WEBSITE ANALYSIS REPORT

http://gpadrinaline.blogspot.com/

03 Aug 2026 · 07:52:57.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

blogger.googleusercontent.com3 captured requests
cdn.redgarto.com6 captured requests
cdn.show-sb.com1 captured requests
cdn.storageimagedisplay.com8 captured requests
fizzyacerbitymellow.com9 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com5 captured requests
gpadrinaline.blogspot.com3 captured requests
kettledroopingcontinuation.com3 captured requests
pagead2.googlesyndication.com1 captured requests
pl30598125.effectivecpmnetwork.com1 captured requests
pl30598126.effectivecpmnetwork.com1 captured requests
pl30598169.effectivecpmnetwork.com1 captured requests
portalfluently.com2 captured requests
protrafficinspector.com3 captured requests
realizationnewestfangs.com16 captured requests
spendsdetachment.com7 captured requests
thedirecthor.com8 captured requests
workdeadlinededicate.com3 captured requests
www.blogger.com1 captured requests
www.highperformanceformat.com6 captured requests

Connections

gpadrinaline.blogspot.com → blogger.googleusercontent.comLoads from3 captured connections
gpadrinaline.blogspot.com → cdn.redgarto.comCalls3 captured connections
gpadrinaline.blogspot.com → cdn.redgarto.comLoads from3 captured connections
gpadrinaline.blogspot.com → cdn.show-sb.comCalls1 captured connections
gpadrinaline.blogspot.com → cdn.storageimagedisplay.comLoads from8 captured connections
gpadrinaline.blogspot.com → fizzyacerbitymellow.comCalls1 captured connections
gpadrinaline.blogspot.com → fizzyacerbitymellow.comLoads from8 captured connections
gpadrinaline.blogspot.com → flushpersist.comLoads from2 captured connections
gpadrinaline.blogspot.com → fonts.googleapis.comLoads from1 captured connections
gpadrinaline.blogspot.com → fonts.gstatic.comLoads from5 captured connections
gpadrinaline.blogspot.com → kettledroopingcontinuation.comCalls2 captured connections
gpadrinaline.blogspot.com → kettledroopingcontinuation.comLoads from1 captured connections
gpadrinaline.blogspot.com → pagead2.googlesyndication.comLoads from1 captured connections
gpadrinaline.blogspot.com → pl30598125.effectivecpmnetwork.comLoads from1 captured connections
gpadrinaline.blogspot.com → pl30598126.effectivecpmnetwork.comLoads from1 captured connections
gpadrinaline.blogspot.com → pl30598169.effectivecpmnetwork.comLoads from1 captured connections
gpadrinaline.blogspot.com → portalfluently.comLoads from2 captured connections
gpadrinaline.blogspot.com → protrafficinspector.comCalls3 captured connections
gpadrinaline.blogspot.com → realizationnewestfangs.comCalls7 captured connections
gpadrinaline.blogspot.com → realizationnewestfangs.comLoads from9 captured connections
gpadrinaline.blogspot.com → spendsdetachment.comCalls4 captured connections
gpadrinaline.blogspot.com → spendsdetachment.comLoads from3 captured connections
gpadrinaline.blogspot.com → thedirecthor.comCalls1 captured connections
gpadrinaline.blogspot.com → thedirecthor.comLoads from7 captured connections
gpadrinaline.blogspot.com → workdeadlinededicate.comCalls2 captured connections
gpadrinaline.blogspot.com → workdeadlinededicate.comLoads from1 captured connections
gpadrinaline.blogspot.com → www.blogger.comLoads from1 captured connections
gpadrinaline.blogspot.com → www.highperformanceformat.comLoads from6 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

07:52:25.886 GET 200 document 260.4 KB 685 ms —

07:52:26.759 GET 200 script 66.9 KB 255 ms 1 alerts

07:52:26.761 GET 404 font 1.6 KB 83 ms —

07:52:26.762 GET 200 script 35.8 KB 211 ms 3 alerts

07:52:26.763 GET 200 script 33.5 KB 755 ms 1 alerts

07:52:26.765 GET 200 script 35.8 KB 196 ms 3 alerts

07:52:26.777 GET 200 script 95.2 KB 758 ms 1 alerts

07:52:27.050 GET 200 script 83.4 KB 152 ms 1 alerts

07:52:27.053 GET 200 xhr 40 B 146 ms —

07:52:27.054 GET 200 img 0 B 469 ms 1 alerts

07:52:27.069 GET 200 xhr 40 B 362 ms —

07:52:27.072 GET 200 script 9.3 KB 74 ms —

07:52:27.075 GET 200 script 35.8 KB 59 ms 3 alerts

07:52:27.157 GET 200 xhr 40 B 41 ms —

07:52:27.159 GET 200 script 9.3 KB 42 ms —

07:52:27.161 GET 200 script 35.8 KB 56 ms 3 alerts

07:52:27.241 GET 307 xhr 0 B 423 ms 2 alerts

07:52:27.247 GET 307 xhr 0 B 127 ms 3 alerts

07:52:27.249 GET 200 script 9.3 KB 39 ms —

07:52:27.255 GET 307 xhr 0 B 423 ms 1 alerts

07:52:27.257 GET 200 script 9.3 KB 42 ms —

07:52:27.258 GET 200 script 35.8 KB 51 ms 3 alerts

07:52:27.323 GET 307 xhr 0 B 439 ms 1 alerts

07:52:27.326 GET 200 script 9.3 KB 43 ms —

07:52:27.328 GET 200 script 35.8 KB 59 ms 3 alerts

07:52:27.379 GET 200 xhr 4.0 KB 43 ms 3 alerts

07:52:27.399 GET 307 xhr 0 B 589 ms 1 alerts

07:52:27.401 GET 200 script 9.3 KB 48 ms —

07:52:27.456 GET 307 xhr 0 B 518 ms 1 alerts

07:52:27.480 GET 200 img 21.7 KB 119 ms —

07:52:27.482 GET 200 img 0 B 0 ms 3 alerts

Transaction #64

Request / response

URL

GET HTTPS

https://kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1xSO48cRRetnrU-6YMA8TLpBA5Aosfd1a9pnFm8EtYIG1nCAapH11Denq52V_fMeKI1i4jXGRJJz5ldb2ZBBiJBs2RE7mwCLwE_gADkGM16pAUquPfWPVelc-qerxfNGRmgYeuPPzJznefsajTw-m_e1oU0U9vfvdX3vYF3rX9bF3F4rT_bhGryjh-EA--t_geZ2DNXqed7nu_5_fd1lSkzu3qOQpeP_TQaxOHA94cDP6KYVf_t2MaBZQ7k5Iy8Ai27l35Xd6DFCsX4u3czu1eb8u33xk3OalNhIk8-LfYKMy0wvihV5UAVJ9tpGNsR8k0PpjjZqoCZHG1UgOuO9C4_BS9OtlTBJ8fP2fIcWQEuX8R0skKWn0KzFYQ5gJZPCCAkdm-gGD_aNdWU3X-Osg3akUvP_oSeduTS09dQjB9fz_Wsf9PkTa1NYTFTLfRsBT1aoWxOUc970NNTiPpLaElQjBcutFxfiQWloUeVG2Rx7IY0TF0eeMqlwzhJIxXRMPTP_0arFZjdQWMdNNpBo3poyh7Gct1n6VDxNA5ZmqlESc9PBIuCIE3CiKpYRGjEA2h5CFHto6z2sacfdsT5_2VY6cDWBBPZHsvcUts-krltuL_NdJuDdmnq0YIdm3qUFQSsOkQl2yNd3rMHEPXOcq6sXJpNYLxul4zLdqllTVDdW1_x_FSJOBWuz5VwkyjgLuMycf0k80KlZMYS_0jZuvnXqGRuEsvQZTSLXcqGfiAjj6qAL8oz8vJmC86TO99iL1v340B6fCiVyuKAx3Hq8SSlKZWJR6mXBAJWt9C2B2YdzHVHPvvhc5S6I8EfEpydwuanEHoHrHkDbLpM6BDsC6Qe5sWPo5LJShcs10U24LkZ2dLUA2HGkKZFWV9Cfd9Z5Gfk1eUnt67_fG6PbP4CMvEr2R6IqkVZtbirfyEY5Q--v1HWeqznbOOXmzWrs_-B6Y44Ow8hdEde_-vg3Lrps98gyn3Y8uItawh4SZBrgjy76DPewv7jzi_qhf0Ko8oBz50lzytyxPMqP4TV6_6QUs8TPk1lGoVpMFRZFPpJkkV-EGdeEKG23d3yw5_-DgAA__-JEsfoNwQAAA==

IP / ASN

23.111.84.116

AS7979 · SERVERS-COM

Requested by: https://gpadrinaline.blogspot.com/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 11:29:46.060 UTC
Times seen: 19305524

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR1
Subject: kettledroopingcontinuation.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 87:48:80:BE:9E:7C:E0:59:6E:4B:D8:8B:51:FD:61:A4:77:BD:92:86
Valid from: Wed, 24 Jun 2026 00:47:49 GMT
Valid until: Tue, 22 Sep 2026 00:47:48 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.30.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /impr.gif?sid=H4sIAAAAAAAC_1xSO48cRRetnrU-6YMA8TLpBA5Aosfd1a9pnFm8EtYIG1nCAapH11Denq52V_fMeKI1i4jXGRJJz5ldb2ZBBiJBs2RE7mwCLwE_gADkGM16pAUquPfWPVelc-qerxfNGRmgYeuPPzJznefsajTw-m_e1oU0U9vfvdX3vYF3rX9bF3F4rT_bhGryjh-EA--t_geZ2DNXqed7nu_5_fd1lSkzu3qOQpeP_TQaxOHA94cDP6KYVf_t2MaBZQ7k5Iy8Ai27l35Xd6DFCsX4u3czu1eb8u33xk3OalNhIk8-LfYKMy0wvihV5UAVJ9tpGNsR8k0PpjjZqoCZHG1UgOuO9C4_BS9OtlTBJ8fP2fIcWQEuX8R0skKWn0KzFYQ5gJZPCCAkdm-gGD_aNdWU3X-Osg3akUvP_oSeduTS09dQjB9fz_Wsf9PkTa1NYTFTLfRsBT1aoWxOUc970NNTiPpLaElQjBcutFxfiQWloUeVG2Rx7IY0TF0eeMqlwzhJIxXRMPTP_0arFZjdQWMdNNpBo3poyh7Gct1n6VDxNA5ZmqlESc9PBIuCIE3CiKpYRGjEA2h5CFHto6z2sacfdsT5_2VY6cDWBBPZHsvcUts-krltuL_NdJuDdmnq0YIdm3qUFQSsOkQl2yNd3rMHEPXOcq6sXJpNYLxul4zLdqllTVDdW1_x_FSJOBWuz5VwkyjgLuMycf0k80KlZMYS_0jZuvnXqGRuEsvQZTSLXcqGfiAjj6qAL8oz8vJmC86TO99iL1v340B6fCiVyuKAx3Hq8SSlKZWJR6mXBAJWt9C2B2YdzHVHPvvhc5S6I8EfEpydwuanEHoHrHkDbLpM6BDsC6Qe5sWPo5LJShcs10U24LkZ2dLUA2HGkKZFWV9Cfd9Z5Gfk1eUnt67_fG6PbP4CMvEr2R6IqkVZtbirfyEY5Q--v1HWeqznbOOXmzWrs_-B6Y44Ow8hdEde_-vg3Lrps98gyn3Y8uItawh4SZBrgjy76DPewv7jzi_qhf0Ko8oBz50lzytyxPMqP4TV6_6QUs8TPk1lGoVpMFRZFPpJkkV-EGdeEKG23d3yw5_-DgAA__-JEsfoNwQAAA== HTTP/1.1
Host: kettledroopingcontinuation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=6c22402f-3e66-4249-b30f-286795f52441:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.QByThT0Pp0Z7qu1JH4qh67Q8PLn2ndsz1GfG6rC59Y4; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl30497691=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i

Response headers

HTTP/1.1 200 OK
Server: nginx/1.30.2
Date: Mon, 03 Aug 2026 07:52:27 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: iprc_c+b47e3fff899328c6b691967bd74f5109=1438851; Path=/; Expires=Tue, 04 Aug 2026 07:52:27 GMT; Secure; SameSite=None
iprc_c-1438851=8; Path=/; Expires=Tue, 04 Aug 2026 07:52:27 GMT; Secure; SameSite=None
vary: Origin,Accept-Encoding
x-envoy-upstream-service-time: 5
Host: kettledroopingcontinuation.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 9af8a66b614b5c4d78989282a5ab3af7
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

07:52:27.553 GET 200 script 83.4 KB 21 ms 1 alerts

07:52:27.570 GET 200 xhr 0 B 71 ms —

07:52:27.580 GET 200 xhr 14.5 KB 173 ms —

07:52:27.582 GET 200 script 9.3 KB 49 ms —

07:52:27.737 GET 200 img 65.4 KB 780 ms —

07:52:27.739 GET 200 img 56.6 KB 703 ms —

07:52:27.740 GET 200 img 43.1 KB 748 ms —

07:52:27.771 GET 200 xhr 4.0 KB 122 ms 2 alerts

07:52:27.773 GET 200 xhr 4.0 KB 130 ms 1 alerts

07:52:27.837 GET 200 img 15.8 KB 25 ms —

07:52:27.839 GET 200 img 51.8 KB 47 ms —

07:52:27.840 GET 200 img 94.2 KB 63 ms —

07:52:27.842 GET 200 img 59.7 KB 70 ms —

07:52:27.850 GET 200 xhr 4.0 KB 117 ms 1 alerts

07:52:27.852 GET 200 img 0 B 0 ms —

07:52:27.854 GET 200 img 0 B 0 ms —

07:52:27.855 GET 200 img 0 B 0 ms —

07:52:27.857 GET 200 img 0 B 0 ms —

07:52:27.859 GET 200 img 0 B 0 ms —

http://gpadrinaline.blogspot.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #64

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://gpadrinaline.blogspot.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #64

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://gpadrinaline.blogspot.com/

Domain graph

Network requests