WEBSITE ANALYSIS REPORT

http://fmoviesto.nexus/watch/tv/224372/1/4

20 Mar 2026 · 08:52:23.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

acscdn.com4 captured requests
adexchangeclear.com7 captured requests
ajax.googleapis.com1 captured requests
b.cn47thp48f7fcf.cfd1 captured requests
camaleones.tv4 captured requests
cdn.show-creative1.com1 captured requests
cdnjs.cloudflare.com7 captured requests
cloudnestra.com6 captured requests
creative-sb1.com7 captured requests
crownzodiac.com6 captured requests
flushpersist.com2 captured requests
fmoviesto.nexus1 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
image.tmdb.org7 captured requests
preferencenail.com2 captured requests
protrafficinspector.com2 captured requests
sourshaped.com4 captured requests
unpkg.com1 captured requests
usrpubtrk.com1 captured requests
vidsrc.mov1 captured requests
vsembed.ru8 captured requests

Connections

camaleones.tv → cdn.show-creative1.comCalls1 captured connections
camaleones.tv → creative-sb1.comCalls3 captured connections
camaleones.tv → creative-sb1.comLoads from4 captured connections
camaleones.tv → crownzodiac.comCalls1 captured connections
camaleones.tv → crownzodiac.comLoads from5 captured connections
camaleones.tv → flushpersist.comLoads from2 captured connections
camaleones.tv → fonts.googleapis.comLoads from1 captured connections
camaleones.tv → fonts.gstatic.comLoads from2 captured connections
camaleones.tv → preferencenail.comLoads from2 captured connections
camaleones.tv → protrafficinspector.comCalls2 captured connections
camaleones.tv → sourshaped.comLoads from4 captured connections
camaleones.tv → vidsrc.movEmbeds1 captured connections
cloudnestra.com → ajax.googleapis.comLoads from1 captured connections
cloudnestra.com → cdnjs.cloudflare.comLoads from3 captured connections
cloudnestra.com → image.tmdb.orgLoads from1 captured connections
fmoviesto.nexus → camaleones.tvRedirects to1 captured connections
vidsrc.mov → acscdn.comLoads from4 captured connections
vidsrc.mov → adexchangeclear.comCalls5 captured connections
vidsrc.mov → adexchangeclear.comLoads from2 captured connections
vidsrc.mov → usrpubtrk.comCalls1 captured connections
vidsrc.mov → vsembed.ruEmbeds1 captured connections
vsembed.ru → b.cn47thp48f7fcf.cfdLoads from1 captured connections
vsembed.ru → cdnjs.cloudflare.comLoads from4 captured connections
vsembed.ru → cloudnestra.comEmbeds1 captured connections
vsembed.ru → cloudnestra.comLoads from1 captured connections
vsembed.ru → unpkg.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:52:00.186 GET 301 document 49.7 KB 564 ms 1 alerts

08:52:00.515 GET 200 document 49.7 KB 152 ms —

08:52:00.852 GET 200 subdocument 1.5 KB 242 ms —

08:52:00.855 GET 200 stylesheet 23.3 KB 21 ms —

08:52:00.861 GET 200 script 100.2 KB 849 ms 1 alerts

08:52:00.862 GET 200 script 89.7 KB 824 ms 1 alerts

Transaction #41

Request / response

URL

GET HTTPS

https://crownzodiac.com/f2/d8/f7/f2d8f77afbc58792853a7736c0084b21.js

IP / ASN

172.240.108.84

AS7979 · SERVERS-COM

Requested by: https://camaleones.tv/watch/tv/224372/1/4

Resource information

File type: JavaScript source, ASCII text, with very long lines (65536), with no line terminators
MIME type: application/javascript
First seen (UTC): 14 Mar 2026 · 05:05:50.189 UTC
Last seen (UTC): 23 Mar 2026 · 00:56:52.562 UTC
Times seen: 7

Size: 89.7 KB (91851 bytes)
MD5: 17c18bbbd5c792f6ab31d91b54f13e8d
SHA1: 1c1aa51f2b2a8b0adaa251e11239de65af249458
SHA256: fa633354f827964958e20940d3d07775a665b74bb0c551cced602d02dc8eebb8

Certificate information

Issuer: Let's Encrypt · R12
Subject: crownzodiac.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 4B:02:AD:76:08:4F:4B:90:F8:EE:45:01:72:C3:72:2C:E8:9E:49:4F
Valid from: Tue, 10 Mar 2026 09:14:33 GMT
Valid until: Mon, 08 Jun 2026 09:14:32 GMT

Technology fingerprints

Nginx:1.21.6 (Web servers, Reverse proxies)
HSTS (Security)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /f2/d8/f7/f2d8f77afbc58792853a7736c0084b21.js HTTP/1.1
Host: crownzodiac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://camaleones.tv/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 20 Mar 2026 08:52:01 GMT
Content-Type: application/javascript
Content-Length: 34772
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 3
Host: crownzodiac.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: fd238bef824e75791c3ff9ca75db0b31
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

08:52:00.997 GET 200 lazy-imageset 16.9 KB 144 ms —

08:52:00.999 GET 200 lazy-imageset 20.0 KB 141 ms —

08:52:01.001 GET 200 lazy-imageset 12.6 KB 146 ms —

08:52:01.003 GET 200 lazy-imageset 13.5 KB 149 ms —

08:52:01.005 GET 200 lazy-imageset 22.4 KB 146 ms —

08:52:01.007 GET 200 lazy-imageset 24.3 KB 151 ms —

08:52:01.299 GET 200 script 163.1 KB 69 ms 2 alerts

08:52:01.453 GET 200 script 83.4 KB 178 ms 2 alerts

08:52:01.455 GET 200 xhr 40 B 284 ms —

08:52:01.456 GET 200 script 83.4 KB 169 ms 2 alerts

08:52:01.459 GET 200 xhr 40 B 232 ms —

08:52:01.475 GET 200 script 41.3 KB 31 ms 2 alerts

08:52:01.481 GET 200 script 55.3 KB 26 ms 2 alerts

08:52:01.483 GET 200 subdocument 58.1 KB 149 ms —

08:52:01.699 GET 200 img 1.3 KB 27 ms —

08:52:01.700 GET 200 img 1.3 KB 27 ms —

08:52:01.806 GET 200 stylesheet 55.8 KB 163 ms —

08:52:01.812 GET 200 stylesheet 12.0 KB 24 ms —

08:52:01.816 GET 200 script 85.5 KB 25 ms —

08:52:01.820 GET 200 script 3.7 KB 181 ms —

08:52:01.822 GET 200 script 1.7 KB 164 ms —

08:52:01.826 GET 200 script 1.3 KB 182 ms —

08:52:01.828 GET 200 script 1.5 KB 18 ms —

08:52:01.830 GET 200 script 2.2 KB 17 ms —

08:52:01.831 GET 200 script 1.0 KB 16 ms —

08:52:01.833 GET 200 script 16 B 180 ms —

08:52:01.835 GET 200 script 800 B 22 ms —

08:52:01.836 GET 200 script 17.3 KB 211 ms —

08:52:02.127 GET 200 subdocument 6.7 KB 88 ms —

08:52:02.136 GET 200 xhr 5.3 KB 284 ms 1 alerts

08:52:02.211 GET 200 fetch 1.1 KB 310 ms 1 alerts

08:52:02.212 GET 200 img 1.8 KB 40 ms —

08:52:02.231 GET 200 script 5 B 604 ms —

08:52:02.249 GET 200 fetch 1.9 KB 182 ms 1 alerts

08:52:02.252 POST 204 beacon 0 B 290 ms 3 alerts

08:52:02.338 GET 200 stylesheet 55.8 KB 13 ms —

08:52:02.344 GET 200 stylesheet 7.8 KB 17 ms —

08:52:02.352 GET 200 script 84.6 KB 466 ms —

08:52:02.361 GET 200 script 1.3 KB 11 ms —

08:52:02.363 GET 404 script 281 B 14 ms —

08:52:02.369 GET 200 script 798 B 14 ms —

08:52:02.399 GET 200 img 82.9 KB 27 ms —

08:52:02.418 GET 200 font 74.4 KB 23 ms —

08:52:02.621 GET 204 img 0 B 331 ms 1 alerts

http://fmoviesto.nexus/watch/tv/224372/1/4

Domain graph

Hostnames

Connections

Network requests

Transaction #41

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://fmoviesto.nexus/watch/tv/224372/1/4

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #41

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://fmoviesto.nexus/watch/tv/224372/1/4

Domain graph

Network requests