WEBSITE ANALYSIS REPORT

http://walterprettytheir.com/e/71rl53qdqjhz

04 Feb 2026 · 02:55:08.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:54:45.922 GET 302 document 114.5 KB 38 ms —

02:54:45.953 GET 404 document 114.5 KB 263 ms 1 alerts

02:54:46.290 GET 404 document 114.5 KB 110 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://crystaltreatmenteast.com/e/71rl53qdqjhz

IP / ASN

186.2.163.224

AS59692 · IQWeb FZ-LLC

Requested by: Not recorded

Resource information

File type: HTML document, ASCII text, with very long lines (63818)
MIME type: text/html; charset=utf-8
First seen (UTC): 04 Feb 2026 · 02:55:11.011 UTC
Last seen (UTC): 04 Feb 2026 · 02:55:11.011 UTC
Times seen: 1

Size: 114.5 KB (117235 bytes)
MD5: f20275ed9030a9634f2d0ca5eab8e8ad
SHA1: affe706c7ced17fcdeccc28d6cd16d63f5770bb8
SHA256: 77f7d9bd66fc55aa5989030e5863f2ed4db6fab02718fea41b1da5f63b0c5174

Certificate information

Issuer: Let's Encrypt · R12
Subject: crystaltreatmenteast.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 1F:D6:C7:27:69:E1:DA:C8:BE:B1:D4:81:06:CD:7D:E6:FD:FC:F8:EE
Valid from: Tue, 30 Dec 2025 11:33:10 GMT
Valid until: Mon, 30 Mar 2026 11:33:09 GMT

Technology fingerprints

Cloudflare (CDN)
DDoS-Guard (Security)
HSTS (Security)
jQuery:3.7.1 (JavaScript libraries)
cdnjs (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /e/71rl53qdqjhz HTTP/1.1
Host: crystaltreatmenteast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: __ddg8_=fLTMVNQagDFaeUNt; __ddg10_=1770173686; __ddg9_=91.90.42.154; __ddg1_=mcdWrAKXhmVQZAuj4XUi; XSRF-TOKEN=eyJpdiI6InlMZnBFZE1maEd3d2JNT2RrVHZrWHc9PSIsInZhbHVlIjoiT0RkRnpsS2RVWUFXZzZuYVZCdll5Tjk2MTU1M0R3T3kxbGo5emt0TVlzYWpWenNKWmFSTjVuMnc4SjJPeTBZZEd6ZTdGSzFvZ2Foay93Tmp2VUoxaDdLVHp5aDg2M04zR3IrTTJVLzNGUVVOelFaQVVRNUY0cTE2Vm9ZQWltMVkiLCJtYWMiOiI0YmYyNDU4NDFiZTgyYjZiNmZiOGM2ZWJhZWIyMTVhZjIzM2VhMmMwYTViODYzNTY4M2Q4NDIyNjY5OTliY2JjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IlJmVXJmSWJ4dTVpcUJkWXJLa0FsR1E9PSIsInZhbHVlIjoiZHhiUTVOTFVETDI2SGx3MmU4cng3bFdORkNhcXBvUVE0dnlndXRaL0tRZUZQMHV1SC9OcTBaejhIbFVaNVJoMzBVaVpkRGtGTnRBM2dSeDJPeEMwNng4SnBQVXNzNVVRclFDMGx1WDA1S2lEa0VGNXA1WGZ4UmVvSkJDek80eTYiLCJtYWMiOiIxZDFhMzg2YzI5ZDM1ODliZWFlMDZlZGJlNDlmYmNjNjEzNDFiNGE0YTFjZDU0NjdiOTg3YzUwY2M5YzIxMjAxIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 404 Not Found
server: ddos-guard
set-cookie: __ddg8_=PVPOpH28u4levgYX; Domain=.crystaltreatmenteast.com; Path=/; Expires=Wed, 04-Feb-2026 03:14:46 GMT
__ddg10_=1770173686; Domain=.crystaltreatmenteast.com; Path=/; Expires=Wed, 04-Feb-2026 03:14:46 GMT
__ddg9_=91.90.42.154; Domain=.crystaltreatmenteast.com; Path=/; Expires=Wed, 04-Feb-2026 03:14:46 GMT
XSRF-TOKEN=eyJpdiI6IkNTbTdVZzBuREtFK2JTcVdncGxvOFE9PSIsInZhbHVlIjoiUHhHdFF2dU5WeE9nakZaSlN1WXNTVzg5WVJ2dE5ISEFTaE0zVldTVXU5NFlrRzZ3d2pnWWhLaUh4ME5FUzFCUUNpbFZLWkxlMWxXMmF6L1BpWEpXaFR6dWxrUURUdFNuOGhadVYybU1WdUZsTjV0Z3pkZE15cHBIakpOWUtjU28iLCJtYWMiOiJlYjQwOThlZDE3MThlYTE4MGRjM2RkNmJmZmU1Y2M4OGQ4YzgwMWNmNzgwZTMwZjA4MzAyMzAxNjk2MDQ2MGU3IiwidGFnIjoiIn0%3D; expires=Wed, 04 Feb 2026 04:24:46 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned
voe_session=eyJpdiI6IndFdEFYVmI3N2lmVEFCSG5YSVdRK1E9PSIsInZhbHVlIjoiQkpEYUtCSHFrcTJ2N0V5ZThYK1lCYlBxK0U4djNQNjc2ekM4YUhIT2d2dXBWQlpRSEh5SDFMZFdVd1o4amRJcWNMcDFSNlZDVmw5Qk13cnB6SFlpdjJJVWRXdjZSRVJVa29PWmlPMlNYTjY4cFZscStqMHVwc2xFTEpEVlN0MkoiLCJtYWMiOiI2ZmJiNmQ1ODZkZWJlMjEyYTExNjcxMGU5MDkwM2E4MGVmYTkxZmYzMWFhYmZhM2M0YWZlNzFkZmRiOTRmNTUyIiwidGFnIjoiIn0%3D; expires=Wed, 04 Feb 2026 04:24:46 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: no-cache, private
date: Wed, 04 Feb 2026 02:54:46 GMT
content-encoding: gzip
X-Firefox-Spdy: h2

02:54:46.491 GET 200 stylesheet 2.4 KB 344 ms —

02:54:46.492 GET 200 stylesheet 264.3 KB 53 ms 1 alerts

02:54:46.494 GET 200 script 85.5 KB 51 ms —

02:54:46.495 GET 200 script 97.2 KB 162 ms 2 alerts

02:54:46.807 GET 200 font 19.7 KB 259 ms —

02:54:46.812 GET 200 font 19.7 KB 310 ms —

02:54:46.990 GET 200 img 15.0 KB 32 ms 1 alerts

02:54:46.998 GET 200 subdocument 926 B 18 ms 2 alerts

02:54:47.100 GET 200 script 548 B 18 ms 2 alerts

02:54:47.126 GET 200 script 535 B 107 ms —

02:54:47.226 GET 200 script 6.1 KB 22 ms 2 alerts

02:54:47.264 GET 200 img 141.8 KB 80 ms —

02:54:47.269 GET 200 img 492.2 KB 82 ms —

02:54:49.283 GET 200 img 43 B 18 ms 2 alerts

02:54:50.294 GET 200 img 43 B 18 ms 2 alerts

http://walterprettytheir.com/e/71rl53qdqjhz

Domain graph

Hostnames

Connections