WEBSITE ANALYSIS REPORT

http://walterprettytheir.com/e/71rl53qdqjhz

04 Feb 2026 · 02:55:08.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:54:45.922 GET 302 document 114.5 KB 38 ms —

02:54:45.953 GET 404 document 114.5 KB 263 ms 1 alerts

02:54:46.290 GET 404 document 114.5 KB 110 ms 1 alerts

02:54:46.491 GET 200 stylesheet 2.4 KB 344 ms —

02:54:46.492 GET 200 stylesheet 264.3 KB 53 ms 1 alerts

Transaction #04

Request / response

URL

GET HTTPS

https://crystaltreatmenteast.com/s/css/site.min.css?cb42e55bbdab3f11540fa3b620a6e66e

IP / ASN

186.2.163.224

AS59692 · IQWeb FZ-LLC

Requested by: https://crystaltreatmenteast.com/e/71rl53qdqjhz

Resource information

File type: Unicode text, UTF-8 text, with very long lines (65271)
MIME type: text/css
First seen (UTC): 08 Apr 2025 · 05:57:49.888 UTC
Last seen (UTC): 27 Sep 2026 · 07:25:12.591 UTC
Times seen: 457

Size: 264.3 KB (270624 bytes)
MD5: c71fa701386844028fe6595289427599
SHA1: 8be981f11be9f5aab5fd100ee58b8a9332674382
SHA256: 39710492ff4eb2fd207455f6edca3b9649b46fd2644021344afdf1d4c9a5ca11

Certificate information

Issuer: Let's Encrypt · R12
Subject: crystaltreatmenteast.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 1F:D6:C7:27:69:E1:DA:C8:BE:B1:D4:81:06:CD:7D:E6:FD:FC:F8:EE
Valid from: Tue, 30 Dec 2025 11:33:10 GMT
Valid until: Mon, 30 Mar 2026 11:33:09 GMT

Technology fingerprints

HSTS (Security)
DDoS-Guard (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /s/css/site.min.css?cb42e55bbdab3f11540fa3b620a6e66e HTTP/1.1
Host: crystaltreatmenteast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://crystaltreatmenteast.com/e/71rl53qdqjhz
Cookie: __ddg8_=PVPOpH28u4levgYX; __ddg10_=1770173686; __ddg9_=91.90.42.154; __ddg1_=mcdWrAKXhmVQZAuj4XUi; XSRF-TOKEN=eyJpdiI6IkNTbTdVZzBuREtFK2JTcVdncGxvOFE9PSIsInZhbHVlIjoiUHhHdFF2dU5WeE9nakZaSlN1WXNTVzg5WVJ2dE5ISEFTaE0zVldTVXU5NFlrRzZ3d2pnWWhLaUh4ME5FUzFCUUNpbFZLWkxlMWxXMmF6L1BpWEpXaFR6dWxrUURUdFNuOGhadVYybU1WdUZsTjV0Z3pkZE15cHBIakpOWUtjU28iLCJtYWMiOiJlYjQwOThlZDE3MThlYTE4MGRjM2RkNmJmZmU1Y2M4OGQ4YzgwMWNmNzgwZTMwZjA4MzAyMzAxNjk2MDQ2MGU3IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IndFdEFYVmI3N2lmVEFCSG5YSVdRK1E9PSIsInZhbHVlIjoiQkpEYUtCSHFrcTJ2N0V5ZThYK1lCYlBxK0U4djNQNjc2ekM4YUhIT2d2dXBWQlpRSEh5SDFMZFdVd1o4amRJcWNMcDFSNlZDVmw5Qk13cnB6SFlpdjJJVWRXdjZSRVJVa29PWmlPMlNYTjY4cFZscStqMHVwc2xFTEpEVlN0MkoiLCJtYWMiOiI2ZmJiNmQ1ODZkZWJlMjEyYTExNjcxMGU5MDkwM2E4MGVmYTkxZmYzMWFhYmZhM2M0YWZlNzFkZmRiOTRmNTUyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=TMKS8WkOn8NuijFO; Domain=.crystaltreatmenteast.com; Path=/; Expires=Wed, 04-Feb-2026 03:14:46 GMT
__ddg10_=1770173686; Domain=.crystaltreatmenteast.com; Path=/; Expires=Wed, 04-Feb-2026 03:14:46 GMT
__ddg9_=91.90.42.154; Domain=.crystaltreatmenteast.com; Path=/; Expires=Wed, 04-Feb-2026 03:14:46 GMT
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
date: Sat, 31 Jan 2026 04:02:19 GMT
content-type: text/css
last-modified: Mon, 05 May 2025 16:07:50 GMT
etag: W/"6818e256-42120"
expires: Mon, 02 Mar 2026 04:02:19 GMT
cache-control: max-age=2592000
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
age: 341547
content-length: 36536
ddg-cache-status: HIT
X-Firefox-Spdy: h2

02:54:46.494 GET 200 script 85.5 KB 51 ms —

02:54:46.495 GET 200 script 97.2 KB 162 ms 2 alerts

02:54:46.807 GET 200 font 19.7 KB 259 ms —

02:54:46.812 GET 200 font 19.7 KB 310 ms —

02:54:46.990 GET 200 img 15.0 KB 32 ms 1 alerts

02:54:46.998 GET 200 subdocument 926 B 18 ms 2 alerts

02:54:47.100 GET 200 script 548 B 18 ms 2 alerts

02:54:47.126 GET 200 script 535 B 107 ms —

02:54:47.226 GET 200 script 6.1 KB 22 ms 2 alerts

02:54:47.264 GET 200 img 141.8 KB 80 ms —

02:54:47.269 GET 200 img 492.2 KB 82 ms —

02:54:49.283 GET 200 img 43 B 18 ms 2 alerts

02:54:50.294 GET 200 img 43 B 18 ms 2 alerts

http://walterprettytheir.com/e/71rl53qdqjhz

Domain graph

Hostnames

Connections

Network requests

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://walterprettytheir.com/e/71rl53qdqjhz

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://walterprettytheir.com/e/71rl53qdqjhz

Domain graph

Network requests