WEBSITE ANALYSIS REPORT

http://xyzkooora4liv-com.smartagro.mov/?m=30696&lang=ar

02 Jul 2026 · 23:16:15.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

a11.kora-plus.app8 captured requests
accounts.google.com3 captured requests
acscdn.com2 captured requests
adexchangerapid.com1 captured requests
b7510.com1 captured requests
bvtpk.com1 captured requests
cdn.jsdelivr.net8 captured requests
cdn.redgarto.com4 captured requests
cdn.show-sb.com1 captured requests
cdn.socket.io1 captured requests
cdn.storageimagedisplay.com2 captured requests
chat.kora-api.top1 captured requests
fiscalexplanation.com5 captured requests
flushpersist.com1 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com7 captured requests
kettledroopingcontinuation.com4 captured requests
kora-api.space1 captured requests
nj.throwaflaunt.com1 captured requests
opensignal.meshify.cloud1 captured requests
play.google.com1 captured requests
portalfluently.com1 captured requests
protrafficinspector.com2 captured requests
signalcloud.meshify.cloud1 captured requests
slayingbugeyes.com1 captured requests
strm02.app2 captured requests
us.meshify.cloud1 captured requests
usrpubtrk.com1 captured requests
ws.kora-api.top1 captured requests
xyzkooora4liv-com.smartagro.mov1 captured requests

Connections

a11.kora-plus.app → acscdn.comLoads from2 captured connections
a11.kora-plus.app → adexchangerapid.comCalls1 captured connections
a11.kora-plus.app → b7510.comCalls1 captured connections
a11.kora-plus.app → bvtpk.comLoads from1 captured connections
a11.kora-plus.app → cdn.jsdelivr.netLoads from3 captured connections
a11.kora-plus.app → nj.throwaflaunt.comLoads from1 captured connections
a11.kora-plus.app → opensignal.meshify.cloudCalls1 captured connections
a11.kora-plus.app → signalcloud.meshify.cloudCalls1 captured connections
a11.kora-plus.app → us.meshify.cloudCalls1 captured connections
a11.kora-plus.app → usrpubtrk.comCalls1 captured connections
accounts.google.com → fonts.gstatic.comLoads from2 captured connections
accounts.google.com → play.google.comCalls1 captured connections
chat.kora-api.top → accounts.google.comEmbeds1 captured connections
chat.kora-api.top → accounts.google.comLoads from2 captured connections
chat.kora-api.top → cdn.jsdelivr.netLoads from4 captured connections
chat.kora-api.top → cdn.socket.ioLoads from1 captured connections
chat.kora-api.top → fonts.googleapis.comLoads from1 captured connections
chat.kora-api.top → fonts.gstatic.comLoads from3 captured connections
strm02.app → a11.kora-plus.appEmbeds1 captured connections
strm02.app → cdn.jsdelivr.netLoads from1 captured connections
strm02.app → cdn.redgarto.comCalls3 captured connections
strm02.app → cdn.redgarto.comLoads from1 captured connections
strm02.app → cdn.show-sb.comCalls1 captured connections
strm02.app → cdn.storageimagedisplay.comLoads from2 captured connections
strm02.app → chat.kora-api.topEmbeds1 captured connections
strm02.app → fiscalexplanation.comCalls1 captured connections
strm02.app → fiscalexplanation.comLoads from4 captured connections
strm02.app → flushpersist.comLoads from1 captured connections
strm02.app → fonts.googleapis.comLoads from1 captured connections
strm02.app → fonts.gstatic.comLoads from2 captured connections
strm02.app → kettledroopingcontinuation.comLoads from4 captured connections
strm02.app → kora-api.spaceCalls1 captured connections
strm02.app → portalfluently.comLoads from1 captured connections
strm02.app → protrafficinspector.comCalls2 captured connections
strm02.app → slayingbugeyes.comLoads from1 captured connections
strm02.app → ws.kora-api.topCalls1 captured connections
ws.kora-api.top → kora-api.spaceRedirects to1 captured connections
xyzkooora4liv-com.smartagro.mov → strm02.appRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

23:15:50.448 GET 200 document 0 B 0 ms —

23:15:51.093 GET 200 document 98.0 KB 103 ms —

23:15:51.874 GET 200 script 512.8 KB 21 ms —

23:15:51.877 GET 200 script 91.3 KB 562 ms 1 alerts

23:15:51.878 GET 200 script 6 B 106 ms —

23:15:52.465 GET 200 script 83.4 KB 120 ms —

23:15:52.469 GET 200 xhr 40 B 117 ms —

23:15:52.473 GET 301 fetch 0 B 328 ms —

23:15:52.611 GET 200 xhr 40 B 22 ms —

23:15:52.740 GET 404 img 236 B 7 ms —

23:15:52.796 GET 200 fetch 5.3 KB 87 ms —

23:15:52.816 GET 200 img 0 B 0 ms 3 alerts

23:15:52.911 GET 200 subdocument 85.4 KB 253 ms —

23:15:52.931 GET 200 subdocument 4.9 KB 119 ms —

23:15:52.981 GET 200 xhr 5.6 KB 354 ms 1 alerts

23:15:53.141 GET 200 script 721.9 KB 18 ms —

23:15:53.146 GET 200 script 29.7 KB 14 ms —

23:15:53.149 GET 200 script 203.3 KB 11 ms —

23:15:53.151 GET 200 script 163.5 KB 102 ms 2 alerts

23:15:53.154 GET 200 script 6 B 170 ms 1 alerts

23:15:53.276 GET 200 stylesheet 227.5 KB 9 ms —

23:15:53.278 GET 200 stylesheet 96.0 KB 7 ms —

23:15:53.281 GET 200 stylesheet 21.8 KB 89 ms —

23:15:53.283 GET 200 script 258.0 KB 123 ms —

23:15:53.285 GET 200 script 78.8 KB 8 ms —

23:15:53.287 GET 200 script 48.6 KB 92 ms —

23:15:53.354 GET 200 xhr 1.2 KB 25 ms 2 alerts

23:15:53.355 GET 200 img 0 B 0 ms 1 alerts

23:15:53.416 GET 200 xhr 76.8 KB 24 ms —

23:15:53.418 GET 200 xhr 5.6 KB 26 ms —

23:15:53.422 GET 200 xhr 386 B 18 ms —

23:15:53.427 GET 200 img 0 B 428 ms 4 alerts

23:15:53.430 GET 200 font 127.5 KB 9 ms —

23:15:53.431 GET 200 font 42.1 KB 86 ms —

23:15:53.433 GET 200 font 42.1 KB 85 ms —

23:15:53.484 GET 200 font 42.1 KB 39 ms —

23:15:53.492 GET 200 script 96.5 KB 28 ms 1 alerts

23:15:53.494 GET 200 script 67.5 KB 13 ms 2 alerts

23:15:53.495 GET 200 img 0 B 450 ms 4 alerts

Transaction #64

Request / response

URL

GET HTTPS

https://kettledroopingcontinuation.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fanimate.css&l=78689&fd=28

IP / ASN

172.240.108.84

AS7979 · SERVERS-COM

Requested by: https://strm02.app/?m=30696&lang=ar

Resource information

File type: Not recorded
MIME type: text/plain
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 13:29:57.098 UTC
Times seen: 19332840

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR1
Subject: kettledroopingcontinuation.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 87:48:80:BE:9E:7C:E0:59:6E:4B:D8:8B:51:FD:61:A4:77:BD:92:86
Valid from: Wed, 24 Jun 2026 00:47:49 GMT
Valid until: Tue, 22 Sep 2026 00:47:48 GMT

Technology fingerprints

Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fanimate.css&l=78689&fd=28 HTTP/1.1
Host: kettledroopingcontinuation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Thu, 02 Jul 2026 23:15:53 GMT
Content-Length: 0
Connection: keep-alive
Accept-Ch: X-OperaMini-Phone-UA, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Device-Stock-UA, X-Device-User-Agent, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform
Host: kettledroopingcontinuation.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values
Access-Control-Expose-Headers: Content-Length,Content-Range

23:15:53.496 GET 200 img 0 B 447 ms 4 alerts

23:15:53.526 GET 200 img 0 B 433 ms 4 alerts

23:15:53.563 GET 200 xhr 531 B 63 ms —

23:15:53.573 GET 200 stylesheet 16.4 KB 35 ms —

23:15:53.584 GET 200 img 3.9 KB 8 ms —

23:15:53.589 GET 200 img 38.3 KB 118 ms —

23:15:53.590 GET 200 img 63.1 KB 337 ms —

23:15:53.717 GET 200 xhr 512.0 KB 116 ms —

23:15:53.796 GET 200 stylesheet 696 B 169 ms —

23:15:53.802 GET 200 subdocument 189.4 KB 249 ms —

23:15:53.910 POST No response xhr 0 B 0 ms 1 alerts

http://xyzkooora4liv-com.smartagro.mov/?m=30696&lang=ar

Domain graph

Hostnames

Connections

Network requests

Transaction #64

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://xyzkooora4liv-com.smartagro.mov/?m=30696&lang=ar

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #64

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://xyzkooora4liv-com.smartagro.mov/?m=30696&lang=ar

Domain graph

Network requests