WEBSITE ANALYSIS REPORT

http://www.livekooora.vip/2026/07/england-have-won-six-of-their-last.html

15 Jul 2026 · 19:54:52.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

acscdn.com3 captured requests
adexchangeclear.com1 captured requests
adexchangerapid.com4 captured requests
ann.cdn-lab.shop1 captured requests
assets.embedindia.st3 captured requests
blogger.googleusercontent.com1 captured requests
cdn.jsdelivr.net1 captured requests
cdn.redgarto.com6 captured requests
cdn.show-creative1.com1 captured requests
embedindia.st3 captured requests
flushpersist.com1 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com3 captured requests
goforhealth.fit3 captured requests
netanyahu.indianservers.st8 captured requests
p16-common-sign.tiktokcdn.com8 captured requests
pl27533951.effectivegatecpm.com1 captured requests
portalfluently.com1 captured requests
protrafficinspector.com1 captured requests
realizationnewestfangs.com6 captured requests
resources.blogblog.com1 captured requests
sig-a.cdn-lab.shop2 captured requests
sig-b.cdn-lab.shop1 captured requests
ssl.p.jwpcdn.com1 captured requests
usrpubtrk.com2 captured requests
www.blogger.com5 captured requests
www.livekooora.vip4 captured requests

Connections

embedindia.st → adexchangeclear.comCalls1 captured connections
embedindia.st → ann.cdn-lab.shopCalls1 captured connections
embedindia.st → assets.embedindia.stCalls1 captured connections
embedindia.st → assets.embedindia.stLoads from2 captured connections
embedindia.st → netanyahu.indianservers.stCalls8 captured connections
embedindia.st → p16-common-sign.tiktokcdn.comCalls8 captured connections
embedindia.st → sig-a.cdn-lab.shopCalls2 captured connections
embedindia.st → sig-b.cdn-lab.shopCalls1 captured connections
embedindia.st → usrpubtrk.comCalls1 captured connections
goforhealth.fit → cdn.jsdelivr.netLoads from1 captured connections
goforhealth.fit → embedindia.stEmbeds1 captured connections
goforhealth.fit → ssl.p.jwpcdn.comLoads from1 captured connections
www.livekooora.vip → acscdn.comLoads from3 captured connections
www.livekooora.vip → adexchangerapid.comCalls4 captured connections
www.livekooora.vip → blogger.googleusercontent.comLoads from1 captured connections
www.livekooora.vip → cdn.redgarto.comCalls3 captured connections
www.livekooora.vip → cdn.redgarto.comLoads from3 captured connections
www.livekooora.vip → cdn.show-creative1.comCalls1 captured connections
www.livekooora.vip → flushpersist.comLoads from1 captured connections
www.livekooora.vip → fonts.googleapis.comLoads from1 captured connections
www.livekooora.vip → fonts.gstatic.comLoads from3 captured connections
www.livekooora.vip → goforhealth.fitEmbeds1 captured connections
www.livekooora.vip → pl27533951.effectivegatecpm.comLoads from1 captured connections
www.livekooora.vip → portalfluently.comLoads from1 captured connections
www.livekooora.vip → protrafficinspector.comCalls1 captured connections
www.livekooora.vip → realizationnewestfangs.comCalls1 captured connections
www.livekooora.vip → realizationnewestfangs.comLoads from5 captured connections
www.livekooora.vip → resources.blogblog.comLoads from1 captured connections
www.livekooora.vip → usrpubtrk.comCalls1 captured connections
www.livekooora.vip → www.blogger.comLoads from5 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:54:17.702 GET 200 document 91.6 KB 246 ms 2 alerts

19:54:18.324 GET 200 script 164.0 KB 50 ms 2 alerts

19:54:18.328 GET 200 script 91.3 KB 597 ms 3 alerts

19:54:18.331 GET 200 script 138.6 KB 96 ms —

19:54:18.332 GET 200 script 6.4 KB 18 ms 2 alerts

19:54:18.334 GET 200 script 147.5 KB 94 ms —

19:54:18.456 GET 200 stylesheet 1 B 645 ms —

19:54:18.460 GET 200 script 46.0 KB 14 ms 2 alerts

19:54:18.463 GET 200 script 29.6 KB 11 ms 2 alerts

19:54:18.465 GET 200 other 7.5 KB 18 ms 2 alerts

19:54:18.467 GET 200 img 23.8 KB 548 ms —

19:54:18.470 GET 200 font 34.1 KB 59 ms —

19:54:18.947 GET 200 script 83.4 KB 142 ms —

19:54:18.949 GET 200 xhr 40 B 142 ms —

19:54:18.952 GET 200 subdocument 12.5 KB 64 ms —

19:54:18.971 GET 200 font 29.8 KB 21 ms —

19:54:18.973 GET 200 font 95.3 KB 42 ms —

19:54:18.979 GET 204 fetch 0 B 193 ms 3 alerts

19:54:19.008 GET 200 img 2.5 KB 18 ms —

19:54:19.083 GET 200 stylesheet 12.9 KB 9 ms —

19:54:19.084 GET 200 script 16.7 KB 8 ms —

19:54:19.086 GET 200 script 116.5 KB 49 ms —

19:54:19.087 GET 200 script 17.3 KB 40 ms —

19:54:19.191 GET 200 img 3.6 KB 173 ms 2 alerts

19:54:19.272 GET 204 fetch 0 B 161 ms 3 alerts

19:54:19.311 GET 200 subdocument 262.9 KB 329 ms —

19:54:19.379 POST 204 beacon 0 B 165 ms 3 alerts

19:54:19.381 GET 204 fetch 0 B 178 ms 3 alerts

19:54:19.447 GET 200 xhr 5.0 KB 688 ms 1 alerts

Transaction #56

Request / response

URL

GET HTTPS

https://realizationnewestfangs.com/sbar.json?key=09ab644514fab1965728e0f11e5599a4&uuid=1c958c63-878b-4532-9c6e-543c09d77dd5%3A3%3A1

IP / ASN

172.240.127.242

AS7979 · SERVERS-COM

Requested by: https://www.livekooora.vip/2026/07/england-have-won-six-of-their-last.html

Resource information

File type: JSON text data
MIME type: text/plain; charset=utf-8
First seen (UTC): 15 Jul 2026 · 19:55:09.444 UTC
Last seen (UTC): 15 Jul 2026 · 19:55:09.444 UTC
Times seen: 1

Size: 5.0 KB (5142 bytes)
MD5: bef2b92c976fac9d1eee9607aa9b9a72
SHA1: 8140236a4ed7a84ba31952f7546d50dd2f8e01af
SHA256: 66076d3d90392bb96d147b5c1ceb5960934ed4a16159728eedfacf33f543e4f7

Certificate information

Issuer: Let's Encrypt · YR1
Subject: realizationnewestfangs.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: FF:25:5D:E6:54:B9:D0:3D:09:93:4C:6D:F1:36:1E:6B:76:95:60:03
Valid from: Sat, 27 Jun 2026 02:15:34 GMT
Valid until: Fri, 25 Sep 2026 02:15:33 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /sbar.json?key=09ab644514fab1965728e0f11e5599a4&uuid=1c958c63-878b-4532-9c6e-543c09d77dd5%3A3%3A1 HTTP/1.1
Host: realizationnewestfangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Origin: https://www.livekooora.vip
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://www.livekooora.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Wed, 15 Jul 2026 19:54:20 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Full-Version,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Sec-Ch-Ua-Full-Version-List
access-control-allow-credentials: true
access-control-allow-origin: https://www.livekooora.vip
content-encoding: zstd
set-cookie: uid_id2=1c958c63-878b-4532-9c6e-543c09d77dd5:3:1; Path=/; Expires=Wed, 22 Jul 2026 19:54:19 GMT; Secure; SameSite=None
pdhtkv=true; Path=/; Expires=Thu, 16 Jul 2026 19:54:20 GMT; Secure; SameSite=None
uncs=1; Path=/; Expires=Thu, 16 Jul 2026 19:54:20 GMT; Secure; SameSite=None
pdhtkv29=true; Path=/; Expires=Thu, 16 Jul 2026 19:54:20 GMT; Secure; SameSite=None
uncs29=1; Path=/; Expires=Thu, 16 Jul 2026 19:54:20 GMT; Secure; SameSite=None
u_pl27433452=1; Path=/; Expires=Thu, 16 Jul 2026 19:54:20 GMT; Secure; SameSite=None
slec09ab644514fab1965728e0f11e5599a4=[6517251]; Path=/; Expires=Wed, 15 Jul 2026 19:54:25 GMT; Secure; SameSite=None
vary: Accept-Encoding
x-envoy-upstream-service-time: 220
Host: realizationnewestfangs.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 13d3d674a2a56454855687a51d326bea
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

19:54:19.753 GET 200 fetch 947 B 253 ms 1 alerts

19:54:19.757 GET 200 script 1.04 MB 288 ms —

19:54:19.837 GET 200 stylesheet 35.2 KB 17 ms —

19:54:19.845 GET 200 script 379.0 KB 48 ms —

19:54:19.867 POST 204 beacon 0 B 149 ms 3 alerts

19:54:19.990 GET 200 img 0 B 0 ms 3 alerts

19:54:20.152 GET 200 xhr 1.6 KB 828 ms 1 alerts

19:54:20.155 GET 200 img 0 B 0 ms 1 alerts

19:54:20.209 POST 202 xhr 2 B 87 ms —

19:54:20.213 GET 200 script 393.1 KB 171 ms —

19:54:20.445 GET 200 fetch 159.1 KB 72 ms —

19:54:20.612 POST 200 fetch 198 B 51 ms —

19:54:20.877 GET 200 xhr 1.2 KB 94 ms —

19:54:20.994 GET 200 xhr 1.2 KB 23 ms —

19:54:20.999 GET 200 xhr 2.53 MB 254 ms —

19:54:21.003 GET 200 xhr 76.8 KB 41 ms —

19:54:21.005 GET 200 xhr 4.4 KB 37 ms —

19:54:21.009 GET 200 img 0 B 97 ms 1 alerts

19:54:21.065 GET 200 img 0 B 141 ms 1 alerts

19:54:21.066 GET No response img 0 B 0 ms 1 alerts

19:54:21.107 GET 200 stylesheet 16.4 KB 138 ms —

http://www.livekooora.vip/2026/07/england-have-won-six-of-their-last.html

Domain graph

Hostnames

Connections

Network requests

Transaction #56

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://www.livekooora.vip/2026/07/england-have-won-six-of-their-last.html

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #56

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://www.livekooora.vip/2026/07/england-have-won-six-of-their-last.html

Domain graph

Network requests