WEBSITE ANALYSIS REPORT

http://walterprettytheir.com/e/71rl53qdqjhz

04 Feb 2026 · 02:55:08.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:54:45.922 GET 302 document 114.5 KB 38 ms —

02:54:45.953 GET 404 document 114.5 KB 263 ms 1 alerts

02:54:46.290 GET 404 document 114.5 KB 110 ms 1 alerts

02:54:46.491 GET 200 stylesheet 2.4 KB 344 ms —

02:54:46.492 GET 200 stylesheet 264.3 KB 53 ms 1 alerts

02:54:46.494 GET 200 script 85.5 KB 51 ms —

02:54:46.495 GET 200 script 97.2 KB 162 ms 2 alerts

02:54:46.807 GET 200 font 19.7 KB 259 ms —

02:54:46.812 GET 200 font 19.7 KB 310 ms —

02:54:46.990 GET 200 img 15.0 KB 32 ms 1 alerts

02:54:46.998 GET 200 subdocument 926 B 18 ms 2 alerts

02:54:47.100 GET 200 script 548 B 18 ms 2 alerts

02:54:47.126 GET 200 script 535 B 107 ms —

02:54:47.226 GET 200 script 6.1 KB 22 ms 2 alerts

02:54:47.264 GET 200 img 141.8 KB 80 ms —

02:54:47.269 GET 200 img 492.2 KB 82 ms —

02:54:49.283 GET 200 img 43 B 18 ms 2 alerts

Transaction #01

Request / response

URL

GET HTTPS

https://avalanchetremorunfilled.com/chicken.gif?z=2060451&pb=a300f3ec80597d19e1a82a90cb7e33cb1770180887&pbc=iOV8s5W7RFgX0YJp&pbi=I2BonEQRJgkX0YJp&pbu=IGniGRk8m_MX0YJp&psp=oO1B9t3p6-3KrwcuR--jlqbdVVvRV_VCO8Pv5WujV3n7kxYwn9KgbuvFfsaS7cjsF_0UWsJv9UmPCVbLwUmyAi8CulP8mY5yuiZWwdO0s9_bkeyFoC7KZXB9RcBI6jRhRxBMH9Uq7UT7gHajg35IHlOHhO2Up05EsPhQAenaoPOYpygrdew7chCqK-O8hOL0OBSGzGR_xxQ_2GKCpCAO_8_DeBG2QLkmSqW8ogaAUuGT2n6-IsGAdoIxoCZKwLM3Dsz_Rzg7cX8Yz-c2YXgrxD5eCTEykeTYa_Ub3-3a8bacjH9HNvbsbSnfidnSXdGQd57pA6oA6dM_PfD4HKKcOseWNvUqH2LO-mnjx-ImbVDRch_7RRQ4ODTJSjNdaM19iUOWeiE2wCZRmWy7WZYQTCitZywnoniKnBM4ZGFxNIdELB8lhwkx30zeeyvRJsfzxP78TRkgnUydczEkXKq0zqNw3ttnm9tmP_groRVaFP6EIq0gP9L2jksXl1u6eOIYoEYBcLp6iZ0Rl5_nh-NWyHQ2_3VQaohYlvdyOkj_cNUDiZNJBd_spI5TF0XdkAYmHOeZeYxWMIN4YOKjqSlFTXHUtTRA_SE0NFGteXyWjfkPpuiNvIRF1PqhddCgXxK-jAjf02PwQSbYHG_vejybmfDIv5xx1dvtjgy3ebnfg3yFwkgk9zO2JqlqRvj6sz1cTj52ViYFmIuQTNv-S5NOqEoXzzsXubtdSqXjYQMkElzCd7DnVsHiQmFqzMzHCi_6A9CCr4rNM-pQndLCIMg45wHY8tb_J9ZrE2GAPQciyZJ8Fpo-JXqE9-edlp9M1bjErJlTdA64inM_R_pNyAUAlmbzujJupe3xWa0S9ICI-lnOXEwZX2zTHpsG-Y-fo-Memgc-wSYOhMxAz1VbhLLQHFc8K8V7X0BsZ0W5-lFtHCLBe5JwTsJSh2Yeltu_epJ9NjsWphTz7-VeloLkwtocJBi7dzO0-ZA35VrapCqq_RwVCKqoKNDosM-9kAKk4URfQBX5dVngiW-UYVFW6i4UagU3PWJoxcD_01nS5jgJKTkFnQ==&freq=0&nojs=0&bavar=0&febuild=1.1.12-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC+0&ss=1&ls=1&bb=0&cti=2&fn=3&es=13&ge=2&th=ZyK3uf&pcs=2&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Win32&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=YqZRifeaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20vZS83MXJsNTNxZHFqaHo&afid=4338134753564672&eclog=0&snc=0&ssc=3&tp=0&vp=0&pkw=0&pi=W1oqmg&pload=946&rlp=%5B0%2C12%2C481%2C375%2C3433%2C1664%2C420%2C1553%2C1%5D&srw=1280&srh=1024&im=1&noch=1&cs=5

IP / ASN

94.242.247.33

AS7979 · SERVERS-COM

Requested by: https://crystaltreatmenteast.com/e/71rl53qdqjhz

Resource information

File type: GIF image data, version 89a, 1 x 1
MIME type: image/gif
First seen (UTC): 05 Apr 2023 · 09:26:54.000 UTC
Last seen (UTC): 21 Oct 2026 · 21:01:39.321 UTC
Times seen: 23090

Size: 43 B (43 bytes)
MD5: 28e463819a210071de3b45ebe7633613
SHA1: 6dccd571828ec0912629119cf7eabfea9f33ddbc
SHA256: 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84

Certificate information

Issuer: Google Trust Services · WR1
Subject: avalanchetremorunfilled.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 7E:76:08:B0:01:78:32:41:71:D8:35:27:81:F2:8C:70:67:04:AA:9F
Valid from: Tue, 06 Jan 2026 14:14:58 GMT
Valid until: Mon, 06 Apr 2026 14:14:57 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /chicken.gif?z=2060451&pb=a300f3ec80597d19e1a82a90cb7e33cb1770180887&pbc=iOV8s5W7RFgX0YJp&pbi=I2BonEQRJgkX0YJp&pbu=IGniGRk8m_MX0YJp&psp=oO1B9t3p6-3KrwcuR--jlqbdVVvRV_VCO8Pv5WujV3n7kxYwn9KgbuvFfsaS7cjsF_0UWsJv9UmPCVbLwUmyAi8CulP8mY5yuiZWwdO0s9_bkeyFoC7KZXB9RcBI6jRhRxBMH9Uq7UT7gHajg35IHlOHhO2Up05EsPhQAenaoPOYpygrdew7chCqK-O8hOL0OBSGzGR_xxQ_2GKCpCAO_8_DeBG2QLkmSqW8ogaAUuGT2n6-IsGAdoIxoCZKwLM3Dsz_Rzg7cX8Yz-c2YXgrxD5eCTEykeTYa_Ub3-3a8bacjH9HNvbsbSnfidnSXdGQd57pA6oA6dM_PfD4HKKcOseWNvUqH2LO-mnjx-ImbVDRch_7RRQ4ODTJSjNdaM19iUOWeiE2wCZRmWy7WZYQTCitZywnoniKnBM4ZGFxNIdELB8lhwkx30zeeyvRJsfzxP78TRkgnUydczEkXKq0zqNw3ttnm9tmP_groRVaFP6EIq0gP9L2jksXl1u6eOIYoEYBcLp6iZ0Rl5_nh-NWyHQ2_3VQaohYlvdyOkj_cNUDiZNJBd_spI5TF0XdkAYmHOeZeYxWMIN4YOKjqSlFTXHUtTRA_SE0NFGteXyWjfkPpuiNvIRF1PqhddCgXxK-jAjf02PwQSbYHG_vejybmfDIv5xx1dvtjgy3ebnfg3yFwkgk9zO2JqlqRvj6sz1cTj52ViYFmIuQTNv-S5NOqEoXzzsXubtdSqXjYQMkElzCd7DnVsHiQmFqzMzHCi_6A9CCr4rNM-pQndLCIMg45wHY8tb_J9ZrE2GAPQciyZJ8Fpo-JXqE9-edlp9M1bjErJlTdA64inM_R_pNyAUAlmbzujJupe3xWa0S9ICI-lnOXEwZX2zTHpsG-Y-fo-Memgc-wSYOhMxAz1VbhLLQHFc8K8V7X0BsZ0W5-lFtHCLBe5JwTsJSh2Yeltu_epJ9NjsWphTz7-VeloLkwtocJBi7dzO0-ZA35VrapCqq_RwVCKqoKNDosM-9kAKk4URfQBX5dVngiW-UYVFW6i4UagU3PWJoxcD_01nS5jgJKTkFnQ==&freq=0&nojs=0&bavar=0&febuild=1.1.12-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC+0&ss=1&ls=1&bb=0&cti=2&fn=3&es=13&ge=2&th=ZyK3uf&pcs=2&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Win32&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=YqZRifeaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20vZS83MXJsNTNxZHFqaHo&afid=4338134753564672&eclog=0&snc=0&ssc=3&tp=0&vp=0&pkw=0&pi=W1oqmg&pload=946&rlp=%5B0%2C12%2C481%2C375%2C3433%2C1664%2C420%2C1553%2C1%5D&srw=1280&srh=1024&im=1&noch=1&cs=5 HTTP/1.1
Host: avalanchetremorunfilled.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cart=1; cart_p=2; UID=2602032154f6d11319fa9844cd8ea2db9bd6; CHCK=1; PTS=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response headers

HTTP/2 200 OK
server: nginx
date: Wed, 04 Feb 2026 02:54:49 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: BCAI=ADROLQAAAAAAAAAB; Path=/; Expires=Thu, 05 Feb 2026 02:54:49 GMT; Secure; SameSite=None
BMI=AEbTegAAAAAAAAAB; Path=/; Expires=Thu, 05 Feb 2026 02:54:49 GMT; Secure; SameSite=None
BCRI=k93JFQAAAAAAAAAB; Path=/; Expires=Thu, 05 Feb 2026 02:54:49 GMT; Secure; SameSite=None
IMC_102=1; Path=/; Expires=Thu, 05 Feb 2026 02:54:49 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2

02:54:50.294 GET 200 img 43 B 18 ms 2 alerts

http://walterprettytheir.com/e/71rl53qdqjhz

Domain graph

Hostnames

Connections

Network requests

Transaction #01

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://walterprettytheir.com/e/71rl53qdqjhz

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #01

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://walterprettytheir.com/e/71rl53qdqjhz

Domain graph

Network requests