb3bc1a51adc2987f106e25252929e2c96482adf01f8daaa11eb106588d8d19ad9fdf93a","ssdeep":"1536:SSRQZ8aC253+skqjAonEoJbWv+r3CmkotCPWjx:SSRux+sJnEoJbWQCTotCOjx","tlshash":"c953022a380443b19276f2e18e2f9dd464e68a613765214f6dbd27c4ec909e39cfe506","first_seen":"2026-05-31T00:41:42.964196Z","last_seen":"2026-09-20T22:19:31.52814Z","times_seen":46,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwlqlw.com/lander/wolf_raven_hawk_fang_claw/p.css","fqdn":"qwlqlw.com","domain":"qwlqlw.com","tld":"com"},"ip":{"addr":"172.67.186.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwlqlw.com/","date":"2026-09-18T21:04:01.439Z","timestamp":1789765441439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwlqlw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:40:58 GMT","end":"Thu, 12 Nov 2026 03:39:38 GMT"},"fingerprint":{"sha1":"25:F6:0C:47:6C:91:5A:20:66:66:C9:8F:4F:38:3A:D6:B8:89:D4:CD","sha256":"39:78:5A:9D:EB:F5:C3:1E:0D:8D:9D:38:E5:84:F3:94:E3:E4:7E:8E:C1:33:CE:82:66:38:93:D7:65:3F:88:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/p.css HTTP/1.1\r\nHost: qwlqlw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwlqlw.com/lander/wolf_raven_hawk_fang_claw/xum7xsv.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:04:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UXtAjYHCgm0DYOJ8ydaKjm9xI%2BGqX48TzfRTT8GcEoOv47xQtuU0Leumy2DLLdbvzFW4VVxaT9wL3Ne%2B38QRTnz%2FiqaZVZ91OTTzuRFR4vkWHQbftVNX4OXm0TfT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3d34cf90853b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7169,"size_decoded":7914,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"32359e1bcf22cfac5ce50a86f2b9a7d3","sha1":"95ef4b21d3f1c251b4e4237a216b4decb2c35119","sha256":"c53df92c10efb81d437bf125d4e828538836cea1c8d4ba5dca6ef2e34abd74de","sha512":"917c47bf43875f3585b9103743f5dfde23613feb51dbe446794db7ffb45e0e33a9e379069a6a221631f9063a389c9d02c242cca94ae6f4d353c17ed29873585b","ssdeep":"192:Vj9jhjO9K/OaaUl8PzLz+F81B89j7vlCeNA:d//FBuAj7vlCeG","tlshash":"fce19966f9f915be10938173316977193de48013dea704a576edc1720f8df85ee07284","first_seen":"2026-09-18T21:04:37.411015Z","last_seen":"2026-09-18T21:04:37.411015Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwlqlw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}