WEBSITE ANALYSIS REPORT

http://9soccer.biz/9-Sun2/Ch1/25.html

30 Aug 2026 · 19:13:08.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:12:30.802 GET 200 document 10.5 KB 752 ms —

19:12:32.084 GET 200 script 5 B 122 ms —

19:12:32.087 GET 200 script 47.8 KB 611 ms 3 alerts

19:12:32.717 GET 200 script 4.3 KB 127 ms —

19:12:32.724 GET 200 xhr 40 B 133 ms —

19:12:32.729 GET No response subdocument 0 B 0 ms —

19:12:32.733 GET 200 script 47.8 KB 656 ms 2 alerts

19:12:32.876 GET 307 xhr 0 B 504 ms 2 alerts

19:12:33.388 GET 200 xhr 4.0 KB 119 ms 2 alerts

19:12:33.406 GET 200 script 4.3 KB 89 ms —

19:12:33.410 GET 307 xhr 0 B 198 ms 2 alerts

19:12:33.415 GET 200 script 47.9 KB 105 ms 3 alerts

19:12:33.563 GET 200 script 4.3 KB 61 ms —

19:12:33.565 GET 307 xhr 0 B 246 ms 2 alerts

19:12:33.568 GET 200 script 47.9 KB 106 ms 2 alerts

19:12:33.573 GET 200 img 55.0 KB 114 ms —

19:12:33.574 GET 200 img 0 B 0 ms 2 alerts

19:12:33.616 GET 200 xhr 4.1 KB 215 ms 2 alerts

19:12:33.697 GET 200 script 4.3 KB 55 ms —

19:12:33.700 GET 307 xhr 0 B 546 ms 1 alerts

19:12:33.703 GET 200 script 91.1 KB 86 ms —

19:12:33.751 POST 200 fetch 0 B 411 ms 2 alerts

19:12:33.818 GET 200 xhr 4.0 KB 90 ms 2 alerts

19:12:34.047 POST 204 xhr 0 B 6513 ms —

19:12:34.072 GET 200 img 61.9 KB 530 ms —

19:12:34.073 GET 200 img 0 B 0 ms 2 alerts

Transaction #18

Request / response

URL

GET HTTPS

https://spendsdetachment.com/impr.gif?sid=H4sIAAAAAAAC_1xSvY8bxRse-3c_mhRIEKBDLq4ACftm9tObdBEfVS6QBKWgQLMzs3cTr3f3dmZtx9WFAPUhUVCuH_vuEIKI_AfIh9IgIZ07FzkhISEqKJCoke8sDpjifd95nkcz7_vq-XRSnZEOKr5892Y-1mnKt_wObb12T2cyH5rW9t0Wox16vXVPZ4F3vTVahXJwjbleh77eekeJXr7lUEYpo6z1ti5Vko-2zlno4jGL_E7gdRjrdpjvYFT-FzFVA4Y3IAdn5AVouXj-5-QDaDFH1v_2TWV6Ni_eeKtfpdzmJQby-P2sl-XDDP3LMikbSLLjtRq5WRDyRRN5dryeAvlgtpoCsV6Q5svPEGfH61YRDw4vuo1TqAyxvILhYA6VnkDzOUT-CFqeEkBIbN9C1j_azsshf3DB8hW7IBt__gE9XJCNZ1eR9R_fSPWodSdPK6vzzGCU1NCjOfTOHEV1AjtuQg9PIOxH0PJHQpuvIusf3uRVyaHlctOTIuSB47eZjFXbcxLVjhLlt71u4jjMYY4j1PmOdDIHN01UpoFKN1AlTVRFE325bPGom8RR4PFIJWEiKQsF9103Cj3fSQLhoxIPoeUBRPnJUSF3bW8ws2WlZlUmzIR9eQE57jl4tAIdd8K-rj4sUpd6HqWhN2Eoyn309Gen__8JRjZh7II03tvHQNaHMjWOqY9kaqqYrbOzzm49ze3OhB_mdkdlBLw8QCnrmS72zCMI-7_pODFymq8Cj2095bGsp1pagnJvuUkZp77HgnYYKt4OhZDtiAWyHYU0DpOQSiXZLDG2-peUraQxb3dDJ2j7QSzjRFKHczEp1uZrfPXLHnpq2eIilJIGPIo597gbhK6KVBBx36M-jxwfRtfQpgluGhjrBbk9naFYucv9DTE_gUlPIPSL4NUr4MNp6HTBdxFRjLNvbGbbleEdY_NSQeY1CrsB-6ABZckkPSNXp7fv3vju3Fnq6RMo8QNZH4iyRlHWuK-_J9hJHz65VVjd12O-stody616Dlyf7v4KoRfkpd_VueevbT6FKPZhir9fmqamWBA1vgKTE8QFQaoJUnX5FY9rmH_c48t6Yj7GTtlAnDamcVqSWZyW6QGMXra6jkOpYE4kI9-L3G6ifI-FofKZGyjq-rBmcf_z_clfAQAA__-n_GXkeQQAAA==

IP / ASN

172.240.127.243

AS7979 · SERVERS-COM

Requested by: https://9soccer.biz/9-Sun2/Ch1/25.html

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 22 Oct 2026 · 13:07:51.045 UTC
Times seen: 19283510

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR2
Subject: spendsdetachment.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2
Valid from: Wed, 26 Aug 2026 04:27:12 GMT
Valid until: Tue, 24 Nov 2026 04:27:11 GMT

Technology fingerprints

Nginx:1.28.2 (Web servers, Reverse proxies)
HSTS (Security)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /impr.gif?sid=H4sIAAAAAAAC_1xSvY8bxRse-3c_mhRIEKBDLq4ACftm9tObdBEfVS6QBKWgQLMzs3cTr3f3dmZtx9WFAPUhUVCuH_vuEIKI_AfIh9IgIZ07FzkhISEqKJCoke8sDpjifd95nkcz7_vq-XRSnZEOKr5892Y-1mnKt_wObb12T2cyH5rW9t0Wox16vXVPZ4F3vTVahXJwjbleh77eekeJXr7lUEYpo6z1ti5Vko-2zlno4jGL_E7gdRjrdpjvYFT-FzFVA4Y3IAdn5AVouXj-5-QDaDFH1v_2TWV6Ni_eeKtfpdzmJQby-P2sl-XDDP3LMikbSLLjtRq5WRDyRRN5dryeAvlgtpoCsV6Q5svPEGfH61YRDw4vuo1TqAyxvILhYA6VnkDzOUT-CFqeEkBIbN9C1j_azsshf3DB8hW7IBt__gE9XJCNZ1eR9R_fSPWodSdPK6vzzGCU1NCjOfTOHEV1AjtuQg9PIOxH0PJHQpuvIusf3uRVyaHlctOTIuSB47eZjFXbcxLVjhLlt71u4jjMYY4j1PmOdDIHN01UpoFKN1AlTVRFE325bPGom8RR4PFIJWEiKQsF9103Cj3fSQLhoxIPoeUBRPnJUSF3bW8ws2WlZlUmzIR9eQE57jl4tAIdd8K-rj4sUpd6HqWhN2Eoyn309Gen__8JRjZh7II03tvHQNaHMjWOqY9kaqqYrbOzzm49ze3OhB_mdkdlBLw8QCnrmS72zCMI-7_pODFymq8Cj2095bGsp1pagnJvuUkZp77HgnYYKt4OhZDtiAWyHYU0DpOQSiXZLDG2-peUraQxb3dDJ2j7QSzjRFKHczEp1uZrfPXLHnpq2eIilJIGPIo597gbhK6KVBBx36M-jxwfRtfQpgluGhjrBbk9naFYucv9DTE_gUlPIPSL4NUr4MNp6HTBdxFRjLNvbGbbleEdY_NSQeY1CrsB-6ABZckkPSNXp7fv3vju3Fnq6RMo8QNZH4iyRlHWuK-_J9hJHz65VVjd12O-stody616Dlyf7v4KoRfkpd_VueevbT6FKPZhir9fmqamWBA1vgKTE8QFQaoJUnX5FY9rmH_c48t6Yj7GTtlAnDamcVqSWZyW6QGMXra6jkOpYE4kI9-L3G6ifI-FofKZGyjq-rBmcf_z_clfAQAA__-n_GXkeQQAAA== HTTP/1.1
Host: spendsdetachment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=4dc7a625-1dbe-42fe-9fe5-48f2212122ce:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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._orKCu6u_jKeClyzbgNUNRbyLaqiivi0e3PfKMz_97k; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl30440074=1; u_pl27977329=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sun, 30 Aug 2026 19:12:34 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent
access-control-allow-credentials: true
access-control-allow-origin: *
vary: Origin
x-envoy-upstream-service-time: 5
Host: spendsdetachment.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 2a790906257bf27292d4d2d84310367c
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

19:12:34.106 GET 200 img 40.8 KB 508 ms —

19:12:34.107 GET 200 img 0 B 0 ms 2 alerts

19:12:34.254 GET 200 xhr 4.0 KB 119 ms 1 alerts

19:12:34.420 POST 200 fetch 0 B 104 ms 2 alerts

19:12:34.426 GET 200 img 76.6 KB 200 ms —

19:12:34.428 GET 200 img 0 B 0 ms 1 alerts

19:12:34.563 POST 200 fetch 0 B 125 ms 2 alerts

19:12:34.697 POST 200 fetch 0 B 397 ms 1 alerts

19:12:34.897 GET 404 img 1.2 KB 180 ms —

http://9soccer.biz/9-Sun2/Ch1/25.html

Domain graph

Hostnames

Connections