urlquery.net
WEBSITE ANALYSIS REPORT

http://newstime99.com

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document187.7 KB430 ms—
GET200stylesheet161.2 KB411 ms—
GET200script46.7 KB849 ms4 alerts
GET200script1.2 KB3 ms—
GET200xhr40 B292 ms—
GET200script5.0 KB808 ms—
GET200xhr3.9 KB844 ms—
GET200document187.7 KB143 ms—
GET200stylesheet161.2 KB17 ms—
GET200script46.7 KB811 ms4 alerts
GET200script1.2 KB6 ms—
GET200img4.6 KB1190 ms—
GET200img1.9 KB1110 ms—
GET200script5.0 KB789 ms1 alerts
GET200xhr3.8 KB725 ms—
GET200img0 B103 ms1 alerts
GET200img55.9 KB150 ms—
GET200img0 B555 ms1 alerts
GET200xhr3.8 KB109 ms—
GET200img0 B104 ms1 alerts
GET200img91.3 KB143 ms—
GET200img0 B694 ms1 alerts
GETNo responseother0 B3 ms—
GET200imageset53.5 KB12 ms—
GET200imageset50.3 KB16 ms—
GET200lazy-imageset16.3 KB13 ms—
GET200lazy-imageset17.1 KB13 ms—
GET200lazy-imageset20.2 KB10 ms—
GET200lazy-imageset16.2 KB11 ms—
GET200script27.0 KB44 ms—
POST200fetch92 B147 ms—
GET200script466.5 KB126 ms—
GET200script839.7 KB365 ms—
GET200script50.1 KB103 ms3 alerts
GET200script5.0 KB762 ms4 alerts
GET307xhr4.3 KB747 ms4 alerts
GET200script17.0 KB116 ms—
GET200xhr3.9 KB112 ms—
GET200xhr4.3 KB141 ms4 alerts

Transaction #11

Request / response

URL

GET HTTPS
https://kettledroopingcontinuation.com/watch.281395032770.js?key=121b969832414736e6e9ccdc71fac527&kw=%5B%22newstime99%22%2C%22%C2%BB%22%2C%22side%22%2C%22hustle%22%2C%22and%22%2C%22business%22%2C%22ideas%22%2C%22news%22%5D&refer=https%3A%2F%2Fnewstime99.com%2F&tz=0&dev=e&res=14.3095&rb=&uuid=eb1e0292-106c-41e9-ab19-d607f4c17354%3A2%3A1&shu=2c6f377c0ca73b67baa512a2a4984b5b05468b768ec8778600e50c07f053de17ae2a59a645f3bc82d778ff80a3901815ed7d05073a1a5f8a9d7164a5bc4dbf08cb29a824150819ca60e8d4e59266b680302dbb25b53da67429429c&pst=1776522051&rmtc=t&shv=2&sht=O5zJY-u33_AzuBC3Y1EB_uWM3yvbh2arya3PlmPCWKs&fstu=019da0f6-56b5-7e74-b959-db71fb12b505&st1=4af21be5155c323381f610456c350083&ps1=1776521991

IP / ASN

United States 172.240.127.242

AS7979 · SERVERS-COM

Requested by
https://newstime99.com/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Cloudflare DNS SinkholedmediumMalicious
Hagezi Threat Feed SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious
Quad9 DNS SinkholedmediumMalicious

HTTP headers

Request headers

GET /watch.281395032770.js?key=121b969832414736e6e9ccdc71fac527&kw=%5B%22newstime99%22%2C%22%C2%BB%22%2C%22side%22%2C%22hustle%22%2C%22and%22%2C%22business%22%2C%22ideas%22%2C%22news%22%5D&refer=https%3A%2F%2Fnewstime99.com%2F&tz=0&dev=e&res=14.3095&rb=&uuid=eb1e0292-106c-41e9-ab19-d607f4c17354%3A2%3A1&shu=2c6f377c0ca73b67baa512a2a4984b5b05468b768ec8778600e50c07f053de17ae2a59a645f3bc82d778ff80a3901815ed7d05073a1a5f8a9d7164a5bc4dbf08cb29a824150819ca60e8d4e59266b680302dbb25b53da67429429c&pst=1776522051&rmtc=t&shv=2&sht=O5zJY-u33_AzuBC3Y1EB_uWM3yvbh2arya3PlmPCWKs&fstu=019da0f6-56b5-7e74-b959-db71fb12b505&st1=4af21be5155c323381f610456c350083&ps1=1776521991 HTTP/1.1
Host: kettledroopingcontinuation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://newstime99.com
Referer: https://newstime99.com/
DNT: 1
Connection: keep-alive
Cookie: uid_id2=eb1e0292-106c-41e9-ab19-d607f4c17354:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyODYzODM3NywiayI6IjEyMWI5Njk4MzI0MTQ3MzZlNmU5Y2NkYzcxZmFjNTI3Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1NjEzNzUxLCJwaWQiOjMxMjc2NzcsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MywiYWlkIjo1LCJwdCI6NCwicGsiOiJhOTRmZnI3cyIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0MzI0NCwibiI6Ik9zbG8ifSwicmciOnsiaWQiOjE4NDQsIm4iOiJPc2xvIENvdW50eSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL25ld3N0aW1lOTkuY29tLyIsInR6IjoyLCJpZHVjIjowLCJhciI6W119fQ.ZM-Kw-0c_z66aUAFAWQooIWeDZI2hR0sK5BwotdRMg0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 18 Apr 2026 14:19:52 GMT
Content-Type: text/html
Content-Length: 3051
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
access-control-allow-origin: https://newstime99.com
access-control-allow-credentials: true
vary: Accept-Encoding
set-cookie: uid_id2=eb1e0292-106c-41e9-ab19-d607f4c17354:2:1; expires=Sat, 25 Apr 2026 14:19:51 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sun, 19 Apr 2026 14:19:52 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sun, 19 Apr 2026 14:19:52 GMT; path=/; secure; SameSite=None
pdhtkv5=true; expires=Sun, 19 Apr 2026 14:19:52 GMT; path=/; secure; SameSite=None
uncs5=1; expires=Sun, 19 Apr 2026 14:19:52 GMT; path=/; secure; SameSite=None
u_pl28638377=1; expires=Sun, 19 Apr 2026 14:19:52 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 42
Host: kettledroopingcontinuation.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: dc1758d1159937c614152872d8323909
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

GET200img0 B100 ms1 alerts
GET200img79.5 KB27 ms—
GET200img0 B102 ms1 alerts
GET200img86.6 KB28 ms—
GET200img0 B101 ms4 alerts
GET200script40.0 KB11 ms—
GET200script8.3 KB64 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot