English

euconsent

gdpr_consent

__stripe_mid

cookieconsent_status

consent

__stripe_sid

BACKENDID3

The domain name 'cameronwinter.bandcamp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'cameronwinter'. The second-level label 'bandcamp' is 8 characters long holding 2 vowels versus 6 consonants. Breaking it apart gives 2 words: band, camp. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

item_type

html/fe/04/fe0413a9-a308-4098-bb0f-8bc8f0560d18.html.gz

base-uri 'none'; object-src 'none'; report-uri https://bandcamp.com/api/cspreport/1/violation; script-src http: https: 'nonce-5MK46ZJMU7hbWvTSYVak9g==' 'report-sample' 'strict-dynamic'

font-src * data:; script-src 'self' 'unsafe-inline' 'report-sample' s1.sentry-cdn.com js.sentry-cdn.com browser.sentry-cdn.com statuspage-production.s3.amazonaws.com static.zdassets.com aui-cdn.atlassian.com connect-cdn.atl-paas.net js.stripe.com 'strict-dynamic' cdn.pendo.io data.pendo.io pendo-io-static.storage.googleapis.com pendo-static-5634074999128064.storage.googleapis.com; object-src 'none'; worker-src blob:; base-uri 'none'; default-src 'none'; img-src * blob: data:; frame-src app.pendo.io demo.arcade.software js.stripe.com sentry.io 'self'; frame-ancestors 'self' *.sentry.io; style-src * 'unsafe-inline'; media-src *; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io sentry.io *.sentry.io s1.sentry-cdn.com o1.ingest.sentry.io api2.amplitude.com app.pendo.io data.pendo.io reload.getsentry.net t687h3m0nh65.statuspage.io sentry.zendesk.com ekr.zdassets.com maps.googleapis.com; report-uri https://o1.ingest.sentry.io/api/54785/security/?sentry_key=f724a8a027db45f5b21507e7142ff78e&sentry_release=393aa84aed89a15706f2a6b3d501f5c7cb490126

__privateStripeMetricsController0480

39a31aab348514e6b87c2fc3bfd3d8c5d0b634e0fbaf3ac03fa1016a4a8024c5

21d534ef4f4e905f37b523a53a8eaa798964a307059279e8eb6fb4e57cfd64af

027d1752a635f3d8b80e0a1b44d0ae713294216c9a71b6bd7df58cc55441a3cf

a511df02459ecbc0f160f40636e6944336d6976851758e404ee85c3b653aec01

166634b9361b827775bc149ecfa333c11946313b40f9426e77b1f6c3fcc99254

46ec9e52b4efe50d0ac8d58ce38c21ff5e3c006ce8a82e1eb2539ade2b4f7565

431694ab79a58250bdcc62ea9b99080f5f846cdca5763c1bef6d866dedd8932c

e89a3594028d15bd53cc98500276533ab4476a801948c407cd4be59b6c91f26f

20d1e65130d6ad38b2f0d60cd07cbc3c88bae73277c3c69f7f53e1a5f90751b5

3168d36d01813a94579251ff2910a267c5e191cc7b8863867ff63e21239a2910

b9f694db682de48334bb17dcf247cfba3a5a3cf9e7546235dbb2640b4ceec71a

c8849bcbd91609e3cdd5e9c9179679fb351333319fb4ad67730007d210afcf98

18787cb87623af8de66b785833ca65c4d3f7ef52b3ced4d06618062b0280c3ea

6a48123488acaed0ec36e25278291845e95af9fbe16be50e5b6c1fcb75a13fbf

c3dde2a52add85b2502bd5dfc076300c35d1f948c5a83f23c17c92d4501a299a

fe652c188dc0b99e3f826a9d646942ac5ab87fce6154d60800cb66287ad42e1d

7066f2df44f23922fee0caa0e7952dc1e57ea34cd5d99f4fe82ddd891e17670b

38626d34bcf2227c9172259fc4969b8252148613cd1cf22ae1a652475b0cbe47

2f6f9c169605c1c6c89c90bd1a833a4c27102fcafa2026b20bd018f6c4df3e66

ff3f74f692d3a057f54db974dedface4fce9085d9e2a08adae883c6fd3b771d6

a1b86e1c935368139d17d682f5be0f70d149280cde5e682ab5ec8ef7c4617bed

f2a8a36c74c59cfbe7a73d441cfd180ca6e6a9942a74ef9b240191d1c6056a59

ba2338aa6670580269c762f51c4291daef913201aa8f4d4fd166c1a878262652

Versions of jquery prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a victim's browser.


## Recommendation

Upgrade to version 1.9.0 or later.

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3

1e138a776a21a18a0b68ebb8e4a421be8a886312d0adf7404815a25bde0a82f4

d441853037913faab34afdc614be6d08a045cabf59d54067fad8dfe8325b08b5

c56fe71b22e281ad18c21918c8c385d95995b0f63e2b91449f875cacf8a51235

9fc2ace6f30c66fbf03a10df376c29c3b6d348fe9ea70e3d33be92849ff80698

5f6dcdee81c50d82873e3760123071b8bedcfcc348adec33d15a5d3b7b0f78a4

7f6124aedd26d864d0710637670039369617c9b160e5b7abf633bf0c8c8ae838

9f407305dabfb5e30bcfdc413c2fdb07bde6043f66658f8765e580bb3713b8a3

84819ee93e0fc492b29040d1a189e8fda8ace0ac5357a92c42d7e4bc4cdec550

3NNj0GXVktLOmVKwWUDendk4Vq2qgMVDBDX+Sni48ATJl9JBj+zF+9W2HGB3pvt6qowOihTbQgTeBm9SKbdTwYAAABfeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=

A6iYDRdcg1LVww9DNZEU+JUx2g1IJxSxk4P6F+LimR0ElFa38FydBqtz/AmsKdGr11ZooRgDPCInHJfGzwtR+A4AAACXeyJvcmlnaW4iOiJodHRwczovL3d3dy5yZWNhcHRjaGEubmV0OjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==


Heavy Metal by Cameron Winter, released 06 December 2024

1. The Rolling Stones
2. Nausicaä (Love Will Be Revealed)
3. Love Takes Miles
4. Drinking Age
5. Cancer of the Skull
6. Try as I May
7. We’re Thinking the Same Thing
8. Nina + Field of Cops
9. $0
10. Can’t Keep Anything

On Heavy Metal - the debut solo album from Cameron Winter - the Geese frontman unravels his eclectic influences into a surreal mosaic of modern songwriting. Rumored to have been composed in abandoned basements, taxi back seats, and in impromptu jam sessions in public spaces, Heavy Metal draws on both the chaos of the road and Winter’s greater sense of existential dread. Heavy Metal teeters between the grounded and the hallucinatory, pulsing with immediacy, fragility, and the sly humor of a storyteller who’s never afraid to blur the lines between fact and fiction. It’s an unpredictable journey through Winter’s self-reflection, revealing the frontman as a master of reinvention.


description

msapplication-TileColor

theme-color

title

{"item_type":"a","item_id":2308003457,"tralbum_page_version":0}

bc-page-properties

robots

https://f4.bcbits.com/img/a2926452844_5.jpg

https://cameronwinter.bandcamp.com/album/heavy-metal

generator

medium

video_height

video_width

video_type

https://bandcamp.com/EmbeddedPlayer/v=2/album=2308003457/size=large/tracklist=false/artwork=small/

https://bandcamp.com/EmbeddedPlayer/v=2/album=2308003457/size=large/linkcol=0084B4/notracklist=true/twittercard=true/

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

html/fe/04/fe0413a9-a308-4098-bb0f-8bc8f0560d18_nodriver.html.gz

Heavy Metal | Cameron Winter

GoDaddy.com, LLC

BANDCAMP.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Technologies Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AT-88-Z

art_id

featured_track_num

license_name

item_id

selling_band_id

type_name

Includes high-quality download in MP3, FLAC and more. Paying supporters also get unlimited streaming via the free Bandcamp app.

Heavy Metal

Partisan Records

image_ids

is_music_merch

type_id

Heavy Metal on CD housed in a digisleeve.

Heavy Metal pressed on 140g heavy metal colored vinyl with printed lyric insert.

Cameron Winter

On Heavy Metal - the debut solo album from Cameron Winter - the Geese frontman unravels his eclectic influences into a surreal mosaic of modern songwriting. Rumored to have been composed in abandoned basements, taxi back seats, and in impromptu jam sessions in public spaces, Heavy Metal draws on both the chaos of the road and Winter’s greater sense of existential dread. Heavy Metal teeters between the grounded and the hallucinatory, pulsing with immediacy, fragility, and the sly humor of a storyteller who’s never afraid to blur the lines between fact and fiction. It’s an unpredictable journey through Winter’s self-reflection, revealing the frontman as a master of reinvention.

image_id

absolutelybodaciousbabe

Todd

Jacob Meyer

detail

spinningjenny

Chris Bickham

alewis39

lcecco

roadkill

libope

iggymouse

eleiserlauter

mor0phon

happycoloured

julian.wav

efelbar

Dodder33

vaguerant

alexgran

Darren Lamb

n3ro_r1n

Arturo Bory

Sophist

Matteo Esposito

richardphillipjones

gdpq

Colleen 

Mossybike

amp.

modeboy

ibuystuffyaaay

Derek Buffardi

ronald

Pilchard

sknoop

Mason Romanak

leeferris

rudicculus

MicahsoftX

dan Kilberg

vivi

occasionalirrelevant

Andre Laboo

Abby

grif1179

Pig Lizzard

Willow

zamora_that_3

kumasyun

emfortunately

kafka_

Mozanna

XXXXX

kreickel

pete_gamlen

ellas999

gibsoncream

Darth Spartan

Justin Shaw

Donnie Pinner

jeibee

getzone

James Gilmour

patrick carolan

anp087

Joseph Leroux

thescaryjokes

Olaf

garypliers

bertaaa

thatracc

dalbat

atomm

earfgrrrl

elisaalvarez

synthetic_memories

ianbker

lovitoripofi

michalperstein

The Rolling Stones

Nausicaä (Love Will Be Revealed)

Love Takes Miles

Drinking Age

Cancer of the Skull

Try as I May

We’re Thinking the Same Thing

Nina + Field of Cops

Can’t Keep Anything


window.BCTracker=window.BCTracker||{preloadQueue:[],record:function(){this.preloadQueue.push(Array.prototype.slice.call(arguments))},prePageViewCallbacks:[],afterPageView:function(e){this.prePageViewCallbacks.push(e)}},window.ScrollDepthTracker=function(){this.track=function(){}},window.ScrollDepthTracker.track=function(){}


<a data-bind="attr: {href: trackpipeLocalUrl()}" class="menu-artistitem">
        <span class="menu-artistpic">
            
            <img data-bind="src_image: {image_id: photo(), format: 'art_embedded_player'}">
            
            
            <div class="no-image-placeholder"></div>
            
        </span>
        <span data-bind="text: name()" class="menu-bandname menu-text"></span>
        <span class="show-more" data-bind="visible: $root.artistsMenu.bmgr.bandByID(id) || $root.artistsMenu.lmgr.isMemberBandAuthed(id), click: () => $root.artistsMenu.setActiveLabelMemberBand(id)">•••</span>
    </a>
    
    <div class="label-artist-menu-links ui-menu-item">
        <span data-bind="visible: $root.artistsMenu.bmgr.bandByID(id) || $root.artistsMenu.lmgr.isMemberBandAuthed(id)">
            <a data-bind="
                attr: {href: 'https://bandcamp.com/profile?from=menubar&id=' + id}"
            >
                <span class="menu-text">edit profile</span>
            </a>
            <a data-bind="
                attr: {href: 'https://bandcamp.com/tools?from=menubar&id=' + id}"
            >
                <span class="menu-text">tools<span>
            </a>
            
                <a data-bind="click: $root.artistsMenu.launchPageDesign.bind($data)"><span class="menu-text">page design</span></a>
            

            
                <a data-bind="attr: { href: 'https://bandcamp.com/subscriptions?band_id=' + id + '&from=menubar'}"><span class="menu-text">subscription</span></a>
            
            
                <a data-bind="attr: { href: trackpipeLocalUrl() + '/' + serviceUrlFragment() + '?from=menubar'}"><span data-bind="text: serviceName()" class="menu-text">subscription</span></a>
            
        </span>
    </div>
    
    <span class="show-less" data-bind="visible: $root.artistsMenu.activeLabelMemberBand() == id && ($root.artistsMenu.bmgr.bandByID(id) || $root.artistsMenu.lmgr.isMemberBandAuthed(id)), click: () => $root.artistsMenu.setActiveLabelMemberBand(id)">show less</span>

<div data-bind="css: {'artist-listing-with-links': $parent.columns() > 1}">
        <a class="menu-artistitem" data-bind="attr: {href: trackpipeUrlHttps()}">
        
            <span class="menu-artistpic">
                <img data-bind="src_image: {image_id: photo(), format: 'bio_navbar'}">
            </span>
            <span data-bind="text: name()" class="menu-bandname"></span>
        
        
            
                <img class="photo" data-bind="src_image: {image_id: photo(), format: 'fan_bio_thumb_small'}">
            
            
                <div class="photo none"></div>
            
        
        </a>
   
        <div class="infobox">
            <p class="name"><a data-bind="attr: {href: trackpipeUrl()}, text: name()"></a></p>
            <p class="actions">
                <a data-bind="attr: {href: 'https://bandcamp.com/profile?from=menubar&id=' + id}">profile</a> &middot;
                <a data-bind="attr: {href: 'https://bandcamp.com/tools?from=menubar&id=' + id}">tools</a> &middot;
                <a data-bind="attr: {href: trackpipeLocalUrl() + '/stats?from=menubar'}">stats</a>
            </p>
        </div>
    </div>


                $(".buyItem .bd").last().bcTruncate(TruncateProfile.get("buyItem"), "more", "less");
            


                    $(".tralbum-about").last().bcTruncate(TruncateProfile.get("tralbum_about"), "more", "less");
                

Requests	IP Address	Location	AS Autonomous System
44	151.101.65.91	United States	AS54113Fastly, Inc.
42	146.75.121.91	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
42	151.101.194.217	United States	AS54113Fastly, Inc.
42	13.32.121.99	New York, New York, United States	AS16509Amazon.com, Inc.
42	142.250.201.72	United States	AS15169Google LLC
42	151.101.1.91	United States	AS54113Fastly, Inc.
254	6	-	-

Security Scan Report: cameronwinter.bandcamp.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History