WEBSITE ANALYSIS REPORT

http://btdb.unblock2.space/

05 May 2026 · 16:53:07.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

btdb.unblock2.space10 captured requests
cdn.jsdelivr.net1 captured requests
cdn.nightdestruct.com17 captured requests
cdn.show-creative1.com2 captured requests
cdn.show-sb.com1 captured requests
cdnjs.cloudflare.com2 captured requests
exposuretigerphilip.com6 captured requests
flushpersist.com3 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com5 captured requests
formden.com1 captured requests
heartilyscales.com10 captured requests
kettledroopingcontinuation.com12 captured requests
matomo.hellohi.me1 captured requests
maxcdn.bootstrapcdn.com1 captured requests
msdoj.com2 captured requests
origunix.com1 captured requests
preferencenail.com4 captured requests
protrafficinspector.com4 captured requests
use.fontawesome.com3 captured requests
vmuid.com2 captured requests

Connections

btdb.unblock2.space → cdn.jsdelivr.netLoads from1 captured connections
btdb.unblock2.space → cdn.nightdestruct.comCalls9 captured connections
btdb.unblock2.space → cdn.nightdestruct.comLoads from8 captured connections
btdb.unblock2.space → cdn.show-creative1.comCalls2 captured connections
btdb.unblock2.space → cdn.show-sb.comCalls1 captured connections
btdb.unblock2.space → cdnjs.cloudflare.comLoads from2 captured connections
btdb.unblock2.space → exposuretigerphilip.comCalls1 captured connections
btdb.unblock2.space → exposuretigerphilip.comLoads from5 captured connections
btdb.unblock2.space → flushpersist.comLoads from3 captured connections
btdb.unblock2.space → fonts.googleapis.comLoads from2 captured connections
btdb.unblock2.space → fonts.gstatic.comLoads from5 captured connections
btdb.unblock2.space → formden.comLoads from1 captured connections
btdb.unblock2.space → heartilyscales.comCalls2 captured connections
btdb.unblock2.space → heartilyscales.comLoads from8 captured connections
btdb.unblock2.space → kettledroopingcontinuation.comLoads from12 captured connections
btdb.unblock2.space → matomo.hellohi.meLoads from1 captured connections
btdb.unblock2.space → maxcdn.bootstrapcdn.comLoads from1 captured connections
btdb.unblock2.space → msdoj.comCalls1 captured connections
btdb.unblock2.space → msdoj.comLoads from1 captured connections
btdb.unblock2.space → origunix.comLoads from1 captured connections
btdb.unblock2.space → preferencenail.comLoads from4 captured connections
btdb.unblock2.space → protrafficinspector.comCalls4 captured connections
btdb.unblock2.space → use.fontawesome.comLoads from3 captured connections
btdb.unblock2.space → vmuid.comCalls1 captured connections
btdb.unblock2.space → vmuid.comLoads from1 captured connections
origunix.com → msdoj.comRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:52:44.318 GET 200 document 16.6 KB 265 ms 2 alerts

16:52:44.736 GET 404 script 151 B 14 ms 2 alerts

16:52:44.738 GET 200 stylesheet 14.2 KB 201 ms 2 alerts

16:52:44.740 GET 200 stylesheet 30.8 KB 219 ms 2 alerts

16:52:44.742 GET 200 stylesheet 53.8 KB 229 ms —

16:52:44.744 GET 200 stylesheet 25.4 KB 97 ms —

16:52:44.745 GET 200 script 84.9 KB 121 ms —

16:52:44.746 GET 200 script 33.8 KB 119 ms —

16:52:44.747 GET 200 stylesheet 198.1 KB 266 ms —

16:52:44.749 GET 200 img 1.9 KB 172 ms 2 alerts

16:52:44.751 GET 200 script 9.0 KB 73 ms 2 alerts

16:52:44.751 GET 200 script 90.7 KB 882 ms 2 alerts

16:52:44.753 GET 200 script 90.7 KB 875 ms 2 alerts

16:52:44.755 GET 200 script 95.4 KB 551 ms —

16:52:44.758 GET 200 script 90.7 KB 541 ms —

16:52:44.759 GET 302 script 69.6 KB 174 ms 1 alerts

16:52:44.759 GET 200 script 10.5 KB 192 ms 1 alerts

16:52:45.071 GET 200 font 72.5 KB 113 ms —

16:52:45.086 GET 200 font 13.2 KB 114 ms —

16:52:45.134 GET 200 script 69.6 KB 271 ms 1 alerts

16:52:45.136 GET 200 script 84.9 KB 21 ms —

16:52:45.459 GET 404 script 0 B 69 ms —

16:52:45.463 GET 200 script 83.4 KB 218 ms 2 alerts

16:52:45.466 GET 200 xhr 40 B 537 ms —

16:52:45.469 GET 200 script 83.4 KB 224 ms 2 alerts

16:52:45.471 GET 200 xhr 40 B 507 ms —

16:52:45.485 GET 200 img 0 B 746 ms 3 alerts

16:52:45.487 GET 200 script 5.0 KB 731 ms 3 alerts

Transaction #22

Request / response

URL

GET HTTPS

https://kettledroopingcontinuation.com/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js

IP / ASN

172.240.108.84

AS7979 · SERVERS-COM

Requested by: https://btdb.unblock2.space/

Resource information

File type: JavaScript source, ASCII text, with very long lines (5126), with no line terminators
MIME type: application/javascript
First seen (UTC): 04 May 2026 · 13:56:21.086 UTC
Last seen (UTC): 10 Aug 2026 · 10:29:39.496 UTC
Times seen: 7126

Size: 5.0 KB (5126 bytes)
MD5: 9454b75035bf1e7fbd8bc933d239763a
SHA1: 05ac0f19656d2fd1882cb0ec3bc347cf2dbec25e
SHA256: 261c1fc4c2d7eadeabb8edc511b4d3681cad5a27060128b4c3a6690484ccaffd

Certificate information

Issuer: Let's Encrypt · R12
Subject: kettledroopingcontinuation.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20
Valid from: Fri, 24 Apr 2026 21:50:47 GMT
Valid until: Thu, 23 Jul 2026 21:50:46 GMT

Technology fingerprints

Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js HTTP/1.1
Host: kettledroopingcontinuation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.unblock2.space/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Tue, 05 May 2026 16:52:45 GMT
Content-Type: application/javascript
Content-Length: 2569
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List
x-envoy-upstream-service-time: 1
Host: kettledroopingcontinuation.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 419507db74161550ef5cd84824a8a862
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

16:52:45.489 GET 200 script 83.4 KB 107 ms 2 alerts

16:52:45.490 GET 200 xhr 40 B 264 ms —

16:52:45.549 GET 200 script 83.4 KB 161 ms 2 alerts

16:52:45.551 GET 200 xhr 40 B 671 ms —

16:52:45.557 POST 200 fetch 65 B 31 ms 1 alerts

16:52:45.562 POST 200 beacon 2 B 35 ms 1 alerts

16:52:45.565 GET 302 script 22.9 KB 5 ms 2 alerts

16:52:45.589 GET 200 script 22.9 KB 8 ms 2 alerts

16:52:45.890 POST 200 xhr 0 B 9 ms 2 alerts

16:52:45.977 GET 200 xhr 5.1 KB 144 ms 2 alerts

16:52:45.978 GET 200 xhr 5.1 KB 109 ms 2 alerts

16:52:46.026 GET 200 xhr 4.9 KB 123 ms —

16:52:46.148 GET 200 img 14.7 KB 200 ms 2 alerts

16:52:46.216 GET 200 img 0 B 107 ms 2 alerts

16:52:46.220 GET 200 xhr 1.7 KB 505 ms 2 alerts

16:52:46.246 GET 200 img 0 B 102 ms 2 alerts

16:52:46.251 GET 200 xhr 1.7 KB 501 ms 2 alerts

16:52:46.255 GET 200 img 0 B 102 ms —

16:52:46.262 GET 200 xhr 1.5 KB 1226 ms 3 alerts

16:52:46.535 GET 200 img 0 B 780 ms 2 alerts

16:52:46.536 GET 200 img 0 B 790 ms 2 alerts

16:52:46.537 GET 200 img 0 B 776 ms 2 alerts

http://btdb.unblock2.space/

Domain graph

Hostnames

Connections

Network requests

Transaction #22

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://btdb.unblock2.space/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #22

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://btdb.unblock2.space/

Domain graph

Network requests