WEBSITE ANALYSIS REPORT

http://crystaltreatmenteast.com/e/cnqckqvjncod

05 May 2026 · 19:25:08.000 UTCpublic

Report tags: malicious clickfix
Submit tags

Request review

Malicious detection

8 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:24:44.437 GET 302 document 753 B 115 ms 2 alerts

19:24:44.503 GET 302 document 753 B 181 ms 1 alerts

Transaction #32

Request / response

URL

GET HTTPS

https://lauradaydo.com/e/cnqckqvjncod

IP / ASN

188.114.96.1

AS13335 · CLOUDFLARENET

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: text/html; charset=utf-8
First seen (UTC): Not recorded
Last seen (UTC): 22 Oct 2026 · 12:07:49.853 UTC
Times seen: 19282455

Size: 753 B (753 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Google Trust Services · WE1
Subject: lauradaydo.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 56:08:E2:00:1B:EF:72:B4:60:90:A5:19:E6:B9:C9:83:40:F1:83:1F
Valid from: Fri, 13 Mar 2026 16:50:09 GMT
Valid until: Thu, 11 Jun 2026 17:48:40 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /e/cnqckqvjncod HTTP/1.1
Host: lauradaydo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 302 Found
date: Tue, 05 May 2026 19:24:44 GMT
content-length: 0
location: https://lancewhosedifficult.com/e/cnqckqvjncod
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3ITTm%2Bl9VLGrJ%2BeVpEkHMicybcP%2BMK3tTMzzSH%2F9r%2Bn5dTwQogb8dqL9F50LWVD%2B4mJhUK%2Br5UFFWY5thJ3Hj9jvbXllzIqUUb2u3TQQhjpKAgteHWTumnNvcBqMyKEssQ%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9f72208abf9d1525-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

19:24:44.600 GET 302 document 0 B 0 ms 1 alerts

19:24:45.678 GET 200 document 132.2 KB 227 ms 2 alerts

19:24:45.945 GET 200 stylesheet 2.4 KB 249 ms —

19:24:45.946 GET 200 stylesheet 264.3 KB 28 ms 2 alerts

19:24:45.949 GET 200 script 85.5 KB 50 ms —

19:24:45.951 GET 200 stylesheet 5.5 KB 23 ms 2 alerts

19:24:45.952 GET 200 script 1.7 KB 35 ms 2 alerts

19:24:45.953 GET 200 script 156.1 KB 35 ms 2 alerts

19:24:45.954 GET 200 script 81.2 KB 37 ms 2 alerts

19:24:45.976 GET 200 script 96.2 KB 121 ms —

19:24:45.977 GET 200 script 78.8 KB 11 ms —

19:24:45.978 GET 200 script 100.4 KB 25 ms 3 alerts

19:24:46.103 GET 200 script 465.9 KB 220 ms —

19:24:46.482 GET 200 xhr 124 B 116 ms —

19:24:46.486 GET 200 img 403 B 24 ms 2 alerts

19:24:46.536 GET 200 script 65.8 KB 22 ms 2 alerts

19:24:46.542 GET 200 script 334.9 KB 24 ms 2 alerts

19:24:46.587 GET 200 script 560.9 KB 43 ms 2 alerts

19:24:46.588 GET 200 font 19.7 KB 221 ms —

19:24:46.648 GET 200 script 5.0 KB 15 ms —

19:24:46.707 GET 200 img 6.9 KB 24 ms 2 alerts

19:24:46.708 GET 200 img 533 B 24 ms 2 alerts

19:24:46.800 GET 200 subdocument 957 B 18 ms —

19:24:46.941 GET 200 xhr 11.8 KB 82 ms 2 alerts

19:24:46.954 GET 200 img 206.5 KB 30 ms 2 alerts

19:24:47.109 GET 200 img 244.0 KB 334 ms 2 alerts

19:24:47.116 GET 200 script 6.3 KB 19 ms —

19:24:47.162 GET 200 img 7.3 KB 156 ms —

19:24:47.166 GET 200 img 11.8 KB 148 ms —

19:24:49.193 GET 200 img 43 B 18 ms —

19:24:50.211 GET 200 img 43 B 18 ms —

http://crystaltreatmenteast.com/e/cnqckqvjncod

Domain graph

Hostnames

Connections

Network requests

Transaction #32

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://crystaltreatmenteast.com/e/cnqckqvjncod

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #32

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://crystaltreatmenteast.com/e/cnqckqvjncod

Domain graph

Network requests