WEBSITE ANALYSIS REPORT

http://9soccer.biz/9-Sun2/Ch1/25.html

30 Aug 2026 · 19:13:08.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:12:30.802 GET 200 document 10.5 KB 752 ms —

19:12:32.084 GET 200 script 5 B 122 ms —

19:12:32.087 GET 200 script 47.8 KB 611 ms 3 alerts

19:12:32.717 GET 200 script 4.3 KB 127 ms —

19:12:32.724 GET 200 xhr 40 B 133 ms —

19:12:32.729 GET No response subdocument 0 B 0 ms —

19:12:32.733 GET 200 script 47.8 KB 656 ms 2 alerts

19:12:32.876 GET 307 xhr 0 B 504 ms 2 alerts

19:12:33.388 GET 200 xhr 4.0 KB 119 ms 2 alerts

19:12:33.406 GET 200 script 4.3 KB 89 ms —

19:12:33.410 GET 307 xhr 0 B 198 ms 2 alerts

19:12:33.415 GET 200 script 47.9 KB 105 ms 3 alerts

19:12:33.563 GET 200 script 4.3 KB 61 ms —

19:12:33.565 GET 307 xhr 0 B 246 ms 2 alerts

19:12:33.568 GET 200 script 47.9 KB 106 ms 2 alerts

19:12:33.573 GET 200 img 55.0 KB 114 ms —

19:12:33.574 GET 200 img 0 B 0 ms 2 alerts

19:12:33.616 GET 200 xhr 4.1 KB 215 ms 2 alerts

Transaction #16

Request / response

URL

GET HTTPS

https://spendsdetachment.com/watch.1515563500425.js?dev=e&fstu=01a05416-771a-7cba-8726-56bdbfd02aac&key=ac7dd06a9baa4a3673e9e69a5405a925&kw=%5B%5D&ps1=1788117153&rb=e&refer=https%3A%2F%2F9soccer.biz%2F9-Sun2%2FCh1%2F25.html&res=14.1055&rmtc=t&sht=oH-X3LwyQPWHyKQzlt9Os6K3XccUtfOWi-E9JYFcM7E&shv=2&st1=968b51fc71d8725c2b57edc60a3fe608&tz=0&uuid=4dc7a625-1dbe-42fe-9fe5-48f2212122ce%3A2%3A1

IP / ASN

172.240.127.243

AS7979 · SERVERS-COM

Requested by: https://9soccer.biz/9-Sun2/Ch1/25.html

Resource information

File type: JavaScript source, ASCII text, with very long lines (3289)
MIME type: text/html
First seen (UTC): 30 Aug 2026 · 19:13:18.745 UTC
Last seen (UTC): 30 Aug 2026 · 19:13:18.745 UTC
Times seen: 1

Size: 4.1 KB (4165 bytes)
MD5: 99e7e148bda3e7bc5926ecb263a548bd
SHA1: 1e408a7e3d52d797766094adbe197e1a08ef7621
SHA256: d5df6c1915552e78071103174b69a25f2119a18551cf136d4449f5c7b48c3c0a

Certificate information

Issuer: Let's Encrypt · YR2
Subject: spendsdetachment.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2
Valid from: Wed, 26 Aug 2026 04:27:12 GMT
Valid until: Tue, 24 Nov 2026 04:27:11 GMT

Technology fingerprints

Nginx:1.28.2 (Web servers, Reverse proxies)
HSTS (Security)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /watch.1515563500425.js?dev=e&fstu=01a05416-771a-7cba-8726-56bdbfd02aac&key=ac7dd06a9baa4a3673e9e69a5405a925&kw=%5B%5D&ps1=1788117153&rb=e&refer=https%3A%2F%2F9soccer.biz%2F9-Sun2%2FCh1%2F25.html&res=14.1055&rmtc=t&sht=oH-X3LwyQPWHyKQzlt9Os6K3XccUtfOWi-E9JYFcM7E&shv=2&st1=968b51fc71d8725c2b57edc60a3fe608&tz=0&uuid=4dc7a625-1dbe-42fe-9fe5-48f2212122ce%3A2%3A1 HTTP/1.1
Host: spendsdetachment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Origin: https://9soccer.biz
Referer: https://9soccer.biz/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=4dc7a625-1dbe-42fe-9fe5-48f2212122ce:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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._orKCu6u_jKeClyzbgNUNRbyLaqiivi0e3PfKMz_97k; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl30440074=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sun, 30 Aug 2026 19:12:33 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version
access-control-allow-credentials: true
access-control-allow-origin: https://9soccer.biz
content-encoding: zstd
set-cookie: uid_id2=4dc7a625-1dbe-42fe-9fe5-48f2212122ce:2:1; Path=/; Expires=Sun, 06 Sep 2026 19:12:33 GMT; Secure; SameSite=None
pdhtkv=true; Path=/; Expires=Mon, 31 Aug 2026 19:12:33 GMT; Secure; SameSite=None
uncs=1; Path=/; Expires=Mon, 31 Aug 2026 19:12:33 GMT; Secure; SameSite=None
pdhtkv23=true; Path=/; Expires=Mon, 31 Aug 2026 19:12:33 GMT; Secure; SameSite=None
uncs23=1; Path=/; Expires=Mon, 31 Aug 2026 19:12:33 GMT; Secure; SameSite=None
u_pl27977329=1; Path=/; Expires=Mon, 31 Aug 2026 19:12:33 GMT; Secure; SameSite=None
vary: Accept-Encoding
x-envoy-upstream-service-time: 14
Host: spendsdetachment.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 9db0b54b296a12a033ed0ddb314343d7
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

19:12:33.697 GET 200 script 4.3 KB 55 ms —

19:12:33.700 GET 307 xhr 0 B 546 ms 1 alerts

19:12:33.703 GET 200 script 91.1 KB 86 ms —

19:12:33.751 POST 200 fetch 0 B 411 ms 2 alerts

19:12:33.818 GET 200 xhr 4.0 KB 90 ms 2 alerts

19:12:34.047 POST 204 xhr 0 B 6513 ms —

19:12:34.072 GET 200 img 61.9 KB 530 ms —

19:12:34.073 GET 200 img 0 B 0 ms 2 alerts

19:12:34.106 GET 200 img 40.8 KB 508 ms —

19:12:34.107 GET 200 img 0 B 0 ms 2 alerts

19:12:34.254 GET 200 xhr 4.0 KB 119 ms 1 alerts

19:12:34.420 POST 200 fetch 0 B 104 ms 2 alerts

19:12:34.426 GET 200 img 76.6 KB 200 ms —

19:12:34.428 GET 200 img 0 B 0 ms 1 alerts

19:12:34.563 POST 200 fetch 0 B 125 ms 2 alerts

19:12:34.697 POST 200 fetch 0 B 397 ms 1 alerts

19:12:34.897 GET 404 img 1.2 KB 180 ms —

http://9soccer.biz/9-Sun2/Ch1/25.html

Domain graph

Hostnames

Connections