WEBSITE ANALYSIS REPORT

http://walterprettytheir.com/e/71rl53qdqjhz

04 Feb 2026 · 02:55:08.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:54:45.922 GET 302 document 114.5 KB 38 ms —

02:54:45.953 GET 404 document 114.5 KB 263 ms 1 alerts

02:54:46.290 GET 404 document 114.5 KB 110 ms 1 alerts

02:54:46.491 GET 200 stylesheet 2.4 KB 344 ms —

02:54:46.492 GET 200 stylesheet 264.3 KB 53 ms 1 alerts

02:54:46.494 GET 200 script 85.5 KB 51 ms —

02:54:46.495 GET 200 script 97.2 KB 162 ms 2 alerts

02:54:46.807 GET 200 font 19.7 KB 259 ms —

02:54:46.812 GET 200 font 19.7 KB 310 ms —

02:54:46.990 GET 200 img 15.0 KB 32 ms 1 alerts

02:54:46.998 GET 200 subdocument 926 B 18 ms 2 alerts

02:54:47.100 GET 200 script 548 B 18 ms 2 alerts

Transaction #08

Request / response

URL

GET HTTPS

https://avalanchetremorunfilled.com/get/2060451?id=2060451&jp=_clasrjaaxjkrnmiukffzaw&dr=102&cuaa=1&nojs=0&bavar=0&febuild=1.1.12-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC+0&ss=1&ls=1&bb=0&cti=2&fn=3&es=13&ge=2&th=ZyK3uf&pcs=2&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Win32&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=KqYPB4taHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20vZS83MXJsNTNxZHFqaHo&afid=7715834473901568&eclog=0&snc=0&ssc=0&vp=0&pkw=0&pload=847&rlp=%5B0%2C11%2C235%2C192%2C24%2C633%2C253%2C522%2C0%5D&srw=1280&srh=1024&im=1&noch=1&cs=5&uf=0&freq=0

IP / ASN

94.242.247.33

AS7979 · SERVERS-COM

Requested by: https://crystaltreatmenteast.com/e/71rl53qdqjhz

Resource information

File type: ASCII text, with very long lines (548), with no line terminators
MIME type: text/javascript; charset=utf-8
First seen (UTC): 04 Feb 2026 · 02:55:11.015 UTC
Last seen (UTC): 04 Feb 2026 · 02:55:11.015 UTC
Times seen: 1

Size: 548 B (548 bytes)
MD5: 522e310656a11c07b807467d0544f246
SHA1: a2c065de9cdb051fd15a8c7a5c310eef62982865
SHA256: 1a5cabc0c28112630c47bbd75fadb45e447bcd92ebff1fb21f0261b10bccff6a

Certificate information

Issuer: Google Trust Services · WR1
Subject: avalanchetremorunfilled.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 7E:76:08:B0:01:78:32:41:71:D8:35:27:81:F2:8C:70:67:04:AA:9F
Valid from: Tue, 06 Jan 2026 14:14:58 GMT
Valid until: Mon, 06 Apr 2026 14:14:57 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /get/2060451?id=2060451&jp=_clasrjaaxjkrnmiukffzaw&dr=102&cuaa=1&nojs=0&bavar=0&febuild=1.1.12-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC+0&ss=1&ls=1&bb=0&cti=2&fn=3&es=13&ge=2&th=ZyK3uf&pcs=2&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Win32&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=KqYPB4taHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20vZS83MXJsNTNxZHFqaHo&afid=7715834473901568&eclog=0&snc=0&ssc=0&vp=0&pkw=0&pload=847&rlp=%5B0%2C11%2C235%2C192%2C24%2C633%2C253%2C522%2C0%5D&srw=1280&srh=1024&im=1&noch=1&cs=5&uf=0&freq=0 HTTP/1.1
Host: avalanchetremorunfilled.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://crystaltreatmenteast.com/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Wed, 04 Feb 2026 02:54:47 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2602032154f6d11319fa9844cd8ea2db9bd6; Path=/; Expires=Wed, 10 Mar 2027 02:54:47 GMT; Secure; SameSite=None
CHCK=1; Path=/; Expires=Wed, 10 Mar 2027 02:54:47 GMT; Secure; SameSite=None
PTS=; Path=/; Expires=Wed, 10 Mar 2027 02:54:47 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2

02:54:47.126 GET 200 script 535 B 107 ms —

02:54:47.226 GET 200 script 6.1 KB 22 ms 2 alerts

02:54:47.264 GET 200 img 141.8 KB 80 ms —

02:54:47.269 GET 200 img 492.2 KB 82 ms —

02:54:49.283 GET 200 img 43 B 18 ms 2 alerts

02:54:50.294 GET 200 img 43 B 18 ms 2 alerts

http://walterprettytheir.com/e/71rl53qdqjhz

Domain graph

Hostnames

Connections

Network requests

Transaction #08

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://walterprettytheir.com/e/71rl53qdqjhz

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #08

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://walterprettytheir.com/e/71rl53qdqjhz

Domain graph

Network requests