WEBSITE ANALYSIS REPORT

http://freedwnlds.com/

01 Aug 2026 · 14:52:07.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:51:39.125 GET 200 document 19.3 KB 165 ms 1 alerts

14:51:39.480 GET 200 stylesheet 75.1 KB 40 ms 1 alerts

14:51:39.481 GET 200 stylesheet 3.1 KB 82 ms 1 alerts

14:51:39.482 GET 200 stylesheet 9.6 KB 84 ms 1 alerts

14:51:39.484 GET 200 stylesheet 3.8 KB 82 ms 1 alerts

14:51:39.485 GET 200 stylesheet 2.5 KB 81 ms 1 alerts

14:51:39.487 GET 200 stylesheet 100.3 KB 69 ms 1 alerts

14:51:39.488 GET 200 stylesheet 5.9 KB 29 ms 1 alerts

14:51:39.489 GET 200 stylesheet 12.1 KB 32 ms 1 alerts

14:51:39.490 GET 200 stylesheet 192.6 KB 62 ms 1 alerts

14:51:39.494 GET 200 stylesheet 57.7 KB 38 ms 1 alerts

14:51:39.496 GET 200 stylesheet 8.7 KB 32 ms 1 alerts

14:51:39.675 GET 200 stylesheet 38.4 KB 83 ms —

14:51:39.677 GET 200 stylesheet 565 B 309 ms —

14:51:39.678 GET 200 script 35.9 KB 121 ms 3 alerts

14:51:39.680 GET 200 script 84.7 KB 97 ms 1 alerts

14:51:39.681 GET 200 script 68.1 KB 64 ms 1 alerts

14:51:39.683 GET 200 script 52.6 KB 54 ms 1 alerts

14:51:39.684 GET 200 script 3.9 KB 53 ms 1 alerts

14:51:39.685 GET 200 script 20.5 KB 79 ms 1 alerts

14:51:39.686 GET 200 script 10.4 KB 73 ms 1 alerts

14:51:39.687 GET 200 script 13.5 KB 164 ms 1 alerts

14:51:39.688 GET 200 script 5.2 KB 165 ms 1 alerts

14:51:39.689 GET 200 script 5.9 KB 170 ms 1 alerts

14:51:39.691 GET 200 script 112.2 KB 175 ms 1 alerts

14:51:39.692 GET 200 script 1.8 KB 170 ms 1 alerts

14:51:39.716 GET 200 img 6.3 KB 290 ms 1 alerts

14:51:39.717 GET 200 img 6.2 KB 281 ms 1 alerts

14:51:39.719 GET 200 img 30.2 KB 293 ms 1 alerts

14:51:39.720 GET 200 img 48.8 KB 392 ms 1 alerts

14:51:40.032 GET 200 font 47.2 KB 154 ms —

14:51:40.033 GET 200 font 47.2 KB 149 ms —

14:51:40.035 GET 200 font 47.2 KB 150 ms —

14:51:40.036 GET 200 font 4.2 KB 82 ms 1 alerts

14:51:40.043 GET 200 xhr 40 B 128 ms —

14:51:40.045 GET 200 script 9.3 KB 97 ms —

14:51:40.105 GET 200 font 47.2 KB 79 ms —

14:51:40.106 GET 200 font 18.9 KB 77 ms —

14:51:40.107 GET 200 font 47.2 KB 78 ms —

14:51:40.223 GET 200 xhr 0 B 67 ms —

14:51:40.229 GET 307 xhr 0 B 524 ms 3 alerts

14:51:40.394 GET 200 img 4.9 KB 57 ms 1 alerts

14:51:40.395 GET 200 img 447 B 45 ms 1 alerts

14:51:40.759 GET 200 xhr 3.9 KB 113 ms 3 alerts

14:51:40.915 GET 200 img 50.9 KB 103 ms —

14:51:40.916 GET 200 img 0 B 0 ms 3 alerts

Transaction #46

Request / response

URL

GET HTTPS

https://kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1ySP2wcxRfHZ8_-5VdQoABB0G2RAiT2vLP_l0gUEX8qHESCIkE1O3_MxHu7m53du8tVDkbUTke59z07LpAsaCio0JmOKtedUFxAQw9KRYHucpKBKd57875Po8-b976athekj5YtP_qwnOg8Zzth37XfuKsLUY6MvXvHpm7fvWHf1UUU3LDHK1MP36Z-0HfftD-QfL_c8VzqutSl9vu6lqoc76xV6OqMpmE_CvqUJn0aehjX_82Y1oJhFsTwgrwELRYv_qY-g-ZzFINv35Vmvymrt94btDlryhpDcfpJsV-UowKDy1DVFlRxuqlGaRaEfN1DWZxuukA5PF51gUwvSO_Vp8iK0w0qsuHJc9oshyyQiRcwGs4h83NoNgcvD6HFEwJwgd1bKAaPd8t6xB48V9lKXZDtZ39AjxZk--krKAZnN3M9tm-XedvosjAYqw56PIfem6Nqz9FMetCjc_DmC2hBUAymDrRYXqcsopEnEkcmbuwEfsgcFlHhyFAEIuEyi6W3_hut5mBmC62x0GoLreqhrXoYiKXN0kRlaRSwVKpYCZfGnIW-n8ZB6KmIh2j5Q2hxBF4foKoPsK8fPXn9GxhhwTQEQ9GdiNx4pnssctNmdOO9jfe7WdnsTdlJ2ezJgoDVR6hFd6yr--YQvNmaTZQRs3JlWNZ0M5aJbqZFQ1DfX153aaoywZXj-0nsxEwIJ1We57jSC9IsSkM39o6Vadp_ldLEiUPJHaYkdQLOPJZ4Unghm1YX5Op6Br-_8wP25dL2k9iNVKBoloYykB4NpCejhKdJJONUZTC6gzY9MGNhohfk6q-vodILYn36PTJ2DpOfg-trYO3_wEYz33XBPp95oYtJcaZqKcWoyIXp83IAUXaomm00D6xpfkFenn185-aPaxw5uQLJfyabA153qOoO9_RPBHv5w-9uVY0e6Alb7cjthjXyCtiKYusRuF6Qa38ertc1ffYLeHUAU12-ZUqCrCLINUEuL_Ms62D-cc8u46n5Enu1hSy3Zllek-Msr_MjGL20E89zXU69VKRhkPqJkmFA41iG1I-k64dozOJe8f-__g4AAP__nZ-haSsEAAA=

IP / ASN

172.240.127.244

AS7979 · SERVERS-COM

Requested by: https://freedwnlds.com/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 15:29:55.883 UTC
Times seen: 19310193

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR1
Subject: kettledroopingcontinuation.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 87:48:80:BE:9E:7C:E0:59:6E:4B:D8:8B:51:FD:61:A4:77:BD:92:86
Valid from: Wed, 24 Jun 2026 00:47:49 GMT
Valid until: Tue, 22 Sep 2026 00:47:48 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /impr.gif?sid=H4sIAAAAAAAC_1ySP2wcxRfHZ8_-5VdQoABB0G2RAiT2vLP_l0gUEX8qHESCIkE1O3_MxHu7m53du8tVDkbUTke59z07LpAsaCio0JmOKtedUFxAQw9KRYHucpKBKd57875Po8-b976athekj5YtP_qwnOg8Zzth37XfuKsLUY6MvXvHpm7fvWHf1UUU3LDHK1MP36Z-0HfftD-QfL_c8VzqutSl9vu6lqoc76xV6OqMpmE_CvqUJn0aehjX_82Y1oJhFsTwgrwELRYv_qY-g-ZzFINv35Vmvymrt94btDlryhpDcfpJsV-UowKDy1DVFlRxuqlGaRaEfN1DWZxuukA5PF51gUwvSO_Vp8iK0w0qsuHJc9oshyyQiRcwGs4h83NoNgcvD6HFEwJwgd1bKAaPd8t6xB48V9lKXZDtZ39AjxZk--krKAZnN3M9tm-XedvosjAYqw56PIfem6Nqz9FMetCjc_DmC2hBUAymDrRYXqcsopEnEkcmbuwEfsgcFlHhyFAEIuEyi6W3_hut5mBmC62x0GoLreqhrXoYiKXN0kRlaRSwVKpYCZfGnIW-n8ZB6KmIh2j5Q2hxBF4foKoPsK8fPXn9GxhhwTQEQ9GdiNx4pnssctNmdOO9jfe7WdnsTdlJ2ezJgoDVR6hFd6yr--YQvNmaTZQRs3JlWNZ0M5aJbqZFQ1DfX153aaoywZXj-0nsxEwIJ1We57jSC9IsSkM39o6Vadp_ldLEiUPJHaYkdQLOPJZ4Unghm1YX5Op6Br-_8wP25dL2k9iNVKBoloYykB4NpCejhKdJJONUZTC6gzY9MGNhohfk6q-vodILYn36PTJ2DpOfg-trYO3_wEYz33XBPp95oYtJcaZqKcWoyIXp83IAUXaomm00D6xpfkFenn185-aPaxw5uQLJfyabA153qOoO9_RPBHv5w-9uVY0e6Alb7cjthjXyCtiKYusRuF6Qa38ertc1ffYLeHUAU12-ZUqCrCLINUEuL_Ms62D-cc8u46n5Enu1hSy3Zllek-Msr_MjGL20E89zXU69VKRhkPqJkmFA41iG1I-k64dozOJe8f-__g4AAP__nZ-haSsEAAA= HTTP/1.1
Host: kettledroopingcontinuation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=1a6162d8-e807-435a-a61d-e5d4d8ceb7e2:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoxNTIyMDQxMCwiayI6IjM4NzA2ZjRmMWI5NWU0ZTIxNGUyZTY4Yzk4NmU3OWZiIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxMTcxOTkyLCJwaWQiOjg4NzU4LCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjIxLCJhaWQiOjUsInB0Ijo0LCJwayI6ImkzYjRzMzB2IiwiY3BrcyI6eyIyOCI6IjgzY2RkMDYwMmY4OGY3OWM1MDUxMDAwOWM2Y2UyNWU4IiwiMjkiOiJiZTBjMDU1NTYyMmU2ZTZmOTU4MjI0MWEzZjIxMjMyMSJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6MjY2NTYxMTE1LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTM2OTI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEzNC4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiY3QiOnsiaWQiOjAsIm4iOiItIn0sInJnIjp7ImlkIjowLCJuIjoiLSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL2ZyZWVkd25sZHMuY29tLyIsInR6IjoyLCJpZHVjIjowLCJhciI6W119fQ.yNnEnaejjXqyCxFIMtSMNFgASUHd952irm1m2o8L79Y; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl15220410=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sat, 01 Aug 2026 14:51:40 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Model,Device-Stock-Ua,X-Device-User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: iprc_c+d6c88b210e4a108da2c2571c411ca084=1438851; Path=/; Expires=Sun, 02 Aug 2026 14:51:40 GMT; Secure; SameSite=None
iprc_c-1438851=8; Path=/; Expires=Sun, 02 Aug 2026 14:51:40 GMT; Secure; SameSite=None
vary: Origin,Accept-Encoding
x-envoy-upstream-service-time: 3
Host: kettledroopingcontinuation.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 2dbbe765c77a0af8355f7c04a80e53af
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

http://freedwnlds.com/

Domain graph

Hostnames

Connections