WEBSITE ANALYSIS REPORT

http://icefilms.theproxy.vip/

02 Mar 2026 · 13:06:05.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

cdn.show-creative1.com2 captured requests
cdn.show-sb.com1 captured requests
cdn.storageimagedisplay.com3 captured requests
cdnondemand.org2 captured requests
creative-sb1.com24 captured requests
exposuretigerphilip.com6 captured requests
flushpersist.com4 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com4 captured requests
gadslimz.com1 captured requests
heartilyscales.com10 captured requests
icefilms.theproxy.vip273 captured requests
kettledroopingcontinuation.com2 captured requests
matomo.hellohi.me1 captured requests
msdoj.com2 captured requests
onclickgenius.com1 captured requests
origunix.com1 captured requests
pl15226878.passeura.com1 captured requests
preferencenail.com5 captured requests
protrafficinspector.com5 captured requests
specialberth.com8 captured requests
vmuid.com2 captured requests
weirdopt.com1 captured requests

Connections

icefilms.theproxy.vip → cdn.show-creative1.comCalls2 captured connections
icefilms.theproxy.vip → cdn.show-sb.comCalls1 captured connections
icefilms.theproxy.vip → cdn.storageimagedisplay.comLoads from3 captured connections
icefilms.theproxy.vip → cdnondemand.orgLoads from2 captured connections
icefilms.theproxy.vip → creative-sb1.comCalls9 captured connections
icefilms.theproxy.vip → creative-sb1.comLoads from15 captured connections
icefilms.theproxy.vip → exposuretigerphilip.comCalls1 captured connections
icefilms.theproxy.vip → exposuretigerphilip.comLoads from5 captured connections
icefilms.theproxy.vip → flushpersist.comLoads from4 captured connections
icefilms.theproxy.vip → fonts.googleapis.comLoads from2 captured connections
icefilms.theproxy.vip → fonts.gstatic.comLoads from4 captured connections
icefilms.theproxy.vip → gadslimz.comLoads from1 captured connections
icefilms.theproxy.vip → heartilyscales.comCalls2 captured connections
icefilms.theproxy.vip → heartilyscales.comLoads from8 captured connections
icefilms.theproxy.vip → kettledroopingcontinuation.comCalls1 captured connections
icefilms.theproxy.vip → kettledroopingcontinuation.comLoads from1 captured connections
icefilms.theproxy.vip → matomo.hellohi.meLoads from1 captured connections
icefilms.theproxy.vip → msdoj.comCalls1 captured connections
icefilms.theproxy.vip → msdoj.comLoads from1 captured connections
icefilms.theproxy.vip → onclickgenius.comLoads from1 captured connections
icefilms.theproxy.vip → origunix.comLoads from1 captured connections
icefilms.theproxy.vip → pl15226878.passeura.comLoads from1 captured connections
icefilms.theproxy.vip → preferencenail.comLoads from5 captured connections
icefilms.theproxy.vip → protrafficinspector.comCalls5 captured connections
icefilms.theproxy.vip → specialberth.comCalls1 captured connections
icefilms.theproxy.vip → specialberth.comLoads from7 captured connections
icefilms.theproxy.vip → vmuid.comCalls1 captured connections
icefilms.theproxy.vip → vmuid.comLoads from1 captured connections
icefilms.theproxy.vip → weirdopt.comLoads from1 captured connections
origunix.com → msdoj.comRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

13:05:33.149 GET 200 document 128.2 KB 287 ms 2 alerts

13:05:33.773 GET 302 stylesheet 14.9 KB 64 ms 2 alerts

13:05:33.778 GET 200 img 8.2 KB 140 ms 2 alerts

13:05:33.785 GET 200 img 1.9 KB 132 ms 2 alerts

13:05:33.789 GET 200 img 8.1 KB 138 ms 2 alerts

13:05:33.793 GET 200 img 1.8 KB 135 ms 2 alerts

13:05:33.796 GET 200 img 7.9 KB 136 ms 2 alerts

13:05:33.799 GET 200 img 1.8 KB 139 ms 2 alerts

13:05:33.802 GET 200 img 8.3 KB 151 ms 2 alerts

13:05:33.805 GET 200 img 1.9 KB 136 ms 2 alerts

13:05:33.809 GET 200 img 14.0 KB 168 ms 2 alerts

13:05:33.813 GET 200 img 2.7 KB 135 ms 2 alerts

13:05:33.816 GET 200 img 10.7 KB 145 ms 2 alerts

13:05:33.818 GET 200 img 7.7 KB 144 ms 2 alerts

13:05:33.822 GET 200 img 7.8 KB 143 ms 2 alerts

13:05:33.825 GET 200 img 9.9 KB 142 ms 2 alerts

13:05:33.831 GET 200 img 13.6 KB 144 ms 2 alerts

13:05:33.836 GET 200 img 11.8 KB 144 ms 2 alerts

13:05:33.843 GET 200 img 6.2 KB 137 ms 2 alerts

13:05:33.847 GET 200 img 4.4 KB 140 ms 2 alerts

13:05:33.854 GET 200 img 7.0 KB 161 ms 2 alerts

13:05:33.858 GET 200 img 7.3 KB 72 ms 2 alerts

13:05:33.864 GET 200 img 1.7 KB 134 ms 2 alerts

13:05:33.874 GET 200 img 7.5 KB 152 ms 2 alerts

13:05:33.880 GET 200 img 2.0 KB 150 ms 2 alerts

13:05:33.882 GET 200 img 9.3 KB 152 ms 2 alerts

13:05:33.886 GET 200 img 2.1 KB 154 ms 2 alerts

13:05:33.893 GET 200 img 8.9 KB 175 ms 2 alerts

13:05:33.898 GET 200 img 2.1 KB 161 ms 2 alerts

13:05:33.901 GET 200 img 10.0 KB 147 ms 2 alerts

13:05:33.903 GET 200 img 2.2 KB 148 ms 2 alerts

13:05:33.904 GET 200 img 13.8 KB 173 ms 2 alerts

Transaction #298

Request / response

URL

GET HTTPS

https://icefilms.theproxy.vip/uploads/tvshows/162/NqX4B91tyI-180x260-quality(70).jpeg?token=e0d3c9b7771a477c76fb7c5984c89691

IP / ASN

104.21.64.31

AS13335 · CLOUDFLARENET

Requested by: https://icefilms.theproxy.vip/

Resource information

File type: JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 70", progressive, precision 8, 180x260, components 3
MIME type: image/jpeg
First seen (UTC): 14 Jul 2025 · 16:32:30.482 UTC
Last seen (UTC): 02 Mar 2026 · 13:06:24.055 UTC
Times seen: 10

Size: 13.8 KB (14115 bytes)
MD5: c285b00c0657f750e9b16a7306056b0a
SHA1: 5dcdaa03d5c6b37fc5b43357b77a2c28fbad7bc2
SHA256: 6fc81bf006d1b2b09a2815bad92fb7b791a43a9233f5db403a8249837a647c81

Certificate information

Issuer: Google Trust Services · WE1
Subject: theproxy.vip
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 3D:74:1E:F9:84:EC:3B:01:FD:5A:0E:DD:CD:6D:5D:68:3E:13:77:4F
Valid from: Sun, 11 Jan 2026 02:07:24 GMT
Valid until: Sat, 11 Apr 2026 03:06:01 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
DigiCert UltraDNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /uploads/tvshows/162/NqX4B91tyI-180x260-quality(70).jpeg?token=e0d3c9b7771a477c76fb7c5984c89691 HTTP/1.1
Host: icefilms.theproxy.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://icefilms.theproxy.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 OK
server: cloudflare
date: Mon, 02 Mar 2026 13:05:33 GMT
content-type: image/jpeg
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
priority: u=4,i=?0
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=t8Y9dE6YVmVhlzqzJF9Sgu82sWGxQev8fkMGgv4Cklt7DhuQvrvN6VFTfs4nGaEH4LEec4E%2BpV0NICschA3QvuY%2FevLwSb6gVaYAJ8t7ZjNLjGWi8g%3D%3D"}]}
cf-ray: 9d609d19ca0a527d-ARN
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

13:05:33.905 GET 200 img 2.6 KB 157 ms 2 alerts

13:05:33.906 GET 200 img 10.8 KB 152 ms 2 alerts

13:05:33.908 GET 200 img 2.4 KB 144 ms 2 alerts

13:05:33.912 GET 200 img 14.4 KB 171 ms 2 alerts

13:05:33.914 GET 200 img 2.7 KB 150 ms 2 alerts

13:05:33.918 GET 503 img 206 B 108 ms 2 alerts

13:05:33.920 GET 200 img 1.3 KB 147 ms 2 alerts

13:05:33.922 GET 200 img 11.4 KB 164 ms 2 alerts

13:05:33.924 GET 200 img 2.4 KB 145 ms 2 alerts

13:05:33.926 GET 503 img 206 B 108 ms 2 alerts

13:05:33.928 GET 503 img 206 B 103 ms 2 alerts

13:05:33.929 GET 200 img 10.9 KB 156 ms 2 alerts

13:05:33.931 GET 503 img 206 B 104 ms 2 alerts

13:05:33.933 GET 503 img 206 B 102 ms 2 alerts

13:05:33.935 GET 503 img 206 B 120 ms 2 alerts

13:05:33.936 GET 503 img 206 B 107 ms 2 alerts

13:05:33.938 GET 503 img 206 B 104 ms 2 alerts

13:05:33.940 GET 503 img 206 B 120 ms 2 alerts

http://icefilms.theproxy.vip/

Domain graph

Hostnames

Connections

Network requests

Transaction #298

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://icefilms.theproxy.vip/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #298

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://icefilms.theproxy.vip/

Domain graph

Network requests