WEBSITE ANALYSIS REPORT

http://pornkrm.com/e/ugmxnbpuwlva

01 Mar 2026 · 07:47:33.000 UTCpublic

Report tags: malicious clickfix
Submit tags

Request review

Malicious detection

4 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

07:47:07.849 GET 302 document 130.0 KB 88 ms —

07:47:07.903 GET 200 document 130.0 KB 431 ms —

07:47:08.458 GET 200 stylesheet 2.4 KB 408 ms —

07:47:08.460 GET 200 stylesheet 264.3 KB 46 ms —

07:47:08.466 GET 200 script 85.5 KB 61 ms —

07:47:08.467 GET 200 stylesheet 5.5 KB 38 ms —

07:47:08.469 GET 200 script 1.7 KB 35 ms —

07:47:08.471 GET 200 script 156.1 KB 68 ms —

07:47:08.475 GET 200 script 81.2 KB 70 ms —

07:47:08.479 GET 200 script 97.2 KB 169 ms 2 alerts

07:47:08.480 GET 200 script 78.8 KB 64 ms —

07:47:08.482 GET 200 script 100.4 KB 69 ms 1 alerts

07:47:08.615 GET 200 script 460.0 KB 320 ms —

07:47:09.064 GET 200 xhr 126 B 160 ms —

07:47:09.067 GET 200 img 403 B 38 ms —

07:47:09.101 GET 200 script 65.8 KB 40 ms —

07:47:09.127 GET 200 script 334.9 KB 46 ms —

07:47:09.131 GET 200 script 560.9 KB 73 ms —

07:47:09.133 GET 200 font 19.7 KB 310 ms —

07:47:09.277 GET 200 script 5.0 KB 32 ms —

07:47:09.397 GET 200 img 6.9 KB 36 ms —

07:47:09.399 GET 200 img 533 B 35 ms —

07:47:09.476 GET 200 subdocument 926 B 18 ms 2 alerts

07:47:09.542 GET 200 img 3.6 KB 38 ms —

07:47:09.617 GET 200 xhr 12.0 KB 119 ms —

07:47:09.631 GET 200 img 82.5 KB 218 ms —

07:47:09.839 GET 200 script 6.2 KB 19 ms 2 alerts

07:47:09.865 GET 200 img 252.1 KB 51 ms —

07:47:09.874 GET 200 img 41.2 KB 175 ms —

07:47:09.881 GET 200 img 476.8 KB 180 ms —

07:47:11.905 GET 200 img 43 B 19 ms 2 alerts

Transaction #17

Request / response

URL

GET HTTPS

https://avalanchetremorunfilled.com/chicken.gif?z=2060451&pb=07b72d590ea5c5302da21349a9ad79ae1772358429&pbc=HDBR82ZGBb4dC6Rp&pbi=qjbeVnbJKPEdC6Rp&pbu=bmbm6i4JNc4dC6Rp&psp=YICkZo3BCFMaEPflDsHAtt5Z6ZKKPgYsckqwK4upm_v79iA4f_bFoWhzbaCQ8Q9-NmnUahyicJeiJDCTqsEaIccEz_00BvvzyGNL-r6Uf-n18IyVt6U8KJkOJD6D6earRosCmIDar49ZfSLIMLTKDUSKy7INmdlMw7G3vHUAjxMcvgdYsbHYREkDd0pFiODaLdXEqzo-m1C7taFkEOEhjYOYw2t2cSwcB7CTzDB3bWQTme5b_1c5842CGEUP1SqhFr-Q0W4-crrgq9NR4QGPShtrTq7NLrYhe9-5dXAgdCn4FJjufWcJ-Kj0PbjpEGztqev3O7ZfNE1oYcfb85HiDOMvVsqgbFlcQSAx7vEnL0MP0HZIFV5X3arCk7OcTSNwRduHGhLNlibr1HIjOSIxkBt2lFwdPr1m1kEKUFBdDWEWkLybRChk2wtONlmiu78tpXju_dNqrhjoIVQIl9B5sZW6M9o92zaAomjfKL4lYBLqbMFfhmPDH98qOWof4byx6QXPrGlB4BhBxWOT_q0bjxM70LATRIfhKLlqQVFy2XARWq0jLvaZGIZ13illO-mwvyf6C-op25IkwJj1dxiarPT2neILdwcc3aNM7NHkKwFg1M2oyJnbe_fmJL5wnYzZRPfd_ih6wLWgeDIOFdNNz-XCO2KI9LPXAWqrsClc6Af6hENwG8O1HqxGvuO7tLiJpJn_sdbnr79tFqUvvgsmwFLPdTptPvNBKkE81g72EWwzuRve11rhxLJgeCcZcDBgbi_sRUoVPoDVSTcOFaBRHMvyBvodyqC8RQcKkqRSu4YdC6VQ6GmsPvhWNrgt1vVxRFFLAVwR0uriqUHHf-1nvPPMutb3pJTfx7kz3QVcXLlhiFa_3YDHsIVfTTPxipoHxdpwZgmj3r2TgBMNnpDXbTBh9tG7MGg3OPbmSCx5XlE60mvxQOVoWjaLEyMq9ABLXsFXz6MLzbBH868uAXF7tPjHhzgL4HzLFrK47fafr5xshB-mHiLyLjvUtTKuneUQwBxPKd70Gdg__mRmF3Ew5_qqElSI7ECxyMrvTxDczDc=&freq=0&nojs=0&bavar=0&febuild=1.1.17-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC+0&ss=1&ls=1&bb=0&cti=2&fn=3&es=13&ge=2&th=7Io9M8kQyHDbzodjlmdLeXWVsPCTpVIbFIUEQtsql-&pcs=2&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Win32&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=yqXutoUaHR0cHM6Ly9sYW5jZXdob3NlZGlmZmljdWx0LmNvbS9lL3VnbXhuYnB1d2x2YQ&afid=1523527693884416&eclog=0&snc=0&ssc=2&tp=0&vp=8&pkw=0&pload=2213&rlp=%5B0%2C66%2C629%2C491%2C7528%2C5504%2C1682%2C5092%2C1%5D&srw=1280&srh=1024&im=1&noch=1&cs=5

IP / ASN

94.242.247.33

AS7979 · SERVERS-COM

Requested by: https://lancewhosedifficult.com/e/ugmxnbpuwlva

Resource information

File type: GIF image data, version 89a, 1 x 1
MIME type: image/gif
First seen (UTC): 05 Apr 2023 · 09:26:54.000 UTC
Last seen (UTC): 21 Oct 2026 · 22:58:31.106 UTC
Times seen: 23091

Size: 43 B (43 bytes)
MD5: 28e463819a210071de3b45ebe7633613
SHA1: 6dccd571828ec0912629119cf7eabfea9f33ddbc
SHA256: 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84

Certificate information

Issuer: Google Trust Services · WR1
Subject: avalanchetremorunfilled.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 7E:76:08:B0:01:78:32:41:71:D8:35:27:81:F2:8C:70:67:04:AA:9F
Valid from: Tue, 06 Jan 2026 14:14:58 GMT
Valid until: Mon, 06 Apr 2026 14:14:57 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /chicken.gif?z=2060451&pb=07b72d590ea5c5302da21349a9ad79ae1772358429&pbc=HDBR82ZGBb4dC6Rp&pbi=qjbeVnbJKPEdC6Rp&pbu=bmbm6i4JNc4dC6Rp&psp=YICkZo3BCFMaEPflDsHAtt5Z6ZKKPgYsckqwK4upm_v79iA4f_bFoWhzbaCQ8Q9-NmnUahyicJeiJDCTqsEaIccEz_00BvvzyGNL-r6Uf-n18IyVt6U8KJkOJD6D6earRosCmIDar49ZfSLIMLTKDUSKy7INmdlMw7G3vHUAjxMcvgdYsbHYREkDd0pFiODaLdXEqzo-m1C7taFkEOEhjYOYw2t2cSwcB7CTzDB3bWQTme5b_1c5842CGEUP1SqhFr-Q0W4-crrgq9NR4QGPShtrTq7NLrYhe9-5dXAgdCn4FJjufWcJ-Kj0PbjpEGztqev3O7ZfNE1oYcfb85HiDOMvVsqgbFlcQSAx7vEnL0MP0HZIFV5X3arCk7OcTSNwRduHGhLNlibr1HIjOSIxkBt2lFwdPr1m1kEKUFBdDWEWkLybRChk2wtONlmiu78tpXju_dNqrhjoIVQIl9B5sZW6M9o92zaAomjfKL4lYBLqbMFfhmPDH98qOWof4byx6QXPrGlB4BhBxWOT_q0bjxM70LATRIfhKLlqQVFy2XARWq0jLvaZGIZ13illO-mwvyf6C-op25IkwJj1dxiarPT2neILdwcc3aNM7NHkKwFg1M2oyJnbe_fmJL5wnYzZRPfd_ih6wLWgeDIOFdNNz-XCO2KI9LPXAWqrsClc6Af6hENwG8O1HqxGvuO7tLiJpJn_sdbnr79tFqUvvgsmwFLPdTptPvNBKkE81g72EWwzuRve11rhxLJgeCcZcDBgbi_sRUoVPoDVSTcOFaBRHMvyBvodyqC8RQcKkqRSu4YdC6VQ6GmsPvhWNrgt1vVxRFFLAVwR0uriqUHHf-1nvPPMutb3pJTfx7kz3QVcXLlhiFa_3YDHsIVfTTPxipoHxdpwZgmj3r2TgBMNnpDXbTBh9tG7MGg3OPbmSCx5XlE60mvxQOVoWjaLEyMq9ABLXsFXz6MLzbBH868uAXF7tPjHhzgL4HzLFrK47fafr5xshB-mHiLyLjvUtTKuneUQwBxPKd70Gdg__mRmF3Ew5_qqElSI7ECxyMrvTxDczDc=&freq=0&nojs=0&bavar=0&febuild=1.1.17-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC+0&ss=1&ls=1&bb=0&cti=2&fn=3&es=13&ge=2&th=7Io9M8kQyHDbzodjlmdLeXWVsPCTpVIbFIUEQtsql-&pcs=2&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Win32&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=yqXutoUaHR0cHM6Ly9sYW5jZXdob3NlZGlmZmljdWx0LmNvbS9lL3VnbXhuYnB1d2x2YQ&afid=1523527693884416&eclog=0&snc=0&ssc=2&tp=0&vp=8&pkw=0&pload=2213&rlp=%5B0%2C66%2C629%2C491%2C7528%2C5504%2C1682%2C5092%2C1%5D&srw=1280&srh=1024&im=1&noch=1&cs=5 HTTP/1.1
Host: avalanchetremorunfilled.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cart=1; cart_p=2; PTS=; UID=2603010247a6b7e1e3a12947d5bb31b0442b; CHCK=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response headers

HTTP/2 200 OK
server: nginx
date: Sun, 01 Mar 2026 07:47:11 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: BCAI=ADROLQAAAAAAAAAB; Path=/; Expires=Mon, 02 Mar 2026 07:47:11 GMT; Secure; SameSite=None
BMI=AEbTeQAAAAAAAAAB; Path=/; Expires=Mon, 02 Mar 2026 07:47:11 GMT; Secure; SameSite=None
BCRI=lC9hHwAAAAAAAAAB; Path=/; Expires=Mon, 02 Mar 2026 07:47:11 GMT; Secure; SameSite=None
IMC_102=1; Path=/; Expires=Mon, 02 Mar 2026 07:47:11 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2

07:47:12.918 GET 200 img 43 B 18 ms 2 alerts

http://pornkrm.com/e/ugmxnbpuwlva

Domain graph

Hostnames

Connections

Network requests

Transaction #17

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://pornkrm.com/e/ugmxnbpuwlva

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #17

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://pornkrm.com/e/ugmxnbpuwlva

Domain graph

Network requests