WEBSITE ANALYSIS REPORT

http://seriesfree.theproxy.vip/

09 Nov 2025 · 17:32:36.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

123proxy.me3 captured requests
bvtpk.com1 captured requests
cdn.show-sb.com3 captured requests
cdn.storageimagedisplay.com2 captured requests
cordbraghare.com6 captured requests
creative-sb1.com14 captured requests
dir-proxy.net1 captured requests
dir-proxy.org2 captured requests
dirp.me2 captured requests
dirproxy.biz4 captured requests
flushpersist.com3 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com7 captured requests
heartilyscales.com10 captured requests
i.ibb.co1 captured requests
kettledroopingcontinuation.com4 captured requests
matomo.hellohi.me1 captured requests
msdoj.com2 captured requests
my.rtmark.net1 captured requests
origunix.com1 captured requests
p2yn.com1 captured requests
preferencenail.com4 captured requests
professionaltrafficmonitor.com8 captured requests
seriesfree.theproxy.vip32 captured requests
sourshaped.com9 captured requests
torchfriendlypay.com1 captured requests
vmuid.com2 captured requests
weirdopt.com1 captured requests

Connections

origunix.com → msdoj.comRedirects to1 captured connections
seriesfree.theproxy.vip → 123proxy.meLoads from3 captured connections
seriesfree.theproxy.vip → 123proxy.meRedirects to3 captured connections
seriesfree.theproxy.vip → bvtpk.comLoads from1 captured connections
seriesfree.theproxy.vip → cdn.show-sb.comCalls3 captured connections
seriesfree.theproxy.vip → cdn.storageimagedisplay.comLoads from2 captured connections
seriesfree.theproxy.vip → cordbraghare.comCalls1 captured connections
seriesfree.theproxy.vip → cordbraghare.comLoads from5 captured connections
seriesfree.theproxy.vip → creative-sb1.comCalls9 captured connections
seriesfree.theproxy.vip → creative-sb1.comLoads from5 captured connections
seriesfree.theproxy.vip → dir-proxy.netLoads from1 captured connections
seriesfree.theproxy.vip → dir-proxy.netRedirects to1 captured connections
seriesfree.theproxy.vip → dir-proxy.orgLoads from2 captured connections
seriesfree.theproxy.vip → dir-proxy.orgRedirects to2 captured connections
seriesfree.theproxy.vip → dirp.meLoads from2 captured connections
seriesfree.theproxy.vip → dirp.meRedirects to2 captured connections
seriesfree.theproxy.vip → dirproxy.bizLoads from4 captured connections
seriesfree.theproxy.vip → dirproxy.bizRedirects to4 captured connections
seriesfree.theproxy.vip → flushpersist.comLoads from3 captured connections
seriesfree.theproxy.vip → fonts.googleapis.comLoads from2 captured connections
seriesfree.theproxy.vip → fonts.gstatic.comLoads from7 captured connections
seriesfree.theproxy.vip → heartilyscales.comCalls2 captured connections
seriesfree.theproxy.vip → heartilyscales.comLoads from8 captured connections
seriesfree.theproxy.vip → i.ibb.coLoads from1 captured connections
seriesfree.theproxy.vip → kettledroopingcontinuation.comCalls2 captured connections
seriesfree.theproxy.vip → kettledroopingcontinuation.comLoads from2 captured connections
seriesfree.theproxy.vip → matomo.hellohi.meLoads from1 captured connections
seriesfree.theproxy.vip → msdoj.comCalls1 captured connections
seriesfree.theproxy.vip → msdoj.comLoads from1 captured connections
seriesfree.theproxy.vip → my.rtmark.netCalls1 captured connections
seriesfree.theproxy.vip → origunix.comLoads from1 captured connections
seriesfree.theproxy.vip → p2yn.comCalls1 captured connections
seriesfree.theproxy.vip → preferencenail.comLoads from4 captured connections
seriesfree.theproxy.vip → professionaltrafficmonitor.comCalls8 captured connections
seriesfree.theproxy.vip → sourshaped.comLoads from9 captured connections
seriesfree.theproxy.vip → torchfriendlypay.comLoads from1 captured connections
seriesfree.theproxy.vip → vmuid.comCalls1 captured connections
seriesfree.theproxy.vip → vmuid.comLoads from1 captured connections
seriesfree.theproxy.vip → weirdopt.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:32:13.057 GET 200 document 164.6 KB 325 ms 2 alerts

17:32:13.571 GET 200 stylesheet 51.3 KB 260 ms 2 alerts

17:32:13.576 GET 200 stylesheet 21.9 KB 214 ms 2 alerts

17:32:13.581 GET 200 stylesheet 5.6 KB 395 ms —

17:32:13.584 GET 200 img 5.4 KB 656 ms —

17:32:13.598 GET 302 img 0 B 161 ms 2 alerts

17:32:13.624 GET 302 img 0 B 157 ms 2 alerts

17:32:13.637 GET 302 img 0 B 161 ms 2 alerts

17:32:13.641 GET 302 img 0 B 166 ms 2 alerts

17:32:13.658 GET 302 img 0 B 161 ms 2 alerts

17:32:13.659 GET 302 img 0 B 159 ms 2 alerts

17:32:13.660 GET 302 img 0 B 170 ms 2 alerts

17:32:13.661 GET 302 img 0 B 157 ms 2 alerts

17:32:13.665 GET 302 img 0 B 163 ms 2 alerts

17:32:13.667 GET 302 img 0 B 160 ms 2 alerts

17:32:13.668 GET 503 img 1.1 KB 137 ms 2 alerts

17:32:13.669 GET 302 img 0 B 167 ms 2 alerts

17:32:13.670 GET 302 img 0 B 161 ms 2 alerts

17:32:13.675 GET 503 img 1.1 KB 133 ms 2 alerts

17:32:13.676 GET 503 img 1.1 KB 130 ms 2 alerts

17:32:13.677 GET 503 img 1.1 KB 135 ms 2 alerts

17:32:13.678 GET 503 img 1.1 KB 128 ms 2 alerts

17:32:13.679 GET 503 img 1.1 KB 128 ms 2 alerts

17:32:13.682 GET 503 img 1.1 KB 135 ms 2 alerts

17:32:13.683 GET 503 img 1.1 KB 129 ms 2 alerts

17:32:13.685 GET 503 img 1.1 KB 131 ms 2 alerts

17:32:13.687 GET 503 script 206 B 131 ms 2 alerts

17:32:13.688 GET 200 script 83.0 KB 855 ms 3 alerts

17:32:13.689 GET 200 script 83.0 KB 834 ms 3 alerts

17:32:13.690 GET 200 script 104.2 KB 854 ms 3 alerts

17:32:13.691 GET 200 script 83.0 KB 850 ms 3 alerts

17:32:13.692 GET 200 script 9.9 KB 247 ms 1 alerts

Transaction #23

Request / response

URL

GET HTTPS

https://vmuid.com/script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8

IP / ASN

178.162.215.162

AS28753 · Leaseweb Deutschland GmbH

Requested by: https://seriesfree.theproxy.vip/

Resource information

File type: JavaScript source, ASCII text, with very long lines (10178), with no line terminators
MIME type: text/javascript
First seen (UTC): 26 Jan 2024 · 05:18:07.000 UTC
Last seen (UTC): 29 Dec 2025 · 12:17:25.567 UTC
Times seen: 3656

Size: 9.9 KB (10178 bytes)
MD5: dedd352338543b137f608adc8d0d4aa8
SHA1: 100edb4e8fef9b6da043d51135077e68d2a61b22
SHA256: b338a91ba1d2ab7c3a7a0dd659426f5ffa4cd699be38e2bed5075c4d3e773a48

Certificate information

Issuer: Let's Encrypt · R12
Subject: vmuid.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
SHA1 fingerprint: 84:BD:C5:EF:9D:1D:34:8C:A0:22:2D:D2:FB:A2:D3:F5:74:5F:7A:90
Valid from: Tue, 16 Sep 2025 01:59:37 GMT
Valid until: Mon, 15 Dec 2025 01:59:36 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1
Host: vmuid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://seriesfree.theproxy.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 09 Nov 2025 17:32:13 GMT
Content-Type: text/javascript
Content-Length: 10178
Connection: keep-alive
Cache-Control: no-store, max-age=0
Accept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version
X-Cache-Status: MISS

17:32:13.693 GET 302 script 62.7 KB 230 ms 1 alerts

17:32:13.976 GET 403 img 0 B 104 ms 2 alerts

17:32:14.031 GET 403 img 0 B 1068 ms 1 alerts

17:32:14.073 GET 403 img 0 B 20 ms 2 alerts

17:32:14.102 GET 403 img 0 B 276 ms 1 alerts

17:32:14.261 GET 200 font 75.4 KB 197 ms 2 alerts

17:32:14.306 GET 200 font 20.1 KB 1099 ms —

17:32:14.311 GET 404 script 0 B 394 ms —

17:32:14.312 GET 200 script 9.0 KB 81 ms 2 alerts

17:32:14.352 GET 403 img 0 B 1346 ms 1 alerts

17:32:14.355 GET 403 img 0 B 476 ms 1 alerts

17:32:14.361 GET 403 img 0 B 28 ms 2 alerts

17:32:14.367 GET 403 img 0 B 424 ms 1 alerts

17:32:14.368 GET No response img 0 B 0 ms 1 alerts

17:32:14.370 GET 403 img 0 B 34 ms 1 alerts

17:32:14.379 GET 403 img 0 B 24 ms 2 alerts

17:32:14.380 GET 403 img 0 B 408 ms 1 alerts

17:32:14.396 GET 200 script 62.7 KB 561 ms —

http://seriesfree.theproxy.vip/

Domain graph

Hostnames

Connections

Network requests

Transaction #23

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://seriesfree.theproxy.vip/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #23

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://seriesfree.theproxy.vip/

Domain graph

Network requests