{"report_id":"70cc896a-9674-461a-a009-177fef7e5bbc","version":6,"status":"done","tags":[],"date":"2025-11-24T11:59:11Z","url":{"schema":"http","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"title":"Watch [SQ].mp4 - VOE | Content Delivery Network (CDN) \u0026 Video Cloud","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-29T11:59:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-23T22:13:29.69009Z","alert_count":0,"request_count":1,"received_data":20991,"sent_data":540,"comment":"","tags":null,"fingerprints":null},{"fqdn":"walterprettytheir.com","ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-11-23","domain_rank":0,"first_seen":"2025-11-24T11:59:13.529916Z","last_seen":"2025-11-24T11:59:13.529916Z","alert_count":0,"request_count":16,"received_data":2206506,"sent_data":19924,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Twitter Ads","description":"Twitter Ads is an advertising platform for Twitter 'microblogging' system.","website":"https://ads.twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Advertising"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"entitlements.jwplayer.com","ip":{"addr":"54.240.174.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-09-17","domain_rank":18344,"first_seen":"2016-06-21T17:08:11Z","last_seen":"2025-11-18T12:12:50.455066Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-11-23T22:17:41.224107Z","alert_count":0,"request_count":3,"received_data":176463,"sent_data":1373,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jriopxabv.com","ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1572,"sent_data":569,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"avalanchetremorunfilled.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":152416,"first_seen":"2025-04-23T06:40:38.25194Z","last_seen":"2025-11-21T01:56:04.536616Z","alert_count":6,"request_count":6,"received_data":200073,"sent_data":7313,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"imasdk.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3922,"first_seen":"2014-02-25T09:02:53Z","last_seen":"2025-11-24T06:16:02.324952Z","alert_count":0,"request_count":1,"received_data":461405,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.pncloudfl.com","ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-20","domain_rank":95245,"first_seen":"2021-06-07T14:28:03Z","last_seen":"2025-11-18T15:27:43.950175Z","alert_count":0,"request_count":2,"received_data":113123,"sent_data":984,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-23T22:13:43.05661Z","alert_count":0,"request_count":1,"received_data":3194,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"42f5ab4fb121bef89aeb41c225dce077","sha1":"324fdbc2111a112c49ba8a55718cc19e275420ae","sha256":"1f249fd173b73dee356737557b49cd5e72ef6f386f906b2f3c84d04aa83bcca6","sha512":"b0408b3c94a62c4d3af292759a6f6e67e1f593e212c7741c0e67d4a4e09c6620d059e4a4c0b47d042d49829144ef92d019d44e245211cc0c92dd476c932b7153","ssdeep":"","tlshash":"b3f02bf3f62057848151e034f539d44ae859b11499f298b1f0bcda345b820d178cc9c1","size":439,"data":"","first_seen":"2025-11-23T23:04:11.460102Z","last_seen":"2025-12-30T03:26:22.323696Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/build/assets/27-SABxh.js","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f8d196002a87042ea0937428f428732","sha1":"a51a5552c6d4ecd7cef5eaf692805ed2c63b80bb","sha256":"3b04c518e637741a9132153c76798ce7988d6b3d7062df0e34b639f8016815dd","sha512":"4579e32b820b00129bc56ed5f6b565f9a202bb129167fdbf3ea31e497954e0127a43d49a011b11355fdcf3326068b59384598c5ed9b3bf2965e9399d639ecece","ssdeep":"","tlshash":"9f31b85570f96631c1593859e37bb362b2e00d5b7d253c8160ad0b726e39cc2dd7af88","size":1756,"data":"","first_seen":"2025-07-09T03:26:33.454888Z","last_seen":"2026-04-15T23:28:02.747932Z","times_seen":232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/check.html","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/s/js/site.min.js?fe1eebe79ae88e4bfa6ed669174fca9c","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f221d7962c60ad362e2fbc5e1dacc9e6","sha1":"9e2a0ee15fec83034ee0eedfdc866d2d7472ecee","sha256":"efd0ced2b4c5c6490d8ac3462669df8c5aa143db9ef81fc947dc3ffc739d4088","sha512":"e9e7241c7676af5f648d91446425219f382a6b4b7ac63a47c011d61f0ba8f69f87c16489f7f5b0aa36adc1a7e45830a73f1cec4b5b554fbe46ce29be3c022cf9","ssdeep":"1536:Y2u4R3mNZRo3GiCNIUhxBsSU1UxYs5pfEzS:FRwLzybXotE+","tlshash":"bfa31829b314193252ffa2f7749b2a057336d526ca82c055b878c56c0ef9d8536e3f2e","size":102814,"data":"","first_seen":"2025-10-04T08:15:13.352918Z","last_seen":"2026-04-15T23:28:02.784738Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"375e3e0688214ca1595fc28956430dd1","sha1":"09ba8de39859cd17c2701057352dd5b8bc3c07f6","sha256":"a052ce2a1bfa39fd0315ec22b7b123a0097dc99884a5b10c348931a2b0190b1f","sha512":"da84ce21b5de848227f5cc70b591805ab9228a4c796058480a8259378a0c0a8b36137b02310d950faa4440b27330ba0b21518404b2b974d6feb74556837f172e","ssdeep":"96:lncpq9Hqqq0ykOP6WUuBymFCxWPIu4WYdlnlb3W5d1wgip+Aip9DyB9tyqkXlQ9I:VpHlqeOSWU2cxWPElZjJi7DyB9tyFX2K","tlshash":"06b1420cb069b03f656bb036413f130b7236605678958498f578dae9cabc84e2433fbd","size":5124,"data":"","first_seen":"2023-03-10T00:45:43Z","last_seen":"2026-04-15T23:28:02.755381Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/in.js","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8109e47dc642325928c847ba7834e7b","sha1":"08d99f57cc17cc942dd57a81d293901fd76fe5be","sha256":"5f9bce7c22a87af3921e5c418eec498de16ddbe573eb30202b9ba5444a5ef8e6","sha512":"d6942804977cb54584c1f36b822e8785ceb97ec349f42d2046142c138ebec8d401a024debac5c02d32aba30888d407d2740dcc252f8477b4d0b8db67c2ee27ac","ssdeep":"3072:vjm2cTaLN4nJCi/ZbFHyYFuit3+yMfwp6ya00Yg3UokxAELd2cj5pAAbXGYLcY3H:rBtB4nJ/ZbFSYFuitOyMfwp6ycYQUokl","tlshash":"d90493dc3b5c2075411373af9c2b2525a8fdbcd3986d40079cebc284a9fa649e633b56","size":187418,"data":"","first_seen":"2025-11-18T15:27:47.394769Z","last_seen":"2025-11-24T11:59:21.817725Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f646a3bf6021cf9b091ce25e3e02accd","sha1":"fd5856375a2de55c233b98cea458dd45ad731b7f","sha256":"1e03159bafb1e8ba958c5ee6d609084aea470aaa24fe3a05f4da41c152ab6006","sha512":"20427da1608f13ed273d760ae7ba1c6e2603935c9b641b199c69174801bb1ea9683838f9f3196eee6e2eed213fd313235937f9e9b3087f99e8b0934744818bdb","ssdeep":"","tlshash":"3f811eae25f2207397a3707e8aaf9104b23791d7000dae553c4d97807f58a3997b6bd8","size":3938,"data":"","first_seen":"2024-01-10T02:44:29Z","last_seen":"2026-04-15T23:28:02.848286Z","times_seen":812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2115494b641b4e1a14f34d2d64552b29","sha1":"fae5e680c19b68b4e43ced6a9d5b2e16908f6b32","sha256":"8b73c45b8b1af92c506986362978acead1583913f419776f6db2196ec46a3b15","sha512":"0e957317b3213fbc19dfff0d255d5396b7185d40021df708f394950c33cf86dc272a3ab58adf7f4592a499e12d3b48903fe306a451f74bcba78557075c111d33","ssdeep":"","tlshash":"e9e0611dde3edbc502b620d2b282d38aa23e101e95049d12225e80857b71edf49dd604","size":369,"data":"","first_seen":"2025-04-23T04:06:55.142043Z","last_seen":"2026-04-15T23:28:02.848927Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/jwplayer/8.38.2/jwplayer.core.controls.js","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a349b8e256b710c33f59804e11824af","sha1":"4124b412899128cb8a2521e4f5c2ac88c2c143b1","sha256":"527933d04090c542ae6bff57a0dc240d927908d890e37b578effa55a310932ce","sha512":"8b8efd834ba24cfe9b0f96247bcbba7f2fc1c939a13ebf2cbb8c1e06bd890e5e07f29b82c3303f5498a2f998642ab7d798ab3eff4a975f9eee47175a5358136d","ssdeep":"3072:VM7nFu+slX/+8CtPIVcSJh0EcYSrJ4MOkVGvSwqzrpxMChYFwSC3G:VMxRU/+TAcSJh0lO0GvSVpGJFwSC3G","tlshash":"a07419322142523596e682da76514604b33a8085f506cfacff7ceddd4c6e98b31fabb4","size":343311,"data":"","first_seen":"2025-07-09T03:26:33.46094Z","last_seen":"2025-12-13T13:26:16.486694Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"df2b5e52de60e369343479e91bb36b29","sha1":"f5d3d73c0ce0255d4899e6151e7a54aef1e26a7b","sha256":"5f82bdc3f3698939df748aa682bc49c5299d1cc25c6afbcc3e16ecf5fd0318f1","sha512":"e49f5ac5a73f8987a56f7adc538aeb1f8760b8e08261487c9f242b31a1fa00c520f658b5854fa265d7e95927641f6fb826d9805c8780a7569ce4205f3a643d4b","ssdeep":"","tlshash":"e811595f1682520844c879eb5e8310a5f134a991fa3da2e8a325a1107efbc1c97bb8cd","size":864,"data":"","first_seen":"2025-04-16T08:02:19.832585Z","last_seen":"2026-04-15T23:28:02.849977Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/get/2060451?id=2060451\u0026jp=_cldwvldxyoauhayurzsdch\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=uFf1R4kaHR0cHM6Ly93YWx0ZXJwcmV0dHl0aGVpci5jb20vZS94dmtvMDh4YmNncXk\u0026afid=1804454415774208\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=8\u0026pload=1376\u0026rlp=%5B0%2C87%2C473%2C358%2C2291%2C2385%2C931%2C2204%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"25869d83d85759b172b91d1669a5eb2a","sha1":"a06c69b89a2b9db3f676f562c4fabcd3baff5ba2","sha256":"5a253135d1dfd24ff600e58cef73f218263bbe10d2d2bde1a7ea6619880a47c2","sha512":"a29b24cff3a995e4506cf85ea178e903bbc9110a7c1e24442a6af23211c46addf07ebebd1b209d4c90846317bd198bf133ee639af94a66cd0dd8c6a6c42b3693","ssdeep":"","tlshash":"4ef0c0ed0228ecf270830eee89bd0d4a309056155d039635b7129b9ac028135824bcf3","size":548,"data":"","first_seen":"2025-11-24T11:59:21.833021Z","last_seen":"2025-11-24T11:59:21.833021Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/get/2060451?id=2060451\u0026jp=_cldwvldxyoauhayurzsdch\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Xcr2534aHR0cHM6Ly93YWx0ZXJwcmV0dHl0aGVpci5jb20vZS94dmtvMDh4YmNncXk\u0026afid=4337729206180352\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=8\u0026pi=W1oqmg\u0026pload=1643\u0026rlp=%5B0%2C87%2C599%2C461%2C4123%2C4741%2C1372%2C4560%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"701d063cb00f03cf12a2ba84b8ec7961","sha1":"10ad0c592a36ecdffcb391cdb63bab690aa9e681","sha256":"57ce8cb3e382ade9ecff6522791a41a65a6b065c4caf3028fa99018134b99604","sha512":"9a7448be5bb590183f9f8b0bf1d6a84324acb246ec546c623d8174985356b8b6b27f9536811b7c44c145e090dbbd04909edce61d031843ad2d1f1f2f0cf221a2","ssdeep":"96:gW+OHODwRKqAXJ6TQSSlX1YSEHF/fyuzaokdzdeK:gpek6T3SlXi9l/fyDokCK","tlshash":"bcb11bdaad11d4639c889bd18eb7ad63071662de8451eb41e2edc3dc638c93a3901116","size":5566,"data":"","first_seen":"2025-11-24T11:59:21.829177Z","last_seen":"2025-11-24T11:59:21.829177Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba04ce282da046cf55192a5e83149805","sha1":"c916ba55455060853a2531909c34c7a079efaa16","sha256":"6ff7bd06bf9aba3e4153d194ef4306ca57da5d933bc98c7c177b62678e97aa2a","sha512":"ad534e053d57453799833f095e6299891b3afe09ab31b9fe18c9149e227eee17c872ab4df2285e329a53acfc100d98d8d7557dcaea195b7438c6533c416f660e","ssdeep":"","tlshash":"3d70000a0802080208a0b80c2202220030003202803000800223a0203008283ac000c0","size":21,"data":"","first_seen":"2025-04-17T20:44:03.876522Z","last_seen":"2026-04-15T23:28:02.850578Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4fc28486f3b52b19055a024bccd934c","sha1":"1e2febe4b2ca6f4aa0a23547e54e52a002a40382","sha256":"7321d50ae90b8cca33085cd3d80ae39df3773add73a48e99968bd0476ad449a7","sha512":"c68e241fc9126a3e9bce0f515671d7cf2b6746f53a3d254983587d99358e281beccb702d91d1ac6d2d0238060f5ce21421574b23984c5333fd52e10b79fd4ee1","ssdeep":"","tlshash":"0ca002f3bca01011aa53c9a53932ec4ca15579199c72b1a8a071985501c71d15523455","size":63,"data":"","first_seen":"2025-11-23T23:04:11.499728Z","last_seen":"2025-12-13T13:26:16.503971Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0832c5464d99456cea79b075d4c9cefc","sha1":"09e7ea824e5da43d180fde4cb2e03ab81c8b93c0","sha256":"706ff6fd5e6060c75dea475b6647323c228b3378b1f238b7ca83ff3ddc794d07","sha512":"3c11fb4d17adf0bd26e1e52d5403be5a02eac1de1c2154adb6302156c746d4b2224c8f37a040275528eb3eb010f5170307c8606e104679eb86fd6463fe8b3e48","ssdeep":"","tlshash":"ab2114db23440c740a8e25e6c757611931b320e9b90ee5d5d87c8de01715e6fc731acd","size":1153,"data":"","first_seen":"2025-11-23T23:04:11.502678Z","last_seen":"2025-12-30T03:26:22.334216Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"49ff2300f43dca2ee8ad9e684f22aae9","sha1":"af3832931ea1cb6faf81664f356a2f7e7fd23ed9","sha256":"4668b1c4be37e700f7fa7f0514795b0e1dfd6c03eaf2d35e499cec8057bc1a01","sha512":"87ea65cc5a5458839efed99b98d2e6090c17dfffda9532d25163c7eac31800e66316b03a9920b954cdc5f7028aab674083198f700c166998233a1c38a852c3b1","ssdeep":"","tlshash":"b4b012fb65c040a83316b8922573dc8b5c0b46cfd9998410c87fe6e13c22219b5415c4","size":102,"data":"","first_seen":"2025-05-16T04:35:40.709687Z","last_seen":"2026-04-15T23:28:02.858825Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/jwplayer/8.38.2/provider.hlsjs.js","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"28ad7c8f97ec3efd3fc7355f4b7ab863","sha1":"0cc23dd36c89c6c9d47da8957c638583e8a843da","sha256":"061bc2c8535bfb740a2c1a5dab6e4c91c5388b84609282356b6d67cb0d85be73","sha512":"221c0c31d6cb59acb129ca485960e2a56051d668b76926e2cbe1b1241c46c4f0e7b192d571adea369a0d04916f94a162a12806aff5089f954306a31c54263ccf","ssdeep":"6144:caK/sZg+NY3UbNe6rXTQoalFwc3JWPCaEqeeuFBWqWDJkw0dHhbBI7NEpg8kF4e9:zbNPDCFw2BWqWwHpt7Y","tlshash":"21c42ade3795a01683c2b1a5903f5617633a7d0a280cc16cfa2be9d72d79949b03bf74","size":574870,"data":"","first_seen":"2025-07-09T03:26:33.452721Z","last_seen":"2025-12-13T13:26:16.431753Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jriopxabv.com/gmehuv/mwovuk/opbacv?qDJ=FZO\u0026yu=_adsxoyeggjtzmsijgveomm\u0026eljeur=117780\u0026tb=0\u0026dh=rlkwf\u0026jbjo=tvmka\u0026fnobon=453060\u0026vopbuld=cbowdx\u0026nfnx=qkwke\u0026djr=jjucj\u0026los=9\u0026if=1266054","fqdn":"jriopxabv.com","domain":"jriopxabv.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"32aff25ea080546b4803d5f4c4ee7dc2","sha1":"3d8ed38b601f768002ddbd588a724152263a6f92","sha256":"8e9948f6c506bfd835da5e4f6f12403391b43db556b3ea1ded8d62c08343fd01","sha512":"73a0b04f3ae79414733ef8e47d3f9b2c45f3712133758ab7f93c4712518e5a9e5bf9b0edec1965b306c49eed7c7bc42a7ba95c68de44f59253627de1765ddca9","ssdeep":"","tlshash":"82f0c044e4f1c8cd82495d557ab7df4251c02f3edd53294324744d8a0811976e703005","size":535,"data":"","first_seen":"2025-11-24T11:59:21.814246Z","last_seen":"2025-11-24T11:59:21.814246Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"79e4a4ac3298e9402ed1452ef600416a","sha1":"145af361d71db4c1e8254d9e447aac99eaa54fc2","sha256":"9c5e8f8b0a8096e9d7cdcb14bcf4a779cb27c843d3fd53930596a54588d266fa","sha512":"db34d8af9d1d4d81402cd464099351877a082f82d5afa1f528a817d3d6cf73af636bc11e0bbe0b7a90a44b79e8253a148f3df5c91e17e825d277234c5289a349","ssdeep":"","tlshash":"1b5000000000003000c3000000f030003c000c0003000000000000c000000c000000c0","size":10,"data":"","first_seen":"2025-10-22T16:45:38.174953Z","last_seen":"2026-03-15T16:47:13.473736Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-19T02:35:56.746069Z","times_seen":22713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/jwplayer/8.38.2/jwpsrv.js","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7c09a238f43ba40002820079de36b91","sha1":"620bbc4b53e6fd80b6cd5c89271bc09973d51903","sha256":"be32622dbb1e238992fe4d24d3fd2aaf05b5a283f58f249790b673f04e64c24f","sha512":"41864f6164c9375d1a4abcfc0e831b453e963e0f6c109da0a74e34157b59714eb8b9b0ce2c63b59cade937acb560d38b4a328f0e51fe7ce9ec97df10d8a22686","ssdeep":"768:DiDjPSAlvbtXral8WKOR7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK+EJl92LCcLWpV","tlshash":"4463c78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","size":67344,"data":"","first_seen":"2025-04-10T04:03:01.174964Z","last_seen":"2026-04-15T23:28:02.817854Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4263c349c106362afcfc34f956b8ce25","sha1":"b96d45b04480466ffd1dbc7b3e3f6d58381a21b9","sha256":"68cccb415ea41e631350c5a251c0cc631dc42b3eb7868072f559817321992f9f","sha512":"3715387c6db6792bf269033a7424772501db3010354cbb24836522beb81dafde23d094adf7afa0790884888cbf179a8e74a1ccc9d0f74094fe0dd47f712fdf2d","ssdeep":"6144:7dccto9ptp58YcxZ/aT4GnjeGe9YEwPiTP:LX/WhniYEwPir","tlshash":"17a4e9cdb6a674629353f4f5403f010bb23ba8a6f40888acb249d9e17e749495277f7c","size":460691,"data":"","first_seen":"2025-11-23T23:04:11.405526Z","last_seen":"2025-11-24T23:40:00.137317Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-19T02:34:02.605726Z","times_seen":141895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/js/loader.bc4a6543429.js","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f43b942340f3e45d3ae53d0712b13256","sha1":"e11a4d4c3d7fff07ab752e7cb73342aa156dd66f","sha256":"32113f06d823097d0181fdc56d12e40e3ab7ca9d07609ce3f41c6d2c6b1846e2","sha512":"63a713372921c75df85848b0da2c35c14d12a8348b10263fa035090110417a141d1497edcb989a1f777d9addcc7a6843ce2d270f5e1be873f76cf1ccf2b8320a","ssdeep":"1536:+Im9L7Faw8G/1K+jpw8y5f0HMNz2szEe/XmC2:+Im9fww9Hw8y5f0HWEe/u","tlshash":"2a83c51c26d0b9590b8b9f36b72f28dcf5570e2f6d84c84bc605bc602579a1bede2532","size":83200,"data":"","first_seen":"2025-07-09T03:26:33.467529Z","last_seen":"2026-04-15T23:28:02.785246Z","times_seen":232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"45387cc8bab6372b74fc77abc56e659f","sha1":"57c42ce718595216852ebeb952c82252befe13ee","sha256":"8d4e944bfddbd94d0b4a6dcdaa1f39cc1fa9697535116eb801f93076070d2b2a","sha512":"d492968396c5d15df8ae4ec10e3ea25feb33b97a9f5a665d1bb1da05c809a3fda2efdf16ae3ac43765939a5bc4ca5adb210b2bd463e481e1d508aca4d91aed7c","ssdeep":"1536:iI7Xxg0FsqC7bWLL072UQQP1XICsYt9GjV/yuif2+MfJa71ZPUT2rb96:t7h9FsqaWs7jZPxhVCvi+vAiT2s","tlshash":"48a3c78939d6b84943b2e07501bf2ccbb5bb7d80700c9545c161e9b4fcf1aae91a3d6e","size":105544,"data":"","first_seen":"2025-11-23T23:04:11.507211Z","last_seen":"2025-12-30T03:26:22.337569Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b12c451e6d0a13555bd0e69c3376a5bf","sha1":"ccf8430813d4009a0802e1b763dc8dcb3bd4f85c","sha256":"313590fb58ee6b47377daf72b2b8ae9934746578f53a9d1224660239b8f27ed3","sha512":"544607d61c2fc56f8c3e60ec77db28756a39157ed619715afe622dbb37174cfe98838eae0e48539170b22dd6e6f434e2c812f8a409468923e07bd53bfaa77600","ssdeep":"","tlshash":"26c02b772ca121305f0134cd41dbb00ca13218063404ccf0fc9c41800f6b8198060881","size":192,"data":"","first_seen":"2025-11-24T11:59:21.878667Z","last_seen":"2025-11-24T11:59:21.878667Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/jwplayer/8.38.2/jwplayer.js","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d3b7e0e4267402d0e259c9a21792258","sha1":"6220167731bbbb87609d184a95f5c4c2b2f8c72c","sha256":"190acb6da87bd161114f93feb270234b6ff00dafa7c98732c452ff447d4cef77","sha512":"4ae57475aa41d82ae52d0204e9978089995d10d72cf1c9beb686e1811a6bb7a7e24140f21ecc073b01e1209a20c5cf4b27f26ae82e981ef8d5374aeb9a1ba75b","ssdeep":"1536:oryPjl9oOHjCyj35oM8j03kwdtxwszufvL3v5qYtwR/iaCttHF3vLGCaUZfkJk80:FHJ1az3LpaUZfkO8bMdhdD5J","tlshash":"59e34ca631c2f4a603e224d6e47b4101f2790949384de9a4f66cecd7795a907b1b3fbc","size":155964,"data":"","first_seen":"2025-07-09T03:26:33.454125Z","last_seen":"2025-12-13T13:26:16.425699Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"330dc0d4d30bad4f442fe9687f99a802","sha1":"44a29cb5036d73f1233f5ee2aa503f4492ff867f","sha256":"4dbaa371ba421d70e57f29f4a6db2890beedac6f443686d9227e5ac48342d09d","sha512":"6081406639f8d6b1cf2565afb170f3f6f2ed3e71ebc9ff73dc77ada06154744ef6129647534f02b9aadf07cd9314f0a259544bb15d0027b570b0bbb4d9a71813","ssdeep":"","tlshash":"e3f0596b604d2529dbf74d2b704ba4987f1f2806b0e1b829710c8410bb223c726447db","size":552,"data":"","first_seen":"2025-11-24T11:59:21.879577Z","last_seen":"2025-12-13T13:26:16.52337Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ba885e7b48e9b516c84207dc46daefe","sha1":"0188ee1d85229c3a845b2f0be2949707c839b4df","sha256":"8c50ba15576b2d35c2e66b04cd97c0336904e76e32c6a43071c4a0a7edb663c8","sha512":"78ab7a074bb31b50dda25e9fe71527cae934e104dc3a88abce6635708be37fd74bd420ff77fb40b38e986b3a8eaf17763ccd91dbb386b97dfb0add6991922483","ssdeep":"192:/00PkXBQ3ovNT3SvycwYpQLY0+jj5i9bARYE6dStMN35VoyIN81c46yniYEksr6g:/xKBQ3ox3B5YwY0KZNRuNJVoyn1iFYEv","tlshash":"5e021bb12253597d83a65cee923d6d28f43a1a00308ac994f0dd8c933c5b647d2b3d7d","size":8556,"data":"","first_seen":"2025-10-22T16:45:38.189294Z","last_seen":"2026-03-15T16:47:13.489028Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0beac54daf16ad2d8235e5ae5b2a712a","sha1":"2c7dceda748b5be34b4b1cc057f8657ef986439f","sha256":"dae7da40b408a6e777d59a00838ae402f4abcf4be082be3b88a9068634a3fd8e","sha512":"ae7a9a036f48a4e1efcc0514710ba90854e26577569a600dbdb9063f92b52a82570523c89888d60b50e4c39b91beb974fc5d548db4c5a89392db1433c33f5373","ssdeep":"","tlshash":"48e0f102346d5660a4cb002f1a72223433a2359b3951885644cdc83b9ca0d44945d2e4","size":397,"data":"","first_seen":"2025-04-04T04:59:30.319262Z","last_seen":"2026-04-15T23:28:02.86671Z","times_seen":320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://walterprettytheir.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 23:36:33 GMT\r\nexpires: Thu, 19 Nov 2026 23:36:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390133\r\nlast-modified: Wed, 10 Sep 2025 17:04:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20156, version 1.0","md5":"202cfb54d4e66d1702404ade49339ceb","sha1":"57fd1acf8d9651d9c38c0d4af7b78bc399be0652","sha256":"4ba7d3d096695818fe0686be4f1e82c6b05134e18a22260336130335027462dd","sha512":"2b323bc185114cbb7b0e2d92b7daf844d5dbe1e79f65d5b358f50bdf973ea60e8303e45ce7af23ce09b5e64149402065f0194f795e22dcd55c86ce1e05a11451","ssdeep":"384:gqwJbbuIcjx0eifRE1S0B1FbjeXpvgwFU2F5TfB3Qj0UWAB3XZ/ol:SJrK+hqvBjbyXpvgMUuVFHdK3p/Q","tlshash":"0e92e0eb83b3abc474ccb2a1349002e960e3524213b79df0c59375f0e9bd7da1a8522d","first_seen":"2025-05-14T03:12:47.210807Z","last_seen":"2026-04-19T02:29:05.532107Z","times_seen":4839,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":120,"dns":0,"connect":20,"send":0,"wait":21,"receive":6,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/s/js/site.min.js?fe1eebe79ae88e4bfa6ed669174fca9c","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /s/js/site.min.js?fe1eebe79ae88e4bfa6ed669174fca9c HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=rp34MgDXYErXreq9; __ddg10_=1763985525; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6rfpxMP4L9jc85uz; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg10_=1763985526; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 17:18:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 21:05:04 GMT\r\netag: W/\"68e03a80-1919e\"\r\nexpires: Tue, 23 Dec 2025 17:18:11 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 67235\r\ncontent-length: 23619\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":102814,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52119)","md5":"f221d7962c60ad362e2fbc5e1dacc9e6","sha1":"9e2a0ee15fec83034ee0eedfdc866d2d7472ecee","sha256":"efd0ced2b4c5c6490d8ac3462669df8c5aa143db9ef81fc947dc3ffc739d4088","sha512":"e9e7241c7676af5f648d91446425219f382a6b4b7ac63a47c011d61f0ba8f69f87c16489f7f5b0aa36adc1a7e45830a73f1cec4b5b554fbe46ce29be3c022cf9","ssdeep":"1536:Y2u4R3mNZRo3GiCNIUhxBsSU1UxYs5pfEzS:FRwLzybXotE+","tlshash":"bfa31829b314193252ffa2f7749b2a057336d526ca82c055b878c56c0ef9d8536e3f2e","first_seen":"2025-10-04T08:15:13.352918Z","last_seen":"2026-04-15T23:28:02.784738Z","times_seen":194,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/SDtULpKyEeWwxnBWgb9+iQ.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"54.240.174.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /SDtULpKyEeWwxnBWgb9+iQ.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://walterprettytheir.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nserver: nginx\r\ndate: Mon, 24 Nov 2025 10:36:09 GMT\r\ncache-control: max-age=1800, s-maxage=11100\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 2iWIj5xpIguHtbRPANkixPVWpO2KmPRZunhj2eml7RvJDdKcX8l5JA==\r\nage: 4957\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":126,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8f5da2cd33e5fd33ada22ee4ad8a8e50","sha1":"f101c9b357c3bc40d4cea081b8c444df7a3401c2","sha256":"940996b83acb5c949885587e9cf87fc23b3227fa685ad6956113f4348e6e470e","sha512":"bb992b18dead636880a109166ae38257848f0a89c4269af791bd53810fa32dd1794c7b83a79d5c0e47bd9d030109a6540c13658481193fff8484a872b6bd84c7","ssdeep":"","tlshash":"b3b09222fecad47d82e231599203b2008f6142c28618442ae048a8a2b22973b2e90a88","first_seen":"2025-10-04T08:15:13.354344Z","last_seen":"2026-04-10T00:14:13.822882Z","times_seen":190,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":71,"dns":59,"connect":1,"send":0,"wait":1,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 24 Nov 2025 11:58:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1810\r\ncf-ray: 9a38bc86aa865696-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb04017-1404\"\r\nlast-modified: Mon, 04 May 2020 16:17:27 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 291902\r\nexpires: Sat, 14 Nov 2026 11:58:46 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8S8Eta8QR2fG3eP299hi3kcThJi5ZvGC9Orgjn1Os5v8nvzq3%2BMzkNVVEuOJW3Or6tcrDiNThZb9Wzir%2BF2w0gkPRMAAomR13zw4SS3rqqMKGKXDKypC6DoK6FVLJoXqVFizI%2Fpb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5124,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5082)","md5":"375e3e0688214ca1595fc28956430dd1","sha1":"09ba8de39859cd17c2701057352dd5b8bc3c07f6","sha256":"a052ce2a1bfa39fd0315ec22b7b123a0097dc99884a5b10c348931a2b0190b1f","sha512":"da84ce21b5de848227f5cc70b591805ab9228a4c796058480a8259378a0c0a8b36137b02310d950faa4440b27330ba0b21518404b2b974d6feb74556837f172e","ssdeep":"96:lncpq9Hqqq0ykOP6WUuBymFCxWPIu4WYdlnlb3W5d1wgip+Aip9DyB9tyqkXlQ9I:VpHlqeOSWU2cxWPElZjJi7DyB9tyFX2K","tlshash":"06b1420cb069b03f656bb036413f130b7236605678958498f578dae9cabc84e2433fbd","first_seen":"2023-03-10T00:45:43Z","last_seen":"2026-04-15T23:28:02.755381Z","times_seen":394,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jriopxabv.com/gmehuv/mwovuk/opbacv?qDJ=FZO\u0026yu=_adsxoyeggjtzmsijgveomm\u0026eljeur=117780\u0026tb=0\u0026dh=rlkwf\u0026jbjo=tvmka\u0026fnobon=453060\u0026vopbuld=cbowdx\u0026nfnx=qkwke\u0026djr=jjucj\u0026los=9\u0026if=1266054","fqdn":"jriopxabv.com","domain":"jriopxabv.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:47.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jriopxabv.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 15:18:27 GMT","end":"Thu, 01 Jan 2026 15:18:26 GMT"},"fingerprint":{"sha1":"BC:68:C4:8B:02:18:48:7E:67:7C:4B:7A:38:B0:31:23:87:F8:92:56","sha256":"1C:39:4B:51:60:B4:FF:17:C2:D7:42:54:1D:87:55:E7:87:02:AD:02:09:76:B3:A8:A5:AA:43:49:08:9D:20:76"}}},"request":{"raw":"GET /gmehuv/mwovuk/opbacv?qDJ=FZO\u0026yu=_adsxoyeggjtzmsijgveomm\u0026eljeur=117780\u0026tb=0\u0026dh=rlkwf\u0026jbjo=tvmka\u0026fnobon=453060\u0026vopbuld=cbowdx\u0026nfnx=qkwke\u0026djr=jjucj\u0026los=9\u0026if=1266054 HTTP/1.1\r\nHost: jriopxabv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 24 Nov 2025 11:58:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: UID=25112406580e1e88016f9b44d2b084674818; Path=/; Expires=Mon, 28 Dec 2026 11:58:47 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Mon, 28 Dec 2026 11:58:47 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 28 Dec 2026 11:58:47 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":535,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (535), with no line terminators","md5":"32aff25ea080546b4803d5f4c4ee7dc2","sha1":"3d8ed38b601f768002ddbd588a724152263a6f92","sha256":"8e9948f6c506bfd835da5e4f6f12403391b43db556b3ea1ded8d62c08343fd01","sha512":"73a0b04f3ae79414733ef8e47d3f9b2c45f3712133758ab7f93c4712518e5a9e5bf9b0edec1965b306c49eed7c7bc42a7ba95c68de44f59253627de1765ddca9","ssdeep":"","tlshash":"82f0c044e4f1c8cd82495d557ab7df4251c02f3edd53294324744d8a0811976e703005","first_seen":"2025-11-24T11:59:21.814246Z","last_seen":"2025-11-24T11:59:21.814246Z","times_seen":1,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":76,"dns":32,"connect":18,"send":0,"wait":18,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/cache/xvko08xbcgqy_storyboard_L0.jpg","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:47.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /cache/xvko08xbcgqy_storyboard_L0.jpg HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=MQM9LGuyorDOeiKn; __ddg10_=1763985527; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6IlJZWFJoQmtoczQzcU1ndDYyOUJ2a3c9PSIsInZhbHVlIjoiTjNWRnl6WlpaNVZQK2UyRWlFY2N0aTVMUDJ4VllvUlJPS1RZelZzODVzUjNvbFdzbEpORExabk5XOTRTaUNUQStqMEJOdEorekcxSjh4K0JkV1BkYWs1T1kzUUh3TEVrR0t5d0VaOHE2Yk16R2N1b2tBMGc3bThidmZuZHFxeS8iLCJtYWMiOiI2MjQ4MzgzZDA5NDVmNTc1YmEzY2EzNDAxNjBkMzRhMmM2OGNiODlkNGY5MWFkOWJiZTIwNGJhOWU5YzYwOWE2IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6Ikx3OG85ZTdIcUw3TEVhb2dNMDc4RlE9PSIsInZhbHVlIjoiT0FBWFBGSVhlODg3NGlaRmF1Y0dKb2R3MFBWUzNVVThFTldPSUswbGdpcTVyOXRQbVRZMWl0elpRQS94U1BRUU9BbUF6MlJOaC9JeTBHNE9yMkN4akZiUUEvZnhZSGMyZUlQUUVKMFhKUElBM3VYUVV5T3dCWGxTTVltb3RBbFkiLCJtYWMiOiJmMmVmZGI2NTM2MTc3OTJmYmUzMTc0Y2EzZGUxMzdkN2EyNjk5NjA2OTVmZDFmMTk4NzNhOTUxODdiZmYzZmIzIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2tp6S0BmDgECZ9N0; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:47 GMT\n__ddg10_=1763985527; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:47 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:47 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 19:14:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 249111\r\nlast-modified: Thu, 20 Nov 2025 09:04:50 GMT\r\netag: \"691ed9b2-3cd17\"\r\nexpires: Tue, 23 Dec 2025 19:14:34 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: cache-control, content-range, accept, origin, session-id, content-disposition, x-requested-with, content-type, content-description, referer, user-agent\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 60253\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249111,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1250x700, components 3","md5":"05d03a02200c26589ddf6b040e974c4a","sha1":"f97cc8f1c090d0fb9ad32b1490c36202e9a48a4c","sha256":"560d338d90283b5b0cb898c3cbce5d0535786189da75d5b9e41b9c375165ddf1","sha512":"7a9e57fdba5f05245dee9f5cada598975ef8491a50633464a172b3e86679425c18db1189d10f27b81a52bc32031428a286022a52cf87cab01a74b4d47a0004f5","ssdeep":"6144:ftGECnoAVMvS0bnOKaViF0ZIanODDPQ4JMarSKFVK79J:lGECLVMvXLO3iF0ZIanKPQGMaO79J","tlshash":"363422a4d6009b19a239063d4f1138f1c4de5167a3764a8d3ccecae3b67e6b5c636ed0","first_seen":"2025-11-24T11:59:21.815451Z","last_seen":"2025-11-24T11:59:21.815451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/cache/xvko08xbcgqy_storyboard_L2.jpg","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:47.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /cache/xvko08xbcgqy_storyboard_L2.jpg HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=jz1csIBFDTvOX2kJ; __ddg10_=1763985526; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nSJfEd6zWtNd3oMq; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:47 GMT\n__ddg10_=1763985527; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:47 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:47 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 18:28:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 184505\r\nlast-modified: Thu, 20 Nov 2025 05:34:30 GMT\r\netag: \"691ea866-2d0b9\"\r\nexpires: Tue, 23 Dec 2025 18:28:51 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: cache-control, content-range, accept, origin, session-id, content-disposition, x-requested-with, content-type, content-description, referer, user-agent\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 62996\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":184505,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1279x719, components 3","md5":"d20c47a711fca3a145a50db003ff6e88","sha1":"280ea360cf5fc764479953396374d6329847cf83","sha256":"f41351b88f949be09d2ad71636bf444938811835eea7fba7322e4f386b6d03a5","sha512":"cf77bbc9a79386d696518e9397207566202b3763018c9c4c041abec1f9fc364c1ec0dddafe3a42876674bda89d3b4d5b878fd70e80fef51a6407ebfcf0eab3f5","ssdeep":"3072:mwSp72cAu3IWGbjsL3yq+xVYVeU9l6UdC6nQw45bB15uvKpRVyOfH7ma:laJfIWcQyqkiznQwKbLRpRVxfHaa","tlshash":"d9041246e7dd09bfe4efcadc8dc42f6d9302c3586b74141918b7d0de1992c9a1a872a8","first_seen":"2025-11-24T11:59:21.816363Z","last_seen":"2025-11-24T11:59:21.816363Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/build/assets/DQJFgy2Q.css","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /build/assets/DQJFgy2Q.css HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=rp34MgDXYErXreq9; __ddg10_=1763985525; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UpeJr215aWeKRPZT; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg10_=1763985526; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 17:18:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-15e1\"\r\nexpires: Tue, 23 Dec 2025 17:18:11 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 67235\r\ncontent-length: 1529\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5600)","md5":"2848a360d8364b7e046a9a5c8e9571c2","sha1":"c8a8a30bbfc66dd82043a720be753726eea3b2cd","sha256":"974c1546dbd5dab88bef845d52eebec9ff7dd471e0f87aa776f03f3c04e17410","sha512":"6e92d7ac1b7052ff55c3d4b6b8999b84298433333cc1265fb12a0278484313da19b91e982f65513bee6b6293ed22bb63e48274079f151b4d30688472eca50474","ssdeep":"96:3+Egyn5WZTllol4lXuZx2AhlFlplXAB1CIDTI:uEgDlol4lXu72ADPrwHCIDTI","tlshash":"a6c12317e741501c7d63c16f62a1a7c9372bd4c2fb726f7efab1e062d69229920e3241","first_seen":"2025-07-09T03:26:33.460144Z","last_seen":"2026-04-15T23:28:02.827506Z","times_seen":232,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/in.js","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avalanchetremorunfilled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:41 GMT","end":"Wed, 21 Jan 2026 14:24:40 GMT"},"fingerprint":{"sha1":"7C:99:37:1B:56:E3:EA:68:F8:DE:7D:7E:3B:31:C5:E9:3D:37:ED:5F","sha256":"67:D7:FE:FD:05:E9:B9:3E:4F:B9:10:D8:89:BE:6D:FA:B2:8C:D8:7A:F4:F7:51:30:DC:4D:C2:BA:51:A5:10:56"}}},"request":{"raw":"GET /in.js HTTP/1.1\r\nHost: avalanchetremorunfilled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 24 Nov 2025 11:58:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 17 Nov 2025 14:23:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691b2fe3-2dc1a\"\r\nexpires: Mon, 01 Dec 2025 11:58:46 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":187418,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a8109e47dc642325928c847ba7834e7b","sha1":"08d99f57cc17cc942dd57a81d293901fd76fe5be","sha256":"5f9bce7c22a87af3921e5c418eec498de16ddbe573eb30202b9ba5444a5ef8e6","sha512":"d6942804977cb54584c1f36b822e8785ceb97ec349f42d2046142c138ebec8d401a024debac5c02d32aba30888d407d2740dcc252f8477b4d0b8db67c2ee27ac","ssdeep":"3072:vjm2cTaLN4nJCi/ZbFHyYFuit3+yMfwp6ya00Yg3UokxAELd2cj5pAAbXGYLcY3H:rBtB4nJ/ZbFSYFuitOyMfwp6ycYQUokl","tlshash":"d90493dc3b5c2075411373af9c2b2525a8fdbcd3986d40079cebc284a9fa649e633b56","first_seen":"2025-11-18T15:27:47.394769Z","last_seen":"2025-11-24T11:59:21.817725Z","times_seen":58,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":66,"dns":34,"connect":19,"send":0,"wait":17,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/s/images/logos/voe-logo-2.svg","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /s/images/logos/voe-logo-2.svg HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=Omm7GrwCAe7cyuFD; __ddg10_=1763985526; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9VEdYoLLJdeXi5eg; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg10_=1763985526; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 17:18:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 27 Apr 2025 04:35:03 GMT\r\netag: W/\"680db3f7-193\"\r\nexpires: Tue, 23 Dec 2025 17:18:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 67234\r\ncontent-length: 221\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":403,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a638d0dfa6feb7ce4b90e7c91c5b0df4","sha1":"7a0a86f47b51781f48bb9f232f05193936490027","sha256":"38b49bc67e053e96441e62f8423a9ed0e907ef768a0ffbba4370128760f814dc","sha512":"d0d5823062954b3398a974322a7f848f71ba602c2369c79ee16868904c2e66ff1a10152a221bf68d4d0f2abb167c730bacecd0855743c7c3b521523dac0edf54","ssdeep":"","tlshash":"abe06871d4aedc054640cb2ca3e7719124bd911233c03fece7b48e263e43a36512c2b8","first_seen":"2025-04-27T22:01:48.046871Z","last_seen":"2026-04-15T23:28:02.831302Z","times_seen":306,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/check.html","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:47.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avalanchetremorunfilled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:41 GMT","end":"Wed, 21 Jan 2026 14:24:40 GMT"},"fingerprint":{"sha1":"7C:99:37:1B:56:E3:EA:68:F8:DE:7D:7E:3B:31:C5:E9:3D:37:ED:5F","sha256":"67:D7:FE:FD:05:E9:B9:3E:4F:B9:10:D8:89:BE:6D:FA:B2:8C:D8:7A:F4:F7:51:30:DC:4D:C2:BA:51:A5:10:56"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: avalanchetremorunfilled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 24 Nov 2025 11:58:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/engine/storyboard/xvko08xbcgqy?t=0","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:47.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /engine/storyboard/xvko08xbcgqy?t=0 HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=jz1csIBFDTvOX2kJ; __ddg10_=1763985526; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MQM9LGuyorDOeiKn; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:47 GMT\n__ddg10_=1763985527; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:47 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:47 GMT\nXSRF-TOKEN=eyJpdiI6IlJZWFJoQmtoczQzcU1ndDYyOUJ2a3c9PSIsInZhbHVlIjoiTjNWRnl6WlpaNVZQK2UyRWlFY2N0aTVMUDJ4VllvUlJPS1RZelZzODVzUjNvbFdzbEpORExabk5XOTRTaUNUQStqMEJOdEorekcxSjh4K0JkV1BkYWs1T1kzUUh3TEVrR0t5d0VaOHE2Yk16R2N1b2tBMGc3bThidmZuZHFxeS8iLCJtYWMiOiI2MjQ4MzgzZDA5NDVmNTc1YmEzY2EzNDAxNjBkMzRhMmM2OGNiODlkNGY5MWFkOWJiZTIwNGJhOWU5YzYwOWE2IiwidGFnIjoiIn0%3D; expires=Mon, 24 Nov 2025 13:28:47 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6Ikx3OG85ZTdIcUw3TEVhb2dNMDc4RlE9PSIsInZhbHVlIjoiT0FBWFBGSVhlODg3NGlaRmF1Y0dKb2R3MFBWUzNVVThFTldPSUswbGdpcTVyOXRQbVRZMWl0elpRQS94U1BRUU9BbUF6MlJOaC9JeTBHNE9yMkN4akZiUUEvZnhZSGMyZUlQUUVKMFhKUElBM3VYUVV5T3dCWGxTTVltb3RBbFkiLCJtYWMiOiJmMmVmZGI2NTM2MTc3OTJmYmUzMTc0Y2EzZGUxMzdkN2EyNjk5NjA2OTVmZDFmMTk4NzNhOTUxODdiZmYzZmIzIiwidGFnIjoiIn0%3D; expires=Mon, 24 Nov 2025 13:28:47 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/vtt; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Mon, 24 Nov 2025 11:58:47 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":12070,"size_decoded":0,"mime_type":"text/vtt; charset=UTF-8","magic":"WebVTT subtitles, ASCII text","md5":"a9726a9cb35c844995b0d48a2a85da9e","sha1":"31785f669389bdd88f4083699d28253320fba7bc","sha256":"8ccb2ee09b258f828c9e3d45734abc4c3599832f8fe46e83676d78d7557a7091","sha512":"9aad356b2fd8943bfbbd881a142e31a88fbfbaeb9f4c3debc4ddb675ac524ce5edaf3f5e29f07d2002c175b47a9b2fa7fadb2ac829cb89461266cf704d4772bd","ssdeep":"96:LQBBLQEErUJO9Dg2A8eBbaszyM6BHIBtd0ColJFD7LuG4bwUBQQQtSCIsCpQGiPk:Fk8188p4CU8tvUWq0LYb","tlshash":"2642ebf363b8b552cde5c630b9e07a4c8222d5afdff1a0d524a0fa9058974f01b6e5c6","first_seen":"2025-11-24T11:59:21.821904Z","last_seen":"2025-11-24T11:59:21.821904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Mon, 24 Nov 2025 11:58:46 GMT\r\nexpires: Mon, 24 Nov 2025 11:58:46 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 4799364584730411603\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 145271\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":460691,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2836)","md5":"4263c349c106362afcfc34f956b8ce25","sha1":"b96d45b04480466ffd1dbc7b3e3f6d58381a21b9","sha256":"68cccb415ea41e631350c5a251c0cc631dc42b3eb7868072f559817321992f9f","sha512":"3715387c6db6792bf269033a7424772501db3010354cbb24836522beb81dafde23d094adf7afa0790884888cbf179a8e74a1ccc9d0f74094fe0dd47f712fdf2d","ssdeep":"6144:7dccto9ptp58YcxZ/aT4GnjeGe9YEwPiTP:LX/WhniYEwPir","tlshash":"17a4e9cdb6a674629353f4f5403f010bb23ba8a6f40888acb249d9e17e749495277f7c","first_seen":"2025-11-23T23:04:11.405526Z","last_seen":"2025-11-24T23:40:00.137317Z","times_seen":3,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":86,"dns":41,"connect":21,"send":0,"wait":53,"receive":59,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/jwplayer/8.38.2/jwpsrv.js","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /jwplayer/8.38.2/jwpsrv.js HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=6rfpxMP4L9jc85uz; __ddg10_=1763985526; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Omm7GrwCAe7cyuFD; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg10_=1763985526; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 17:18:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-10710\"\r\nexpires: Tue, 23 Dec 2025 17:18:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 67234\r\ncontent-length: 19443\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":67344,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b7c09a238f43ba40002820079de36b91","sha1":"620bbc4b53e6fd80b6cd5c89271bc09973d51903","sha256":"be32622dbb1e238992fe4d24d3fd2aaf05b5a283f58f249790b673f04e64c24f","sha512":"41864f6164c9375d1a4abcfc0e831b453e963e0f6c109da0a74e34157b59714eb8b9b0ce2c63b59cade937acb560d38b4a328f0e51fe7ce9ec97df10d8a22686","ssdeep":"768:DiDjPSAlvbtXral8WKOR7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK+EJl92LCcLWpV","tlshash":"4463c78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","first_seen":"2025-04-10T04:03:01.174964Z","last_seen":"2026-04-15T23:28:02.817854Z","times_seen":302,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/4c9/dde/bac/4c9ddebac448711ec7391c608c6b207270b30c5e.png","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:47.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 11:22:47 GMT","end":"Sat, 10 Jan 2026 12:22:44 GMT"},"fingerprint":{"sha1":"5F:F3:87:DA:78:FE:FC:D5:F7:1B:E2:6F:99:A9:F5:88:06:1F:6D:0C","sha256":"9E:1C:41:AF:6B:2C:22:66:DB:77:8A:92:75:A0:FC:E8:37:90:0A:A6:EA:FB:D6:6D:72:71:80:40:DD:CE:20:36"}}},"request":{"raw":"GET /pn/4c9/dde/bac/4c9ddebac448711ec7391c608c6b207270b30c5e.png HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 24 Nov 2025 11:58:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 55688\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=68839\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 8d08651e37bc82f549e1ab6adda65ace\r\nexpires: Tue, 25 Nov 2025 02:09:48 GMT\r\nlast-modified: Mon, 23 Dec 2019 09:02:17 GMT\r\nx-cdn-host-id: ds7445,ds5833\r\nx-openstack-request-id: txf2146dd31c59430a82d7d-0066ec1e2b\r\nx-proxy-cache: HIT\r\nx-timestamp: 1577091736.70112\r\nx-trans-id: txf2146dd31c59430a82d7d-0066ec1e2b\r\ncf-cache-status: HIT\r\nage: 121739\r\ncf-ray: 9a38bc8b6ab276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55688,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"a2e067b6c57c13e604a588264db0fa87","sha1":"b3d59bb0a671edb7822cb99e701f8fe5242a4247","sha256":"077e01a62474304a6e92ce633ac667c92f49cdd2bf4c3b54ba714416c3c283fb","sha512":"5deade4f0a555f1451ff8ad3b961f41044d8e38b6f890c0583972d6ec96a652421f63809c28f4442b4c4e9b05a7d3e5bc0ac4b24c1f691b9fe09f0d3c4677cdd","ssdeep":"1536:w33rUmgFAYWW1inEjXGS1svbNaSn18Zerh:w33rVBYWhnwLoJLaZeV","tlshash":"2743f2373311a94e50263332f7a2dd1cb890985fae509fecb69fed4628866e5c2b1143","first_seen":"2025-07-19T14:07:14.444323Z","last_seen":"2025-11-26T18:19:44.571136Z","times_seen":170,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":68,"dns":48,"connect":1,"send":0,"wait":7,"receive":2,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/chicken.gif?z=2060451\u0026pb=13b006061e0f8aef1826085e2a26a6111763992727\u0026pbc=Ym6I4lAWaviXZCRp\u0026pbi=sw7VxJWvwkeXZCRp\u0026pbu=DvYKHTHjcMGXZCRp\u0026psp=SLArVQdd6_cdCEJwPtiTljR8FF_BvUpkFEhYNRhql349Mr1zoh-1E2GCB23ORa7J9p81hNZNWbsuZksWdpjfb3FK5tiluHj0C3qawjLsKFM3_NeCrEbEotbbE3C2m3tGzCo5M3njFII-7SS24fYXkytO8OEF__az2cAyVnKsG-j0mcSlf1q423DJ07-Y0ejwVe4cRsx4GSXTNJvgAUBbJVqNV-aZUe4HBcHXxHwEk76WMLazyt0hgphHYhmm1nIFEbfIG-Q1CtNOGywQ769qFTgJa6TiwwxrTALEOEl-f-K37nhXOxuB-sVqAjqZqWUQmF0nMVVH6vFWK8EUyB_rqGiGwC5KFUGkaTvVSeuwlD_oWS8JGhzJjc_yhruYSk8zCkYkuf6E10Vp802Jp1VslgT9Hvh5ja06SmAa2Xp-vGSt99ZDX_6kRa5BjGr6M4nHGTZdsqn7YonYBU7qlcmoj66yMblxf3IYkupdQRzcKJKMspo7TWuMcu-0wighZZgc_KI_reyz4aodypbP0a0OKTJ7wJBVVJbzstqlvZwF5vxFrx8fS9UTFChYXFOS-cPvuFUGh5uD1f7nnK2k_KvDLbmToeqHV4lssLS7t9ghAehjd0byabaGbs2DJn6q9jbvWbrad9jGEDAPo89Vk7gvGGyVe0i73s6jq0WnazZ36uYNQjsrYk9EFUdOMAccEIk-OvILu-1kH2AC0L8l0y6Q5V3ChYvZbegi0RsxtWzSx1n_4HvPOKXCr5j5oVEq2K4vJD68Xb7hgxCjX0dj76Mv5YrbnKkL_KSo7h-W9wbAXkxN8ISZP5BUOqy06XH8j8fj-s01MLZ9DBSYQ04Z148YoCXy\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xe0uzssaHR0cHM6Ly93YWx0ZXJwcmV0dHl0aGVpci5jb20vZS94dmtvMDh4YmNncXk\u0026afid=397079532376064\u0026eclog=0\u0026snc=0\u0026ssc=3\u0026tp=0\u0026vp=8\u0026pi=W1oqmg\u0026pload=1643\u0026rlp=%5B0%2C87%2C599%2C461%2C8036%2C4943%2C1392%2C4762%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:49.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avalanchetremorunfilled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:41 GMT","end":"Wed, 21 Jan 2026 14:24:40 GMT"},"fingerprint":{"sha1":"7C:99:37:1B:56:E3:EA:68:F8:DE:7D:7E:3B:31:C5:E9:3D:37:ED:5F","sha256":"67:D7:FE:FD:05:E9:B9:3E:4F:B9:10:D8:89:BE:6D:FA:B2:8C:D8:7A:F4:F7:51:30:DC:4D:C2:BA:51:A5:10:56"}}},"request":{"raw":"GET /chicken.gif?z=2060451\u0026pb=13b006061e0f8aef1826085e2a26a6111763992727\u0026pbc=Ym6I4lAWaviXZCRp\u0026pbi=sw7VxJWvwkeXZCRp\u0026pbu=DvYKHTHjcMGXZCRp\u0026psp=SLArVQdd6_cdCEJwPtiTljR8FF_BvUpkFEhYNRhql349Mr1zoh-1E2GCB23ORa7J9p81hNZNWbsuZksWdpjfb3FK5tiluHj0C3qawjLsKFM3_NeCrEbEotbbE3C2m3tGzCo5M3njFII-7SS24fYXkytO8OEF__az2cAyVnKsG-j0mcSlf1q423DJ07-Y0ejwVe4cRsx4GSXTNJvgAUBbJVqNV-aZUe4HBcHXxHwEk76WMLazyt0hgphHYhmm1nIFEbfIG-Q1CtNOGywQ769qFTgJa6TiwwxrTALEOEl-f-K37nhXOxuB-sVqAjqZqWUQmF0nMVVH6vFWK8EUyB_rqGiGwC5KFUGkaTvVSeuwlD_oWS8JGhzJjc_yhruYSk8zCkYkuf6E10Vp802Jp1VslgT9Hvh5ja06SmAa2Xp-vGSt99ZDX_6kRa5BjGr6M4nHGTZdsqn7YonYBU7qlcmoj66yMblxf3IYkupdQRzcKJKMspo7TWuMcu-0wighZZgc_KI_reyz4aodypbP0a0OKTJ7wJBVVJbzstqlvZwF5vxFrx8fS9UTFChYXFOS-cPvuFUGh5uD1f7nnK2k_KvDLbmToeqHV4lssLS7t9ghAehjd0byabaGbs2DJn6q9jbvWbrad9jGEDAPo89Vk7gvGGyVe0i73s6jq0WnazZ36uYNQjsrYk9EFUdOMAccEIk-OvILu-1kH2AC0L8l0y6Q5V3ChYvZbegi0RsxtWzSx1n_4HvPOKXCr5j5oVEq2K4vJD68Xb7hgxCjX0dj76Mv5YrbnKkL_KSo7h-W9wbAXkxN8ISZP5BUOqy06XH8j8fj-s01MLZ9DBSYQ04Z148YoCXy\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xe0uzssaHR0cHM6Ly93YWx0ZXJwcmV0dHl0aGVpci5jb20vZS94dmtvMDh4YmNncXk\u0026afid=397079532376064\u0026eclog=0\u0026snc=0\u0026ssc=3\u0026tp=0\u0026vp=8\u0026pi=W1oqmg\u0026pload=1643\u0026rlp=%5B0%2C87%2C599%2C461%2C8036%2C4943%2C1392%2C4762%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: avalanchetremorunfilled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2511240658a4f68b6afab34a458453173ca2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 24 Nov 2025 11:58:49 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: BCAI=ABSSGgAAAAAAAAAB; Path=/; Expires=Tue, 25 Nov 2025 11:58:49 GMT; Secure; SameSite=None\nBMI=AB8WWAAAAAAAAAAB; Path=/; Expires=Tue, 25 Nov 2025 11:58:49 GMT; Secure; SameSite=None\nBCRI=A8Q1GAAAAAAAAAAB; Path=/; Expires=Tue, 25 Nov 2025 11:58:49 GMT; Secure; SameSite=None\nIMC_102=1; Path=/; Expires=Tue, 25 Nov 2025 11:58:49 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-19T01:23:10.697453Z","times_seen":20960,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/favicon-16x16.png","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=d76Fj3LidZvMHXQU; __ddg10_=1763985526; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jz1csIBFDTvOX2kJ; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg10_=1763985526; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 17:18:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 533\r\nlast-modified: Mon, 20 May 2024 13:32:00 GMT\r\netag: \"664b50d0-215\"\r\nexpires: Tue, 23 Dec 2025 17:18:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 67234\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"4a1c219d978909f413ca1b9a39f7523d","sha1":"08859f796b01690ee81a13e4bcc0976f16c473ca","sha256":"dc91f3be29e28fa5aa027f4c3165a5df794424e66c1627b90a204482b470f0be","sha512":"898c1447a0dd59b40541b9720d28b191d01ce9e4e1d1c5e3ccae3e879a2249183fc74e752760f3ae0c16639c9dad6e8b5d00c627bbb4c5965c99aff1ec0aeada","ssdeep":"","tlshash":"fef020bc3323583cddcd9db641f51094a913d88c86c42d3cbec672ec44356a8c9e4036","first_seen":"2023-05-08T15:55:48Z","last_seen":"2026-04-14T12:00:55.205908Z","times_seen":929,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/get/2060451?id=2060451\u0026jp=_cldwvldxyoauhayurzsdch\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Xcr2534aHR0cHM6Ly93YWx0ZXJwcmV0dHl0aGVpci5jb20vZS94dmtvMDh4YmNncXk\u0026afid=4337729206180352\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=8\u0026pi=W1oqmg\u0026pload=1643\u0026rlp=%5B0%2C87%2C599%2C461%2C4123%2C4741%2C1372%2C4560%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:47.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avalanchetremorunfilled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:41 GMT","end":"Wed, 21 Jan 2026 14:24:40 GMT"},"fingerprint":{"sha1":"7C:99:37:1B:56:E3:EA:68:F8:DE:7D:7E:3B:31:C5:E9:3D:37:ED:5F","sha256":"67:D7:FE:FD:05:E9:B9:3E:4F:B9:10:D8:89:BE:6D:FA:B2:8C:D8:7A:F4:F7:51:30:DC:4D:C2:BA:51:A5:10:56"}}},"request":{"raw":"GET /get/2060451?id=2060451\u0026jp=_cldwvldxyoauhayurzsdch\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Xcr2534aHR0cHM6Ly93YWx0ZXJwcmV0dHl0aGVpci5jb20vZS94dmtvMDh4YmNncXk\u0026afid=4337729206180352\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=8\u0026pi=W1oqmg\u0026pload=1643\u0026rlp=%5B0%2C87%2C599%2C461%2C4123%2C4741%2C1372%2C4560%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: avalanchetremorunfilled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2511240658a4f68b6afab34a458453173ca2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 24 Nov 2025 11:58:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 28 Dec 2026 11:58:47 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 28 Dec 2026 11:58:47 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5566,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5566), with no line terminators","md5":"701d063cb00f03cf12a2ba84b8ec7961","sha1":"10ad0c592a36ecdffcb391cdb63bab690aa9e681","sha256":"57ce8cb3e382ade9ecff6522791a41a65a6b065c4caf3028fa99018134b99604","sha512":"9a7448be5bb590183f9f8b0bf1d6a84324acb246ec546c623d8174985356b8b6b27f9536811b7c44c145e090dbbd04909edce61d031843ad2d1f1f2f0cf221a2","ssdeep":"96:gW+OHODwRKqAXJ6TQSSlX1YSEHF/fyuzaokdzdeK:gpek6T3SlXi9l/fyDokCK","tlshash":"bcb11bdaad11d4639c889bd18eb7ad63071662de8451eb41e2edc3dc638c93a3901116","first_seen":"2025-11-24T11:59:21.829177Z","last_seen":"2025-11-24T11:59:21.829177Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/s/css/site.min.css?cb42e55bbdab3f11540fa3b620a6e66e","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /s/css/site.min.css?cb42e55bbdab3f11540fa3b620a6e66e HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=rp34MgDXYErXreq9; __ddg10_=1763985525; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YbELBcsE0jPBSqd0; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg10_=1763985526; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 17:18:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 25 Aug 2024 05:41:47 GMT\r\netag: W/\"66cac41b-42120\"\r\nexpires: Tue, 23 Dec 2025 17:18:11 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 67235\r\ncontent-length: 36644\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270624,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65271)","md5":"c71fa701386844028fe6595289427599","sha1":"8be981f11be9f5aab5fd100ee58b8a9332674382","sha256":"39710492ff4eb2fd207455f6edca3b9649b46fd2644021344afdf1d4c9a5ca11","sha512":"eb59d640b418acd5a06c791f80e3e98916cf53953477cdaab70b938c09a9d596ce18771910af42227e052d95251f5fce7c0ef1db0bcacc9b63c749d72ef29bf1","ssdeep":"3072:7nL9Df9J/RNOokVsdmrjY82oUXpPzfjzntD:7nL9Df9DN/vdmrjY82oUXpPzfjzntD","tlshash":"fb4492e6f9d0307d2c67c259a690fefd6a2ea545db120ea6f003672487c96d309739cc","first_seen":"2025-04-08T05:57:49.888306Z","last_seen":"2026-04-15T23:28:02.74706Z","times_seen":347,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/jwplayer/8.38.2/provider.hlsjs.js","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /jwplayer/8.38.2/provider.hlsjs.js HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=Omm7GrwCAe7cyuFD; __ddg10_=1763985526; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=d76Fj3LidZvMHXQU; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg10_=1763985526; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 17:18:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-8c596\"\r\nexpires: Tue, 23 Dec 2025 17:18:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 67234\r\ncontent-length: 161958\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":574870,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"28ad7c8f97ec3efd3fc7355f4b7ab863","sha1":"0cc23dd36c89c6c9d47da8957c638583e8a843da","sha256":"061bc2c8535bfb740a2c1a5dab6e4c91c5388b84609282356b6d67cb0d85be73","sha512":"221c0c31d6cb59acb129ca485960e2a56051d668b76926e2cbe1b1241c46c4f0e7b192d571adea369a0d04916f94a162a12806aff5089f954306a31c54263ccf","ssdeep":"6144:caK/sZg+NY3UbNe6rXTQoalFwc3JWPCaEqeeuFBWqWDJkw0dHhbBI7NEpg8kF4e9:zbNPDCFw2BWqWwHpt7Y","tlshash":"21c42ade3795a01683c2b1a5903f5617633a7d0a280cc16cfa2be9d72d79949b03bf74","first_seen":"2025-07-09T03:26:33.452721Z","last_seen":"2025-12-13T13:26:16.431753Z","times_seen":141,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/android-icon-192x192.png","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /android-icon-192x192.png HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=d76Fj3LidZvMHXQU; __ddg10_=1763985526; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=JcCpobioDDa9SVTz; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg10_=1763985526; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 17:18:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 7068\r\nlast-modified: Mon, 20 May 2024 13:32:00 GMT\r\netag: \"664b50d0-1b9c\"\r\nexpires: Tue, 23 Dec 2025 17:18:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 67234\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6e09fa5e43f9f169c8b65bdba9683b46","sha1":"e986e9353a404b28a522b85dc0b7afb480b6cb27","sha256":"7940cbb7ef222596bef1a1d1db04e8a1b745dfdeb769ff9a46f4e3717396af0b","sha512":"877c8c593b415b7ee70c698c429bde02a0448c94a1500f202ea9f6c0c54ac4fa36c3bfc0d449d0dcd1b00802e494464ca38d45b98ce21c9829fec1d90806af8f","ssdeep":"192:0l+appIc5YmxlmChBC6QOANGVZQcyefhMD0Jdg5FadQzf:0lFpjFAeGGVRyS5S0K","tlshash":"ffe1aed7100650cc4e7f96dfe5af84c0672702ae4d6a1ab3047c23359b291ea9e19628","first_seen":"2023-05-08T15:55:48Z","last_seen":"2026-04-14T12:00:55.219415Z","times_seen":901,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/get/2060451?id=2060451\u0026jp=_cldwvldxyoauhayurzsdch\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=uFf1R4kaHR0cHM6Ly93YWx0ZXJwcmV0dHl0aGVpci5jb20vZS94dmtvMDh4YmNncXk\u0026afid=1804454415774208\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=8\u0026pload=1376\u0026rlp=%5B0%2C87%2C473%2C358%2C2291%2C2385%2C931%2C2204%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:47.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avalanchetremorunfilled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:41 GMT","end":"Wed, 21 Jan 2026 14:24:40 GMT"},"fingerprint":{"sha1":"7C:99:37:1B:56:E3:EA:68:F8:DE:7D:7E:3B:31:C5:E9:3D:37:ED:5F","sha256":"67:D7:FE:FD:05:E9:B9:3E:4F:B9:10:D8:89:BE:6D:FA:B2:8C:D8:7A:F4:F7:51:30:DC:4D:C2:BA:51:A5:10:56"}}},"request":{"raw":"GET /get/2060451?id=2060451\u0026jp=_cldwvldxyoauhayurzsdch\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=uFf1R4kaHR0cHM6Ly93YWx0ZXJwcmV0dHl0aGVpci5jb20vZS94dmtvMDh4YmNncXk\u0026afid=1804454415774208\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=8\u0026pload=1376\u0026rlp=%5B0%2C87%2C473%2C358%2C2291%2C2385%2C931%2C2204%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: avalanchetremorunfilled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 24 Nov 2025 11:58:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 28 Dec 2026 11:58:47 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 28 Dec 2026 11:58:47 GMT; Secure; SameSite=None\nUID=2511240658a4f68b6afab34a458453173ca2; Path=/; Expires=Mon, 28 Dec 2026 11:58:47 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (548), with no line terminators","md5":"25869d83d85759b172b91d1669a5eb2a","sha1":"a06c69b89a2b9db3f676f562c4fabcd3baff5ba2","sha256":"5a253135d1dfd24ff600e58cef73f218263bbe10d2d2bde1a7ea6619880a47c2","sha512":"a29b24cff3a995e4506cf85ea178e903bbc9110a7c1e24442a6af23211c46addf07ebebd1b209d4c90846317bd198bf133ee639af94a66cd0dd8c6a6c42b3693","ssdeep":"","tlshash":"4ef0c0ed0228ecf270830eee89bd0d4a309056155d039635b7129b9ac028135824bcf3","first_seen":"2025-11-24T11:59:21.833021Z","last_seen":"2025-11-24T11:59:21.833021Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://walterprettytheir.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 24 Nov 2025 11:58:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27446\r\ncf-ray: 9a38bc81dcff56b7-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64ed75bb-6b36\"\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 293834\r\nexpires: Sat, 14 Nov 2026 11:58:46 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JKJ7MNbDKY1zzluDQboOETV2DAcBzwWYOVh9OOPULeMLtOc0z1YqGSCkgQFiY%2BoqfR55C6NP5wzy7JjKs1BT%2FCOSDpIRwJoYwF%2F2es%2FrYhPo%2F36tWdE3vEHa6Q6IFr1K1nELFE0%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-19T02:34:02.605726Z","times_seen":141895,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":11,"dns":0,"connect":1,"send":0,"wait":11,"receive":2,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/build/assets/27-SABxh.js","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /build/assets/27-SABxh.js HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=rp34MgDXYErXreq9; __ddg10_=1763985525; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=M9PfyLYy23OgfTEd; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg10_=1763985526; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 17:18:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-6dc\"\r\nexpires: Tue, 23 Dec 2025 17:18:11 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 67235\r\ncontent-length: 743\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1755)","md5":"0f8d196002a87042ea0937428f428732","sha1":"a51a5552c6d4ecd7cef5eaf692805ed2c63b80bb","sha256":"3b04c518e637741a9132153c76798ce7988d6b3d7062df0e34b639f8016815dd","sha512":"4579e32b820b00129bc56ed5f6b565f9a202bb129167fdbf3ea31e497954e0127a43d49a011b11355fdcf3326068b59384598c5ed9b3bf2965e9399d639ecece","ssdeep":"","tlshash":"9f31b85570f96631c1593859e37bb362b2e00d5b7d253c8160ad0b726e39cc2dd7af88","first_seen":"2025-07-09T03:26:33.454888Z","last_seen":"2026-04-15T23:28:02.747932Z","times_seen":232,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/jwplayer/8.38.2/jwplayer.js","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /jwplayer/8.38.2/jwplayer.js HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=rp34MgDXYErXreq9; __ddg10_=1763985525; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dIiwNBd6ExkRqyB8; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg10_=1763985526; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 17:18:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-2613c\"\r\nexpires: Tue, 23 Dec 2025 17:18:11 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 67235\r\ncontent-length: 52943\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":155964,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d3b7e0e4267402d0e259c9a21792258","sha1":"6220167731bbbb87609d184a95f5c4c2b2f8c72c","sha256":"190acb6da87bd161114f93feb270234b6ff00dafa7c98732c452ff447d4cef77","sha512":"4ae57475aa41d82ae52d0204e9978089995d10d72cf1c9beb686e1811a6bb7a7e24140f21ecc073b01e1209a20c5cf4b27f26ae82e981ef8d5374aeb9a1ba75b","ssdeep":"1536:oryPjl9oOHjCyj35oM8j03kwdtxwszufvL3v5qYtwR/iaCttHF3vLGCaUZfkJk80:FHJ1az3LpaUZfkO8bMdhdD5J","tlshash":"59e34ca631c2f4a603e224d6e47b4101f2790949384de9a4f66cecd7795a907b1b3fbc","first_seen":"2025-07-09T03:26:33.454125Z","last_seen":"2025-12-13T13:26:16.425699Z","times_seen":141,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/js/loader.bc4a6543429.js","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /js/loader.bc4a6543429.js HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=rp34MgDXYErXreq9; __ddg10_=1763985525; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VoMu9c5CV94N8JhG; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg10_=1763985526; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 17:18:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-14500\"\r\nexpires: Tue, 23 Dec 2025 17:18:11 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 67235\r\ncontent-length: 26567\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83200,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f43b942340f3e45d3ae53d0712b13256","sha1":"e11a4d4c3d7fff07ab752e7cb73342aa156dd66f","sha256":"32113f06d823097d0181fdc56d12e40e3ab7ca9d07609ce3f41c6d2c6b1846e2","sha512":"63a713372921c75df85848b0da2c35c14d12a8348b10263fa035090110417a141d1497edcb989a1f777d9addcc7a6843ce2d270f5e1be873f76cf1ccf2b8320a","ssdeep":"1536:+Im9L7Faw8G/1K+jpw8y5f0HMNz2szEe/XmC2:+Im9fww9Hw8y5f0HWEe/u","tlshash":"2a83c51c26d0b9590b8b9f36b72f28dcf5570e2f6d84c84bc605bc602579a1bede2532","first_seen":"2025-07-09T03:26:33.467529Z","last_seen":"2026-04-15T23:28:02.785246Z","times_seen":232,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/chicken.gif?z=2060451\u0026pb=13b006061e0f8aef1826085e2a26a6111763992727\u0026pbc=Ym6I4lAWaviXZCRp\u0026pbi=sw7VxJWvwkeXZCRp\u0026pbu=DvYKHTHjcMGXZCRp\u0026psp=jFMEGoPzIoGcgK671mUV_Tt6KyaAoKuQ1E4lCd4D-4WEyv1Iok1E1wrpl4H2wgqOSdXYKSocYgBdVxznIC5Yb3SdHd2gF-xn4hhIaze2aP-t21OHJo-BLz2LAvkt1eHhascewP-s5F0cqO5RHDF55AlXSvFxjYMRQLSJY5OUfnQdjEdqgpWRV0JC4QflC4ha9hMe901OeJPTgUzSbSiBHozA9YAYMqrJoF5Iyh4pB0jRKIQDMWgwtAdnOkz8K_YYMIJSXB0iUCw4s96DgsA01vtNUpD0GSmlXZWXbGEHaya7aL8PYZc7gsZA3BSbSxo9v_URWxrVzFs6j5Uvg0Qsxdy5MWMlL_zfmdiA7rpxY95OhTIz5zdRjHrD3CA4GnaWn4L4rAVuPCTi09kUl5GSxn7LLJcPBSCb6igxiu2eRb77UYkRErpnmpL-vatMURATeRI4vx14-xT3P-foY-U3BZpDJpZ5WC4_fPoTVlZSLmVICnCH8A6gxctkUaxANxuyt633XcQ8t7Hk1_scVigR3wAcXwEExmMwC39cFffoaRwC72hANH8X0nhqL1otCdPNo_Jex1mta-3WpJxFjEQyIICuWqwfRYNJnnC89Z660t-ntzyvEPoWSpJ3dt_R46oFka0r6YW0qpSe-N3SXbyXaBLQ85KeYOW4fEBP_8GNpbUnkh2R7A1BVQDcGPYSGnS18Emis3mTueOtScNhdbpDgZdWiQOOpbQYN1KOTWgeH79WEFhiP_qiUVSlY4cXEqx2gT5faMYoAsA1S3kWjALDPKYOt1jlB1YTimFZlopIDRiyHivBdcBNJx7e1neYrFehOfF5lkwu48EPGAPH5V_w-XCH\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=M6vrVeEaHR0cHM6Ly93YWx0ZXJwcmV0dHl0aGVpci5jb20vZS94dmtvMDh4YmNncXk\u0026afid=5463629113261568\u0026eclog=0\u0026snc=0\u0026ssc=4\u0026tp=0\u0026vp=8\u0026pi=W1oqmg\u0026pload=1643\u0026rlp=%5B0%2C87%2C599%2C461%2C8036%2C4943%2C1392%2C4762%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:50.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avalanchetremorunfilled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:41 GMT","end":"Wed, 21 Jan 2026 14:24:40 GMT"},"fingerprint":{"sha1":"7C:99:37:1B:56:E3:EA:68:F8:DE:7D:7E:3B:31:C5:E9:3D:37:ED:5F","sha256":"67:D7:FE:FD:05:E9:B9:3E:4F:B9:10:D8:89:BE:6D:FA:B2:8C:D8:7A:F4:F7:51:30:DC:4D:C2:BA:51:A5:10:56"}}},"request":{"raw":"GET /chicken.gif?z=2060451\u0026pb=13b006061e0f8aef1826085e2a26a6111763992727\u0026pbc=Ym6I4lAWaviXZCRp\u0026pbi=sw7VxJWvwkeXZCRp\u0026pbu=DvYKHTHjcMGXZCRp\u0026psp=jFMEGoPzIoGcgK671mUV_Tt6KyaAoKuQ1E4lCd4D-4WEyv1Iok1E1wrpl4H2wgqOSdXYKSocYgBdVxznIC5Yb3SdHd2gF-xn4hhIaze2aP-t21OHJo-BLz2LAvkt1eHhascewP-s5F0cqO5RHDF55AlXSvFxjYMRQLSJY5OUfnQdjEdqgpWRV0JC4QflC4ha9hMe901OeJPTgUzSbSiBHozA9YAYMqrJoF5Iyh4pB0jRKIQDMWgwtAdnOkz8K_YYMIJSXB0iUCw4s96DgsA01vtNUpD0GSmlXZWXbGEHaya7aL8PYZc7gsZA3BSbSxo9v_URWxrVzFs6j5Uvg0Qsxdy5MWMlL_zfmdiA7rpxY95OhTIz5zdRjHrD3CA4GnaWn4L4rAVuPCTi09kUl5GSxn7LLJcPBSCb6igxiu2eRb77UYkRErpnmpL-vatMURATeRI4vx14-xT3P-foY-U3BZpDJpZ5WC4_fPoTVlZSLmVICnCH8A6gxctkUaxANxuyt633XcQ8t7Hk1_scVigR3wAcXwEExmMwC39cFffoaRwC72hANH8X0nhqL1otCdPNo_Jex1mta-3WpJxFjEQyIICuWqwfRYNJnnC89Z660t-ntzyvEPoWSpJ3dt_R46oFka0r6YW0qpSe-N3SXbyXaBLQ85KeYOW4fEBP_8GNpbUnkh2R7A1BVQDcGPYSGnS18Emis3mTueOtScNhdbpDgZdWiQOOpbQYN1KOTWgeH79WEFhiP_qiUVSlY4cXEqx2gT5faMYoAsA1S3kWjALDPKYOt1jlB1YTimFZlopIDRiyHivBdcBNJx7e1neYrFehOfF5lkwu48EPGAPH5V_w-XCH\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=M6vrVeEaHR0cHM6Ly93YWx0ZXJwcmV0dHl0aGVpci5jb20vZS94dmtvMDh4YmNncXk\u0026afid=5463629113261568\u0026eclog=0\u0026snc=0\u0026ssc=4\u0026tp=0\u0026vp=8\u0026pi=W1oqmg\u0026pload=1643\u0026rlp=%5B0%2C87%2C599%2C461%2C8036%2C4943%2C1392%2C4762%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: avalanchetremorunfilled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2511240658a4f68b6afab34a458453173ca2; BCAI=ABSSGgAAAAAAAAAB; BMI=AB8WWAAAAAAAAAAB; BCRI=A8Q1GAAAAAAAAAAB; IMC_102=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 24 Nov 2025 11:58:50 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: BCAI=ABSSDQAAAAAAAAABABSSGgAAAAAAAAAB; Path=/; Expires=Tue, 25 Nov 2025 11:58:50 GMT; Secure; SameSite=None\nBMI=AB8WWAAAAAAAAAABAB8WOwAAAAAAAAAB; Path=/; Expires=Tue, 25 Nov 2025 11:58:50 GMT; Secure; SameSite=None\nBCRI=A8Q1GAAAAAAAAAABNKSzggAAAAAAAAAB; Path=/; Expires=Tue, 25 Nov 2025 11:58:50 GMT; Secure; SameSite=None\nIMC_102=2; Path=/; Expires=Tue, 25 Nov 2025 11:58:50 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-19T01:23:10.697453Z","times_seen":20960,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/xvko08xbcgqy","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-24T11:58:45.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /e/xvko08xbcgqy HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rp34MgDXYErXreq9; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:45 GMT\n__ddg10_=1763985525; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:45 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:45 GMT\n__ddg1_=rPxY3jRscJ8SZCCpXKgM; Domain=.walterprettytheir.com; HttpOnly; Path=/; Expires=Tue, 24-Nov-2026 11:58:45 GMT\nXSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; expires=Mon, 24 Nov 2025 13:28:45 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D; expires=Mon, 24 Nov 2025 13:28:45 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Mon, 24 Nov 2025 11:58:45 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Twitter Ads","description":"Twitter Ads is an advertising platform for Twitter 'microblogging' system.","website":"https://ads.twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Advertising"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":132444,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (49057)","md5":"9d39f914d023a2d61ea5cfa3592350b0","sha1":"345b20c7f6818ea59001c42c1fbf34869ce73be3","sha256":"0be8586a2c0bdfb04dc538cdf69ffbc21b3a0fc9de8a530210d2ba18115258ff","sha512":"6f9ca63b796f286b49e450192ae493a50e1cc1b3c02e13f2c600d85ee4aee58430c0143c439917d83a51743e03d7ecdfccb767ff25c08dd76b11db5f1268d543","ssdeep":"3072:m7hXE1td7h9FsqaWs7jZPxhVCvi+vAiT2NJERLiW:wE7laWs7lP2i+v8NJc","tlshash":"c3d3fa9935d2b85903b2e0b541bf28cbb5bb7c80700c9444f16de9b4bfb1aaa8173d5d","first_seen":"2025-11-24T11:59:21.839479Z","last_seen":"2025-11-24T11:59:21.839479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":78,"dns":11,"connect":28,"send":0,"wait":102,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Figtree:wght@400;600;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"86:F4:DF:07:D6:8D:EF:68:44:7A:73:C8:39:14:1A:2F:98:5E:A2:40","sha256":"A0:B7:4F:94:25:40:33:52:BC:F7:0A:E1:AD:30:BD:19:C3:E9:BB:25:0B:05:26:7C:F8:BB:F0:59:3B:E7:F2:8D"}}},"request":{"raw":"GET /css2?family=Figtree:wght@400;600;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 24 Nov 2025 11:58:46 GMT\r\ndate: Mon, 24 Nov 2025 11:58:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2508,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3aa2ab6d0fb8d300056983c0ffb25f19","sha1":"b991567dda2fc5ff930ee96daf48ff4344436144","sha256":"1243dafebfbffbba4c76b4c374ba4ca071e8b3e951b9944962e78822c13e2770","sha512":"2610f46796da1f3821906bbb194acab4f6f18b33487695c0d341405fba6cd953e2f344d6fc20764d2d485e7c286d5a1ce41a285ad4956364816ce700d2248cd3","ssdeep":"","tlshash":"4951ce81086ba504df930dc152cd7e33ef5ea390684599349efe189cacead675312b4d","first_seen":"2025-09-12T16:05:45.649556Z","last_seen":"2026-04-15T23:28:02.773709Z","times_seen":204,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":213,"dns":1,"connect":27,"send":0,"wait":48,"receive":0,"ssl":198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://walterprettytheir.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 24 Nov 2025 11:58:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21170\r\ncf-ray: 9a38bc81ed1b56b7-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65d4c5f6-52b2\"\r\nlast-modified: Tue, 20 Feb 2024 15:32:06 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 287554\r\nexpires: Sat, 14 Nov 2026 11:58:46 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hfMWvrugZwEWe6aq986Es9jkoBIia%2BosXKsfTsa%2BBbCb%2FU6mS60riMF5YKYcRqmp85mBB%2B8FPBnALJVpDsXpEPVXKyspsotXKiT4AK4tCjFGSo%2FQfOpTEVFHLIKASNiK4o0ChP9y\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-19T02:35:56.746069Z","times_seen":22713,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":2,"dns":1,"connect":1,"send":0,"wait":22,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/jwplayer/8.38.2/jwplayer.core.controls.js","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:46.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 16:17:10 GMT","end":"Sat, 21 Feb 2026 16:17:09 GMT"},"fingerprint":{"sha1":"5F:DF:ED:5C:11:84:4D:F7:20:EC:20:61:4D:96:0A:79:69:E4:59:D5","sha256":"98:C2:72:66:91:05:93:17:1C:09:63:68:56:19:79:66:C2:58:1D:1F:A1:CE:69:80:B4:5A:0F:65:0E:2A:5C:BB"}}},"request":{"raw":"GET /jwplayer/8.38.2/jwplayer.core.controls.js HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/e/xvko08xbcgqy\r\nCookie: __ddg8_=Omm7GrwCAe7cyuFD; __ddg10_=1763985526; __ddg9_=91.90.42.154; __ddg1_=rPxY3jRscJ8SZCCpXKgM; XSRF-TOKEN=eyJpdiI6ImZtekJCNHVXZFgxeGQ4KzJnZVY0WVE9PSIsInZhbHVlIjoiazdacFYvTDFDUWJ5TEU2UlozazlJQVNHcG4xdnJ6eHZlTHROajhCTzVzaE1wZWNMYVRDN2Q0TXE3NnhabnVkeVZsTkVOUkJDbWQ3UmluWkttVHBVazB3UFBFam45eFYzdElURVpFRnZpSkdPVHcxdzRSSldZVmRsOFVPSDdEbVQiLCJtYWMiOiI2NTQ3M2ExNjllODlhMmUzNGYyZjc2MDU4NzFkZDBhZDI4ZjQ1OTFiMDkxYzdhOGUxZTkzMjBhNWFjNGMwMzM1IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImgwRzJSRUJJMXlZQ24wTDBhZkZUbVE9PSIsInZhbHVlIjoiWTh2UDdGUWRWcEg4ZGgxNnpGaTBsOCttRmxhTzhaSlNQbXRTZit0Z0l1d3N1QlV6UVplOVAzTVdLRWRJblVxTHJxMXJBMzNVMTJHNTY5cXJ0R0N2YjJ2ZWVvaWVLeHRWOW9NbXNaekl2WUNWRll1Rlc2TVF6ZjY0dmxWY2pRaisiLCJtYWMiOiIwMWU0MTU0ZDU4NWQwZWYwMmZhNjgwZjJmZWMwZmZlMjFkOGQzMTkwZTQ4YWZlOTY1YzE4YmIwMDRhZWMxMmI1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YXVj76YC0qz4yoWd; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg10_=1763985526; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.walterprettytheir.com; Path=/; Expires=Mon, 24-Nov-2025 12:18:46 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 17:18:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-53d0f\"\r\nexpires: Tue, 23 Dec 2025 17:18:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 67234\r\ncontent-length: 87532\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343311,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0a349b8e256b710c33f59804e11824af","sha1":"4124b412899128cb8a2521e4f5c2ac88c2c143b1","sha256":"527933d04090c542ae6bff57a0dc240d927908d890e37b578effa55a310932ce","sha512":"8b8efd834ba24cfe9b0f96247bcbba7f2fc1c939a13ebf2cbb8c1e06bd890e5e07f29b82c3303f5498a2f998642ab7d798ab3eff4a975f9eee47175a5358136d","ssdeep":"3072:VM7nFu+slX/+8CtPIVcSJh0EcYSrJ4MOkVGvSwqzrpxMChYFwSC3G:VMxRU/+TAcSJh0lO0GvSVpGJFwSC3G","tlshash":"a07419322142523596e682da76514604b33a8085f506cfacff7ceddd4c6e98b31fabb4","first_seen":"2025-07-09T03:26:33.46094Z","last_seen":"2025-12-13T13:26:16.486694Z","times_seen":141,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/082/d6d/41f/082d6d41f9bd3220a660f2a4108986b2b367f0e4.png","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://walterprettytheir.com/e/xvko08xbcgqy","date":"2025-11-24T11:58:47.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 11:22:47 GMT","end":"Sat, 10 Jan 2026 12:22:44 GMT"},"fingerprint":{"sha1":"5F:F3:87:DA:78:FE:FC:D5:F7:1B:E2:6F:99:A9:F5:88:06:1F:6D:0C","sha256":"9E:1C:41:AF:6B:2C:22:66:DB:77:8A:92:75:A0:FC:E8:37:90:0A:A6:EA:FB:D6:6D:72:71:80:40:DD:CE:20:36"}}},"request":{"raw":"GET /pn/082/d6d/41f/082d6d41f9bd3220a660f2a4108986b2b367f0e4.png HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://walterprettytheir.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 24 Nov 2025 11:58:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 55322\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=66221\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 20c64ca88091db62ea69001a7382f005\r\nexpires: Wed, 26 Nov 2025 03:48:05 GMT\r\nlast-modified: Mon, 23 Dec 2019 08:43:03 GMT\r\nx-cdn-host-id: ds7445,ds5833\r\nx-openstack-request-id: tx28758e8f7663411990400-0066ec1df3\r\nx-proxy-cache: HIT\r\nx-timestamp: 1577090582.49776\r\nx-trans-id: tx28758e8f7663411990400-0066ec1df3\r\ncf-cache-status: HIT\r\nage: 29442\r\ncf-ray: 9a38bc8b6aa776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55322,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"067d88595c2f421f4f3d5ba457be3fb4","sha1":"755b7cadd97ba8b8ef6dac92923629c1b51862b1","sha256":"0f1d6309b6c39fa7be1c27d7fa028211bf4f617929e6bd76710f013085695b1d","sha512":"10a5b0e2b0023a1c6558dd0669fba43d2b8eb7afe8f7f38ef581454651e676e3124aee5f81d60fe9f4ea27803ecc6b28dfb5e3cc58b32696756016d29b6ff75b","ssdeep":"1536:Ze9yJR/OyM8nr+mghZ7DeB5iu1FDeUmcnIFPmSzpmo:ZeUPo8rl0DenikFi/cIRpl","tlshash":"a94301979e415d29ac75ef2fb65af73c14fa44d297b95ab02c67c841c092cce23e43a0","first_seen":"2025-07-01T18:24:57.387963Z","last_seen":"2025-11-25T23:20:14.809926Z","times_seen":133,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":75,"dns":59,"connect":1,"send":0,"wait":5,"receive":3,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}