WEBSITE ANALYSIS REPORT

http://sportswin.click/play.php?nba/denver-nuggets-vs-san-antonio-spurs-stream-1

04 Apr 2026 · 19:25:04.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

acscdn.com5 captured requests
adexchangeclear.com8 captured requests
boanki.net2 captured requests
casthill.net1 captured requests
cdn.storageimagedisplay.com2 captured requests
crawlsingeshell.com2 captured requests
embedsports.me2 captured requests
pp.moneey.christmas1 captured requests
protrafficinspector.com2 captured requests
s-b2.peulleieo.net2 captured requests
s2.safebk.shop1 captured requests
sportswin.click3 captured requests
sts.casthill.net6 captured requests
usrpubtrk.com3 captured requests
wayfarerorthodox.com4 captured requests
wesmallproclaim.com2 captured requests
www.profitabledisplaycontent.com4 captured requests

Connections

casthill.net → adexchangeclear.comCalls1 captured connections
casthill.net → boanki.netCalls2 captured connections
casthill.net → pp.moneey.christmasCalls1 captured connections
casthill.net → s-b2.peulleieo.netCalls2 captured connections
casthill.net → sts.casthill.netLoads from5 captured connections
casthill.net → usrpubtrk.comCalls1 captured connections
embedsports.me → adexchangeclear.comCalls1 captured connections
embedsports.me → casthill.netEmbeds1 captured connections
embedsports.me → s2.safebk.shopLoads from1 captured connections
embedsports.me → sts.casthill.netLoads from1 captured connections
embedsports.me → usrpubtrk.comCalls1 captured connections
sportswin.click → acscdn.comLoads from5 captured connections
sportswin.click → adexchangeclear.comCalls5 captured connections
sportswin.click → adexchangeclear.comLoads from1 captured connections
sportswin.click → cdn.storageimagedisplay.comLoads from2 captured connections
sportswin.click → crawlsingeshell.comLoads from2 captured connections
sportswin.click → embedsports.meEmbeds1 captured connections
sportswin.click → protrafficinspector.comCalls2 captured connections
sportswin.click → usrpubtrk.comCalls1 captured connections
sportswin.click → wayfarerorthodox.comCalls2 captured connections
sportswin.click → wayfarerorthodox.comLoads from2 captured connections
sportswin.click → wesmallproclaim.comLoads from2 captured connections
sportswin.click → www.profitabledisplaycontent.comCalls2 captured connections
sportswin.click → www.profitabledisplaycontent.comLoads from2 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:24:37.795 GET 200 document 604.9 KB 400 ms —

19:24:38.373 GET 200 stylesheet 1.7 KB 10 ms —

19:24:38.375 GET 200 script 163.1 KB 132 ms 2 alerts

19:24:38.377 GET 200 script 49.3 KB 896 ms 2 alerts

19:24:38.380 GET 200 script 49.3 KB 872 ms 2 alerts

19:24:38.383 GET 404 script 0 B 293 ms 2 alerts

19:24:38.729 GET 200 script 163.1 KB 24 ms 2 alerts

19:24:38.801 GET 200 fetch 634 B 261 ms 1 alerts

19:24:38.958 GET 200 script 5.0 KB 767 ms 3 alerts

19:24:38.963 GET 200 xhr 40 B 254 ms —

19:24:38.973 GET 200 script 5.0 KB 778 ms 1 alerts

19:24:38.989 GET 200 xhr 40 B 211 ms —

19:24:38.999 GET 404 script 0 B 96 ms 2 alerts

19:24:39.142 GET 200 script 55.3 KB 8 ms 2 alerts

19:24:39.382 GET 404 img 146 B 122 ms —

19:24:39.495 GET 307 xhr 4.2 KB 96 ms 3 alerts

19:24:39.497 GET 307 xhr 4.3 KB 97 ms 1 alerts

19:24:39.503 GET 200 script 74.0 KB 11 ms 2 alerts

19:24:39.599 POST 204 beacon 0 B 261 ms 3 alerts

19:24:39.601 GET 204 fetch 0 B 164 ms 1 alerts

19:24:39.605 GET 200 script 41.3 KB 8 ms 2 alerts

19:24:39.607 GET 200 fetch 1.0 KB 214 ms 1 alerts

19:24:39.617 GET 200 xhr 4.2 KB 113 ms 3 alerts

19:24:39.620 GET 200 xhr 4.3 KB 124 ms 1 alerts

19:24:39.659 GET 200 fetch 2.1 KB 181 ms 1 alerts

19:24:39.851 GET 200 img 30.5 KB 267 ms —

19:24:39.852 GET 200 img 0 B 115 ms 3 alerts

19:24:39.854 GET 200 img 0 B 104 ms 1 alerts

19:24:39.854 GET 200 img 73.9 KB 249 ms —

19:24:39.871 GET 204 img 0 B 145 ms 1 alerts

19:24:40.176 GET 200 subdocument 624.2 KB 442 ms —

19:24:40.496 GET 200 script 1.0 KB 96 ms 1 alerts

19:24:40.674 GET 200 script 2.1 KB 64 ms —

19:24:40.763 GET 200 subdocument 620.4 KB 421 ms —

19:24:40.969 GET 200 fetch 890 B 203 ms 1 alerts

19:24:40.979 GET 200 img 68 B 186 ms —

19:24:41.019 POST 204 beacon 0 B 152 ms 3 alerts

19:24:41.039 GET 200 script 15.5 KB 12 ms 1 alerts

Transaction #24

Request / response

URL

GET HTTPS

https://sts.casthill.net/scripts/jwhls/jwplayer.hlsjs.24mar31.min.js

IP / ASN

104.21.51.82

AS13335 · CLOUDFLARENET

Requested by: https://casthill.net/sd0embed/NBA?pid=5&gacat=Denver+Nuggets+vs+San+Antonio+Spurs&gatxt=NBA&v=nba3&csrf=OTEuOTAuNDIuMTU0.MTc3NTMzMDY5MA.OWEzMzM1ZDJkNTg4NmM1OWViZTgxZjZiZjI4ZDNhNGFhOWRhMTVjZGIxYmRiOGRjY2EzNTg2YTYzMzI2MzQwNQ&csrf_ip=91.90.42.154

Resource information

File type: JavaScript source, ASCII text, with very long lines (15881), with no line terminators
MIME type: application/javascript
First seen (UTC): 14 Apr 2024 · 22:53:23.000 UTC
Last seen (UTC): 12 Sep 2026 · 16:15:58.355 UTC
Times seen: 102

Size: 15.5 KB (15881 bytes)
MD5: 0268574fc8685b9fd0942ae714211e62
SHA1: 937902fc96b55fad3af1b2ce84bdee908f410937
SHA256: 4233725bad5f88611cbbbe82dbb34421dc9a6e16215b06242e97f0444e6034fb

Certificate information

Issuer: Google Trust Services · WE1
Subject: casthill.net
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: C5:4A:C4:5E:82:22:9C:09:87:8D:1B:18:B1:B4:75:A9:BE:A0:0D:41
Valid from: Wed, 04 Feb 2026 16:59:02 GMT
Valid until: Tue, 05 May 2026 17:57:33 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /scripts/jwhls/jwplayer.hlsjs.24mar31.min.js HTTP/1.1
Host: sts.casthill.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://casthill.net/sd0embed/NBA?pid=5&gacat=Denver+Nuggets+vs+San+Antonio+Spurs&gatxt=NBA&v=nba3&csrf=OTEuOTAuNDIuMTU0.MTc3NTMzMDY5MA.OWEzMzM1ZDJkNTg4NmM1OWViZTgxZjZiZjI4ZDNhNGFhOWRhMTVjZGIxYmRiOGRjY2EzNTg2YTYzMzI2MzQwNQ&csrf_ip=91.90.42.154
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 OK
server: cloudflare
date: Sat, 04 Apr 2026 19:24:41 GMT
content-type: application/javascript
last-modified: Sun, 31 Mar 2024 15:57:20 GMT
speculation-rules: "/cdn-cgi/speculation"
priority: u=2,i=?0
vary: Accept-Encoding
etag: W/"660987e0-3e09"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, must-revalidate
content-encoding: br
age: 3200359
cf-cache-status: HIT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wWkqBWtdI%2FDXf0xkxIep%2BWb%2FeR93ROk%2BDCcnmdH9WWWkkQzRrcLegnJq5vNJW9qYT8Hmb4LWsuyVfEJeHASWcROByYKanyNCE7GkQB1TqvI0phSIL488PY4jGNZDwjYCZRix"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 9e72b1d47fb20b55-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

19:24:41.041 GET 200 script 152.4 KB 15 ms 1 alerts

19:24:41.043 GET 200 script 534.3 KB 18 ms 1 alerts

19:24:41.401 GET 200 fetch 68 B 198 ms —

19:24:41.403 OPTIONS 204 fetch 0 B 319 ms —

19:24:41.590 GET 200 fetch 874 B 200 ms 1 alerts

19:24:41.668 GET 200 fetch 122 B 398 ms —

19:24:41.672 POST 204 beacon 0 B 145 ms 3 alerts

19:24:41.804 GET 302 fetch 561 B 212 ms —

19:24:41.938 GET 200 fetch 561 B 26 ms —

19:24:42.051 GET 200 script 329.4 KB 9 ms 1 alerts

19:24:42.188 GET 200 img 18.5 KB 10 ms 1 alerts

19:24:51.775 GET 204 fetch 0 B 150 ms 1 alerts

http://sportswin.click/play.php?nba/denver-nuggets-vs-san-antonio-spurs-stream-1

Domain graph

Hostnames

Connections

Network requests

Transaction #24

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://sportswin.click/play.php?nba/denver-nuggets-vs-san-antonio-spurs-stream-1

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #24

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://sportswin.click/play.php?nba/denver-nuggets-vs-san-antonio-spurs-stream-1

Domain graph

Network requests