WEBSITE ANALYSIS REPORT

https://www.claim-robux-here34.blogspot.com/

14 Aug 2026 · 00:12:47.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

00:12:19.327 GET No response document 0 B 0 ms 2 alerts

00:12:19.486 GET 200 document 6.1 KB 840 ms 2 alerts

00:12:20.750 GET 200 stylesheet 0 B 0 ms —

00:12:20.753 GET 200 script 0 B 0 ms —

00:12:20.755 GET 200 script 6.4 KB 49 ms 2 alerts

00:12:20.756 GET 200 script 0 B 0 ms 3 alerts

00:12:20.763 GET 200 img 0 B 0 ms —

00:12:21.470 GET 404 document 111.9 KB 978 ms 2 alerts

00:12:21.476 GET 200 subdocument 4.5 KB 91 ms 2 alerts

00:12:21.657 GET 200 subdocument 3.3 KB 41 ms 2 alerts

00:12:21.715 GET 200 img 22.2 KB 119 ms —

00:12:21.720 GET 200 img 7 B 29 ms 2 alerts

Transaction #06

Request / response

URL

GET HTTPS

https://kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1xSPYwbRRSedQISokCgkAqhlUgBEuvs7I_tTbqIvyYJIgcpEMX87Ji5W-9sdnZtn4VQjkPUlwZRrj_f5boIGmiRjw4JiW2Qi1yDaGlA1MgXi4uY4r038z3NfN-876t5fUq6qNnq_ZtmprOMXY27vvv6XZ1LM7HurS2X-l3_untX573oujtdh3J8jYZR13_DfTcVO-Zq4FPfpz5139Flqsz06hkKXTyiSdztRV1KB10aB5iW_z-xtQPLHMjxKXkJWrYv_K4-hhZL5KNv30rtTmWKN98e1RmrTImxPP4w38nNJMfovFSlA5Ufb7phbEvINx2Y_HijAmZ8uFYBrlvSufwYPD_eUAUfHz1hyzOkObh8HpPxEml2As2WEGYfWv5KACFx6zby0cNbppyw3ScoW6MtufjPX9CTllx8fAn56NGNTE_dOyarK21yi6lqoKdL6OESRX2CataBnpxAVF9Ay1-I33kV-ejoJqtLBi1XV-I0SEIVhp4MaehFVIQeGzDlJbzPReSHNEjE2R9ptQSzF1BbB7V2UKsO6qKDkVy5LBkonvQilqSqr6RP-4LFYZj0ozhQPRGjFnvQ8gCi3FuIbTuvUJT3saMftMR57jKsdGArgrFsjmRmA9s8lJmtOd3kYJPDZmGq4ZwdmWqY5gSsPEApm0Nd3LP7ENWFxUxZuTDrwHjVLBiXzULLiqC8t7ri00QpmQhPxkHs9WWkvMHAT7w4DMJQBkopGR8qW9VPt0acen3GBx7rMeHJfiB94QcJDZN5cUpeXM_E-eG9Z7CTrtwBDyUPOE1ESoPYj8JeLBjjPV8OWEIFhdUNtO2AWQcz3ZKPtn5DoVvi__EZODuBzU4g9CtgtQs2WYSBD_YpYh-z_PvS8HrqTXdnXZ6ZoS1M1RVmBGkaFNVFVLvOPDsllxYfbN348cwpqvs1UvEz2SyIskFRNtjWPxEMs73vbheVHukZW1vnTsWq9Fkw3RLnwgMI3ZKX_94_c_G14Z8QxX3Y4r-7FpktWqK2XoM1BLwgyDRBlp4_xngD-9Sen9dz-yWGpQOeOQueleSQZ2V2AKtX7iAIfF_QIJFJHCXhQKVxRPv9NKZhL_XDGJVttz__JP03AAD__w_og_NLBAAA

IP / ASN

23.111.84.116

AS7979 · SERVERS-COM

Requested by: https://kettledroopingcontinuation.com/api/users?token=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

Resource information

File type: ASCII text, with no line terminators
MIME type: image/gif
First seen (UTC): 05 Apr 2023 · 23:50:35.000 UTC
Last seen (UTC): 18 Oct 2026 · 05:04:21.707 UTC
Times seen: 19394

Size: 7 B (7 bytes)
MD5: 132d6af1b46048b45cf86cdee7991d31
SHA1: eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
SHA256: ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

Certificate information

Issuer: Let's Encrypt · YR1
Subject: kettledroopingcontinuation.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 87:48:80:BE:9E:7C:E0:59:6E:4B:D8:8B:51:FD:61:A4:77:BD:92:86
Valid from: Wed, 24 Jun 2026 00:47:49 GMT
Valid until: Tue, 22 Sep 2026 00:47:48 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.30.2 (Web servers, Reverse proxies)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /impr.gif?sid=H4sIAAAAAAAC_1xSPYwbRRSedQISokCgkAqhlUgBEuvs7I_tTbqIvyYJIgcpEMX87Ji5W-9sdnZtn4VQjkPUlwZRrj_f5boIGmiRjw4JiW2Qi1yDaGlA1MgXi4uY4r038z3NfN-876t5fUq6qNnq_ZtmprOMXY27vvv6XZ1LM7HurS2X-l3_untX573oujtdh3J8jYZR13_DfTcVO-Zq4FPfpz5139Flqsz06hkKXTyiSdztRV1KB10aB5iW_z-xtQPLHMjxKXkJWrYv_K4-hhZL5KNv30rtTmWKN98e1RmrTImxPP4w38nNJMfovFSlA5Ufb7phbEvINx2Y_HijAmZ8uFYBrlvSufwYPD_eUAUfHz1hyzOkObh8HpPxEml2As2WEGYfWv5KACFx6zby0cNbppyw3ScoW6MtufjPX9CTllx8fAn56NGNTE_dOyarK21yi6lqoKdL6OESRX2CataBnpxAVF9Ay1-I33kV-ejoJqtLBi1XV-I0SEIVhp4MaehFVIQeGzDlJbzPReSHNEjE2R9ptQSzF1BbB7V2UKsO6qKDkVy5LBkonvQilqSqr6RP-4LFYZj0ozhQPRGjFnvQ8gCi3FuIbTuvUJT3saMftMR57jKsdGArgrFsjmRmA9s8lJmtOd3kYJPDZmGq4ZwdmWqY5gSsPEApm0Nd3LP7ENWFxUxZuTDrwHjVLBiXzULLiqC8t7ri00QpmQhPxkHs9WWkvMHAT7w4DMJQBkopGR8qW9VPt0acen3GBx7rMeHJfiB94QcJDZN5cUpeXM_E-eG9Z7CTrtwBDyUPOE1ESoPYj8JeLBjjPV8OWEIFhdUNtO2AWQcz3ZKPtn5DoVvi__EZODuBzU4g9CtgtQs2WYSBD_YpYh-z_PvS8HrqTXdnXZ6ZoS1M1RVmBGkaFNVFVLvOPDsllxYfbN348cwpqvs1UvEz2SyIskFRNtjWPxEMs73vbheVHukZW1vnTsWq9Fkw3RLnwgMI3ZKX_94_c_G14Z8QxX3Y4r-7FpktWqK2XoM1BLwgyDRBlp4_xngD-9Sen9dz-yWGpQOeOQueleSQZ2V2AKtX7iAIfF_QIJFJHCXhQKVxRPv9NKZhL_XDGJVttz__JP03AAD__w_og_NLBAAA HTTP/1.1
Host: kettledroopingcontinuation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://kettledroopingcontinuation.com/api/users?token=L3dhdGNoLjU1NTM1NDYzODYwMD9kZXY9ZSZmc3R1PTAxOWZmZDljLWQ0YjEtN2FiOC1hNmFjLWQ3MmQwYzAyOTEzOSZrZXk9OGIzZGIyYjE5Y2UxMjUwNDM2NWNhYWI2MGQ4YTkxYzEma3c9JTVCJTIydHRtcm9idXglMjIlNUQmcHMxPTIzNDBkYjZhMzdjZTFhYzA1MTYyYjk0YTkwOTU1MjdjJnJlZmVyPWh0dHBzJTNBJTJGJTJGY2xhaW0tcm9idXgtaGVyZTM0LmJsb2dzcG90LmNvbSUyRiZyZXM9MTQuMTA1NSZybXRjPXQmc2h0PXNfTTdycUpWdTBfRnJZTTBXU3dXMk1WSUQ1N0NOWEIySUlEcVA5aEtPdFEmc2h2PTImc3QxPTE3ODY2NjYzNDE1NTA3MzQ5NzQmdHo9MCZwaWk9JmluPSZ1dWlkPTVlMjkzZjMzLWQzMTMtNDFjMy1hOGFmLTliN2JjNDAzMTI5YyUzQTMlM0Ex
Cookie: uid_id2=5e293f33-d313-41c3-a8af-9b7bc403129c:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.-Nwi7q7GowZskCD9Y3Iry-U9OiVXaCWy5k_cu97-fdg; cjs=t; pdhtkv=true; uncs=1; pdhtkv32=true; uncs32=1; u_pl28788741=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.30.2
Date: Fri, 14 Aug 2026 00:12:21 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: iprc_c+54ac46cce45c878c14a03fac59891ff6=1438851; Path=/; Expires=Sat, 15 Aug 2026 00:12:21 GMT; Secure; SameSite=None
iprc_c-1438851=8; Path=/; Expires=Sat, 15 Aug 2026 00:12:21 GMT; Secure; SameSite=None
vary: Origin
x-envoy-upstream-service-time: 8
Host: kettledroopingcontinuation.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 71a86b825ea1e3e0fa2e718af1cfef0b
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

00:12:22.423 GET 200 stylesheet 5.8 KB 175 ms —

00:12:22.425 GET 200 stylesheet 42.5 KB 47 ms —

00:12:22.426 GET 200 stylesheet 3.8 KB 133 ms —

00:12:22.430 GET 200 stylesheet 12.0 KB 211 ms —

00:12:22.432 GET 404 imageset 14.2 KB 736 ms 2 alerts

00:12:22.650 GET 200 img 1.6 KB 127 ms —

00:12:22.680 GET 200 font 42.1 KB 143 ms —

00:12:22.681 GET 200 font 18.2 KB 126 ms —

00:12:22.684 GET 200 script 193.2 KB 190 ms —

00:12:22.685 GET 200 stylesheet 19.7 KB 193 ms —

00:12:22.924 OPTIONS 200 xhr 0 B 165 ms —

00:12:23.172 GET 404 img 111.9 KB 333 ms 2 alerts

00:12:23.914 POST 200 xhr 131 B 169 ms —

00:12:26.128 POST 200 xhr 131 B 77 ms —

00:12:30.362 POST 200 xhr 131 B 78 ms —

00:12:38.614 POST 200 xhr 131 B 79 ms —

https://www.claim-robux-here34.blogspot.com/

Domain graph

Hostnames

Connections