WEBSITE ANALYSIS REPORT

http://www.animerngdefense.space/tier/anime-rng-defense-characters

14 Jul 2026 · 02:50:09.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:49:36.240 GET 200 document 176.8 KB 1634 ms —

02:49:37.794 GET 200 font 47.3 KB 770 ms —

02:49:37.796 GET 200 stylesheet 30.1 KB 342 ms —

02:49:37.798 GET 200 stylesheet 2.1 KB 749 ms —

02:49:37.800 GET 200 script 3.3 KB 778 ms —

02:49:37.801 GET 200 script 169.0 KB 1249 ms —

02:49:37.802 GET 200 script 169.3 KB 1064 ms —

02:49:37.804 GET 200 script 557 B 370 ms —

02:49:37.806 GET 200 script 8.3 KB 797 ms —

02:49:37.807 GET 200 script 124.8 KB 1333 ms —

02:49:37.812 GET 200 script 9.6 KB 815 ms —

02:49:37.813 GET 200 script 5.6 KB 1056 ms —

02:49:37.815 GET 200 script 2.3 KB 1062 ms —

02:49:38.020 GET 200 script 468.7 KB 163 ms —

02:49:38.573 GET 200 subdocument 1.1 KB 258 ms —

02:49:38.848 GET 200 script 50.3 KB 561 ms 4 alerts

02:49:39.197 GET 200 img 377.6 KB 750 ms —

02:49:39.198 GET 200 img 826 B 259 ms —

02:49:39.424 GET 200 fetch 141 B 283 ms —

02:49:39.426 GET 200 fetch 187 B 273 ms —

02:49:39.429 GET 200 fetch 187 B 283 ms —

02:49:39.431 GET 200 fetch 185 B 276 ms —

02:49:39.432 GET 200 fetch 187 B 285 ms —

02:49:39.436 GET 200 xhr 40 B 113 ms —

02:49:39.438 GET 200 script 18.2 KB 467 ms 3 alerts

02:49:39.569 GET 307 xhr 0 B 375 ms 3 alerts

02:49:39.705 GET 200 fetch 193 B 264 ms —

02:49:39.713 GET 200 fetch 191 B 264 ms —

02:49:39.717 GET 200 fetch 189 B 268 ms —

02:49:39.929 GET 200 xhr 0 B 520 ms 1 alerts

02:49:39.956 GET 200 xhr 3.9 KB 105 ms 3 alerts

Transaction #33

Request / response

URL

GET HTTPS

https://kettledroopingcontinuation.com/watch.513857039902.js?dev=e&fstu=019f5e87-b539-753a-b82a-efcfb7238f97&key=e5c47c0f1160e3338162311620a2eadc&kw=%5B%5D&ps1=1783997379&rb=e&refer=https%3A%2F%2Fwww.animerngdefense.space%2Ftier%2Fanime-rng-defense-characters&res=14.1055&rmtc=t&sht=JIT_LVQrber0c9qj978rnOiX1dJvPOIFqAMxbc8fPG8&shv=2&st1=c2663564b0d734b93d5d83c6654b33eb&tz=0&uuid=ad496362-2cec-4be8-957a-86e3325c4d31%3A2%3A1

IP / ASN

172.240.108.84

AS7979 · SERVERS-COM

Requested by: https://www.animerngdefense.space/ads/banner-320x50.html?k=e5c47c0f1160e3338162311620a2eadc

Resource information

File type: JavaScript source, ASCII text, with very long lines (3160)
MIME type: text/html
First seen (UTC): 14 Jul 2026 · 02:50:16.703 UTC
Last seen (UTC): 14 Jul 2026 · 02:50:16.703 UTC
Times seen: 1

Size: 3.9 KB (4036 bytes)
MD5: 5bbca5a5fb80164ace7c38012d8f1903
SHA1: 2ad081d134bc3de337570bcf26fde184083c217d
SHA256: 8180e899ccc2212bfcca13c54d3795bc8a1da1b76741c2f03e9fee96fdc74f4b

Certificate information

Issuer: Let's Encrypt · YR1
Subject: kettledroopingcontinuation.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 87:48:80:BE:9E:7C:E0:59:6E:4B:D8:8B:51:FD:61:A4:77:BD:92:86
Valid from: Wed, 24 Jun 2026 00:47:49 GMT
Valid until: Tue, 22 Sep 2026 00:47:48 GMT

Technology fingerprints

Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /watch.513857039902.js?dev=e&fstu=019f5e87-b539-753a-b82a-efcfb7238f97&key=e5c47c0f1160e3338162311620a2eadc&kw=%5B%5D&ps1=1783997379&rb=e&refer=https%3A%2F%2Fwww.animerngdefense.space%2Ftier%2Fanime-rng-defense-characters&res=14.1055&rmtc=t&sht=JIT_LVQrber0c9qj978rnOiX1dJvPOIFqAMxbc8fPG8&shv=2&st1=c2663564b0d734b93d5d83c6654b33eb&tz=0&uuid=ad496362-2cec-4be8-957a-86e3325c4d31%3A2%3A1 HTTP/1.1
Host: kettledroopingcontinuation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Origin: https://www.animerngdefense.space
Referer: https://www.animerngdefense.space/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=ad496362-2cec-4be8-957a-86e3325c4d31:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.-neQzJ7hXGUy6V3v8uy9m0e5A6AdHyPCG1yNHnyphjc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Tue, 14 Jul 2026 02:49:40 GMT
Content-Type: text/html
Content-Length: 1956
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List
access-control-allow-credentials: true
access-control-allow-origin: https://www.animerngdefense.space
content-encoding: zstd
set-cookie: uid_id2=ad496362-2cec-4be8-957a-86e3325c4d31:2:1; Path=/; Expires=Tue, 21 Jul 2026 02:49:40 GMT; Secure; SameSite=None
pdhtkv=true; Path=/; Expires=Wed, 15 Jul 2026 02:49:40 GMT; Secure; SameSite=None
uncs=1; Path=/; Expires=Wed, 15 Jul 2026 02:49:40 GMT; Secure; SameSite=None
pdhtkv32=true; Path=/; Expires=Wed, 15 Jul 2026 02:49:40 GMT; Secure; SameSite=None
uncs32=1; Path=/; Expires=Wed, 15 Jul 2026 02:49:40 GMT; Secure; SameSite=None
u_pl30196549=1; Path=/; Expires=Wed, 15 Jul 2026 02:49:40 GMT; Secure; SameSite=None
vary: Accept-Encoding
x-envoy-upstream-service-time: 9
Host: kettledroopingcontinuation.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 54d58a6d427269209392d13260915da9
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

02:49:40.137 GET 200 img 23.1 KB 136 ms —

02:49:40.139 GET 200 img 0 B 0 ms 3 alerts

http://www.animerngdefense.space/tier/anime-rng-defense-characters

Domain graph

Hostnames

Connections