WEBSITE ANALYSIS REPORT

http://b1.kooralive.tech/2025/11/get-your-best-commercial-liability-comp_4.html

04 Nov 2025 · 19:54:28.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

b1.kooralive.tech4 captured requests
blogger.googleusercontent.com1 captured requests
cdn.show-sb.com1 captured requests
cdn.statically.io4 captured requests
cdn.storageimagedisplay.com14 captured requests
cdnjs.cloudflare.com1 captured requests
creative-sb1.com8 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
iframcodes2026.blogspot.com1 captured requests
pl15647660.effectivegatecpm.com1 captured requests
pl19215658.effectivegatecpm.com1 captured requests
pl19895122.effectivegatecpm.com1 captured requests
pl25379289.effectivegatecpm.com1 captured requests
pl27765454.effectivegatecpm.com1 captured requests
preferencenail.com2 captured requests
professionaltrafficmonitor.com3 captured requests
recovernotionvideo.com1 captured requests
sentimentalrailing.com16 captured requests
skinnycrawlinglax.com8 captured requests
stripwedding.com34 captured requests
torchfriendlypay.com1 captured requests
weirdopt.com1 captured requests
www.googletagmanager.com1 captured requests

Connections

b1.kooralive.tech → blogger.googleusercontent.comLoads from1 captured connections
b1.kooralive.tech → cdn.show-sb.comCalls1 captured connections
b1.kooralive.tech → cdn.statically.ioLoads from4 captured connections
b1.kooralive.tech → cdn.storageimagedisplay.comLoads from14 captured connections
b1.kooralive.tech → cdnjs.cloudflare.comLoads from1 captured connections
b1.kooralive.tech → creative-sb1.comCalls3 captured connections
b1.kooralive.tech → creative-sb1.comLoads from5 captured connections
b1.kooralive.tech → flushpersist.comLoads from2 captured connections
b1.kooralive.tech → fonts.googleapis.comLoads from1 captured connections
b1.kooralive.tech → fonts.gstatic.comLoads from2 captured connections
b1.kooralive.tech → iframcodes2026.blogspot.comEmbeds1 captured connections
b1.kooralive.tech → pl15647660.effectivegatecpm.comLoads from1 captured connections
b1.kooralive.tech → pl19215658.effectivegatecpm.comLoads from1 captured connections
b1.kooralive.tech → pl19895122.effectivegatecpm.comLoads from1 captured connections
b1.kooralive.tech → pl25379289.effectivegatecpm.comLoads from1 captured connections
b1.kooralive.tech → pl27765454.effectivegatecpm.comLoads from1 captured connections
b1.kooralive.tech → preferencenail.comLoads from2 captured connections
b1.kooralive.tech → professionaltrafficmonitor.comCalls3 captured connections
b1.kooralive.tech → recovernotionvideo.comLoads from1 captured connections
b1.kooralive.tech → sentimentalrailing.comCalls3 captured connections
b1.kooralive.tech → sentimentalrailing.comLoads from13 captured connections
b1.kooralive.tech → skinnycrawlinglax.comCalls1 captured connections
b1.kooralive.tech → skinnycrawlinglax.comLoads from7 captured connections
b1.kooralive.tech → stripwedding.comCalls6 captured connections
b1.kooralive.tech → stripwedding.comLoads from28 captured connections
b1.kooralive.tech → torchfriendlypay.comLoads from1 captured connections
b1.kooralive.tech → weirdopt.comLoads from1 captured connections
b1.kooralive.tech → www.googletagmanager.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:54:05.080 GET 200 document 124.4 KB 622 ms —

19:54:05.702 GET 200 script 418.4 KB 323 ms —

19:54:05.706 GET 404 img 76.9 KB 472 ms —

19:54:05.715 GET 200 script 42.3 KB 763 ms 2 alerts

19:54:05.719 GET 200 script 42.3 KB 902 ms 2 alerts

19:54:05.723 GET 200 script 42.3 KB 774 ms 2 alerts

19:54:05.726 GET 200 script 42.3 KB 804 ms 2 alerts

19:54:05.729 GET 200 script 42.3 KB 826 ms 2 alerts

19:54:05.733 GET 200 script 87.6 KB 49 ms —

19:54:05.748 GET 200 subdocument 0 B 1241 ms —

19:54:05.817 GET 200 img 2.1 KB 90 ms —

19:54:05.820 GET 200 img 5.9 KB 99 ms —

19:54:05.821 GET 200 font 56.0 KB 111 ms —

19:54:06.260 GET 200 xhr 40 B 325 ms —

19:54:06.262 GET 200 script 6.3 KB 723 ms 2 alerts

19:54:06.263 GET 200 xhr 15.2 KB 604 ms 2 alerts

19:54:06.264 GET 200 script 109.5 KB 828 ms 2 alerts

19:54:06.268 GET 200 script 83.0 KB 817 ms 2 alerts

19:54:06.269 GET 200 xhr 40 B 211 ms —

19:54:06.271 GET 200 script 6.3 KB 393 ms 2 alerts

19:54:06.273 GET 200 xhr 15.1 KB 404 ms 2 alerts

19:54:06.288 GET 200 xhr 40 B 145 ms —

19:54:06.290 GET 200 xhr 15.1 KB 391 ms 2 alerts

19:54:06.291 GET 200 img 0 B 403 ms 2 alerts

19:54:06.299 GET 200 img 0 B 383 ms 2 alerts

19:54:07.055 GET 200 xhr 16.6 KB 228 ms 2 alerts

19:54:07.056 GET 200 xhr 16.4 KB 107 ms 2 alerts

19:54:07.057 GET 200 xhr 16.5 KB 221 ms 2 alerts

19:54:07.063 GET 200 img 0 B 103 ms 2 alerts

19:54:07.065 GET 200 img 0 B 718 ms 2 alerts

19:54:07.067 GET 200 img 0 B 174 ms 2 alerts

19:54:07.068 GET 200 img 0 B 588 ms 2 alerts

19:54:07.070 GET 200 img 67.8 KB 198 ms —

19:54:07.072 GET 200 img 39.9 KB 302 ms —

19:54:07.073 GET 200 img 58.3 KB 308 ms —

19:54:07.075 GET 200 img 98.6 KB 175 ms —

19:54:07.077 GET 200 xhr 16.6 KB 200 ms 2 alerts

Transaction #106

Request / response

URL

GET HTTPS

https://stripwedding.com/ntv.json?key=88ddc430027abb10fa13eb039b009410&vstc=4&uuid=97a89039-627d-48e0-8735-843492d4741f%3A3%3A1&custom=%7B%22d37e3bc4%22%3A%22b%22%7D&rb=

IP / ASN

172.240.108.84

AS7979 · SERVERS-COM

Requested by: https://b1.kooralive.tech/2025/11/get-your-best-commercial-liability-comp_4.html

Resource information

File type: JSON text data
MIME type: application/json
First seen (UTC): 04 Nov 2025 · 19:54:42.284 UTC
Last seen (UTC): 04 Nov 2025 · 19:54:42.284 UTC
Times seen: 1

Size: 16.6 KB (16996 bytes)
MD5: 9ff0ffc3008ee16c79a454c032de2837
SHA1: 2b9363f75b2d3cafcfbf29f611cf9a11c839da29
SHA256: 31c91794efdc6a7e63f1d5149f774c0355a42c9c5ca6bb5b7e409d3354ab6634

Certificate information

Issuer: Let's Encrypt · R13
Subject: stripwedding.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 80:22:78:0F:C7:56:E7:68:4C:FE:DD:AF:7F:A1:B8:9C:3E:E5:D8:E4
Valid from: Fri, 17 Oct 2025 09:52:59 GMT
Valid until: Thu, 15 Jan 2026 09:52:58 GMT

Technology fingerprints

Nginx:1.21.6 (Web servers, Reverse proxies)
HSTS (Security)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
DNS0 Zero Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ntv.json?key=88ddc430027abb10fa13eb039b009410&vstc=4&uuid=97a89039-627d-48e0-8735-843492d4741f%3A3%3A1&custom=%7B%22d37e3bc4%22%3A%22b%22%7D&rb= HTTP/1.1
Host: stripwedding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://b1.kooralive.tech
DNT: 1
Connection: keep-alive
Referer: https://b1.kooralive.tech/
Cookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl19115159=1; u_pl25278790=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Nov 2025 19:54:07 GMT
Content-Type: application/json
Content-Length: 12984
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
access-control-allow-origin: https://b1.kooralive.tech
access-control-allow-credentials: true
vary: Accept-Encoding
set-cookie: uid_id2=97a89039-627d-48e0-8735-843492d4741f:3:1; expires=Tue, 11 Nov 2025 19:54:07 GMT; path=/; secure; SameSite=None
uncs=2; expires=Wed, 05 Nov 2025 19:54:07 GMT; path=/; secure; SameSite=None
uncs49=2; expires=Wed, 05 Nov 2025 19:54:07 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 12
Host: stripwedding.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 55891c28326616e0cc58a94fd4fe47a5
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

19:54:07.080 GET 200 xhr 16.3 KB 195 ms 2 alerts

19:54:07.081 GET 200 xhr 16.5 KB 178 ms 2 alerts

19:54:07.082 GET 200 script 83.4 KB 150 ms 3 alerts

19:54:07.083 GET 200 img 0 B 416 ms 2 alerts

19:54:07.084 GET 200 script 0 B 132 ms 2 alerts

19:54:07.087 GET 200 script 83.4 KB 152 ms 3 alerts

19:54:07.090 GET 200 img 0 B 182 ms 2 alerts

19:54:07.091 GET 200 img 0 B 144 ms 2 alerts

19:54:07.092 GET 200 img 0 B 264 ms 2 alerts

19:54:07.093 GET 200 img 0 B 270 ms 2 alerts

19:54:07.094 GET 200 img 51.8 KB 158 ms —

19:54:07.095 GET 200 img 74.1 KB 174 ms —

19:54:07.096 GET 200 img 70.4 KB 175 ms —

http://b1.kooralive.tech/2025/11/get-your-best-commercial-liability-comp_4.html

Domain graph

Hostnames

Connections

Network requests

Transaction #106

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://b1.kooralive.tech/2025/11/get-your-best-commercial-liability-comp_4.html

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #106

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://b1.kooralive.tech/2025/11/get-your-best-commercial-liability-comp_4.html

Domain graph

Network requests