WEBSITE ANALYSIS REPORT

http://xyzyalla-kora-watch.smartagro.pro/?lang=ar&m=30842

01 Aug 2026 · 16:26:09.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

255md.com1 captured requests
a12.kora-plus.li9 captured requests
accounts.google.com3 captured requests
acscdn.com2 captured requests
adexchangerapid.com2 captured requests
ah.selahsguttate.com1 captured requests
al5sm.com1 captured requests
cdn.jsdelivr.net8 captured requests
cdn.redgarto.com6 captured requests
cdn.show-sb.com1 captured requests
cdn.socket.io1 captured requests
cdn.storageimagedisplay.com1 captured requests
chat.kora-api.top1 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com9 captured requests
go4score.lc2 captured requests
kora-api.space1 captured requests
opensignal.meshify.cloud1 captured requests
pl30564782.effectivecpmnetwork.com1 captured requests
pl30564783.effectivecpmnetwork.com1 captured requests
play.google.com1 captured requests
portalfluently.com2 captured requests
protrafficinspector.com3 captured requests
realizationnewestfangs.com10 captured requests
signalcloud.meshify.cloud1 captured requests
us.meshify.cloud1 captured requests
usrpubtrk.com1 captured requests
ws.kora-api.top1 captured requests
xyzyalla-kora-watch.smartagro.pro1 captured requests
zoologyfibre.com1 captured requests

Connections

a12.kora-plus.li → acscdn.comLoads from2 captured connections
a12.kora-plus.li → adexchangerapid.comCalls2 captured connections
a12.kora-plus.li → ah.selahsguttate.comLoads from1 captured connections
a12.kora-plus.li → cdn.jsdelivr.netLoads from3 captured connections
a12.kora-plus.li → flushpersist.comLoads from1 captured connections
a12.kora-plus.li → opensignal.meshify.cloudCalls1 captured connections
a12.kora-plus.li → pl30564782.effectivecpmnetwork.comLoads from1 captured connections
a12.kora-plus.li → portalfluently.comLoads from1 captured connections
a12.kora-plus.li → protrafficinspector.comCalls2 captured connections
a12.kora-plus.li → signalcloud.meshify.cloudCalls1 captured connections
a12.kora-plus.li → us.meshify.cloudCalls1 captured connections
a12.kora-plus.li → usrpubtrk.comCalls1 captured connections
a12.kora-plus.li → zoologyfibre.comLoads from1 captured connections
accounts.google.com → fonts.gstatic.comLoads from2 captured connections
accounts.google.com → play.google.comCalls1 captured connections
chat.kora-api.top → accounts.google.comEmbeds1 captured connections
chat.kora-api.top → accounts.google.comLoads from2 captured connections
chat.kora-api.top → cdn.jsdelivr.netLoads from4 captured connections
chat.kora-api.top → cdn.socket.ioLoads from1 captured connections
chat.kora-api.top → fonts.googleapis.comLoads from1 captured connections
chat.kora-api.top → fonts.gstatic.comLoads from3 captured connections
go4score.lc → 255md.comCalls1 captured connections
go4score.lc → a12.kora-plus.liEmbeds1 captured connections
go4score.lc → al5sm.comLoads from1 captured connections
go4score.lc → cdn.jsdelivr.netLoads from1 captured connections
go4score.lc → cdn.redgarto.comCalls3 captured connections
go4score.lc → cdn.redgarto.comLoads from3 captured connections
go4score.lc → cdn.show-sb.comCalls1 captured connections
go4score.lc → cdn.storageimagedisplay.comLoads from1 captured connections
go4score.lc → chat.kora-api.topEmbeds1 captured connections
go4score.lc → flushpersist.comLoads from1 captured connections
go4score.lc → fonts.googleapis.comLoads from1 captured connections
go4score.lc → fonts.gstatic.comLoads from4 captured connections
go4score.lc → kora-api.spaceCalls1 captured connections
go4score.lc → pl30564783.effectivecpmnetwork.comLoads from1 captured connections
go4score.lc → portalfluently.comLoads from1 captured connections
go4score.lc → protrafficinspector.comCalls1 captured connections
go4score.lc → realizationnewestfangs.comCalls3 captured connections
go4score.lc → realizationnewestfangs.comLoads from7 captured connections
go4score.lc → ws.kora-api.topCalls1 captured connections
ws.kora-api.top → kora-api.spaceRedirects to1 captured connections
xyzyalla-kora-watch.smartagro.pro → go4score.lcRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:25:40.085 GET 200 document 0 B 0 ms —

16:25:40.449 GET 200 document 81.9 KB 383 ms —

16:25:41.121 GET 200 script 512.8 KB 64 ms —

16:25:41.129 GET 200 script 95.2 KB 615 ms 1 alerts

16:25:41.764 GET 200 script 83.4 KB 118 ms 1 alerts

16:25:41.767 GET 200 xhr 40 B 128 ms —

16:25:41.769 GET 200 script 87.2 KB 32 ms —

16:25:41.772 GET 301 fetch 0 B 334 ms —

16:25:42.017 GET 404 img 236 B 7 ms —

16:25:42.024 POST 204 xhr 0 B 55 ms —

16:25:42.031 GET 200 fetch 2.5 KB 258 ms —

16:25:42.175 GET 200 img 0 B 0 ms 2 alerts

16:25:42.266 GET 200 xhr 5.5 KB 242 ms 1 alerts

16:25:42.332 GET 200 subdocument 85.4 KB 313 ms —

16:25:42.347 GET 200 subdocument 4.4 KB 122 ms —

16:25:42.523 GET 200 xhr 1.5 KB 22 ms 2 alerts

16:25:42.525 GET 200 img 0 B 0 ms 1 alerts

16:25:42.530 GET 200 script 706.4 KB 26 ms —

16:25:42.531 GET 200 script 29.7 KB 25 ms —

16:25:42.533 GET 200 script 203.3 KB 29 ms —

16:25:42.535 GET 200 script 163.0 KB 55 ms 2 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://acscdn.com/script/aclib.js

IP / ASN

104.18.17.201

AS13335 · CLOUDFLARENET

Requested by: https://a12.kora-plus.li/frame.php?ch=alwan1&p=12&token=f2929638-5d6f-495f-ac44-ba32439f5934&kt=1785601542

Resource information

File type: JavaScript source, ASCII text, with very long lines (65536), with no line terminators
MIME type: text/javascript
First seen (UTC): 27 Jul 2026 · 20:22:50.760 UTC
Last seen (UTC): 11 Aug 2026 · 05:31:04.368 UTC
Times seen: 161

Size: 163.0 KB (166944 bytes)
MD5: bcfb889a8834d990f92527a547887a3b
SHA1: 260580730f137d4bdbcf565203b7d6f6c93dca00
SHA256: cf8e7fb3470c93fa981c2e59c1f89c369ebfb099f7f1221391a7e5562c59c89b

Certificate information

Issuer: Google Trust Services · WE1
Subject: acscdn.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 74:F4:D8:E2:A7:4E:EA:9E:68:2E:BF:B3:D8:14:16:95:13:1F:70:66
Valid from: Wed, 01 Jul 2026 13:42:56 GMT
Valid until: Tue, 29 Sep 2026 14:42:38 GMT

Technology fingerprints

Google Cloud Storage (Miscellaneous)
Google Cloud (IaaS)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/aclib.js HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://a12.kora-plus.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Sat, 01 Aug 2026 16:25:42 GMT
content-type: text/javascript
x-guploader-uploadid: AKhXX7KKQ71IuSwOYNwfD2djhweGj8OkuverfYWmscCt5HkXK4y1ZB5tkPcKRBIf3CWcjpig22cfnyk
x-goog-generation: 1785159129991108
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 166944
x-goog-hash: crc32c=4eQ0qQ==, md5=vPuImog02ZD5JSelR4h6Ow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: cloudflare
expires: Sat, 01 Aug 2026 17:25:42 GMT
cache-control: public, max-age=3600
last-modified: Mon, 27 Jul 2026 13:32:10 GMT
alt-svc: h3=":443"; ma=86400
priority: u=2,i=?0
age: 894
cf-cache-status: HIT
etag: W/"bcfb889a8834d990f92527a547887a3b"
content-encoding: gzip
cf-ray: a2463348ff9d56c4-OSL
server-timing: cfExtPri

16:25:42.536 GET 200 script 6 B 96 ms —

16:25:42.539 GET 200 script 66.9 KB 133 ms —

16:25:42.582 GET 200 xhr 76.8 KB 23 ms —

16:25:42.583 GET 200 xhr 5.2 KB 21 ms —

16:25:42.586 GET 200 img 0 B 31 ms 1 alerts

16:25:42.634 GET 200 img 0 B 33 ms 1 alerts

16:25:42.636 GET 200 img 0 B 82 ms 1 alerts

16:25:42.678 GET 200 stylesheet 27.3 KB 87 ms —

16:25:42.681 GET 200 script 87.4 KB 13 ms —

16:25:42.683 GET 200 img 1.2 KB 8 ms —

16:25:42.687 GET 200 img 2.0 KB 162 ms —

16:25:42.719 GET 200 stylesheet 227.5 KB 10 ms —

16:25:42.721 GET 200 stylesheet 96.0 KB 10 ms —

16:25:42.724 GET 200 stylesheet 21.8 KB 42 ms —

16:25:42.729 GET 200 script 258.7 KB 168 ms —

16:25:42.731 GET 200 script 78.8 KB 11 ms —

16:25:42.734 GET 200 script 48.6 KB 37 ms —

16:25:42.742 GET 200 xhr 1.1 KB 7 ms —

16:25:42.756 GET 200 img 0 B 27 ms 1 alerts

16:25:42.825 GET 200 font 127.5 KB 12 ms —

16:25:42.826 GET 200 font 42.1 KB 78 ms —

16:25:42.829 GET 200 script 83.4 KB 22 ms 1 alerts

16:25:42.838 GET 200 font 42.1 KB 65 ms —

16:25:42.841 GET 200 xhr 40 B 25 ms —

16:25:42.846 GET 200 img 0 B 89 ms —

16:25:42.851 GET 200 script 67.8 KB 18 ms 2 alerts

16:25:42.866 GET 200 xhr 550 B 66 ms —

16:25:42.914 GET 200 font 42.1 KB 22 ms —

16:25:43.003 GET 200 xhr 217.9 KB 97 ms —

http://xyzyalla-kora-watch.smartagro.pro/?lang=ar&m=30842

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://xyzyalla-kora-watch.smartagro.pro/?lang=ar&m=30842

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://xyzyalla-kora-watch.smartagro.pro/?lang=ar&m=30842

Domain graph

Network requests