WEBSITE ANALYSIS REPORT

http://mixdrop.vip/emb/pj9eep7whgg63po

19 Feb 2026 · 13:53:44.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.adsco.re4 captured requests
6.adsco.re4 captured requests
acscdn.com2 captured requests
adexchangeclear.com2 captured requests
adsco.re2 captured requests
asacdn.com1 captured requests
c.adsco.re2 captured requests
cdn.show-sb.com1 captured requests
code.jquery.com3 captured requests
creative-sb1.com6 captured requests
displayvertising.com1 captured requests
dogcollarfavourbluff.com6 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com4 captured requests
ft.lastingillipe.com1 captured requests
inklinkor.com1 captured requests
m1xdrop.bz7 captured requests
m1xdrop.net1 captured requests
mdstats.info2 captured requests
mixdrop.vip13 captured requests
my.rtmark.net1 captured requests
oyo4d.com1 captured requests
preferencenail.com2 captured requests
protrafficinspector.com4 captured requests
qgxasee1t807.l4.adsco.re1 captured requests
qgxasee1t807.n4.adsco.re1 captured requests
qgxasee1t807.s4.adsco.re1 captured requests
realizationnewestfangs.com5 captured requests
s-delivery50.mxcontent.net1 captured requests
usrpubtrk.com2 captured requests
vpnozsv5lj2v.l4.adsco.re1 captured requests
vpnozsv5lj2v.n4.adsco.re1 captured requests
vpnozsv5lj2v.s4.adsco.re1 captured requests
wayfarerorthodox.com5 captured requests
weirdopt.com1 captured requests
www.displayvertising.com1 captured requests
www.google.com3 captured requests
www.gstatic.com6 captured requests
www.xadsmart.com1 captured requests
xadsmart.com1 captured requests

Connections

m1xdrop.bz → 4.adsco.reCalls2 captured connections
m1xdrop.bz → 6.adsco.reCalls2 captured connections
m1xdrop.bz → adsco.reCalls1 captured connections
m1xdrop.bz → c.adsco.reLoads from1 captured connections
m1xdrop.bz → code.jquery.comLoads from1 captured connections
m1xdrop.bz → ft.lastingillipe.comLoads from1 captured connections
m1xdrop.bz → mdstats.infoCalls1 captured connections
m1xdrop.bz → mdstats.infoLoads from1 captured connections
m1xdrop.bz → usrpubtrk.comCalls1 captured connections
m1xdrop.bz → vpnozsv5lj2v.l4.adsco.reCalls1 captured connections
m1xdrop.bz → vpnozsv5lj2v.n4.adsco.reCalls1 captured connections
m1xdrop.bz → vpnozsv5lj2v.s4.adsco.reCalls1 captured connections
m1xdrop.bz → www.google.comEmbeds1 captured connections
m1xdrop.bz → www.google.comLoads from1 captured connections
m1xdrop.bz → www.gstatic.comLoads from2 captured connections
m1xdrop.bz → www.xadsmart.comLoads from1 captured connections
m1xdrop.bz → xadsmart.comLoads from1 captured connections
m1xdrop.net → m1xdrop.bzRedirects to1 captured connections
mixdrop.vip → 4.adsco.reCalls2 captured connections
mixdrop.vip → 6.adsco.reCalls2 captured connections
mixdrop.vip → acscdn.comLoads from2 captured connections
mixdrop.vip → adexchangeclear.comCalls2 captured connections
mixdrop.vip → adsco.reCalls1 captured connections
mixdrop.vip → asacdn.comLoads from1 captured connections
mixdrop.vip → c.adsco.reLoads from1 captured connections
mixdrop.vip → cdn.show-sb.comCalls1 captured connections
mixdrop.vip → code.jquery.comLoads from2 captured connections
mixdrop.vip → creative-sb1.comCalls3 captured connections
mixdrop.vip → creative-sb1.comLoads from3 captured connections
mixdrop.vip → displayvertising.comLoads from1 captured connections
mixdrop.vip → dogcollarfavourbluff.comCalls1 captured connections
mixdrop.vip → dogcollarfavourbluff.comLoads from5 captured connections
mixdrop.vip → flushpersist.comLoads from2 captured connections
mixdrop.vip → fonts.googleapis.comLoads from2 captured connections
mixdrop.vip → fonts.gstatic.comLoads from2 captured connections
mixdrop.vip → inklinkor.comLoads from1 captured connections
mixdrop.vip → m1xdrop.bzEmbeds1 captured connections
mixdrop.vip → m1xdrop.netEmbeds1 captured connections
mixdrop.vip → my.rtmark.netCalls1 captured connections
mixdrop.vip → oyo4d.comCalls1 captured connections
mixdrop.vip → preferencenail.comLoads from2 captured connections
mixdrop.vip → protrafficinspector.comCalls4 captured connections
mixdrop.vip → qgxasee1t807.l4.adsco.reCalls1 captured connections
mixdrop.vip → qgxasee1t807.n4.adsco.reCalls1 captured connections
mixdrop.vip → qgxasee1t807.s4.adsco.reCalls1 captured connections
mixdrop.vip → realizationnewestfangs.comLoads from5 captured connections
mixdrop.vip → usrpubtrk.comCalls1 captured connections
mixdrop.vip → wayfarerorthodox.comCalls4 captured connections
mixdrop.vip → wayfarerorthodox.comLoads from1 captured connections
mixdrop.vip → weirdopt.comLoads from1 captured connections
mixdrop.vip → www.displayvertising.comLoads from1 captured connections
www.google.com → fonts.gstatic.comLoads from2 captured connections
www.google.com → www.gstatic.comLoads from4 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

13:53:19.222 GET 200 document 5.7 KB 160 ms 1 alerts

13:53:19.529 GET 200 script 164.1 KB 95 ms 2 alerts

13:53:19.531 GET 200 script 105.2 KB 926 ms 2 alerts

13:53:19.532 GET 200 script 90.1 KB 931 ms 2 alerts

13:53:19.534 GET 200 stylesheet 3.0 KB 35 ms 1 alerts

13:53:19.537 GET 200 stylesheet 26.4 KB 39 ms 1 alerts

13:53:19.539 GET 200 script 58.1 KB 44 ms 1 alerts

13:53:19.540 GET 200 stylesheet 2.5 KB 25 ms 1 alerts

13:53:19.542 GET 200 script 84.9 KB 141 ms —

13:53:19.543 GET 200 script 166.7 KB 208 ms —

13:53:19.544 GET 200 img 3.7 KB 22 ms 1 alerts

13:53:19.547 GET 404 img 196 B 41 ms 1 alerts

13:53:19.548 GET 200 img 3.1 KB 30 ms 1 alerts

13:53:19.550 GET 200 script 87.6 KB 146 ms —

13:53:19.552 GET 200 script 41.0 KB 80 ms 1 alerts

13:53:19.591 GET 200 stylesheet 8.8 KB 454 ms —

13:53:19.757 GET 200 script 55.4 KB 19 ms 2 alerts

13:53:19.758 GET 200 script 111.0 KB 161 ms 1 alerts

13:53:20.082 GET 200 xhr 65 B 164 ms —

13:53:20.083 GET 200 fetch 998 B 372 ms 1 alerts

13:53:20.133 GET 200 img 0 B 727 ms 3 alerts

13:53:20.136 GET 200 script 83.4 KB 162 ms 3 alerts

13:53:20.139 GET 200 xhr 40 B 270 ms —

13:53:20.151 GET 200 script 83.4 KB 162 ms 3 alerts

13:53:20.153 GET 200 xhr 40 B 611 ms —

13:53:20.154 GET 200 script 5.0 KB 703 ms 2 alerts

13:53:20.212 GET 200 fetch 1.1 KB 200 ms 1 alerts

13:53:20.272 GET 302 subdocument 617.2 KB 111 ms —

13:53:20.275 GET 200 font 20.1 KB 293 ms —

13:53:20.278 GET 404 img 196 B 15 ms 1 alerts

13:53:20.321 GET 200 script 0 B 196 ms 3 alerts

Transaction #48

Request / response

URL

GET HTTPS

https://weirdopt.com/ad/advertisers.js

IP / ASN

185.196.197.71

AS39572 · DataWeb Global Group B.V.

Requested by: https://mixdrop.vip/emb/pj9eep7whgg63po

Resource information

File type: Not recorded
MIME type: application/javascript
First seen (UTC): Not recorded
Last seen (UTC): 22 Oct 2026 · 22:44:05.172 UTC
Times seen: 19292864

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R12
Subject: weirdopt.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: F3:CE:FF:C9:F8:70:23:18:40:13:70:96:1A:D1:FD:34:D3:CD:66:FC
Valid from: Mon, 29 Dec 2025 00:51:40 GMT
Valid until: Sun, 29 Mar 2026 00:51:39 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ad/advertisers.js HTTP/1.1
Host: weirdopt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mixdrop.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 19 Feb 2026 13:53:20 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 740e77fc5a2c2e186aae92450fd127fe
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

13:53:20.322 GET 302 script 21.1 KB 10 ms 1 alerts

13:53:20.336 POST 204 beacon 0 B 365 ms 3 alerts

13:53:20.337 GET 200 script 75.0 KB 172 ms —

13:53:20.342 GET 200 subdocument 617.2 KB 295 ms —

13:53:20.349 GET 200 script 21.1 KB 41 ms 1 alerts

13:53:20.674 GET 200 img 588 B 18 ms 1 alerts

13:53:20.677 POST 200 xhr 0 B 20 ms 1 alerts

13:53:20.745 GET 200 fetch 45 B 254 ms —

13:53:20.746 GET 200 fetch 45 B 269 ms —

13:53:20.786 GET 200 fetch 45 B 174 ms —

13:53:20.792 GET 200 fetch 45 B 191 ms —

13:53:20.794 GET 200 xhr 0 B 274 ms —

13:53:20.797 GET 200 xhr 0 B 842 ms —

13:53:20.799 GET 200 xhr 0 B 1073 ms —

13:53:20.801 GET 200 stylesheet 44.7 KB 39 ms —

13:53:20.806 GET 200 stylesheet 17.3 KB 13 ms —

13:53:20.808 GET 200 script 1.0 KB 304 ms —

13:53:20.809 GET 200 script 87.4 KB 19 ms —

13:53:20.810 GET 200 script 619.1 KB 59 ms —

http://mixdrop.vip/emb/pj9eep7whgg63po

Domain graph

Hostnames

Connections

Network requests

Transaction #48

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://mixdrop.vip/emb/pj9eep7whgg63po

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #48

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://mixdrop.vip/emb/pj9eep7whgg63po

Domain graph

Network requests