WEBSITE ANALYSIS REPORT

http://explore.st-aug.edu/exp/unveiling-kevin-bacons-height-secrets-smooth-moves-and-surprising-facts

04 Mar 2026 · 14:33:49.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

3.bp.blogspot.com1 captured requests
cdn.show-sb.com1 captured requests
cdn.storageimagedisplay.com4 captured requests
cdnjs.cloudflare.com2 captured requests
creative-sb1.com6 captured requests
explore.st-aug.edu2 captured requests
fizzyacerbitymellow.com11 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com7 captured requests
kettledroopingcontinuation.com9 captured requests
preferencenail.com2 captured requests
protrafficinspector.com3 captured requests
rawwhirlwindrev.com3 captured requests
realizationnewestfangs.com1 captured requests
skinnycrawlinglax.com4 captured requests
wayfarerorthodox.com4 captured requests
weirdopt.com1 captured requests

Connections

explore.st-aug.edu → 3.bp.blogspot.comLoads from1 captured connections
explore.st-aug.edu → cdn.show-sb.comCalls1 captured connections
explore.st-aug.edu → cdn.storageimagedisplay.comLoads from4 captured connections
explore.st-aug.edu → cdnjs.cloudflare.comLoads from2 captured connections
explore.st-aug.edu → creative-sb1.comCalls3 captured connections
explore.st-aug.edu → creative-sb1.comLoads from3 captured connections
explore.st-aug.edu → fizzyacerbitymellow.comCalls3 captured connections
explore.st-aug.edu → fizzyacerbitymellow.comLoads from8 captured connections
explore.st-aug.edu → flushpersist.comLoads from2 captured connections
explore.st-aug.edu → fonts.googleapis.comLoads from1 captured connections
explore.st-aug.edu → fonts.gstatic.comLoads from7 captured connections
explore.st-aug.edu → kettledroopingcontinuation.comCalls3 captured connections
explore.st-aug.edu → kettledroopingcontinuation.comLoads from6 captured connections
explore.st-aug.edu → preferencenail.comLoads from2 captured connections
explore.st-aug.edu → protrafficinspector.comCalls3 captured connections
explore.st-aug.edu → rawwhirlwindrev.comLoads from3 captured connections
explore.st-aug.edu → realizationnewestfangs.comLoads from1 captured connections
explore.st-aug.edu → skinnycrawlinglax.comLoads from4 captured connections
explore.st-aug.edu → wayfarerorthodox.comCalls2 captured connections
explore.st-aug.edu → wayfarerorthodox.comLoads from2 captured connections
explore.st-aug.edu → weirdopt.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:33:25.993 GET 200 document 91.4 KB 1058 ms —

14:33:27.002 GET 200 script 124.5 KB 46 ms —

14:33:27.004 GET 200 stylesheet 22.7 KB 83 ms —

14:33:27.005 GET 200 script 49.8 KB 880 ms 3 alerts

14:33:27.007 GET 200 script 49.8 KB 877 ms 3 alerts

14:33:27.009 GET 200 img 362 B 364 ms —

14:33:27.010 GET 200 script 46.7 KB 870 ms 3 alerts

14:33:27.028 GET 200 font 16.1 KB 161 ms —

14:33:27.032 GET 200 font 47.3 KB 302 ms —

14:33:27.069 GET 200 font 47.3 KB 216 ms —

14:33:27.578 GET 200 script 5.0 KB 849 ms 4 alerts

14:33:27.594 GET 200 xhr 40 B 431 ms 1 alerts

14:33:27.596 GET 200 script 90.1 KB 847 ms 4 alerts

14:33:27.606 GET 200 xhr 40 B 556 ms 1 alerts

14:33:27.609 GET 200 script 105.2 KB 1009 ms 3 alerts

14:33:27.638 GET 200 font 47.3 KB 51 ms —

14:33:27.646 GET 200 font 16.9 KB 54 ms —

14:33:27.669 GET 200 xhr 40 B 287 ms 1 alerts

14:33:27.672 GET 200 script 5.0 KB 813 ms 1 alerts

14:33:27.674 GET 200 xhr 3.3 KB 825 ms 1 alerts

14:33:27.678 GET 200 script 105.2 KB 540 ms 1 alerts

14:33:27.890 GET 307 xhr 4.2 KB 713 ms 4 alerts

14:33:27.902 GET 307 xhr 4.3 KB 676 ms 3 alerts

14:33:28.111 GET 200 xhr 3.4 KB 128 ms 1 alerts

14:33:28.216 GET 200 xhr 3.6 KB 108 ms 1 alerts

14:33:28.219 GET 200 img 0 B 100 ms 1 alerts

14:33:28.225 GET 200 img 55.9 KB 241 ms —

14:33:28.228 GET 200 img 0 B 127 ms 1 alerts

14:33:28.236 GET 200 script 83.4 KB 164 ms 3 alerts

14:33:28.253 GET 200 img 0 B 810 ms 2 alerts

14:33:28.259 GET 200 script 0 B 161 ms 3 alerts

14:33:28.260 GET 200 script 83.4 KB 178 ms 3 alerts

14:33:28.295 GET 200 xhr 4.3 KB 128 ms 3 alerts

14:33:28.305 GET 200 xhr 4.2 KB 123 ms 4 alerts

14:33:28.352 GET 200 img 0 B 103 ms 1 alerts

14:33:28.357 GET 200 img 0 B 98 ms 1 alerts

14:33:28.416 GET 200 img 0 B 102 ms 1 alerts

14:33:28.418 GET 200 img 70.4 KB 35 ms —

14:33:28.419 GET 200 img 0 B 137 ms 1 alerts

14:33:28.499 GET 200 img 69.3 KB 30 ms —

14:33:28.503 GET 200 img 0 B 104 ms 3 alerts

14:33:28.550 GET 200 img 44.8 KB 25 ms —

14:33:28.551 GET 200 img 0 B 103 ms 4 alerts

14:33:28.660 GET 200 img 3.9 KB 106 ms —

14:33:28.749 GET 200 xhr 5.2 KB 206 ms 4 alerts

14:33:28.998 GET 200 img 0 B 680 ms 3 alerts

14:33:29.000 GET 200 img 0 B 675 ms 3 alerts

14:33:29.011 GET 200 img 0 B 96 ms 4 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://kettledroopingcontinuation.com/ren.gif?sid=H4sIAAAAAAAC_1RSv28cRRidPbujiAALGpC2oAAJn2d_3I9NiiCLHw3YQIJcUKCZnV17cnM7y87u3floHBKoKIyExI9q793ZThFFIIEEDUJnCiRLiGx3RdyEvwCk1OjOJ1l8xfd9894U73t6n4-Kc7KOgs3efUcPpVJso1Gn9ss7MhG6b-ytm7ZD6_SavSOTpn_NHsxb1rvqeH6dvmK_FYUdveFSh1KHOvabMotiPdhYsJDp_cCpB7Tuu3Wn4WOQ_f9tihoMsyB65-QZSFFdeRx_CBlOkXS_fz0ynVynr77RLRTLdYaeOPkg6SS6n6B7ucaZhTg5Wf6GNhUh39Sgk5PlBdC9yfwCcFmR2nOPwJOTpUzw3tGFUq4QJeDiKfR7U0RqCsmmCPUdSPGQAKHA1jaS7vGWzvps_4Jlc7Yiq0_-hexXZPXRGpLug00lB_YNrYpc6sRgEJeQgynk7hRpcYp8aEH2TxHmn0KKP8nGk7eRdCfbRmlIMXvJ8XlbCNdbZ60GX_cDJ1jnceCtN5kfMqdNY5_ThUUynoKZFRTGQiEtFLGFIrXQFTPbp20_dJjXjAMRtqjPfF9EnAZtl1IWhC0U4W1IcYgw--w4FXt5pzfJsyKaFEloRs69C8htLcDjOei2Rs794qNUuU3qtzynNXKQZgfoyEOYvRJG1GDyiljvHaAnyiOhjGvKY6FMwZ3ldJfTK8c63x2xI53vRgkByw6RiXIi04_NHYT5yngYGzHW88Z4Xo4ZF-VYirw2Ss_J03PTrR_v_oVONLPdtkNdlzGfsqYbBEEjdkXMWMBF2KCB24aRJaSpgRkLQ1mR157_G6l8eOVrcHYKo04RyhfAihfB-iXYXolh8tOQhUOW6T5L9lmRa16YeqogdIk0X0W-b43UOXl2_P7Nzd8WEWAntxCFZ9d_-XZe3yHMSqRZiVvyd4JddfuH7TSXXTlk80zcyFkerYDJilhXf0UoK7L2-MEinq0vdhCmBzDp2fWv_uGfEEJgNAFPLShZEW_tD6jokmO8hInOyLLAL_eRuYvdzAJX1pirzJpwlakvL6QaObMbLvea7XYzipsi9oTneiJo0CjwWdD0A7-B3FTy3ubP_wUAAP__9N49RCAEAAA=

IP / ASN

172.240.253.132

AS7979 · SERVERS-COM

Requested by: https://explore.st-aug.edu/exp/unveiling-kevin-bacons-height-secrets-smooth-moves-and-surprising-facts

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 23:29:55.548 UTC
Times seen: 19318456

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R13
Subject: kettledroopingcontinuation.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 4C:9B:DC:71:4E:6F:7E:04:5A:F2:21:54:DA:06:E8:A0:34:82:CB:86
Valid from: Mon, 23 Feb 2026 21:44:44 GMT
Valid until: Sun, 24 May 2026 21:44:43 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ren.gif?sid=H4sIAAAAAAAC_1RSv28cRRidPbujiAALGpC2oAAJn2d_3I9NiiCLHw3YQIJcUKCZnV17cnM7y87u3floHBKoKIyExI9q793ZThFFIIEEDUJnCiRLiGx3RdyEvwCk1OjOJ1l8xfd9894U73t6n4-Kc7KOgs3efUcPpVJso1Gn9ss7MhG6b-ytm7ZD6_SavSOTpn_NHsxb1rvqeH6dvmK_FYUdveFSh1KHOvabMotiPdhYsJDp_cCpB7Tuu3Wn4WOQ_f9tihoMsyB65-QZSFFdeRx_CBlOkXS_fz0ynVynr77RLRTLdYaeOPkg6SS6n6B7ucaZhTg5Wf6GNhUh39Sgk5PlBdC9yfwCcFmR2nOPwJOTpUzw3tGFUq4QJeDiKfR7U0RqCsmmCPUdSPGQAKHA1jaS7vGWzvps_4Jlc7Yiq0_-hexXZPXRGpLug00lB_YNrYpc6sRgEJeQgynk7hRpcYp8aEH2TxHmn0KKP8nGk7eRdCfbRmlIMXvJ8XlbCNdbZ60GX_cDJ1jnceCtN5kfMqdNY5_ThUUynoKZFRTGQiEtFLGFIrXQFTPbp20_dJjXjAMRtqjPfF9EnAZtl1IWhC0U4W1IcYgw--w4FXt5pzfJsyKaFEloRs69C8htLcDjOei2Rs794qNUuU3qtzynNXKQZgfoyEOYvRJG1GDyiljvHaAnyiOhjGvKY6FMwZ3ldJfTK8c63x2xI53vRgkByw6RiXIi04_NHYT5yngYGzHW88Z4Xo4ZF-VYirw2Ss_J03PTrR_v_oVONLPdtkNdlzGfsqYbBEEjdkXMWMBF2KCB24aRJaSpgRkLQ1mR157_G6l8eOVrcHYKo04RyhfAihfB-iXYXolh8tOQhUOW6T5L9lmRa16YeqogdIk0X0W-b43UOXl2_P7Nzd8WEWAntxCFZ9d_-XZe3yHMSqRZiVvyd4JddfuH7TSXXTlk80zcyFkerYDJilhXf0UoK7L2-MEinq0vdhCmBzDp2fWv_uGfEEJgNAFPLShZEW_tD6jokmO8hInOyLLAL_eRuYvdzAJX1pirzJpwlakvL6QaObMbLvea7XYzipsi9oTneiJo0CjwWdD0A7-B3FTy3ubP_wUAAP__9N49RCAEAAA= HTTP/1.1
Host: kettledroopingcontinuation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: uid_id2=14b8dd23-a75b-4919-bf93-6a4ca180f4b0:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNjA0NzMxNywiayI6IjQ5ZjdhOWJjNjkzOGUyNTAyYTBlNTk1YmZlNjZjMTE5Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo0MjAwNDIwLCJwaWQiOjM5OTEsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjgsImFpZCI6MjcsInB0Ijo0LCJwayI6IndmeG54OGU2IiwiY3BrcyI6eyIyOSI6IjI4MTAyMmFhNDBhNjI5OTk1ZjJkZmFhOWJkYzUwOTI4In0sInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0MzI0NCwibiI6Ik9zbG8ifSwicmciOnsiaWQiOjE4NDQsIm4iOiJPc2xvIENvdW50eSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL2V4cGxvcmUuc3QtYXVnLmVkdS9leHAvdW52ZWlsaW5nLWtldmluLWJhY29ucy1oZWlnaHQtc2VjcmV0cy1zbW9vdGgtbW92ZXMtYW5kLXN1cnByaXNpbmctZmFjdHMiLCJ0eiI6MSwiaWR0IjoyLCJhciI6W119fQ.Hytzt9FD7B8bvvJfIWcMAeikqmpHu1EW4YU1Xz5u9is; pdhtkv=true; uncs=2; pdhtkv27=true; uncs27=1; u_pl26047317=1; pdhtkv29=true; uncs29=1; u_pl28607696=1; slec281022aa40a629995f2dfaa9bdc50928=[6399850]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 04 Mar 2026 14:33:29 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
access-control-allow-origin: *
vary: Origin
access-control-allow-credentials: true
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 1
Host: kettledroopingcontinuation.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 08d44f6ff2e9b5f583faf10aa5145344
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

14:33:29.012 GET 200 xhr 1.3 KB 216 ms 3 alerts

14:33:29.197 GET 200 img 0 B 773 ms 4 alerts

http://explore.st-aug.edu/exp/unveiling-kevin-bacons-height-secrets-smooth-moves-and-surprising-facts

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://explore.st-aug.edu/exp/unveiling-kevin-bacons-height-secrets-smooth-moves-and-surprising-facts

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://explore.st-aug.edu/exp/unveiling-kevin-bacons-height-secrets-smooth-moves-and-surprising-facts

Domain graph

Network requests