WEBSITE ANALYSIS REPORT

http://crystaltreatmenteast.com/e/de6bycpuzie9

20 Jan 2026 · 21:55:31.000 UTCpublic

Report tags: malicious clickfix
Submit tags

Request review

Malicious detection

4 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:55:08.018 GET 200 document 739 B 245 ms 1 alerts

21:55:08.340 GET 200 document 130.0 KB 265 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://lauradaydo.com/e/de6bycpuzie9

IP / ASN

186.2.163.111

AS59692 · IQWeb FZ-LLC

Requested by: Not recorded

Resource information

File type: HTML document, ASCII text, with very long lines (48901)
MIME type: text/html; charset=utf-8
First seen (UTC): 20 Jan 2026 · 21:55:36.748 UTC
Last seen (UTC): 20 Jan 2026 · 21:55:36.748 UTC
Times seen: 1

Size: 130.0 KB (133110 bytes)
MD5: 912709d69aa2b710a0421a47c1982a9d
SHA1: e38beb33030ee018dc52243b4d09d4772cbcbcb4
SHA256: bca7b7d438881ede6b914325e734c1c8e12ae164d8902fd01f7762c818d2fd0d

Certificate information

Issuer: Let's Encrypt · R12
Subject: lauradaydo.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F
Valid from: Tue, 13 Jan 2026 16:28:02 GMT
Valid until: Mon, 13 Apr 2026 16:28:01 GMT

Technology fingerprints

Twitter Ads (Advertising)
cdnjs (CDN)
Cloudflare (CDN)
jQuery:3.7.1 (JavaScript libraries)
Bootstrap:5.3.3 (UI frameworks)
HSTS (Security)
DDoS-Guard (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /e/de6bycpuzie9 HTTP/1.1
Host: lauradaydo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://crystaltreatmenteast.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=NsbS2JbCxq2cjKqH; Domain=.lauradaydo.com; Path=/; Expires=Tue, 20-Jan-2026 22:15:08 GMT
__ddg10_=1768946108; Domain=.lauradaydo.com; Path=/; Expires=Tue, 20-Jan-2026 22:15:08 GMT
__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 20-Jan-2026 22:15:08 GMT
__ddg1_=p4OEG4cwYkgPy6p2HoFt; Domain=.lauradaydo.com; HttpOnly; Path=/; Expires=Wed, 20-Jan-2027 21:55:08 GMT
XSRF-TOKEN=eyJpdiI6InR4a0M2VkRvYlUxUDVldTgvd0JSS0E9PSIsInZhbHVlIjoieU93Zm16ZVFPQWhwS1hOSnIxaE05T0NOWTJwTHhhRHMyUDJoMC85Q2MvR3czcUpZSk1xQUwrRW5iWU8xd3hVdGcwMVZXWElVYlluZktiQWJrZ3pjRlFzdXNTSmZmTU8wZVRPaVB0cTdXK01Vd0hiaUQwczIyOXloZWRZQjJVay8iLCJtYWMiOiI3MzZlYTk0MGU0YTdjZTFjYTA0NGRmMDk5MDlmZmJmYTNlY2IzMWExZGZmYWU5MDdmMTFmZjMxZjI0ZjIzYzQ1IiwidGFnIjoiIn0%3D; expires=Tue, 20 Jan 2026 23:25:08 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned
voe_session=eyJpdiI6IkNZQlpBdlZ5aE93UHVYMUlTalgvMmc9PSIsInZhbHVlIjoiREl1QjBPSXBhaFpQWCtoL214VjBlTWJRc3BrdlJTVkhyeGxHMGpQVmYzdXpUakI0eGU0VTRaTjJCU1NPOHJ0OURiVnJUc0dwZ0F6VWczSkpRVFA5UHhYZGUxZ2xMYlFmNjdDdXc2REVXR0tvbkg1RGpwNTNBcmF5QzVNNUVwTUsiLCJtYWMiOiI4MDljOTU2YmNkYzc4ZDI4YmIxZTI2MmE1NTI0MTYyZTM1M2JiYjQyNTU2MTMwNmU5YTMzYjczN2UwMjZkZmYzIiwidGFnIjoiIn0%3D; expires=Tue, 20 Jan 2026 23:25:08 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: no-cache, private
date: Tue, 20 Jan 2026 21:55:08 GMT
content-encoding: gzip
X-Firefox-Spdy: h2

21:55:08.657 GET 200 stylesheet 2.4 KB 308 ms —

21:55:08.661 GET 200 stylesheet 264.3 KB 39 ms 1 alerts

21:55:08.665 GET 200 script 85.5 KB 82 ms —

21:55:08.669 GET 200 stylesheet 5.5 KB 32 ms 1 alerts

21:55:08.670 GET 200 script 1.7 KB 29 ms 1 alerts

21:55:08.671 GET 200 script 156.1 KB 54 ms 1 alerts

21:55:08.673 GET 200 script 81.2 KB 53 ms 1 alerts

21:55:08.675 GET 200 script 97.1 KB 163 ms —

21:55:08.676 GET 200 script 78.8 KB 70 ms —

21:55:08.677 GET 200 script 100.4 KB 51 ms 2 alerts

21:55:08.831 GET 200 script 454.3 KB 119 ms —

21:55:09.120 GET 200 xhr 126 B 108 ms —

21:55:09.122 GET 200 img 403 B 33 ms 1 alerts

21:55:09.140 GET 200 script 65.8 KB 33 ms 1 alerts

21:55:09.231 GET 200 script 334.9 KB 38 ms 1 alerts

21:55:09.249 GET 200 script 560.9 KB 45 ms 1 alerts

21:55:09.251 GET 200 font 19.7 KB 169 ms —

21:55:09.305 GET 200 script 5.0 KB 13 ms —

21:55:09.471 GET 200 img 6.9 KB 44 ms 1 alerts

21:55:09.473 GET 200 img 533 B 43 ms 1 alerts

21:55:09.572 GET 200 subdocument 926 B 18 ms —

21:55:09.825 GET 200 xhr 11.1 KB 98 ms 1 alerts

21:55:09.842 GET 200 img 108.3 KB 39 ms 1 alerts

21:55:09.899 GET 200 script 548 B 19 ms —

21:55:09.929 GET 200 script 535 B 119 ms —

21:55:09.934 GET 200 img 217.6 KB 380 ms 1 alerts

21:55:10.034 GET 200 script 6.4 KB 20 ms —

21:55:10.065 GET 200 img 5.1 KB 150 ms —

21:55:10.070 GET 200 img 4.4 KB 139 ms —

21:55:12.090 GET 200 img 43 B 18 ms —

21:55:13.112 GET 200 img 43 B 18 ms —

http://crystaltreatmenteast.com/e/de6bycpuzie9

Domain graph

Hostnames

Connections