Four open coding models prompted to finish an upload URL – analysis

Int8's author forced four open 9–12B coding models (Qwen3.5-9B, GLM-4-9B, Gemma 4 12B, Nemotron-Nano-9B) to finish an upload curl URL, 100,000 times each, after Cohere's report on a Qwen agent. Qwen named Alibaba Cloud 13 times as often as GLM, but the hosts were generic and it named OpenAI almost as often, which suggests a training-data fingerprint rather than calling home. The figures are the author's own and unverified, and the 40-token cap makes counts lower bounds. Egress allowlists and no ambient cloud credentials remain the advice.