WEBSITE ANALYSIS REPORT

http://mov3.co/ja/nhk/

28 Jan 2026 · 04:24:20.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

basepush.com3 captured requests
cdn.show-sb.com1 captured requests
crawlsingeshell.com1 captured requests
creative-sb1.com6 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com2 captured requests
go.oclasrv.com3 captured requests
minnit.chat40 captured requests
mov3.co16 captured requests
my.rtmark.net1 captured requests
nhk4.mov3.co26 captured requests
preferencenail.com2 captured requests
protrafficinspector.com1 captured requests
releases.flowplayer.org4 captured requests
skinnycrawlinglax.com3 captured requests
stackpath.bootstrapcdn.com1 captured requests
static.cloudflareinsights.com2 captured requests
wayfarerorthodox.com8 captured requests
weirdopt.com1 captured requests
www.gstatic.com1 captured requests
zdzhk.com2 captured requests

Connections

minnit.chat → static.cloudflareinsights.comLoads from2 captured connections
mov3.co → basepush.comCalls2 captured connections
mov3.co → basepush.comLoads from1 captured connections
mov3.co → cdn.show-sb.comCalls1 captured connections
mov3.co → crawlsingeshell.comLoads from1 captured connections
mov3.co → creative-sb1.comCalls3 captured connections
mov3.co → creative-sb1.comLoads from3 captured connections
mov3.co → flushpersist.comLoads from2 captured connections
mov3.co → fonts.googleapis.comLoads from2 captured connections
mov3.co → fonts.gstatic.comLoads from2 captured connections
mov3.co → go.oclasrv.comCalls2 captured connections
mov3.co → go.oclasrv.comLoads from1 captured connections
mov3.co → minnit.chatEmbeds1 captured connections
mov3.co → my.rtmark.netCalls1 captured connections
mov3.co → nhk4.mov3.coCalls26 captured connections
mov3.co → preferencenail.comLoads from2 captured connections
mov3.co → protrafficinspector.comCalls1 captured connections
mov3.co → releases.flowplayer.orgLoads from4 captured connections
mov3.co → skinnycrawlinglax.comLoads from3 captured connections
mov3.co → stackpath.bootstrapcdn.comLoads from1 captured connections
mov3.co → wayfarerorthodox.comCalls1 captured connections
mov3.co → wayfarerorthodox.comLoads from7 captured connections
mov3.co → weirdopt.comLoads from1 captured connections
mov3.co → www.gstatic.comLoads from1 captured connections
mov3.co → zdzhk.comCalls2 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

04:23:56.317 GET 300 document 12.2 KB 707 ms 1 alerts

04:23:56.961 GET 200 document 12.2 KB 512 ms 1 alerts

04:23:57.662 GET 200 stylesheet 5.7 KB 280 ms 1 alerts

04:23:57.663 GET 200 stylesheet 47.6 KB 283 ms 1 alerts

04:23:57.665 GET 200 stylesheet 12.5 KB 267 ms —

04:23:57.666 GET 200 script 93.7 KB 265 ms 1 alerts

04:23:57.668 GET 200 script 7.0 KB 258 ms 1 alerts

04:23:57.669 GET 200 script 994 B 277 ms 1 alerts

04:23:57.670 GET 200 stylesheet 34 B 253 ms 1 alerts

04:23:57.670 GET 200 script 104.4 KB 843 ms 3 alerts

04:23:57.675 GET 200 script 115.0 KB 202 ms —

04:23:57.676 GET 200 script 28.5 KB 228 ms 2 alerts

04:23:57.677 GET 200 script 509 B 269 ms 1 alerts

04:23:57.678 GET 200 script 733 B 262 ms 1 alerts

04:23:58.118 GET 200 img 958.7 KB 69 ms 1 alerts

04:23:58.120 GET 200 img 3.4 KB 6 ms 1 alerts

04:23:58.122 GET 200 font 95.5 KB 322 ms —

04:23:58.124 GET 200 font 17.6 KB 377 ms 1 alerts

04:23:58.225 GET 200 img 0 B 758 ms 3 alerts

04:23:58.227 GET 200 script 6.3 KB 719 ms 3 alerts

Transaction #116

Request / response

URL

GET HTTPS

https://skinnycrawlinglax.com/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js

IP / ASN

172.240.253.132

AS7979 · SERVERS-COM

Requested by: https://mov3.co/en/nhk/

Resource information

File type: JavaScript source, ASCII text, with very long lines (6454), with no line terminators
MIME type: application/javascript
First seen (UTC): 01 Dec 2025 · 12:09:20.892 UTC
Last seen (UTC): 29 Jan 2026 · 12:50:40.978 UTC
Times seen: 4063

Size: 6.3 KB (6454 bytes)
MD5: 81c010ddfde2faeaf1c598844287df5a
SHA1: cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b
SHA256: 44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab

Certificate information

Issuer: Let's Encrypt · R12
Subject: skinnycrawlinglax.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: BE:03:A2:AD:89:FD:C3:94:0E:B0:AC:88:9E:E3:AD:33:6F:39:72:EA
Valid from: Thu, 25 Dec 2025 22:08:08 GMT
Valid until: Wed, 25 Mar 2026 22:08:07 GMT

Technology fingerprints

Nginx:1.21.6 (Web servers, Reverse proxies)
Envoy (Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js HTTP/1.1
Host: skinnycrawlinglax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mov3.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 28 Jan 2026 04:23:58 GMT
Content-Type: application/javascript
Content-Length: 3403
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 1
Host: skinnycrawlinglax.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 0a30d0ff3d0d75168b4b8c9e05c1a746
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

04:23:58.233 GET 200 script 83.4 KB 170 ms 3 alerts

04:23:58.235 GET 200 script 76.9 KB 822 ms 3 alerts

04:23:58.236 GET 200 xhr 40 B 241 ms —

04:23:58.240 GET 200 subdocument 1.3 KB 134 ms 1 alerts

04:23:58.243 GET 200 subdocument 17.9 KB 406 ms —

04:23:58.312 GET 200 xhr 65 B 98 ms —

04:23:58.314 GET 200 script 0 B 157 ms 3 alerts

04:23:58.319 GET 200 fetch 64.6 KB 239 ms 2 alerts

04:23:58.337 GET 200 fetch 167 B 30 ms 2 alerts

04:23:58.461 GET 200 script 161.1 KB 149 ms —

04:23:58.464 GET 200 script 240.7 KB 130 ms —

04:23:58.467 GET 200 stylesheet 39.4 KB 266 ms —

04:23:58.470 GET 200 stylesheet 156.6 KB 77 ms —

04:23:58.592 GET 200 font 9.1 KB 271 ms 1 alerts

04:23:58.778 GET 200 font 7.7 KB 36 ms —

04:23:58.789 GET 200 xhr 252 B 1222 ms 1 alerts

04:23:58.792 GET 200 stylesheet 14.3 KB 9 ms —

04:23:58.793 GET 200 stylesheet 137.6 KB 11 ms —

04:23:58.794 GET 200 script 4.2 KB 9 ms —

04:23:58.795 GET 200 script 84.9 KB 12 ms —

04:23:58.796 GET 200 script 206.2 KB 18 ms —

04:23:58.798 GET 200 stylesheet 57.9 KB 8 ms —

04:23:58.799 GET 200 stylesheet 967 B 8 ms —

04:23:58.800 GET 200 script 12.0 KB 11 ms —

04:23:58.801 GET 200 img 319 B 11 ms —

04:23:58.803 GET 200 stylesheet 1.6 KB 7 ms —

04:23:58.803 GET 200 script 28.2 KB 13 ms —

04:23:58.811 GET 200 script 19.5 KB 29 ms —

04:23:58.863 GET 200 script 83.4 KB 24 ms 3 alerts

04:23:58.887 GET 200 img 0 B 274 ms 1 alerts

http://mov3.co/ja/nhk/

Domain graph

Hostnames

Connections

Network requests

Transaction #116

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://mov3.co/ja/nhk/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #116

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://mov3.co/ja/nhk/

Domain graph

Network requests