WEBSITE ANALYSIS REPORT

http://api.x-downloadit.com/

04 Jul 2026 · 06:15:30.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:15:05.925 GET 200 document 9.5 KB 279 ms —

06:15:06.747 GET 200 stylesheet 10.1 KB 119 ms —

06:15:06.749 GET 200 script 11.8 KB 116 ms —

06:15:07.798 GET 200 script 166.0 KB 47 ms —

06:15:07.800 GET 200 script 28.7 KB 169 ms —

06:15:07.804 GET 200 script 50.4 KB 570 ms 4 alerts

06:15:07.819 GET 404 fetch 10 B 213 ms —

06:15:07.967 GET 200 xhr 65 B 48 ms —

06:15:08.060 GET 200 fetch 64.6 KB 110 ms —

06:15:08.061 GET 200 fetch 512 B 30 ms —

06:15:08.106 POST No response xhr 0 B 0 ms —

06:15:08.321 POST 200 fetch 81 B 27 ms —

06:15:08.322 POST 200 fetch 81 B 30 ms —

06:15:08.324 POST 200 fetch 81 B 37 ms —

06:15:08.325 OPTIONS 200 fetch 0 B 27 ms —

06:15:08.326 OPTIONS 200 fetch 0 B 26 ms —

06:15:08.328 OPTIONS 200 fetch 0 B 26 ms —

06:15:08.412 GET 200 xhr 40 B 127 ms —

06:15:08.413 GET 200 script 18.6 KB 475 ms 4 alerts

06:15:08.563 GET 307 xhr 0 B 372 ms 4 alerts

06:15:08.931 GET 200 xhr 0 B 0 ms —

06:15:08.942 GET 200 xhr 4.0 KB 122 ms 4 alerts

06:15:09.100 GET 200 img 23.1 KB 111 ms —

06:15:09.103 GET 200 img 0 B 0 ms 4 alerts

Transaction #22

Request / response

URL

GET HTTPS

https://kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRSuHoMgHsQfCXiRFnJQsGerf1T3dHIL_gJJIiaSg6f61Wtle7o7Xd0zs3PaGBU9CCtePPZ-s5s9CCH-B3HWmyDs3OaQvXgWQcGbKLMZWLUO771636P4vnrf53vtCemj5cv3r5ZTk-d8g_Wp-9otU6hybN1rN12f9ull95Yp4uiyO1mFenTJD6M-fd19R8utciOgPqU-9d23Ta2zcrJxisJUD_yU9eOo7_uDvs8CTOr_d2zrwHIHanRCXoBRi-d-yT6CkXMUw4dvarvVlNUbbw3bnDdljZE6_LDYKspxgeFZmdUOsuJwPY3SLgj5toeyOFyrQDnaX6mAMAvSu_AYojhcU4UYHTxhK3LoAkI9i_FoDp0fwfA5ZHkPRh0TQCpcu45ieP9aWY_59hOUr9AFOffnHzDjBTn3-CUUwwdXcjNxb5R525iysJhkHcxkDrM5R9UeoZn2YMZHkM0nMOpnQnuvoBgeXOVtzWHU8qLmMlBaZh5nzPeiMOaeEDzzqI5kzFSScapP_8hkc3DbQ2sdtMZBm_XQVj0M1dLl6SATaRzxVGdJpqifSM7CME0iFmSxZGjlXRi1C1nvoKp3sGW-OX75u2Pny2Pna1jlwDYEI9UdqNwGtruvctsKf52DdQ67Wdls7vGDstnUBQGvd1Grbt9Ud-w9yOap2TSz783KVeCi6WZcqG5mVENQ31lepH6aBUJGXqgk95I0ST1BaewNYsE0D7gIBN_PbNP-Z5RxL4ki6vE4zLwskrGm2mdpRveqE_L8aiPOo-OvsKWXrohonIqEB3HoqwHTAROZihNfM6Y0VQzWdDC2B24dTM2C3PqLoTILsvHbNgQ_gs2PIM158NYFH8_CgIJ_DEYxLR5OPFWOi7zkyjR9WQ6hyg5Vcw7NtrOXn5AXZx_cvPLo1CH6h8-g5U9kfSDrDlXd4bb5kWAzv_v99aoxQzPlK8vcaHijnwY3C-L8fh7SLMiFZ_4-de-lV7-ArHZgq7O3bEkgKoLcEOT6rM9FB_uvuzir9-yn2KwdiNyZibwm-yKv811Ys3QHQUCp9INUpSxKw0GmWeQniWZ-GGsaMjR2cfvd_V__CQAA___sCIIGOgQAAA==

IP / ASN

172.240.108.68

AS7979 · SERVERS-COM

Requested by: https://api.x-downloadit.com/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 23:29:55.548 UTC
Times seen: 19318456

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR1
Subject: kettledroopingcontinuation.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 87:48:80:BE:9E:7C:E0:59:6E:4B:D8:8B:51:FD:61:A4:77:BD:92:86
Valid from: Wed, 24 Jun 2026 00:47:49 GMT
Valid until: Tue, 22 Sep 2026 00:47:48 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRSuHoMgHsQfCXiRFnJQsGerf1T3dHIL_gJJIiaSg6f61Wtle7o7Xd0zs3PaGBU9CCtePPZ-s5s9CCH-B3HWmyDs3OaQvXgWQcGbKLMZWLUO771636P4vnrf53vtCemj5cv3r5ZTk-d8g_Wp-9otU6hybN1rN12f9ull95Yp4uiyO1mFenTJD6M-fd19R8utciOgPqU-9d23Ta2zcrJxisJUD_yU9eOo7_uDvs8CTOr_d2zrwHIHanRCXoBRi-d-yT6CkXMUw4dvarvVlNUbbw3bnDdljZE6_LDYKspxgeFZmdUOsuJwPY3SLgj5toeyOFyrQDnaX6mAMAvSu_AYojhcU4UYHTxhK3LoAkI9i_FoDp0fwfA5ZHkPRh0TQCpcu45ieP9aWY_59hOUr9AFOffnHzDjBTn3-CUUwwdXcjNxb5R525iysJhkHcxkDrM5R9UeoZn2YMZHkM0nMOpnQnuvoBgeXOVtzWHU8qLmMlBaZh5nzPeiMOaeEDzzqI5kzFSScapP_8hkc3DbQ2sdtMZBm_XQVj0M1dLl6SATaRzxVGdJpqifSM7CME0iFmSxZGjlXRi1C1nvoKp3sGW-OX75u2Pny2Pna1jlwDYEI9UdqNwGtruvctsKf52DdQ67Wdls7vGDstnUBQGvd1Grbt9Ud-w9yOap2TSz783KVeCi6WZcqG5mVENQ31lepH6aBUJGXqgk95I0ST1BaewNYsE0D7gIBN_PbNP-Z5RxL4ki6vE4zLwskrGm2mdpRveqE_L8aiPOo-OvsKWXrohonIqEB3HoqwHTAROZihNfM6Y0VQzWdDC2B24dTM2C3PqLoTILsvHbNgQ_gs2PIM158NYFH8_CgIJ_DEYxLR5OPFWOi7zkyjR9WQ6hyg5Vcw7NtrOXn5AXZx_cvPLo1CH6h8-g5U9kfSDrDlXd4bb5kWAzv_v99aoxQzPlK8vcaHijnwY3C-L8fh7SLMiFZ_4-de-lV7-ArHZgq7O3bEkgKoLcEOT6rM9FB_uvuzir9-yn2KwdiNyZibwm-yKv811Ys3QHQUCp9INUpSxKw0GmWeQniWZ-GGsaMjR2cfvd_V__CQAA___sCIIGOgQAAA== HTTP/1.1
Host: kettledroopingcontinuation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=eac2decf-a551-436a-bbaf-0e4c65d7fa0e:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.8VCqOCxGQZb61Shkfcmy6zntyctindRLsOCqYRKFwBI; pdhtkv=true; uncs=1; pdhtkv32=true; uncs32=1; u_pl29413773=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sat, 04 Jul 2026 06:15:09 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: iprc_c+d1973a5690b3226bba186e6745ca8e40=1444351; Path=/; Expires=Sun, 05 Jul 2026 06:15:09 GMT; Secure; SameSite=None
iprc_c-1444351=16; Path=/; Expires=Sun, 05 Jul 2026 06:15:09 GMT; Secure; SameSite=None
vary: Origin,Accept-Encoding
x-envoy-upstream-service-time: 8
Host: kettledroopingcontinuation.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 9736f76bafb22a73036cffdc5070da51
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

06:15:09.479 GET 200 document 62.1 KB 31 ms —

06:15:09.490 GET No response img 0 B 0 ms —

06:15:09.496 OPTIONS No response fetch 0 B 0 ms —

06:15:09.673 GET 204 img 0 B 7 ms —

http://api.x-downloadit.com/

Domain graph

Hostnames

Connections