WEBSITE ANALYSIS REPORT

http://www.scriptzroblox.eu/post/6d88afa9-769c-4270-8d32-0e5cecca8fe2

11 Sep 2026 · 22:03:13.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

22:02:33.346 GET 200 document 3.2 KB 164 ms —

22:02:33.721 GET 200 script 522.1 KB 97 ms —

22:02:33.722 GET 200 stylesheet 64.4 KB 105 ms —

22:02:34.015 GET 200 stylesheet 13.9 KB 83 ms —

22:02:34.146 GET 200 img 718.2 KB 105 ms —

22:02:34.148 GET 200 img 17.0 KB 32 ms —

22:02:34.159 GET 200 font 24.7 KB 76 ms —

22:02:34.161 GET 200 font 24.3 KB 50 ms —

22:02:34.163 GET 200 font 24.3 KB 71 ms —

22:02:34.164 GET 200 font 24.3 KB 72 ms —

22:02:34.167 GET 200 script 72 B 94 ms —

22:02:34.169 GET 200 script 72 B 92 ms —

22:02:34.171 GET 200 script 72 B 99 ms —

22:02:34.177 GET 200 fetch 23 B 179 ms —

22:02:34.178 GET 200 script 3.0 KB 29 ms —

22:02:34.184 GET 200 script 47.7 KB 599 ms 1 alerts

22:02:34.196 OPTIONS 200 fetch 0 B 133 ms —

22:02:34.262 POST 200 fetch 2 B 92 ms —

22:02:34.536 GET 200 img 18.6 KB 89 ms —

22:02:34.538 GET 200 img 1.4 KB 97 ms —

22:02:34.618 OPTIONS 200 fetch 0 B 54 ms —

22:02:34.622 GET 200 img 14.2 KB 88 ms —

22:02:34.657 GET 401 fetch 47 B 283 ms —

22:02:34.794 GET 200 script 4.6 KB 6464 ms —

22:02:34.806 GET 200 xhr 40 B 130 ms —

22:02:34.810 GET 200 script 47.7 KB 111 ms 1 alerts

22:02:34.933 GET 200 script 4.6 KB 61 ms —

22:02:34.938 GET 200 xhr 40 B 25 ms —

22:02:34.950 GET 200 script 47.7 KB 108 ms 1 alerts

22:02:34.953 GET 307 xhr 0 B 506 ms 3 alerts

22:02:34.969 GET 307 xhr 0 B 500 ms 2 alerts

22:02:35.072 GET 200 script 4.6 KB 48 ms —

22:02:35.078 GET 307 xhr 0 B 541 ms 2 alerts

22:02:35.464 GET 200 xhr 4.0 KB 118 ms 3 alerts

22:02:35.473 GET 200 xhr 4.0 KB 117 ms 2 alerts

22:02:35.624 GET 200 xhr 4.0 KB 120 ms 2 alerts

22:02:35.645 GET 200 img 71.3 KB 134 ms —

22:02:35.646 GET 200 img 0 B 0 ms 3 alerts

Transaction #04

Request / response

URL

GET HTTPS

https://kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1xSPWwcRRidvVgUgIQUOSAatAUFSNx59u_2llBF_FR2EAkKEtXs_DgT7-1sdnbvLpfGIYjaBQXl-q0dF0hR6CmiMx0SkrdzETc0iIYCQY18OeHAFO_7Zt6nmfdG75v9-owMULPTTzfNXGcZ24gG1H3nls6FmVp366br0QG96t7S-TC86s7OoZy87wXhgL7rfiL5jtnwqUepRz33Y11KZWYbSxa6eOwl0WAYDjxvNPAiH7Py_ye2dmCZAzE5I5ehRffar-pLaL5APn7yobQ7lSne-2hcZ6wyJSbi6PN8JzfTHOOLVpUOVH60moaxHSHf9WDyo5ULmMnBuQukuiO9158hzY9WUpFODp-rTTPIHKl4BdPJAjI7hmYLcPMQWpwQgAtsXUc-frRlyim795xl52xH1v7-E3rakbVn68jHj69leubeMFldaZNbzFQDPVtAby9Q1Meo5j3o6TF49RW0-IXQ3lvIx4ebrC4ZtDh9m3qMJn4s-zH1WT-OkqCfJGHUD8OhVKGgLKDR8o-0WoDZS6itg1o7qFUPddHDWJy6LBmpNBmGLJEqVoJ6MWdRECRxGPlqyCPU_AG02AMvd1GUu9jR33aE_HX_5M3vO-Jc2TyJLsMKB7YimIjmUGTWt80jkdk69VbVX9WgaU21vc8OTbUtcwJW7qEUzYEu7tqH4NWldq6saM05sLRqWpaKptWiIijvvmh4CSEP-iPGhn0a-HGUKp8JlR4oW9X_GfXCfhzJpD9iwagf-IoqGoowiof7xSpMzlPTYkeeujIQIy9SVAz9gHMvCP0kUj7zeej5AfVDWN1A2x6YdTDXHflCUhS6I94HryJlx7DZMbi-BFa_ATZtY38EdhsJxTx_Ynmpi2pemjQzs4GsIUyDolpDdc-BrMh-dkbW289uXnu6DIvk65D8Z7Ja4GWDomxwR_9EsJ09-OF6UemxnrPz9NyoWCVfAtMnt38D1x258odcxjj5_UfwYhe2-PemNrNFR-T8ZVhDkBYEmSbI5MVTLG1gX9inF_2-_RrbpYM0c9o0K8lBmpXZHqw-dUe-Tyn3_EQkUZgEIyWj0ItjGXnBUNIgQmW7Owfz-_8MAO7jb7dMBAAA

IP / ASN

172.240.253.132

AS7979 · SERVERS-COM

Requested by: https://www.scriptzroblox.eu/post/6d88afa9-769c-4270-8d32-0e5cecca8fe2

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 19:29:52.067 UTC
Times seen: 19314413

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR2
Subject: kettledroopingcontinuation.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2
Valid from: Sun, 23 Aug 2026 00:02:23 GMT
Valid until: Sat, 21 Nov 2026 00:02:22 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
OpenDNS Phishing Block	medium	Phishing
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /impr.gif?sid=H4sIAAAAAAAC_1xSPWwcRRidvVgUgIQUOSAatAUFSNx59u_2llBF_FR2EAkKEtXs_DgT7-1sdnbvLpfGIYjaBQXl-q0dF0hR6CmiMx0SkrdzETc0iIYCQY18OeHAFO_7Zt6nmfdG75v9-owMULPTTzfNXGcZ24gG1H3nls6FmVp366br0QG96t7S-TC86s7OoZy87wXhgL7rfiL5jtnwqUepRz33Y11KZWYbSxa6eOwl0WAYDjxvNPAiH7Py_ye2dmCZAzE5I5ehRffar-pLaL5APn7yobQ7lSne-2hcZ6wyJSbi6PN8JzfTHOOLVpUOVH60moaxHSHf9WDyo5ULmMnBuQukuiO9158hzY9WUpFODp-rTTPIHKl4BdPJAjI7hmYLcPMQWpwQgAtsXUc-frRlyim795xl52xH1v7-E3rakbVn68jHj69leubeMFldaZNbzFQDPVtAby9Q1Meo5j3o6TF49RW0-IXQ3lvIx4ebrC4ZtDh9m3qMJn4s-zH1WT-OkqCfJGHUD8OhVKGgLKDR8o-0WoDZS6itg1o7qFUPddHDWJy6LBmpNBmGLJEqVoJ6MWdRECRxGPlqyCPU_AG02AMvd1GUu9jR33aE_HX_5M3vO-Jc2TyJLsMKB7YimIjmUGTWt80jkdk69VbVX9WgaU21vc8OTbUtcwJW7qEUzYEu7tqH4NWldq6saM05sLRqWpaKptWiIijvvmh4CSEP-iPGhn0a-HGUKp8JlR4oW9X_GfXCfhzJpD9iwagf-IoqGoowiof7xSpMzlPTYkeeujIQIy9SVAz9gHMvCP0kUj7zeej5AfVDWN1A2x6YdTDXHflCUhS6I94HryJlx7DZMbi-BFa_ATZtY38EdhsJxTx_Ynmpi2pemjQzs4GsIUyDolpDdc-BrMh-dkbW289uXnu6DIvk65D8Z7Ja4GWDomxwR_9EsJ09-OF6UemxnrPz9NyoWCVfAtMnt38D1x258odcxjj5_UfwYhe2-PemNrNFR-T8ZVhDkBYEmSbI5MVTLG1gX9inF_2-_RrbpYM0c9o0K8lBmpXZHqw-dUe-Tyn3_EQkUZgEIyWj0ItjGXnBUNIgQmW7Owfz-_8MAO7jb7dMBAAA HTTP/1.1
Host: kettledroopingcontinuation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=01a0927e-702a-7593-9945-446ef4d0a305:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyOTM4ODcwNywiayI6ImUzZDgxNWYwZDYyM2NjMTM0Mjk1ZjJhMmM0MTIzMDI0Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1NzkzMDcyLCJwaWQiOjMyMjY2MzYsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MywiYWlkIjoyMywicHQiOjQsInBrIjoiaGV2cXIyMnZtcyIsImNwa3MiOnsiMjgiOiI5YTdjZjIzODczM2E4OTQxNDEwMmM0YmJjODc1NGIxOCJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6MjY2NTYxMTE1LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTM2OTI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEzNC4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiY3QiOnsiaWQiOjMxNDYyNzAsIm4iOiJNYXVyYSJ9LCJyZyI6eyJpZCI6MzI3MSwibiI6IlZpa2VuIn0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwiaXdmIjp0cnVlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vd3d3LnNjcmlwdHpyb2Jsb3guZXUvcG9zdC82ZDg4YWZhOS03NjljLTQyNzAtOGQzMi0wZTVjZWNjYThmZTIiLCJ0eiI6MiwiaWR1YyI6MCwiYXIiOltdfX0.LSe5dNCyVd-Wp-1FezuSx-eNh9B_Hta4NGzJK6A57Xc; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl29388707=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Fri, 11 Sep 2026 22:02:35 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile
access-control-allow-credentials: true
access-control-allow-origin: *
vary: Origin
x-envoy-upstream-service-time: 15
Host: kettledroopingcontinuation.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c5085b50c4fed982b918e7c952089d8c
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

22:02:35.707 GET 200 img 64.3 KB 86 ms —

22:02:35.708 GET 200 img 0 B 0 ms 2 alerts

22:02:35.799 GET 200 img 91.3 KB 28 ms —

22:02:35.800 GET 200 img 0 B 0 ms 2 alerts

22:02:35.811 POST 200 fetch 0 B 419 ms 3 alerts

22:02:35.977 POST 200 fetch 0 B 433 ms 2 alerts

22:02:36.082 POST 200 fetch 0 B 409 ms 2 alerts

http://www.scriptzroblox.eu/post/6d88afa9-769c-4270-8d32-0e5cecca8fe2

Domain graph

Hostnames

Connections