WEBSITE ANALYSIS REPORT

http://paste4free.site/p/BCTXN

12 Jul 2026 · 04:44:58.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.adsco.re2 captured requests
6.adsco.re2 captured requests
6mmhqdj5baoo.l4.adsco.re1 captured requests
6mmhqdj5baoo.n4.adsco.re1 captured requests
6mmhqdj5baoo.s4.adsco.re1 captured requests
adsco.re3 captured requests
c.adsco.re1 captured requests
cdn.redgarto.com14 captured requests
cdn.show-sb.com3 captured requests
cdn.storageimagedisplay.com25 captured requests
comradegoodsfloor.com5 captured requests
fizzyacerbitymellow.com48 captured requests
flushpersist.com4 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com9 captured requests
i.imgur.com4 captured requests
imgur.com4 captured requests
intelligenceadx.com1 captured requests
ka-f.fontawesome.com3 captured requests
kettledroopingcontinuation.com7 captured requests
paste4free.site7 captured requests
portalfluently.com4 captured requests
protrafficinspector.com5 captured requests
realizationnewestfangs.com4 captured requests
spendsdetachment.com12 captured requests
workdeadlinededicate.com10 captured requests
www.google.com4 captured requests
www.gstatic.com6 captured requests
www.intelligenceadx.com1 captured requests
zoologyfibre.com3 captured requests

Connections

imgur.com → i.imgur.comRedirects to4 captured connections
paste4free.site → 4.adsco.reCalls2 captured connections
paste4free.site → 6.adsco.reCalls2 captured connections
paste4free.site → 6mmhqdj5baoo.l4.adsco.reCalls1 captured connections
paste4free.site → 6mmhqdj5baoo.n4.adsco.reCalls1 captured connections
paste4free.site → 6mmhqdj5baoo.s4.adsco.reCalls1 captured connections
paste4free.site → adsco.reCalls3 captured connections
paste4free.site → c.adsco.reLoads from1 captured connections
paste4free.site → cdn.redgarto.comCalls9 captured connections
paste4free.site → cdn.redgarto.comLoads from5 captured connections
paste4free.site → cdn.show-sb.comCalls3 captured connections
paste4free.site → cdn.storageimagedisplay.comLoads from25 captured connections
paste4free.site → comradegoodsfloor.comLoads from5 captured connections
paste4free.site → fizzyacerbitymellow.comCalls5 captured connections
paste4free.site → fizzyacerbitymellow.comLoads from43 captured connections
paste4free.site → flushpersist.comLoads from4 captured connections
paste4free.site → fonts.googleapis.comLoads from2 captured connections
paste4free.site → fonts.gstatic.comLoads from8 captured connections
paste4free.site → i.imgur.comLoads from4 captured connections
paste4free.site → imgur.comLoads from4 captured connections
paste4free.site → intelligenceadx.comLoads from1 captured connections
paste4free.site → ka-f.fontawesome.comCalls3 captured connections
paste4free.site → kettledroopingcontinuation.comCalls2 captured connections
paste4free.site → kettledroopingcontinuation.comLoads from5 captured connections
paste4free.site → portalfluently.comLoads from4 captured connections
paste4free.site → protrafficinspector.comCalls5 captured connections
paste4free.site → realizationnewestfangs.comCalls1 captured connections
paste4free.site → realizationnewestfangs.comLoads from3 captured connections
paste4free.site → spendsdetachment.comCalls1 captured connections
paste4free.site → spendsdetachment.comLoads from11 captured connections
paste4free.site → workdeadlinededicate.comCalls3 captured connections
paste4free.site → workdeadlinededicate.comLoads from7 captured connections
paste4free.site → www.google.comEmbeds2 captured connections
paste4free.site → www.google.comLoads from1 captured connections
paste4free.site → www.intelligenceadx.comLoads from1 captured connections
paste4free.site → zoologyfibre.comCalls1 captured connections
paste4free.site → zoologyfibre.comLoads from2 captured connections
www.google.com → fonts.gstatic.comLoads from1 captured connections
www.google.com → www.gstatic.comLoads from6 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

04:44:23.551 GET 200 document 13.2 KB 283 ms 1 alerts

04:44:24.240 GET 200 stylesheet 16.4 KB 86 ms —

04:44:24.243 GET 200 stylesheet 66.8 KB 79 ms 1 alerts

04:44:24.244 GET 200 script 10.6 KB 42 ms 1 alerts

04:44:24.245 GET 200 script 95.5 KB 927 ms 2 alerts

04:44:24.247 GET 200 script 50.3 KB 916 ms 2 alerts

04:44:24.248 GET 200 script 50.2 KB 602 ms 2 alerts

04:44:24.250 GET 200 script 47.4 KB 610 ms 2 alerts

04:44:24.253 GET 200 script 83.6 KB 105 ms 1 alerts

04:44:24.254 GET 200 script 976 B 48 ms —

04:44:24.256 GET 200 script 91.2 KB 917 ms 2 alerts

04:44:24.257 GET 200 script 6.7 KB 99 ms 1 alerts

04:44:24.259 GET 200 script 21 B 98 ms 1 alerts

04:44:24.266 GET 302 img 0 B 1170 ms —

04:44:24.266 GET 302 img 0 B 1168 ms —

04:44:24.268 GET 302 img 0 B 943 ms —

04:44:24.269 GET 302 img 0 B 1163 ms —

04:44:24.383 GET 200 fetch 58.9 KB 813 ms —

04:44:24.384 GET 200 fetch 26.1 KB 814 ms —

04:44:24.385 GET 200 fetch 2.9 KB 515 ms —

04:44:24.386 GET 200 script 41.0 KB 3291 ms 2 alerts

04:44:25.211 GET 200 script 5.0 KB 789 ms —

04:44:25.212 GET 200 script 83.4 KB 104 ms —

04:44:25.214 GET 200 xhr 40 B 107 ms —

04:44:25.216 GET 200 img 0 B 487 ms —

04:44:25.220 GET 200 script 5.0 KB 466 ms 3 alerts

04:44:25.223 GET 200 font 42.1 KB 78 ms —

04:44:25.227 GET 200 xhr 40 B 96 ms —

04:44:25.229 GET 200 script 101.5 KB 557 ms 3 alerts

04:44:25.230 GET 200 script 91.2 KB 559 ms 3 alerts

04:44:25.231 GET 200 script 18.2 KB 473 ms 3 alerts

Transaction #82

Request / response

URL

GET HTTPS

https://kettledroopingcontinuation.com/91/8a/b7/918ab757f462d6470eb323a56c02e5dd.js

IP / ASN

172.240.108.76

AS7979 · SERVERS-COM

Requested by: https://paste4free.site/p/BCTXN

Resource information

File type: JavaScript source, ASCII text, with very long lines (18622), with no line terminators
MIME type: application/javascript
First seen (UTC): 12 Jul 2026 · 04:45:10.260 UTC
Last seen (UTC): 12 Jul 2026 · 04:45:10.260 UTC
Times seen: 1

Size: 18.2 KB (18622 bytes)
MD5: 0e36a191bfad969e19753fb1c97899f5
SHA1: dec26de2721b34c0624743cc847e62d0968c70ba
SHA256: 229db17101d30b77be955367fcc00d461355523bb9a382ece4c8035ea170ea17

Certificate information

Issuer: Let's Encrypt · YR1
Subject: kettledroopingcontinuation.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 87:48:80:BE:9E:7C:E0:59:6E:4B:D8:8B:51:FD:61:A4:77:BD:92:86
Valid from: Wed, 24 Jun 2026 00:47:49 GMT
Valid until: Tue, 22 Sep 2026 00:47:48 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.28.2 (Web servers, Reverse proxies)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /91/8a/b7/918ab757f462d6470eb323a56c02e5dd.js HTTP/1.1
Host: kettledroopingcontinuation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://paste4free.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sun, 12 Jul 2026 04:44:25 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-CH-UA-Platform,X-Device-User-Agent,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List
access-control-allow-origin: *
content-encoding: zstd
vary: Accept-Encoding
x-envoy-upstream-service-time: 2
Host: kettledroopingcontinuation.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 09ebe5ad60f6b4d7258776b732052c9b
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

04:44:25.235 GET 200 script 5.0 KB 373 ms 2 alerts

04:44:25.238 GET 200 xhr 40 B 93 ms —

04:44:25.239 GET 200 script 18.2 KB 766 ms 2 alerts

04:44:25.243 GET 200 script 83.4 KB 102 ms —

04:44:25.246 GET 200 xhr 40 B 97 ms —

04:44:25.247 GET 200 script 5.0 KB 372 ms 2 alerts

04:44:25.251 GET 200 font 42.1 KB 53 ms —

04:44:25.267 GET 200 xhr 40 B 103 ms —

04:44:25.270 GET 200 xhr 14.0 KB 499 ms —

04:44:25.272 GET 200 script 101.5 KB 574 ms —

04:44:25.276 GET 200 script 91.2 KB 565 ms —

04:44:25.279 GET 200 script 18.2 KB 481 ms —

04:44:25.306 GET 200 img 44.2 KB 45 ms —

04:44:25.395 GET 307 xhr 0 B 374 ms 3 alerts

04:44:25.398 GET 307 xhr 0 B 376 ms 2 alerts

04:44:25.440 GET 200 img 66.4 KB 19 ms —

04:44:25.445 GET 200 img 6.3 KB 14 ms —

04:44:25.448 GET 200 img 33.4 KB 13 ms —

04:44:25.641 GET 200 xhr 14.5 KB 485 ms —

http://paste4free.site/p/BCTXN

Domain graph

Hostnames

Connections

Network requests

Transaction #82

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://paste4free.site/p/BCTXN

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #82

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://paste4free.site/p/BCTXN

Domain graph

Network requests