WEBSITE ANALYSIS REPORT

http://lancewhosedifficult.com/5vetrxi6roor/download

08 Mar 2026 · 17:56:11.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:55:48.972 GET 200 document 753 B 1403 ms —

17:55:49.860 GET 200 document 114.5 KB 327 ms 1 alerts

17:55:49.961 GET 200 img 15.0 KB 34 ms —

17:55:50.161 GET 200 stylesheet 2.4 KB 198 ms —

17:55:50.163 GET 200 stylesheet 264.3 KB 48 ms 1 alerts

17:55:50.164 GET 200 script 85.5 KB 85 ms —

17:55:50.180 GET 200 script 97.2 KB 168 ms 2 alerts

17:55:50.402 GET 200 font 19.7 KB 146 ms —

17:55:50.405 GET 200 font 19.7 KB 216 ms —

17:55:50.537 GET 200 img 15.0 KB 38 ms 1 alerts

17:55:50.580 GET 200 subdocument 957 B 18 ms 2 alerts

17:55:50.675 GET 200 script 6.4 KB 19 ms 2 alerts

17:55:50.705 GET 200 img 34.3 KB 253 ms —

17:55:50.708 GET 200 img 41.2 KB 202 ms —

17:55:52.731 GET 200 img 43 B 19 ms 2 alerts

17:55:53.742 GET 200 img 43 B 19 ms 2 alerts

Transaction #11

Request / response

URL

GET HTTPS

https://avalanchetremorunfilled.com/chicken.gif?z=2060451&pb=04a253308dfd3d7513969a2273a4a35f1772999750&pbc=91Y5qDTZYx5G1K1p&pbi=klslwtMm4CVG1K1p&pbu=Q6vtGB9etq1G1K1p&psp=qX9YkxDT2y5E2YMePErx9YIirBvkxpUcLDMb9KB4xt9zsgsJDOzOvs-ZuiHMIcXQCurZmae4J4qEc7qqYKg17VQuWnrMkjnKkEDZIFWxnvf0uNL1C9Kbv7_m2i4hPCz88_w_-HHwPCHT70yobicoLP0BjsCS1IoE_8DyRwthqjdposEWxmfHDUGHGtTpkgsxRcH_tXV6Xv6FGyEOwduDoXJaus17Ff0MXJRlXyrxUMvhz7hiKG7D6uBclGepCwZP016BBwqUjRtsCpvro-L6wLQrbL7-eIHilysm_WK6r3cQj1IxA8FIqIaMQtbUAGRjCTAtWqDPPHMqCdq-_Sq2TlV8JPFAGIQpr7JX9Ug8bFWPRau7QVIF97So23-MpxE3YipNms_mnTEtd2fbjD6JySLJcv5R5WLqOaVBbCDRLY5vqAmCcKiGA3iCZOYk3hjbGK_2WDhX7AUfMbcuRDHO2RBTpUDV5Ocv1-Delp_AfgOQbWsU1DTQwx8_mbFbtsspphbUEvJRIm-vdckEVQuKkUij2oZ2zHFt1_JXtqqTrPUFCivwkCqQyDr0ZRl1xedLKp22bvq0D0L3YtJ7y9LQxDVdzlrXBHlnNbLhht2pZWFogZaoWUM5ypWj0V3bZXOogAPejMj6zB03l9IhfqQzaDW9pLeE2XSTuTqBvZ6uO0_rgG5zebN7WjzSU0RbvCrKgR7HlTWQ7EIbp2yXPIMpXo191tnH1qDRFNKf4Ae4P0X4OpgUgrWl3dy-x2q3JSogJbVrqcTX5cWvuxRtjE78qbmmiBSDM_POdYnexaExkAADxx2fHEvRUnvFleJyGwYoDm9112st8P7XFTWXNpbpQlrSxwBXON-wnEU4bLeTJ_-FxfnaDVZemqOS3NDsPu4vw5zqwVkUt5GMBjVilwbTGP_Ho9-h8WopdctipoYnunA6RViNk2CVvhZPiH8_-Bt9q0JYtIES3SPEZWg-E5NYLx0QqziHxkosmvAHg99k9dv_uGh7E2hJVIbvqXsePsDDbZ_P3qyB1Yx2chwAQ1Y1NHbQUSRqHF9ovYVVWIQD8Ucbtw==&freq=0&nojs=0&bavar=0&febuild=1.1.21-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC+0&ss=1&ls=1&bb=0&cti=2&fn=3&es=13&ge=2&th=D3SWuGLP5o7828F&pcs=2&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Win32&cd=24&vcv=Mesa&vcn=llvmpipe&psr=bJZiOojaHR0cHM6Ly9sYW5jZXdob3NlZGlmZmljdWx0LmNvbS8&ix=0&x=1280&y=1024&md=0&psu=s6ePrJHaHR0cHM6Ly9sYXVyYWRheWRvLmNvbS81dmV0cnhpNnJvb3IvZG93bmxvYWQ&afid=6308644327608320&caifrq=ABSSOAAAAAAAAAAB&eclog=0&seu=ST5s7dZaHR0cHM6Ly9sYW5jZXdob3NlZGlmZmljdWx0LmNvbS8&snc=0&ssc=3&tp=0&vp=0&pkw=0&pload=818&rlp=%5B0%2C62%2C417%2C310%2C2031%2C1243%2C343%2C1243%2C1%5D&srw=1280&srh=1024&im=1&noch=1&cs=5

IP / ASN

94.242.247.33

AS7979 · SERVERS-COM

Requested by: https://lauradaydo.com/5vetrxi6roor/download

Resource information

File type: GIF image data, version 89a, 1 x 1
MIME type: image/gif
First seen (UTC): 05 Apr 2023 · 09:26:54.000 UTC
Last seen (UTC): 21 Oct 2026 · 22:58:31.106 UTC
Times seen: 23091

Size: 43 B (43 bytes)
MD5: 28e463819a210071de3b45ebe7633613
SHA1: 6dccd571828ec0912629119cf7eabfea9f33ddbc
SHA256: 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84

Certificate information

Issuer: Google Trust Services · WR1
Subject: avalanchetremorunfilled.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 7E:76:08:B0:01:78:32:41:71:D8:35:27:81:F2:8C:70:67:04:AA:9F
Valid from: Tue, 06 Jan 2026 14:14:58 GMT
Valid until: Mon, 06 Apr 2026 14:14:57 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /chicken.gif?z=2060451&pb=04a253308dfd3d7513969a2273a4a35f1772999750&pbc=91Y5qDTZYx5G1K1p&pbi=klslwtMm4CVG1K1p&pbu=Q6vtGB9etq1G1K1p&psp=qX9YkxDT2y5E2YMePErx9YIirBvkxpUcLDMb9KB4xt9zsgsJDOzOvs-ZuiHMIcXQCurZmae4J4qEc7qqYKg17VQuWnrMkjnKkEDZIFWxnvf0uNL1C9Kbv7_m2i4hPCz88_w_-HHwPCHT70yobicoLP0BjsCS1IoE_8DyRwthqjdposEWxmfHDUGHGtTpkgsxRcH_tXV6Xv6FGyEOwduDoXJaus17Ff0MXJRlXyrxUMvhz7hiKG7D6uBclGepCwZP016BBwqUjRtsCpvro-L6wLQrbL7-eIHilysm_WK6r3cQj1IxA8FIqIaMQtbUAGRjCTAtWqDPPHMqCdq-_Sq2TlV8JPFAGIQpr7JX9Ug8bFWPRau7QVIF97So23-MpxE3YipNms_mnTEtd2fbjD6JySLJcv5R5WLqOaVBbCDRLY5vqAmCcKiGA3iCZOYk3hjbGK_2WDhX7AUfMbcuRDHO2RBTpUDV5Ocv1-Delp_AfgOQbWsU1DTQwx8_mbFbtsspphbUEvJRIm-vdckEVQuKkUij2oZ2zHFt1_JXtqqTrPUFCivwkCqQyDr0ZRl1xedLKp22bvq0D0L3YtJ7y9LQxDVdzlrXBHlnNbLhht2pZWFogZaoWUM5ypWj0V3bZXOogAPejMj6zB03l9IhfqQzaDW9pLeE2XSTuTqBvZ6uO0_rgG5zebN7WjzSU0RbvCrKgR7HlTWQ7EIbp2yXPIMpXo191tnH1qDRFNKf4Ae4P0X4OpgUgrWl3dy-x2q3JSogJbVrqcTX5cWvuxRtjE78qbmmiBSDM_POdYnexaExkAADxx2fHEvRUnvFleJyGwYoDm9112st8P7XFTWXNpbpQlrSxwBXON-wnEU4bLeTJ_-FxfnaDVZemqOS3NDsPu4vw5zqwVkUt5GMBjVilwbTGP_Ho9-h8WopdctipoYnunA6RViNk2CVvhZPiH8_-Bt9q0JYtIES3SPEZWg-E5NYLx0QqziHxkosmvAHg99k9dv_uGh7E2hJVIbvqXsePsDDbZ_P3qyB1Yx2chwAQ1Y1NHbQUSRqHF9ovYVVWIQD8Ucbtw==&freq=0&nojs=0&bavar=0&febuild=1.1.21-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC+0&ss=1&ls=1&bb=0&cti=2&fn=3&es=13&ge=2&th=D3SWuGLP5o7828F&pcs=2&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Win32&cd=24&vcv=Mesa&vcn=llvmpipe&psr=bJZiOojaHR0cHM6Ly9sYW5jZXdob3NlZGlmZmljdWx0LmNvbS8&ix=0&x=1280&y=1024&md=0&psu=s6ePrJHaHR0cHM6Ly9sYXVyYWRheWRvLmNvbS81dmV0cnhpNnJvb3IvZG93bmxvYWQ&afid=6308644327608320&caifrq=ABSSOAAAAAAAAAAB&eclog=0&seu=ST5s7dZaHR0cHM6Ly9sYW5jZXdob3NlZGlmZmljdWx0LmNvbS8&snc=0&ssc=3&tp=0&vp=0&pkw=0&pload=818&rlp=%5B0%2C62%2C417%2C310%2C2031%2C1243%2C343%2C1243%2C1%5D&srw=1280&srh=1024&im=1&noch=1&cs=5 HTTP/1.1
Host: avalanchetremorunfilled.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=26030812551bb7e9ddb4384a639be7a38076; OACICAP=ABSSOAAAAAAAAAAB; OACIBLOCK=ABSSOAAAAABprQJQ; BCAI=ABSSOAAAAAAAAAAB; BMI=AB8WfAAAAAAAAAAB; BCRI=HfA7fgAAAAAAAAAB; IMC_102=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response headers

HTTP/2 200 OK
server: nginx
date: Sun, 08 Mar 2026 17:55:53 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: BCAI=ABSSOAAAAAAAAAABABSSFQAAAAAAAAAB; Path=/; Expires=Mon, 09 Mar 2026 17:55:53 GMT; Secure; SameSite=None
BMI=AB8WfAAAAAAAAAABAB8WSwAAAAAAAAAB; Path=/; Expires=Mon, 09 Mar 2026 17:55:53 GMT; Secure; SameSite=None
BCRI=HfA7fgAAAAAAAAAB2OC37wAAAAAAAAAB; Path=/; Expires=Mon, 09 Mar 2026 17:55:53 GMT; Secure; SameSite=None
IMC_102=2; Path=/; Expires=Mon, 09 Mar 2026 17:55:53 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2

http://lancewhosedifficult.com/5vetrxi6roor/download

Domain graph

Hostnames

Connections

Network requests

Transaction #11

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://lancewhosedifficult.com/5vetrxi6roor/download

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #11

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://lancewhosedifficult.com/5vetrxi6roor/download

Domain graph

Network requests