WEBSITE ANALYSIS REPORT

http://seriesfree.theproxy.vip/

09 Nov 2025 · 17:32:36.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

123proxy.me3 captured requests
bvtpk.com1 captured requests
cdn.show-sb.com3 captured requests
cdn.storageimagedisplay.com2 captured requests
cordbraghare.com6 captured requests
creative-sb1.com14 captured requests
dir-proxy.net1 captured requests
dir-proxy.org2 captured requests
dirp.me2 captured requests
dirproxy.biz4 captured requests
flushpersist.com3 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com7 captured requests
heartilyscales.com10 captured requests
i.ibb.co1 captured requests
kettledroopingcontinuation.com4 captured requests
matomo.hellohi.me1 captured requests
msdoj.com2 captured requests
my.rtmark.net1 captured requests
origunix.com1 captured requests
p2yn.com1 captured requests
preferencenail.com4 captured requests
professionaltrafficmonitor.com8 captured requests
seriesfree.theproxy.vip32 captured requests
sourshaped.com9 captured requests
torchfriendlypay.com1 captured requests
vmuid.com2 captured requests
weirdopt.com1 captured requests

Connections

origunix.com → msdoj.comRedirects to1 captured connections
seriesfree.theproxy.vip → 123proxy.meLoads from3 captured connections
seriesfree.theproxy.vip → 123proxy.meRedirects to3 captured connections
seriesfree.theproxy.vip → bvtpk.comLoads from1 captured connections
seriesfree.theproxy.vip → cdn.show-sb.comCalls3 captured connections
seriesfree.theproxy.vip → cdn.storageimagedisplay.comLoads from2 captured connections
seriesfree.theproxy.vip → cordbraghare.comCalls1 captured connections
seriesfree.theproxy.vip → cordbraghare.comLoads from5 captured connections
seriesfree.theproxy.vip → creative-sb1.comCalls9 captured connections
seriesfree.theproxy.vip → creative-sb1.comLoads from5 captured connections
seriesfree.theproxy.vip → dir-proxy.netLoads from1 captured connections
seriesfree.theproxy.vip → dir-proxy.netRedirects to1 captured connections
seriesfree.theproxy.vip → dir-proxy.orgLoads from2 captured connections
seriesfree.theproxy.vip → dir-proxy.orgRedirects to2 captured connections
seriesfree.theproxy.vip → dirp.meLoads from2 captured connections
seriesfree.theproxy.vip → dirp.meRedirects to2 captured connections
seriesfree.theproxy.vip → dirproxy.bizLoads from4 captured connections
seriesfree.theproxy.vip → dirproxy.bizRedirects to4 captured connections
seriesfree.theproxy.vip → flushpersist.comLoads from3 captured connections
seriesfree.theproxy.vip → fonts.googleapis.comLoads from2 captured connections
seriesfree.theproxy.vip → fonts.gstatic.comLoads from7 captured connections
seriesfree.theproxy.vip → heartilyscales.comCalls2 captured connections
seriesfree.theproxy.vip → heartilyscales.comLoads from8 captured connections
seriesfree.theproxy.vip → i.ibb.coLoads from1 captured connections
seriesfree.theproxy.vip → kettledroopingcontinuation.comCalls2 captured connections
seriesfree.theproxy.vip → kettledroopingcontinuation.comLoads from2 captured connections
seriesfree.theproxy.vip → matomo.hellohi.meLoads from1 captured connections
seriesfree.theproxy.vip → msdoj.comCalls1 captured connections
seriesfree.theproxy.vip → msdoj.comLoads from1 captured connections
seriesfree.theproxy.vip → my.rtmark.netCalls1 captured connections
seriesfree.theproxy.vip → origunix.comLoads from1 captured connections
seriesfree.theproxy.vip → p2yn.comCalls1 captured connections
seriesfree.theproxy.vip → preferencenail.comLoads from4 captured connections
seriesfree.theproxy.vip → professionaltrafficmonitor.comCalls8 captured connections
seriesfree.theproxy.vip → sourshaped.comLoads from9 captured connections
seriesfree.theproxy.vip → torchfriendlypay.comLoads from1 captured connections
seriesfree.theproxy.vip → vmuid.comCalls1 captured connections
seriesfree.theproxy.vip → vmuid.comLoads from1 captured connections
seriesfree.theproxy.vip → weirdopt.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:32:13.057 GET 200 document 164.6 KB 325 ms 2 alerts

17:32:13.571 GET 200 stylesheet 51.3 KB 260 ms 2 alerts

17:32:13.576 GET 200 stylesheet 21.9 KB 214 ms 2 alerts

17:32:13.581 GET 200 stylesheet 5.6 KB 395 ms —

17:32:13.584 GET 200 img 5.4 KB 656 ms —

17:32:13.598 GET 302 img 0 B 161 ms 2 alerts

17:32:13.624 GET 302 img 0 B 157 ms 2 alerts

17:32:13.637 GET 302 img 0 B 161 ms 2 alerts

17:32:13.641 GET 302 img 0 B 166 ms 2 alerts

17:32:13.658 GET 302 img 0 B 161 ms 2 alerts

17:32:13.659 GET 302 img 0 B 159 ms 2 alerts

17:32:13.660 GET 302 img 0 B 170 ms 2 alerts

17:32:13.661 GET 302 img 0 B 157 ms 2 alerts

17:32:13.665 GET 302 img 0 B 163 ms 2 alerts

17:32:13.667 GET 302 img 0 B 160 ms 2 alerts

17:32:13.668 GET 503 img 1.1 KB 137 ms 2 alerts

17:32:13.669 GET 302 img 0 B 167 ms 2 alerts

17:32:13.670 GET 302 img 0 B 161 ms 2 alerts

17:32:13.675 GET 503 img 1.1 KB 133 ms 2 alerts

17:32:13.676 GET 503 img 1.1 KB 130 ms 2 alerts

17:32:13.677 GET 503 img 1.1 KB 135 ms 2 alerts

17:32:13.678 GET 503 img 1.1 KB 128 ms 2 alerts

17:32:13.679 GET 503 img 1.1 KB 128 ms 2 alerts

17:32:13.682 GET 503 img 1.1 KB 135 ms 2 alerts

17:32:13.683 GET 503 img 1.1 KB 129 ms 2 alerts

17:32:13.685 GET 503 img 1.1 KB 131 ms 2 alerts

17:32:13.687 GET 503 script 206 B 131 ms 2 alerts

17:32:13.688 GET 200 script 83.0 KB 855 ms 3 alerts

17:32:13.689 GET 200 script 83.0 KB 834 ms 3 alerts

Transaction #39

Request / response

URL

GET HTTPS

https://heartilyscales.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js

IP / ASN

172.240.108.76

AS7979 · SERVERS-COM

Requested by: https://seriesfree.theproxy.vip/

Resource information

File type: JavaScript source, ASCII text, with very long lines (65536), with no line terminators
MIME type: application/javascript
First seen (UTC): 07 Nov 2025 · 13:50:09.138 UTC
Last seen (UTC): 18 Nov 2025 · 02:35:34.327 UTC
Times seen: 9

Size: 83.0 KB (84999 bytes)
MD5: e2389cc7288d1e6db5ac73fa23dddccd
SHA1: 677137e4e65d3af56bdcc86011ca4b6fe44d78e2
SHA256: 4578f1dad439fbeca1e77988c03cf2409d0a2ba5fb616c4494cca937760cb1b2

Certificate information

Issuer: Let's Encrypt · R13
Subject: heartilyscales.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: AC:0E:0A:1C:AA:E5:DB:3D:5E:08:F6:26:F1:1D:98:65:42:D8:4F:97
Valid from: Fri, 03 Oct 2025 21:51:40 GMT
Valid until: Thu, 01 Jan 2026 21:51:39 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js HTTP/1.1
Host: heartilyscales.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://seriesfree.theproxy.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 09 Nov 2025 17:32:13 GMT
Content-Type: application/javascript
Content-Length: 32875
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 3
Host: heartilyscales.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: f41347a5ee91bb3753c962341458c7f5
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

17:32:13.690 GET 200 script 104.2 KB 854 ms 3 alerts

17:32:13.691 GET 200 script 83.0 KB 850 ms 3 alerts

17:32:13.692 GET 200 script 9.9 KB 247 ms 1 alerts

17:32:13.693 GET 302 script 62.7 KB 230 ms 1 alerts

17:32:13.976 GET 403 img 0 B 104 ms 2 alerts

17:32:14.031 GET 403 img 0 B 1068 ms 1 alerts

17:32:14.073 GET 403 img 0 B 20 ms 2 alerts

17:32:14.102 GET 403 img 0 B 276 ms 1 alerts

17:32:14.261 GET 200 font 75.4 KB 197 ms 2 alerts

17:32:14.306 GET 200 font 20.1 KB 1099 ms —

17:32:14.311 GET 404 script 0 B 394 ms —

17:32:14.312 GET 200 script 9.0 KB 81 ms 2 alerts

17:32:14.352 GET 403 img 0 B 1346 ms 1 alerts

17:32:14.355 GET 403 img 0 B 476 ms 1 alerts

17:32:14.361 GET 403 img 0 B 28 ms 2 alerts

17:32:14.367 GET 403 img 0 B 424 ms 1 alerts

17:32:14.368 GET No response img 0 B 0 ms 1 alerts

17:32:14.370 GET 403 img 0 B 34 ms 1 alerts

17:32:14.379 GET 403 img 0 B 24 ms 2 alerts

17:32:14.380 GET 403 img 0 B 408 ms 1 alerts

17:32:14.396 GET 200 script 62.7 KB 561 ms —

http://seriesfree.theproxy.vip/

Domain graph

Hostnames

Connections

Network requests

Transaction #39

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://seriesfree.theproxy.vip/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #39

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://seriesfree.theproxy.vip/

Domain graph

Network requests