WEBSITE ANALYSIS REPORT

http://dragonhill.tv/watch/tv/111110/2/6

19 Mar 2026 · 18:34:27.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

acscdn.com4 captured requests
adexchangeclear.com7 captured requests
ajax.googleapis.com1 captured requests
cdn.show-creative1.com1 captured requests
cdnjs.cloudflare.com7 captured requests
cloudnestra.com6 captured requests
creative-sb1.com7 captured requests
crownzodiac.com6 captured requests
dragonhill.tv4 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
image.tmdb.org7 captured requests
preferencenail.com2 captured requests
protrafficinspector.com2 captured requests
sourshaped.com4 captured requests
unpkg.com1 captured requests
uqz1.iojvj8gb6prw5pxgwmqu.cfd1 captured requests
usrpubtrk.com1 captured requests
vidsrc.mov1 captured requests
vsembed.ru8 captured requests

Connections

cloudnestra.com → ajax.googleapis.comLoads from1 captured connections
cloudnestra.com → cdnjs.cloudflare.comLoads from3 captured connections
cloudnestra.com → image.tmdb.orgLoads from1 captured connections
dragonhill.tv → cdn.show-creative1.comCalls1 captured connections
dragonhill.tv → creative-sb1.comCalls3 captured connections
dragonhill.tv → creative-sb1.comLoads from4 captured connections
dragonhill.tv → crownzodiac.comCalls1 captured connections
dragonhill.tv → crownzodiac.comLoads from5 captured connections
dragonhill.tv → flushpersist.comLoads from2 captured connections
dragonhill.tv → fonts.googleapis.comLoads from1 captured connections
dragonhill.tv → fonts.gstatic.comLoads from2 captured connections
dragonhill.tv → preferencenail.comLoads from2 captured connections
dragonhill.tv → protrafficinspector.comCalls2 captured connections
dragonhill.tv → sourshaped.comLoads from4 captured connections
dragonhill.tv → vidsrc.movEmbeds1 captured connections
vidsrc.mov → acscdn.comLoads from4 captured connections
vidsrc.mov → adexchangeclear.comCalls5 captured connections
vidsrc.mov → adexchangeclear.comLoads from2 captured connections
vidsrc.mov → usrpubtrk.comCalls1 captured connections
vidsrc.mov → vsembed.ruEmbeds1 captured connections
vsembed.ru → cdnjs.cloudflare.comLoads from4 captured connections
vsembed.ru → cloudnestra.comEmbeds1 captured connections
vsembed.ru → cloudnestra.comLoads from1 captured connections
vsembed.ru → unpkg.comLoads from1 captured connections
vsembed.ru → uqz1.iojvj8gb6prw5pxgwmqu.cfdLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

18:34:04.064 GET 200 document 49.1 KB 134 ms 1 alerts

18:34:04.304 GET 200 stylesheet 23.3 KB 15 ms 1 alerts

18:34:04.305 GET 200 subdocument 1.5 KB 252 ms —

18:34:04.309 GET 200 script 100.2 KB 863 ms 1 alerts

18:34:04.311 GET 200 script 89.7 KB 848 ms 1 alerts

18:34:04.460 GET 200 lazy-imageset 14.3 KB 233 ms —

18:34:04.461 GET 200 lazy-imageset 5.8 KB 238 ms —

18:34:04.462 GET 200 lazy-imageset 10.3 KB 243 ms —

18:34:04.463 GET 200 lazy-imageset 11.0 KB 247 ms —

18:34:04.464 GET 200 lazy-imageset 13.3 KB 258 ms —

18:34:04.465 GET 200 lazy-imageset 17.1 KB 266 ms —

18:34:04.584 GET 200 script 163.1 KB 100 ms 2 alerts

18:34:04.836 GET 200 script 41.3 KB 27 ms 2 alerts

18:34:04.841 GET 200 script 55.3 KB 24 ms 2 alerts

18:34:04.846 GET 200 subdocument 58.2 KB 166 ms —

18:34:04.888 GET 200 script 83.4 KB 188 ms 2 alerts

18:34:04.890 GET 200 xhr 40 B 304 ms —

18:34:04.894 GET 200 script 83.4 KB 181 ms 2 alerts

18:34:04.896 GET 200 xhr 40 B 296 ms —

18:34:05.160 GET 200 img 1.3 KB 18 ms 1 alerts

18:34:05.165 GET 200 img 1.3 KB 16 ms 1 alerts

18:34:05.167 GET 200 stylesheet 55.8 KB 71 ms —

18:34:05.168 GET 200 stylesheet 12.0 KB 25 ms —

18:34:05.169 GET 200 script 85.5 KB 48 ms —

18:34:05.171 GET 200 script 3.7 KB 151 ms —

18:34:05.172 GET 200 script 1.7 KB 236 ms —

18:34:05.173 GET 200 script 1.3 KB 213 ms —

18:34:05.174 GET 200 script 1.5 KB 36 ms —

18:34:05.175 GET 200 script 2.2 KB 34 ms —

18:34:05.177 GET 200 script 1.0 KB 34 ms —

18:34:05.185 GET 200 script 16 B 232 ms —

18:34:05.186 GET 200 script 800 B 33 ms —

18:34:05.188 GET 200 script 17.3 KB 237 ms —

18:34:05.331 GET 200 fetch 1.0 KB 415 ms 1 alerts

18:34:05.444 GET 200 subdocument 6.8 KB 58 ms —

18:34:05.453 GET 200 img 1.8 KB 14 ms —

18:34:05.455 GET 200 fetch 1.9 KB 193 ms 1 alerts

18:34:05.456 POST 204 beacon 0 B 279 ms 3 alerts

18:34:05.463 GET 200 script 5 B 770 ms 1 alerts

18:34:05.472 GET 200 xhr 5.4 KB 201 ms 1 alerts

18:34:05.950 GET 200 script 45.5 KB 19 ms 2 alerts

18:34:05.954 GET 204 img 0 B 159 ms 1 alerts

18:34:05.956 GET 200 fetch 999 B 201 ms 1 alerts

Transaction #74

Request / response

URL

GET HTTPS

https://adexchangeclear.com/script/suurl5.php?r=9641670&cbur=0.3202358157417905&cbiframe=1&cbWidth=854&cbHeight=482&cbtitle=&cbpage=https%3A%2F%2Fdragonhill.tv%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&ts=1773945245761&srs=0c8871ede53e2a45e8d8431548cc0ea9&atv=79.0&btp=0.01&pblcz=9098850

IP / ASN

172.67.223.87

AS13335 · CLOUDFLARENET

Requested by: https://vidsrc.mov/embed/tv/111110/2/6

Resource information

File type: JSON text data
MIME type: application/json; charset=utf-8
First seen (UTC): 19 Mar 2026 · 18:34:33.936 UTC
Last seen (UTC): 19 Mar 2026 · 18:34:33.936 UTC
Times seen: 1

Size: 999 B (999 bytes)
MD5: 607c41f73868542edc53f64fdf83487c
SHA1: 1261e531e8b0fbb9f1af993184b511f3abd6deb9
SHA256: 104b2a6b2c5d3de3a1fa79b960cfd6d9b706d3652f9d0c532e2c6d6d9ab695c1

Certificate information

Issuer: Google Trust Services · WE1
Subject: adexchangeclear.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: AA:3C:D9:16:46:E3:FE:84:C5:73:1D:FB:D5:DA:00:22:92:46:A9:73
Valid from: Wed, 04 Feb 2026 02:59:45 GMT
Valid until: Tue, 05 May 2026 03:56:04 GMT

Technology fingerprints

Google Cloud (IaaS)
Cloudflare (CDN)
Google Cloud CDN (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/suurl5.php?r=9641670&cbur=0.3202358157417905&cbiframe=1&cbWidth=854&cbHeight=482&cbtitle=&cbpage=https%3A%2F%2Fdragonhill.tv%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&ts=1773945245761&srs=0c8871ede53e2a45e8d8431548cc0ea9&atv=79.0&btp=0.01&pblcz=9098850 HTTP/1.1
Host: adexchangeclear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vidsrc.mov/
Origin: https://vidsrc.mov
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 OK
server: cloudflare
date: Thu, 19 Mar 2026 18:34:06 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
via: 1.1 google
priority: u=4,i=?0
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=HToHNBOgoeX7xW927P7oWiQCKdcRfMjWQXcPEt%2BXqtEd4Tn3DC5ZfSJFOjt39ubTqLpmvr15zor7XK7YheVR823n1y4wepfEzipv6V%2FMZTtJkT8%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
cf-ray: 9dee91bb1cd390fd-ARN
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

18:34:05.959 GET 200 stylesheet 55.8 KB 13 ms —

18:34:05.960 GET 200 stylesheet 7.8 KB 16 ms —

18:34:05.962 GET 200 script 84.6 KB 332 ms —

18:34:05.963 GET 200 script 1.3 KB 11 ms —

18:34:05.964 GET 404 script 281 B 14 ms —

18:34:05.967 GET 200 script 798 B 16 ms —

18:34:05.969 GET 200 img 0 B 102 ms 1 alerts

http://dragonhill.tv/watch/tv/111110/2/6

Domain graph

Hostnames

Connections

Network requests

Transaction #74

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://dragonhill.tv/watch/tv/111110/2/6

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #74

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://dragonhill.tv/watch/tv/111110/2/6

Domain graph

Network requests