GET pl26662164.profitableratecpm.com/4c/4f/a4/4c4fa4c2d751fa77432cc68e1be6f84c.js
192.243.61.227200 OK 105 kB URL GET pl26662164.profitableratecpm.com/4c/4f/a4/4c4fa4c2d751fa77432cc68e1be6f84c.js
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectprofitableratecpm.com
FingerprintF0:1C:19:8E:0A:66:67:96:FE:65:D1:76:02:CD:A0:DD:D4:3B:88:9E
ValidityFri, 06 Jun 2025 21:52:23 GMT - Thu, 04 Sep 2025 21:52:22 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 105 kB (104696 bytes)
Hash e00dcefd2b4338f0e628efe1d4bceb4b
35150cd960d115865cfccd861485b764a5682999
93a40c160a312cc82408471b472f2a2ef83eb48d05e00384faac295af6aae986
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /4c/4f/a4/4c4fa4c2d751fa77432cc68e1be6f84c.js HTTP/1.1
Host: pl26662164.profitableratecpm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 08 Jul 2025 01:57:21 GMT
Content-Type: application/javascript
Content-Length: 32698
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: pl26662164.profitableratecpm.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c2df0444aefa023d9a90368d96b2cd68
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET vineypexel.site/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.8.1
104.21.16.1200 OK 1.1 kB URL GET vineypexel.site/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.8.1
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type JavaScript source, ASCII text, with very long lines (1107), with no line terminators
Hash 8a5c9689ae636c452b6808740ba04136
8d2c85d7779d00c12aeb6b55a99443952d9a144e
79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45
GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.8.1 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/javascript
content-length: 453
last-modified: Thu, 06 Feb 2025 22:27:26 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
etag:
cache-control: max-age=14400
cf-cache-status: REVALIDATED
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2F%2BZI9%2FvKtXYZrvdvJRVBoiNJQ3RPILEXCq3K%2Bb4F%2FfG5%2FsAmEboaVUz2mtiTKVnhGTJrz6d0CkLk7hUadEAqM6nk8ycY%2BMR5%2F%2BjhBMs%3D"}]}
cf-ray: 95bbf8666c8d56c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET unseenreport.com/pxf.gif?uuid=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=470eb7ef714a8152187f0bac13799ae2&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=1
192.243.59.20200 OK 0 B URL GET unseenreport.com/pxf.gif?uuid=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=470eb7ef714a8152187f0bac13799ae2&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=1
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint70:62:DC:6C:0A:F4:AA:56:4E:74:DC:EF:DA:CC:60:5A:C4:34:CE:F2
ValiditySat, 17 May 2025 22:34:21 GMT - Fri, 15 Aug 2025 22:34:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=470eb7ef714a8152187f0bac13799ae2&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=1 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 08 Jul 2025 01:57:23 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Host: unseenreport.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: bd62fe637251922241cdc2690c695bb0
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET capaciousdrewreligion.com/advertisers.js
185.196.197.72200 OK 0 B URL GET capaciousdrewreligion.com/advertisers.js
IP 185.196.197.72:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectcapaciousdrewreligion.com
Fingerprint7E:0C:43:C3:55:EF:24:FB:FF:B3:FA:08:9B:1D:48:C2:C9:33:58:6C
ValidityWed, 02 Jul 2025 14:55:53 GMT - Tue, 30 Sep 2025 14:55:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 08 Jul 2025 01:57:22 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 871a9aeea7e5715f257cb62ce1c60ab8
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET cdn.videy.co/Xm2sgLGC1.mp4?_=1
104.26.1.36206 Partial Content 1.2 MB URL GET cdn.videy.co/Xm2sgLGC1.mp4?_=1
IP 104.26.1.36:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectcdn.videy.co
Fingerprint4B:B2:E6:C7:16:1D:AA:F5:F2:60:23:50:86:4E:51:DF:DA:FC:F0:6D
ValidityThu, 22 May 2025 07:41:32 GMT - Wed, 20 Aug 2025 08:41:27 GMT
File type ISO Media, MP4 Base Media v6
Size 1.2 MB (1228933 bytes)
Hash 6eb231347edee609c9ee8861a89251f1
b09f340c01d6153a073239edb8e8dd50754af171
2750cf205b31856d9483723b2fab1cac15f22ef670c2a1869bb6427aeeafed26
GET /Xm2sgLGC1.mp4?_=1 HTTP/1.1
Host: cdn.videy.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Tue, 08 Jul 2025 01:57:22 GMT
content-type: video/mp4
content-length: 1228933
content-range: bytes 0-1228932/1228933
cf-ray: 95bbf86d8cc80b3d-OSL
cf-cache-status: HIT
cache-control: max-age=14400
etag: "6eb231347edee609c9ee8861a89251f1"
last-modified: Mon, 07 Jul 2025 23:29:25 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kPGEWqlUx5YpdAWlcOfiyxNSPyVQzNz8O%2FolaHshSY6Trb26Rca7yxuEX5y3K%2FIO%2BXF3GWlD50rpxC%2B56kceXdys%2FEK4ot%2F6CcwzoRIUKHB9ddQTPjP%2BhhwgYPBdtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=612&min_rtt=436&rtt_var=272&sent=9&recv=13&lost=0&retrans=0&sent_bytes=3259&recv_bytes=1372&delivery_rate=6454680&cwnd=255&unsent_bytes=0&cid=f157f7012b023299&ts=1094&x=0"
X-Firefox-Spdy: h2
GET invadedisheartentrail.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=520
192.243.59.20200 OK 0 B URL GET invadedisheartentrail.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=520
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectinvadedisheartentrail.com
Fingerprint08:0C:3A:CB:74:EB:7F:4A:F9:4A:02:C4:2D:78:E1:65:99:B4:98:44
ValiditySat, 28 Jun 2025 21:47:00 GMT - Fri, 26 Sep 2025 21:46:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=520 HTTP/1.1
Host: invadedisheartentrail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Cookie: uid_id2=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26595752=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 08 Jul 2025 01:57:24 GMT
Content-Length: 0
Connection: keep-alive
Host: invadedisheartentrail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET vineypexel.site/wp-content/themes/responsive/core/css/icomoon/style.min.css?ver=6.1.9
104.21.16.1200 OK 5.6 kB URL GET vineypexel.site/wp-content/themes/responsive/core/css/icomoon/style.min.css?ver=6.1.9
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type ASCII text, with very long lines (5644), with no line terminators
Hash 2a908879ae19aeb14cf232ff61b37deb
1ad1a6e1becb734943b6a1a35916bf1590189b4a
5fb04e7e63910cb1c70b7184261bbd6d6531dc7498b58023035096b142b23e20
GET /wp-content/themes/responsive/core/css/icomoon/style.min.css?ver=6.1.9 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/css
content-length: 1206
cache-control: public, max-age=604800
expires: Sat, 12 Jul 2025 14:39:43 GMT
last-modified: Wed, 11 May 2022 13:18:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
age: 213457
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=q3HmdjQON%2FW7fMgjjwPTa2Nz%2BWaA3dXQ2iUxxMwx6viSZeZ0451XyklEwqrq6z3nG9xbbNZctAZk2r97sTnrXXIDeMjAnejmI9ftn3E%3D"}]}
cf-ray: 95bbf8664c7356c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET rashcolonizeexpand.com/47/0e/b7/470eb7ef714a8152187f0bac13799ae2.js
172.240.127.234200 OK 66 kB URL GET rashcolonizeexpand.com/47/0e/b7/470eb7ef714a8152187f0bac13799ae2.js
IP 172.240.127.234:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectrashcolonizeexpand.com
FingerprintC7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92
ValiditySat, 28 Jun 2025 22:10:41 GMT - Fri, 26 Sep 2025 22:10:40 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash e4478d81684598775aeee9af6be580b7
dc82a5b53f1bbdb442f540d18dcf234c89950f7e
ff5fb79845806651fe008ae9c60ec6c053f66e970cdba2564fdcd41662fcfcf8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /47/0e/b7/470eb7ef714a8152187f0bac13799ae2.js HTTP/1.1
Host: rashcolonizeexpand.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 08 Jul 2025 01:57:22 GMT
Content-Type: application/javascript
Content-Length: 23570
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
set-cookie: 4b4e7ab587d59b22ad7bcd2439afc363_FEATURES-2467_1=1; expires=Tue, 08 Jul 2025 01:57:21 GMT; secure; SameSite=None
x-envoy-upstream-service-time: 15
Host: rashcolonizeexpand.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 8db30ca396294fd51c0051e81c18f759
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET cdn.storageimagedisplay.com/si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png
45.133.44.2200 OK 14 kB URL GET cdn.storageimagedisplay.com/si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png
IP 45.133.44.2:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectcdn.storageimagedisplay.com
Fingerprint7C:BD:B0:48:37:0F:A4:22:46:5F:09:F9:77:FA:07:FF:25:25:52:76
ValiditySun, 11 May 2025 02:32:51 GMT - Sat, 09 Aug 2025 02:32:50 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Hash 962ac416cce3fad636d4904386c8d3d4
811166fceb971353dc6a9ea3a153367f20b47592
ec6c8e1c030499a846897265d0c1f66dedc6ece17c1ea6006b700faf37e73555
GET /si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:24 GMT
content-type: image/png
content-length: 14496
server: nginx/1.21.6
last-modified: Mon, 04 Dec 2023 01:05:10 GMT
etag: "656d25c6-38a0"
expires: Thu, 10 Jul 2025 01:57:24 GMT
cache-control: max-age=172800
x-cdn-host-id: ah0543
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET vineypexel.site/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.8.1
104.21.16.1200 OK 4.2 kB URL GET vineypexel.site/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.8.1
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type ASCII text, with very long lines (4186), with no line terminators
Hash ea958276b7de454bd3c2873f0dc47e5f
b143f6e8e8f79d8f104c26b0057ef5514d763219
2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.8.1 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/css
content-length: 982
cache-control: public, max-age=604800
expires: Sat, 12 Jul 2025 14:39:43 GMT
last-modified: Sat, 08 Jun 2019 00:45:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
age: 213457
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=g6BMMdIrGNGxgjfS01YLpktrhjWNBbmVC67Zdbp9EMeh%2FTZ6BQsgyp0aEDbXnkOYFMBXpVBFoMZOweVTONLx89OCHZGek72aucnGO7M%3D"}]}
cf-ray: 95bbf8665c8356c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/librefranklin/v19/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2
142.250.178.99200 OK 29 kB URL GET fonts.gstatic.com/s/librefranklin/v19/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2
IP 142.250.178.99:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type Web Open Font Format (Version 2), TrueType, length 29336, version 1.0
Hash e762e44cb164b541165601daed140a13
510cfd47e5fa014beae4ad527cfa1b6d31141789
c4d5d8c2ab89b2f588e061a7d40627b75dbdb7d3288683fd44bdd4e894ca359b
GET /s/librefranklin/v19/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vineypexel.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29336
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Jul 2025 17:15:01 GMT
expires: Fri, 03 Jul 2026 17:15:01 GMT
cache-control: public, max-age=31536000
age: 376940
last-modified: Wed, 28 May 2025 16:58:15 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET professionaltrafficmonitor.com/stats
3.77.26.151200 OK 40 B URL GET professionaltrafficmonitor.com/stats
IP 3.77.26.151:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerAmazon
Subjectprotrafficinspector.com
Fingerprint5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6
ValidityTue, 01 Jul 2025 00:00:00 GMT - Thu, 30 Jul 2026 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d1741028d4fbeb541c27b579936b61b5
af18eabec1540dea43483c4e92fb53a8764d34fc
fd44f4a4cca889742a52f20ca1d3d96fff42804ae8eeb2c201e27a7baa06d0a4
GET /stats HTTP/1.1
Host: professionaltrafficmonitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vineypexel.site
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Cookie: uid_id2=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515:2:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:22 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://vineypexel.site
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
GET cdn.show-sb.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html
172.67.170.115200 OK 3.0 kB URL GET cdn.show-sb.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html
IP 172.67.170.115:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectshow-sb.com
FingerprintDF:A8:5A:11:E9:7E:8B:0E:2E:08:20:FB:02:FE:C4:E3:E7:97:E8:3A
ValidityThu, 12 Jun 2025 07:26:41 GMT - Wed, 10 Sep 2025 08:25:04 GMT
File type HTML document, ASCII text
Hash 027fddd0d322239ada2f2b8b93934fda
6f99560bca5c6d8d747c802f26058344eb179cec
a5b2073d8f57ef0469b777f73d6c3f4a85cc17b4c2ed2a53aa3f1acb2273dbd5
GET /sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html HTTP/1.1
Host: cdn.show-sb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vineypexel.site
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:23 GMT
content-type: text/html
server: cloudflare
last-modified: Tue, 29 Mar 2022 08:27:42 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-expose-headers: Date
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ack4oe%2FCds%2BIxfp6OZuy3wPkAGar2ES%2B2pdkcOqjEgFJ3wH%2Be0Zz7BjyVllxtUA5MX4IeLh%2BBpnYTSZ7Bw9wEn2viLoMaG1Rz0yFiGM%3D"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 95bbf875d82156bb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.creative-stat1.com/sb/chat/mob/ssp/1/js/script.js
172.67.133.15200 OK 382 B URL GET cdn.creative-stat1.com/sb/chat/mob/ssp/1/js/script.js
IP 172.67.133.15:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectcreative-stat1.com
FingerprintEA:78:8B:9D:53:DF:84:5F:BA:B0:1B:CB:77:59:D8:9B:CC:8C:CC:86
ValidityWed, 11 Jun 2025 22:34:34 GMT - Tue, 09 Sep 2025 23:32:59 GMT
Hash 4f5f05ab032dd8fc0db448fcf51a35e2
78f94f93fdb792d95ea3ac293ac1b8e3bc13d609
7fd8e9c0e5ca0c7123954a109fa8b7e8368c7e1262880925e2ac7b8c877a9e38
GET /sb/chat/mob/ssp/1/js/script.js HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vineypexel.site
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:24 GMT
content-type: application/javascript
content-length: 382
server: cloudflare
last-modified: Sat, 07 May 2022 03:21:31 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: "6275e5bb-17e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
accept-ranges: bytes
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Dsn6BdBjmCazR%2FDqDciPH3Dw8ftO%2FglXcNjRezwAsSxD2oKuAlXz%2BM1CigDKMzEFYmrPAy8gcybRBRhJ6gSprF6zigsV62EKEB53hjjVzxMxcJ3N"}]}
cf-ray: 95bbf87ade45b4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/librefranklin/v19/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2
142.250.178.99200 OK 29 kB URL GET fonts.gstatic.com/s/librefranklin/v19/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2
IP 142.250.178.99:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type Web Open Font Format (Version 2), TrueType, length 29336, version 1.0
Hash e762e44cb164b541165601daed140a13
510cfd47e5fa014beae4ad527cfa1b6d31141789
c4d5d8c2ab89b2f588e061a7d40627b75dbdb7d3288683fd44bdd4e894ca359b
GET /s/librefranklin/v19/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vineypexel.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29336
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Jul 2025 17:15:01 GMT
expires: Fri, 03 Jul 2026 17:15:01 GMT
cache-control: public, max-age=31536000
age: 376940
last-modified: Wed, 28 May 2025 16:58:15 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET rashcolonizeexpand.com/pixel/purst?dl=0&th=0&sc=0&rs=1705&rd=1705&fd=580&bv=25.6.4853&tmpl=70
172.240.127.234200 OK 0 B URL GET rashcolonizeexpand.com/pixel/purst?dl=0&th=0&sc=0&rs=1705&rd=1705&fd=580&bv=25.6.4853&tmpl=70
IP 172.240.127.234:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectrashcolonizeexpand.com
FingerprintC7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92
ValiditySat, 28 Jun 2025 22:10:41 GMT - Fri, 26 Sep 2025 22:10:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1705&rd=1705&fd=580&bv=25.6.4853&tmpl=70 HTTP/1.1
Host: rashcolonizeexpand.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 08 Jul 2025 01:57:21 GMT
Content-Length: 0
Connection: keep-alive
Host: rashcolonizeexpand.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET professionaltrafficmonitor.com/stats
3.77.26.151200 OK 40 B URL GET professionaltrafficmonitor.com/stats
IP 3.77.26.151:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerAmazon
Subjectprotrafficinspector.com
Fingerprint5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6
ValidityTue, 01 Jul 2025 00:00:00 GMT - Thu, 30 Jul 2026 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d1741028d4fbeb541c27b579936b61b5
af18eabec1540dea43483c4e92fb53a8764d34fc
fd44f4a4cca889742a52f20ca1d3d96fff42804ae8eeb2c201e27a7baa06d0a4
GET /stats HTTP/1.1
Host: professionaltrafficmonitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vineypexel.site
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://vineypexel.site
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515:2:1; expires=Fri, 06 Jul 2035 01:57:21 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css?family=Libre+Franklin%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100i%2C200i%2C300i%2C400i%2C500i%2C600i%2C700i%2C800i%2C900i%7C&subset=latin&ver=6.8.1
142.250.178.106200 OK 33 kB URL GET fonts.googleapis.com/css?family=Libre+Franklin%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100i%2C200i%2C300i%2C400i%2C500i%2C600i%2C700i%2C800i%2C900i%7C&subset=latin&ver=6.8.1
IP 142.250.178.106:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintB7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
Hash 154118a92db2e3bf61b6766e67b4dd7c
a77243e2b92872284d00682fe74285cd35669d15
90e1cd3ed8f5c1153c66c10545b72ba4d49d72d179b8be83bd240cf6c6402e34
GET /css?family=Libre+Franklin%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100i%2C200i%2C300i%2C400i%2C500i%2C600i%2C700i%2C800i%2C900i%7C&subset=latin&ver=6.8.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 08 Jul 2025 01:57:21 GMT
date: Tue, 08 Jul 2025 01:57:21 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET invadedisheartentrail.com/ren.gif?sid=H4sIAAAAAAAC_1RSzWsk1Rd9lczut_jpILoQoRcuHLA79dUf5SzGGWciw4xJSDIEFBxe1XvVeeZ1vfK9qq5OzyYYkMFVuxBcVk4nEz8Gdf4AQTqCi4Aw7aoXE5D5DxRmLZ00tN7FvffUuQXnnnc_P8jPiI-cTtY-UH0hJV2q1-zKW1siYaowlZXNimPX7KuVLZE0_KuV3jTp7juO59fsK5X3ebSjllzbsW3HdirLQvNY9ZbOWYj0ceDUArvmuzWn7qOn_4tNbsFQC6x7Ri5DsPH_n8cfQUQjJJ2fbnKzk6n07VudXNJMaXTZ8b1kJ1FFgs68jbWFODmeTUOZMSFfL0Alx7MNoLqH0w0QijFZePUZwuR4JhNh9-hCaSjBE4Tsfyi6I3A5gqAjRGofgj0lQMSwsoqk82hF6YLuXrB0yo7JpRd_QxRjcunZK0g6P9yQolfZUDLPhEoMenEJ0RtBtEdI8xNk_QWI4gRR9hkE-50svbiLpHO4aqSCYJM3ucNcylpeNay3oqrPG6xKG15Q5QFtsmbsO3Wnfm6RiEeQfABqFpAbC7mwkMcW8tRCh00qvt3yI4d6jThgUdP2qe8zHtpBy7VtGkRN5NFU_wBZOkAkB4j0HlK9hx0xgM5_gdkuYZgFkxF0WYmCExSGoKAEhSAoMoKiWx4xaVxTPmLS5KEzq-6seuVQZe0DeqSyNk8IqB5As_JQpJ-afUTZ4rAfGzZU00TD7Mnyreub99ZvbVRdv9G879x3hjRk5UF6Rl6eem199fQb7PBJxW_aPGzyuOn4tOXUXafVjO2QRo7XDALKXRhRQpgFUGOhL8bkzsprSMWYXHn3T4T0BEaeIBIvgeZvgBYl6HaJfvJjVyR8N-U9LmtGZBxMlUizS8h2rQN5Rl4_f_APH3wBHp1ee-6dByJdItUlPhG_ErTlw-G6KsjhuioMebKaZqIj-nR6DBsZzfjid3f4bqE0u33TDL69Hk2Jaft4k5vsLk2YSNqGfH9DMMb1stIRJz_fNls8XMvN9o1cJ3l6d-295dudVHNjhEpGoGJMrL80IjEml3-bnB-6V_0YQo-g8xKd_JTMAkKNEKV7MOlcv1EEWs5nwtRCkZdD7Ybzj1IQSD7HNCxh_oXDeT_UdPo3FeWBeYi2tkCzfSSdEl1doitLUDmAyReHWapPr_0xkxFKaxhKbR2GUssvL2w2YlKpu6HXaLUaPG6w2GOe67GgbvPAp0HDD_w6MjPelg8W_wkAAP__dYbZa8oEAAA=
192.243.59.20200 OK 0 B URL GET invadedisheartentrail.com/ren.gif?sid=H4sIAAAAAAAC_1RSzWsk1Rd9lczut_jpILoQoRcuHLA79dUf5SzGGWciw4xJSDIEFBxe1XvVeeZ1vfK9qq5OzyYYkMFVuxBcVk4nEz8Gdf4AQTqCi4Aw7aoXE5D5DxRmLZ00tN7FvffUuQXnnnc_P8jPiI-cTtY-UH0hJV2q1-zKW1siYaowlZXNimPX7KuVLZE0_KuV3jTp7juO59fsK5X3ebSjllzbsW3HdirLQvNY9ZbOWYj0ceDUArvmuzWn7qOn_4tNbsFQC6x7Ri5DsPH_n8cfQUQjJJ2fbnKzk6n07VudXNJMaXTZ8b1kJ1FFgs68jbWFODmeTUOZMSFfL0Alx7MNoLqH0w0QijFZePUZwuR4JhNh9-hCaSjBE4Tsfyi6I3A5gqAjRGofgj0lQMSwsoqk82hF6YLuXrB0yo7JpRd_QxRjcunZK0g6P9yQolfZUDLPhEoMenEJ0RtBtEdI8xNk_QWI4gRR9hkE-50svbiLpHO4aqSCYJM3ucNcylpeNay3oqrPG6xKG15Q5QFtsmbsO3Wnfm6RiEeQfABqFpAbC7mwkMcW8tRCh00qvt3yI4d6jThgUdP2qe8zHtpBy7VtGkRN5NFU_wBZOkAkB4j0HlK9hx0xgM5_gdkuYZgFkxF0WYmCExSGoKAEhSAoMoKiWx4xaVxTPmLS5KEzq-6seuVQZe0DeqSyNk8IqB5As_JQpJ-afUTZ4rAfGzZU00TD7Mnyreub99ZvbVRdv9G879x3hjRk5UF6Rl6eem199fQb7PBJxW_aPGzyuOn4tOXUXafVjO2QRo7XDALKXRhRQpgFUGOhL8bkzsprSMWYXHn3T4T0BEaeIBIvgeZvgBYl6HaJfvJjVyR8N-U9LmtGZBxMlUizS8h2rQN5Rl4_f_APH3wBHp1ee-6dByJdItUlPhG_ErTlw-G6KsjhuioMebKaZqIj-nR6DBsZzfjid3f4bqE0u33TDL69Hk2Jaft4k5vsLk2YSNqGfH9DMMb1stIRJz_fNls8XMvN9o1cJ3l6d-295dudVHNjhEpGoGJMrL80IjEml3-bnB-6V_0YQo-g8xKd_JTMAkKNEKV7MOlcv1EEWs5nwtRCkZdD7Ybzj1IQSD7HNCxh_oXDeT_UdPo3FeWBeYi2tkCzfSSdEl1doitLUDmAyReHWapPr_0xkxFKaxhKbR2GUssvL2w2YlKpu6HXaLUaPG6w2GOe67GgbvPAp0HDD_w6MjPelg8W_wkAAP__dYbZa8oEAAA=
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectinvadedisheartentrail.com
Fingerprint08:0C:3A:CB:74:EB:7F:4A:F9:4A:02:C4:2D:78:E1:65:99:B4:98:44
ValiditySat, 28 Jun 2025 21:47:00 GMT - Fri, 26 Sep 2025 21:46:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC_1RSzWsk1Rd9lczut_jpILoQoRcuHLA79dUf5SzGGWciw4xJSDIEFBxe1XvVeeZ1vfK9qq5OzyYYkMFVuxBcVk4nEz8Gdf4AQTqCi4Aw7aoXE5D5DxRmLZ00tN7FvffUuQXnnnc_P8jPiI-cTtY-UH0hJV2q1-zKW1siYaowlZXNimPX7KuVLZE0_KuV3jTp7juO59fsK5X3ebSjllzbsW3HdirLQvNY9ZbOWYj0ceDUArvmuzWn7qOn_4tNbsFQC6x7Ri5DsPH_n8cfQUQjJJ2fbnKzk6n07VudXNJMaXTZ8b1kJ1FFgs68jbWFODmeTUOZMSFfL0Alx7MNoLqH0w0QijFZePUZwuR4JhNh9-hCaSjBE4Tsfyi6I3A5gqAjRGofgj0lQMSwsoqk82hF6YLuXrB0yo7JpRd_QxRjcunZK0g6P9yQolfZUDLPhEoMenEJ0RtBtEdI8xNk_QWI4gRR9hkE-50svbiLpHO4aqSCYJM3ucNcylpeNay3oqrPG6xKG15Q5QFtsmbsO3Wnfm6RiEeQfABqFpAbC7mwkMcW8tRCh00qvt3yI4d6jThgUdP2qe8zHtpBy7VtGkRN5NFU_wBZOkAkB4j0HlK9hx0xgM5_gdkuYZgFkxF0WYmCExSGoKAEhSAoMoKiWx4xaVxTPmLS5KEzq-6seuVQZe0DeqSyNk8IqB5As_JQpJ-afUTZ4rAfGzZU00TD7Mnyreub99ZvbVRdv9G879x3hjRk5UF6Rl6eem199fQb7PBJxW_aPGzyuOn4tOXUXafVjO2QRo7XDALKXRhRQpgFUGOhL8bkzsprSMWYXHn3T4T0BEaeIBIvgeZvgBYl6HaJfvJjVyR8N-U9LmtGZBxMlUizS8h2rQN5Rl4_f_APH3wBHp1ee-6dByJdItUlPhG_ErTlw-G6KsjhuioMebKaZqIj-nR6DBsZzfjid3f4bqE0u33TDL69Hk2Jaft4k5vsLk2YSNqGfH9DMMb1stIRJz_fNls8XMvN9o1cJ3l6d-295dudVHNjhEpGoGJMrL80IjEml3-bnB-6V_0YQo-g8xKd_JTMAkKNEKV7MOlcv1EEWs5nwtRCkZdD7Ybzj1IQSD7HNCxh_oXDeT_UdPo3FeWBeYi2tkCzfSSdEl1doitLUDmAyReHWapPr_0xkxFKaxhKbR2GUssvL2w2YlKpu6HXaLUaPG6w2GOe67GgbvPAp0HDD_w6MjPelg8W_wkAAP__dYbZa8oEAAA= HTTP/1.1
Host: invadedisheartentrail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Cookie: uid_id2=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26595752=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 08 Jul 2025 01:57:23 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
Access-Control-Allow-Origin: *
Vary: Origin
Access-Control-Allow-Credentials: true
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: invadedisheartentrail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 9496f7b5d5fbbba7c92ee98ccf8e118b
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET invadedisheartentrail.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=591
192.243.59.20200 OK 0 B URL GET invadedisheartentrail.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=591
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectinvadedisheartentrail.com
Fingerprint08:0C:3A:CB:74:EB:7F:4A:F9:4A:02:C4:2D:78:E1:65:99:B4:98:44
ValiditySat, 28 Jun 2025 21:47:00 GMT - Fri, 26 Sep 2025 21:46:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=591 HTTP/1.1
Host: invadedisheartentrail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Cookie: uid_id2=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26595752=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 08 Jul 2025 01:57:24 GMT
Content-Length: 0
Connection: keep-alive
Host: invadedisheartentrail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
142.250.178.106200 OK 17 kB URL GET fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP 142.250.178.106:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintB7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type ASCII text, with very long lines (1572)
Hash e9d2e14beb088f37fae98294940a9dcd
1dafc3c55550249c8c2d782d5616c7b445c8e005
f2e491cc46d3fcba81f729065d622bd722751d4a2e7f80b479aa64a92c17b5c7
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 08 Jul 2025 01:57:24 GMT
date: Tue, 08 Jul 2025 01:57:24 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET invadedisheartentrail.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=620
192.243.59.20200 OK 0 B URL GET invadedisheartentrail.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=620
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectinvadedisheartentrail.com
Fingerprint08:0C:3A:CB:74:EB:7F:4A:F9:4A:02:C4:2D:78:E1:65:99:B4:98:44
ValiditySat, 28 Jun 2025 21:47:00 GMT - Fri, 26 Sep 2025 21:46:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=620 HTTP/1.1
Host: invadedisheartentrail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Cookie: uid_id2=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26595752=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 08 Jul 2025 01:57:24 GMT
Content-Length: 0
Connection: keep-alive
Host: invadedisheartentrail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
142.250.178.99200 OK 40 kB URL GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP 142.250.178.99:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Hash 9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vineypexel.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 04 Jul 2025 08:13:08 GMT
expires: Sat, 04 Jul 2026 08:13:08 GMT
cache-control: public, max-age=31536000
age: 323057
last-modified: Thu, 29 May 2025 23:30:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET vineypexel.site/wp-includes/js/wp-emoji-release.min.js?ver=6.8.1
104.21.16.1200 OK 19 kB URL GET vineypexel.site/wp-includes/js/wp-emoji-release.min.js?ver=6.8.1
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type JavaScript source, ASCII text, with very long lines (16290)
Hash 1dafa7fe14b33c26fef9b0e5ba0c8e72
62f67cdac55d89c43570bf0c338f4edf548b14e1
50cc1a0490008ec62ca8b581fa9cdcfb2eda2d36a08ccbeb1f004da599e9cc61
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.1 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 08 Jul 2025 01:57:22 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I0yUV9faSwQuEKfMNn9CRiPvVzuwC441U4xr1fD8hicLvqTgpWycxXvfqcwtHyY7DThNtGAU3FN8nMu53s52BmSUgXcFWtrH14NaT247CG%2FQVnIzI05I8%2BLZeXFh64KHmzg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 18 Mar 2025 07:01:26 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: REVALIDATED
content-encoding: br
cf-ray: 95bbf86c8bae712a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1840&min_rtt=502&rtt_var=1021&sent=200&recv=237&lost=0&retrans=0&sent_bytes=17412&recv_bytes=13915&delivery_rate=879366&ss_exit_cwnd=14914&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=47dfba934962d350&ts=1774&inflight_dur=57&x=40"
GET recordedthereby.com/sfp.js
185.196.197.71200 OK 85 kB URL GET recordedthereby.com/sfp.js
IP 185.196.197.71:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectrecordedthereby.com
Fingerprint2A:D0:9D:DD:AA:41:5F:C3:79:E8:7C:1A:1A:BF:32:81:D6:15:07:7E
ValidityFri, 04 Jul 2025 22:04:01 GMT - Thu, 02 Oct 2025 22:04:00 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash a7a3e992059fa9d57cde442897200fff
0c5e6902d0431e7df5fca3852c98b964a29ec14e
c95964506739cccd2108ac681126f65e845fe0c400a3cfe427a0cdaac84f6eaf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 08 Jul 2025 01:57:22 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 28255
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: recordedthereby.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 7d85d030221fb0651433d42ca01d8a9d
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET cdn.creative-stat1.com/sb/chat/mob/ssp/1/css/animate.css
172.67.133.15200 OK 79 kB URL GET cdn.creative-stat1.com/sb/chat/mob/ssp/1/css/animate.css
IP 172.67.133.15:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectcreative-stat1.com
FingerprintEA:78:8B:9D:53:DF:84:5F:BA:B0:1B:CB:77:59:D8:9B:CC:8C:CC:86
ValidityWed, 11 Jun 2025 22:34:34 GMT - Tue, 09 Sep 2025 23:32:59 GMT
Hash fc638645a938f69e69360c75335ffd1a
143132fb8361c3ad0acf88cb70bf0b07c0ecc2d4
7ef76aab275d0221c68602d18f81b4285b280756f0f71d535ed8b5b889bc2f90
GET /sb/chat/mob/ssp/1/css/animate.css HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vineypexel.site
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:24 GMT
content-type: text/css
server: cloudflare
last-modified: Sat, 07 May 2022 03:21:31 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"6275e5bb-135d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wIbf66UvIMWGZs0bI6QPUimlc%2FLX9d6t%2BIZXTi866J6DYYbWCCjOlsKsBvRxd7RKR7Ko5TyD2QMpmKBB0nDIPsOchMyEsz2D2n2wGMKFYT9z2MUI"}]}
cf-ray: 95bbf87a1df5b4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET vineypexel.site/wp-content/plugins/wp-statistics/assets/js/tracker.js?ver=14.14.1
104.21.16.1200 OK 8.2 kB URL GET vineypexel.site/wp-content/plugins/wp-statistics/assets/js/tracker.js?ver=14.14.1
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type JavaScript source, ASCII text, with very long lines (4612)
Hash 9cc0056ed3fa0e6d68190261b9b41999
e224b992c54e008d81732c6d30aeae9b3b51c376
dc379fac481d388dc8c53c91a520ba855b6e9021c6e4d9223cde613431e7217d
GET /wp-content/plugins/wp-statistics/assets/js/tracker.js?ver=14.14.1 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/javascript
content-length: 2510
last-modified: Sun, 01 Jun 2025 13:51:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
etag:
cache-control: max-age=14400
cf-cache-status: REVALIDATED
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rZBF0m7BjfRk0c8%2BhUNeHX6om5KGtq9VLg7TAJiD%2Bfkzq2oaTV4zUMqbteim8lBu1hZ3C%2Bvpq2mjKXnpIgUmkdbKf9xEZAzFHGRqVqE%3D"}]}
cf-ray: 95bbf8666c8656c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET vineypexel.site/wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17
104.21.16.1200 OK 6.5 kB URL GET vineypexel.site/wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type JavaScript source, ASCII text, with very long lines (6194)
Hash 170687433986a4a559fa4f16b1d7c70e
84349b5fb0fcb057ae1768667f480fd607a1da49
722a90d42ef2bd0ea38f0fdac6b4c0523aa4a027e9ffe889972100746e165582
GET /wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/javascript
content-length: 2071
last-modified: Tue, 29 Sep 2020 19:53:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
etag:
cache-control: max-age=14400
cf-cache-status: REVALIDATED
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FPyQxHjqxbR3zUR1Tf%2FBKokYxXoyF2egzBTeWiiT6ymfEexlnLhN6nmVWTSVxOcfzR30upCPOz8x7n7V0X8i%2BO4QJBdVHcTbH0%2Foqbw%3D"}]}
cf-ray: 95bbf8666c9156c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET vineypexel.site/wp-includes/js/mediaelement/mejs-controls.svg
104.21.16.1200 OK 4.6 kB URL GET vineypexel.site/wp-includes/js/mediaelement/mejs-controls.svg
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type SVG Scalable Vector Graphics image
Hash f0849a5e79712b10e1531925e3edb879
a5fd4a315cb977532daca83c130ce8ffc57f6f3f
ad55816ac6c62f214e60a1913ff4f0215ab329034cbc7436a5514941449ca7b9
GET /wp-includes/js/mediaelement/mejs-controls.svg HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
Cookie: _ga_3DFZKCCPVF=GS2.1.s1751939841$o1$g0$t1751939842$j59$l0$h0; _ga=GA1.1.1132605795.1751939842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 08 Jul 2025 01:57:22 GMT
content-type: image/svg+xml
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ChwoLspYn67uXMA3q%2FnbUShvZqR2iCXy4HYTCOSSFquyrRFcA0r3OCQ5w10KHs%2FgsROoW6D42gY1PczbBTybSWUGprqTies1fI%2BBDZh%2BQguTmYgMqWOio6UTvZzs%2B4wkxs0%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Sat, 12 Jul 2025 14:39:44 GMT
last-modified: Tue, 01 Aug 2017 08:43:52 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
age: 213457
cf-cache-status: HIT
content-encoding: br
cf-ray: 95bbf86d7bb1712a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1851&min_rtt=502&rtt_var=1332&sent=198&recv=236&lost=0&retrans=0&sent_bytes=15224&recv_bytes=13870&delivery_rate=561353&ss_exit_cwnd=14914&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=47dfba934962d350&ts=1426&inflight_dur=54&x=40"
GET cdn.creative-stat1.com/sb/chat/mob/ssp/1/js/jquery.min.js
172.67.133.15200 OK 90 kB URL GET cdn.creative-stat1.com/sb/chat/mob/ssp/1/js/jquery.min.js
IP 172.67.133.15:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectcreative-stat1.com
FingerprintEA:78:8B:9D:53:DF:84:5F:BA:B0:1B:CB:77:59:D8:9B:CC:8C:CC:86
ValidityWed, 11 Jun 2025 22:34:34 GMT - Tue, 09 Sep 2025 23:32:59 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash 561acb3e541133bbdd2c0c19f8ee35a1
ffd1353cf3f77d25f801c84d8208613eb0d3d548
9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc
GET /sb/chat/mob/ssp/1/js/jquery.min.js HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:24 GMT
content-type: application/javascript
content-length: 89492
server: cloudflare
last-modified: Sat, 07 May 2022 05:43:05 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: "627606e9-15d94"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
accept-ranges: bytes
age: 336796
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=29J1uigMUgybUXLrBddNE2iDLXpo7onHkyzWqjRWSJBMnbwUKF7fQOmrc10LxZrb%2BtL3YdnLdtUv6tNs7yYWskb6S95YukCI3JGGJiOhGHxBtGno"}]}
cf-ray: 95bbf87a3e08b4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET invadedisheartentrail.com/impr.gif?sid=H4sIAAAAAAAC_1RST2sk1Rd9lczut_jpILoQoRcuHLA7VV3V_5zFOONMZJgxCUmGgILDq_dedZ55Xa98r6qr07MJBmRw1S4El5XTycQ_gzofQJCO4CIgTLvqxQRkvoHCrKWThta7uPeeOrfg3PPu5wfZGQmQ0cnaB7ovlaJLtYpbemtLxlzntrSyWfLcinu1tCXjenC11Jsm033H84OKe6X0vmA7eqnqeq7ruV5pWRoR6d7SOQuZPG55lZZbCaoVrxagZ_6LbebAUge8e0YuQ_Lx_59HH0GyEeLOTzeF3Ul18vatTqZoqg26_PhevBPrPEZn3kbGQRQfz6ah7ZiQrxeg4-PZBtDdw-kGCOWYLLz6DGF8PJOJsHt0oTRUEDFC_j_k3RGEGkHSEZjeh-RPCcA4VlYRdx6taJPT3QuWTtkxufTib8h8TC49ewVx54cbSvZKG1plqdSxRS8qIHsjyPYISXaCtL8AmZ-ApZ9B8t_J0ou7iDuHq1ZpSD55U3i8SnnTL4e1JisHos7LtO63yqJFG7wRBV7Nq51bJKMRlBiA2gVk1kEmHWSRgyxx0OGTUuA2A-ZRvx61OGu4AQ0CLkK31ay6Lm2xBjI21T9AmgzA1ADM7CExe9iRA5jsF9jtApY7sClBlxfIBUFuCXJKkEuCPCXIu8URV7Zqi0dc2Sz0ZrU6q34x1Gn7gB7ptC1iAmoGMLw4lMmndh8sXRz2I8uHeppomD5ZvnV98976rY1yNag37nv3vSENeXGQnJGXp147Xz39BjtiUgoarggbImp4AW16tarXbERuSJnnN1otKqqwsoC0C6DWQV-OyZ2V15DIMbny7p8I6QmsOgGTL4Fmb4DmBeh2gX78Y1fGYjcRPaEqVqYCXBdI0ktId50DdUZeP3_wDx98AcFOrz33zwPMFEhMgU_krwRt9XC4rnNyuK5zS56sJqnsyD6dHsNGSlOx-N0dsZtrw2_ftINvr7MpMW0fbwqb3qUxl3Hbku9vSM6FWdaGCfLzbbslwrXMbt_ITJwld9feW77dSYywVup4BCrHxPnLgMkxufzb5PzQ_fLHkGYEkxXoZKdkFpB6BJbswSZz_VYTGDWfCRMHeVYMTTWcf1SSQIk5pmEB-y8czvuhodO_qSwO7EO0jQOa7iPuFOiaAl1VgKoBbLY4TBNzeu2PmYxQOcNQGecwVEZ9eWGzlZNS5Isqc91mo-75zUh4fsBZVGsGLV6nru8LpHa8rR4s_hMAAP__ie5JtcoEAAA=
192.243.59.20200 OK 0 B URL GET invadedisheartentrail.com/impr.gif?sid=H4sIAAAAAAAC_1RST2sk1Rd9lczut_jpILoQoRcuHLA7VV3V_5zFOONMZJgxCUmGgILDq_dedZ55Xa98r6qr07MJBmRw1S4El5XTycQ_gzofQJCO4CIgTLvqxQRkvoHCrKWThta7uPeeOrfg3PPu5wfZGQmQ0cnaB7ovlaJLtYpbemtLxlzntrSyWfLcinu1tCXjenC11Jsm033H84OKe6X0vmA7eqnqeq7ruV5pWRoR6d7SOQuZPG55lZZbCaoVrxagZ_6LbebAUge8e0YuQ_Lx_59HH0GyEeLOTzeF3Ul18vatTqZoqg26_PhevBPrPEZn3kbGQRQfz6ah7ZiQrxeg4-PZBtDdw-kGCOWYLLz6DGF8PJOJsHt0oTRUEDFC_j_k3RGEGkHSEZjeh-RPCcA4VlYRdx6taJPT3QuWTtkxufTib8h8TC49ewVx54cbSvZKG1plqdSxRS8qIHsjyPYISXaCtL8AmZ-ApZ9B8t_J0ou7iDuHq1ZpSD55U3i8SnnTL4e1JisHos7LtO63yqJFG7wRBV7Nq51bJKMRlBiA2gVk1kEmHWSRgyxx0OGTUuA2A-ZRvx61OGu4AQ0CLkK31ay6Lm2xBjI21T9AmgzA1ADM7CExe9iRA5jsF9jtApY7sClBlxfIBUFuCXJKkEuCPCXIu8URV7Zqi0dc2Sz0ZrU6q34x1Gn7gB7ptC1iAmoGMLw4lMmndh8sXRz2I8uHeppomD5ZvnV98976rY1yNag37nv3vSENeXGQnJGXp147Xz39BjtiUgoarggbImp4AW16tarXbERuSJnnN1otKqqwsoC0C6DWQV-OyZ2V15DIMbny7p8I6QmsOgGTL4Fmb4DmBeh2gX78Y1fGYjcRPaEqVqYCXBdI0ktId50DdUZeP3_wDx98AcFOrz33zwPMFEhMgU_krwRt9XC4rnNyuK5zS56sJqnsyD6dHsNGSlOx-N0dsZtrw2_ftINvr7MpMW0fbwqb3qUxl3Hbku9vSM6FWdaGCfLzbbslwrXMbt_ITJwld9feW77dSYywVup4BCrHxPnLgMkxufzb5PzQ_fLHkGYEkxXoZKdkFpB6BJbswSZz_VYTGDWfCRMHeVYMTTWcf1SSQIk5pmEB-y8czvuhodO_qSwO7EO0jQOa7iPuFOiaAl1VgKoBbLY4TBNzeu2PmYxQOcNQGecwVEZ9eWGzlZNS5Isqc91mo-75zUh4fsBZVGsGLV6nru8LpHa8rR4s_hMAAP__ie5JtcoEAAA=
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectinvadedisheartentrail.com
Fingerprint08:0C:3A:CB:74:EB:7F:4A:F9:4A:02:C4:2D:78:E1:65:99:B4:98:44
ValiditySat, 28 Jun 2025 21:47:00 GMT - Fri, 26 Sep 2025 21:46:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC_1RST2sk1Rd9lczut_jpILoQoRcuHLA7VV3V_5zFOONMZJgxCUmGgILDq_dedZ55Xa98r6qr07MJBmRw1S4El5XTycQ_gzofQJCO4CIgTLvqxQRkvoHCrKWThta7uPeeOrfg3PPu5wfZGQmQ0cnaB7ovlaJLtYpbemtLxlzntrSyWfLcinu1tCXjenC11Jsm033H84OKe6X0vmA7eqnqeq7ruV5pWRoR6d7SOQuZPG55lZZbCaoVrxagZ_6LbebAUge8e0YuQ_Lx_59HH0GyEeLOTzeF3Ul18vatTqZoqg26_PhevBPrPEZn3kbGQRQfz6ah7ZiQrxeg4-PZBtDdw-kGCOWYLLz6DGF8PJOJsHt0oTRUEDFC_j_k3RGEGkHSEZjeh-RPCcA4VlYRdx6taJPT3QuWTtkxufTib8h8TC49ewVx54cbSvZKG1plqdSxRS8qIHsjyPYISXaCtL8AmZ-ApZ9B8t_J0ou7iDuHq1ZpSD55U3i8SnnTL4e1JisHos7LtO63yqJFG7wRBV7Nq51bJKMRlBiA2gVk1kEmHWSRgyxx0OGTUuA2A-ZRvx61OGu4AQ0CLkK31ay6Lm2xBjI21T9AmgzA1ADM7CExe9iRA5jsF9jtApY7sClBlxfIBUFuCXJKkEuCPCXIu8URV7Zqi0dc2Sz0ZrU6q34x1Gn7gB7ptC1iAmoGMLw4lMmndh8sXRz2I8uHeppomD5ZvnV98976rY1yNag37nv3vSENeXGQnJGXp147Xz39BjtiUgoarggbImp4AW16tarXbERuSJnnN1otKqqwsoC0C6DWQV-OyZ2V15DIMbny7p8I6QmsOgGTL4Fmb4DmBeh2gX78Y1fGYjcRPaEqVqYCXBdI0ktId50DdUZeP3_wDx98AcFOrz33zwPMFEhMgU_krwRt9XC4rnNyuK5zS56sJqnsyD6dHsNGSlOx-N0dsZtrw2_ftINvr7MpMW0fbwqb3qUxl3Hbku9vSM6FWdaGCfLzbbslwrXMbt_ITJwld9feW77dSYywVup4BCrHxPnLgMkxufzb5PzQ_fLHkGYEkxXoZKdkFpB6BJbswSZz_VYTGDWfCRMHeVYMTTWcf1SSQIk5pmEB-y8czvuhodO_qSwO7EO0jQOa7iPuFOiaAl1VgKoBbLY4TBNzeu2PmYxQOcNQGecwVEZ9eWGzlZNS5Isqc91mo-75zUh4fsBZVGsGLV6nru8LpHa8rR4s_hMAAP__ie5JtcoEAAA= HTTP/1.1
Host: invadedisheartentrail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Cookie: uid_id2=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26595752=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 08 Jul 2025 01:57:25 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
Access-Control-Allow-Origin: *
Vary: Origin
Access-Control-Allow-Credentials: true
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: invadedisheartentrail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: cf65a478b718d9fa3a1ceda37c041c1a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET vineypexel.site/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
104.21.16.1200 OK 158 kB URL GET vineypexel.site/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type JavaScript source, ASCII text, with very long lines (65266)
Size 158 kB (158005 bytes)
Hash e53ec3d6e21be78115810135f5e956fe
523892839b88351523e0498ba881c4431197b54e
b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/javascript
content-length: 36433
last-modified: Thu, 29 Sep 2022 18:21:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
etag:
cache-control: max-age=14400
cf-cache-status: REVALIDATED
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=nR%2Bn6Vi0BHOiizhwLiR8Z7gG5m5niorXOhd9TaoD8%2BqFhW%2BpjZ7fUps80Rkc2LXHL3KvMskW4CBKtkt%2BFKUJshJQugaul4OUjCgE4ko%3D"}]}
cf-ray: 95bbf8666c8a56c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET vineypexel.site/favicon.ico
104.21.16.1404 Not Found 1.3 kB URL GET vineypexel.site/favicon.ico
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896
GET /favicon.ico HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Cookie: _ga_3DFZKCCPVF=GS2.1.s1751939841$o1$g0$t1751939842$j59$l0$h0; _ga=GA1.1.1132605795.1751939842; pp_main_4c4fa4c2d751fa77432cc68e1be6f84c=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515%3A2%3A1; sb_main_470eb7ef714a8152187f0bac13799ae2=1; sb_count_470eb7ef714a8152187f0bac13799ae2=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 08 Jul 2025 01:57:23 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zt%2Fzb3NsOeNrSz%2B5hYf9x5H0s6IAwihPUSSUGUzPao2RS%2BkWjrNBA8tgnnD436Qm2dDDrIZeotjvi5etxIA%2B3MUi6XRviqLFQYe83%2BaGN2TIYurvgOn%2BM7MWeLD2CgRfkhY%3D"}],"group":"cf-nel","max_age":604800}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
content-encoding: br
cf-ray: 95bbf872bbb7712a-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1452&min_rtt=0&rtt_var=1235&sent=206&recv=240&lost=0&retrans=0&sent_bytes=23339&recv_bytes=14520&delivery_rate=1318151&ss_exit_cwnd=14914&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=47dfba934962d350&ts=2768&inflight_dur=60&x=40"
GET invadedisheartentrail.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=508
192.243.59.20200 OK 0 B URL GET invadedisheartentrail.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=508
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectinvadedisheartentrail.com
Fingerprint08:0C:3A:CB:74:EB:7F:4A:F9:4A:02:C4:2D:78:E1:65:99:B4:98:44
ValiditySat, 28 Jun 2025 21:47:00 GMT - Fri, 26 Sep 2025 21:46:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=508 HTTP/1.1
Host: invadedisheartentrail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Cookie: uid_id2=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26595752=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 08 Jul 2025 01:57:24 GMT
Content-Length: 0
Connection: keep-alive
Host: invadedisheartentrail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET vineypexel.site/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
104.21.16.1200 OK 14 kB URL GET vineypexel.site/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type JavaScript source, ASCII text, with very long lines (13479)
Hash 9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/javascript
content-length: 4678
last-modified: Fri, 09 Jun 2023 09:49:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
etag:
cache-control: max-age=14400
cf-cache-status: REVALIDATED
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=0UhZiryoD%2FoMybRTzqcJCB8nXuySWOxZqHxiH5Tpc2rvZnjHjdcM2vbr1opfCPP3fRZak6y%2BSEz7JntobG338Iptp1JHnCNevcYgJpA%3D"}]}
cf-ray: 95bbf8666c8856c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET vineypexel.site/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.8.1
104.21.16.1200 OK 1.2 kB URL GET vineypexel.site/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.8.1
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type ASCII text, with very long lines (1191), with no line terminators
Hash 51300497928562f8c86c7aaba99237cd
e5826832b85c6afc6502b74cbb8ac5394b04c363
6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.8.1 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/javascript
content-length: 479
last-modified: Thu, 06 Feb 2025 22:27:26 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ajrB5%2FOdbAiyDh4n3ZXkVnr%2BGNCT29s%2BJpY72e67vtcXCxAVWRgSqX%2F9C80DYNK10%2FwOYV7I8Ao3iJi6E%2FsVTaWH7l7b2Ru259kRj4k%3D"}]}
cf-ray: 95bbf8666c8c56c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.videy.co/Xm2sgLGC1.mp4?_=1
0.0.0.0 0 B URL GET cdn.videy.co/Xm2sgLGC1.mp4?_=1
IP 0.0.0.0:0
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectcdn.videy.co
Fingerprint4B:B2:E6:C7:16:1D:AA:F5:F2:60:23:50:86:4E:51:DF:DA:FC:F0:6D
ValidityThu, 22 May 2025 07:41:32 GMT - Wed, 20 Aug 2025 08:41:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Xm2sgLGC1.mp4?_=1 HTTP/1.1
Host: cdn.videy.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
GET invadedisheartentrail.com/sbar.json?key=470eb7ef714a8152187f0bac13799ae2&abt=FEATURES-2467_1_1&uuid=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515%3A2%3A1
192.243.59.20200 OK 6.3 kB URL GET invadedisheartentrail.com/sbar.json?key=470eb7ef714a8152187f0bac13799ae2&abt=FEATURES-2467_1_1&uuid=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515%3A2%3A1
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectinvadedisheartentrail.com
Fingerprint08:0C:3A:CB:74:EB:7F:4A:F9:4A:02:C4:2D:78:E1:65:99:B4:98:44
ValiditySat, 28 Jun 2025 21:47:00 GMT - Fri, 26 Sep 2025 21:46:59 GMT
Hash 7c7c4e4047396c3966fc17014229693f
1abea0594a7a1ad4f4343879a23c76c9b92570f2
545e30a9120aa2c08ac040f78a1555dfa050e671f8d56bdf43361903528e2ebf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=470eb7ef714a8152187f0bac13799ae2&abt=FEATURES-2467_1_1&uuid=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515%3A2%3A1 HTTP/1.1
Host: invadedisheartentrail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vineypexel.site
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 08 Jul 2025 01:57:23 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Access-Control-Allow-Origin: https://vineypexel.site
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515:2:1; expires=Tue, 15 Jul 2025 01:57:23 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Wed, 09 Jul 2025 01:57:23 GMT; path=/; secure; SameSite=None
uncs=1; expires=Wed, 09 Jul 2025 01:57:23 GMT; path=/; secure; SameSite=None
pdhtkv29=true; expires=Wed, 09 Jul 2025 01:57:23 GMT; path=/; secure; SameSite=None
uncs29=1; expires=Wed, 09 Jul 2025 01:57:23 GMT; path=/; secure; SameSite=None
u_pl26595752=1; expires=Wed, 09 Jul 2025 01:57:23 GMT; path=/; secure; SameSite=None
Host: invadedisheartentrail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d56cb33072f49a0163e1208e46973eca
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET cdn.creative-stat1.com/sb/chat/mob/ssp/1/img/close.png
172.67.133.15200 OK 6.0 kB URL GET cdn.creative-stat1.com/sb/chat/mob/ssp/1/img/close.png
IP 172.67.133.15:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectcreative-stat1.com
FingerprintEA:78:8B:9D:53:DF:84:5F:BA:B0:1B:CB:77:59:D8:9B:CC:8C:CC:86
ValidityWed, 11 Jun 2025 22:34:34 GMT - Tue, 09 Sep 2025 23:32:59 GMT
File type PNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced
Hash c489ce2c491a22ee37a55e26a92dfd73
2fa588ab09e94dd902e5bd24b48f98ad1949c9d6
1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd
GET /sb/chat/mob/ssp/1/img/close.png HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:24 GMT
content-type: image/png
content-length: 5982
server: cloudflare
last-modified: Sat, 07 May 2022 04:02:16 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: "6275ef48-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
accept-ranges: bytes
age: 396804
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ST2vb4QOLYvxXvdMzXoDUVoVJRg4LahCiA2lApl7JTfjn06pgiksb0%2FZ7kbOfT%2FUx8oDR80Tx23IzkaL9AIM6zfBs0HLXUZTTS2LePJbeAH9D6hX"}]}
cf-ray: 95bbf87a2e01b4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET vineypexel.site/wp-includes/css/dist/block-library/style.min.css?ver=6.8.1
104.21.16.1200 OK 116 kB URL GET vineypexel.site/wp-includes/css/dist/block-library/style.min.css?ver=6.8.1
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type ASCII text, with very long lines (55654)
Size 116 kB (116363 bytes)
Hash dfe67cbbac3da53fdbbaed71c91db428
8c82643ef63a8389c1b800b7c5d0af9d684b8b24
597ddfdee7171750c16ec5aafd392cf992e9c53386d6bb6061d48e30334f09e9
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.1 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/css
content-length: 14358
cache-control: public, max-age=604800
expires: Thu, 10 Jul 2025 13:35:51 GMT
last-modified: Tue, 25 Mar 2025 16:48:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
age: 390089
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2BzRnBLwRJBLBUkb7RJWRYQedUBAD3i%2FvcwD47BLZHxJnceCr0rme%2BOlu07b21Ni%2FpmUAK%2BJoQOJgNZrrn04mdxXfImMXQkatxPpTU9g%3D"}]}
cf-ray: 95bbf8664c7056c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-3DFZKCCPVF
142.250.178.40200 OK 395 kB URL GET www.googletagmanager.com/gtag/js?id=G-3DFZKCCPVF
IP 142.250.178.40:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint06:CD:2A:9C:6E:F9:40:51:AA:E0:81:4A:BB:69:6C:BA:FA:AD:AB:4D
ValidityTue, 17 Jun 2025 20:01:48 GMT - Tue, 09 Sep 2025 20:01:47 GMT
File type JavaScript source, ASCII text, with very long lines (6004)
Size 395 kB (395216 bytes)
Hash 2d62f1bb80148ad0ec4faacee08ce6b3
124cf726a7b59e830c8d84b227f9170a044def03
bff95de3ca4a56bd1c244651a6ee249b56137f573e67bf2a78a15d4f0ee5d759
GET /gtag/js?id=G-3DFZKCCPVF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 08 Jul 2025 01:57:21 GMT
expires: Tue, 08 Jul 2025 01:57:21 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 131953
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET vineypexel.site/wp-content/themes/responsive/core/js/navigation.min.js?ver=6.1.9
104.21.16.1200 OK 4.5 kB URL GET vineypexel.site/wp-content/themes/responsive/core/js/navigation.min.js?ver=6.1.9
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type ASCII text, with very long lines (4513), with no line terminators
Hash f1f85d9514eac70f51ec312cfe5302ec
81af3ba196a70d6ffacf87dd711345f424cff294
2b03812eb8de97d46c62c3eade4f1e6b5e2c0b7c937c050e56e17329987a7c7f
GET /wp-content/themes/responsive/core/js/navigation.min.js?ver=6.1.9 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/javascript
content-length: 1137
last-modified: Thu, 27 Feb 2025 13:58:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
etag:
cache-control: max-age=14400
cf-cache-status: REVALIDATED
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=r5RCFPz2K21FN8%2BX2ROpwmH1ZhZ1tTlf4UlTGyVhSErqwd1TG85cm%2Bnrauw%2F3eEz3Q8%2Fo7uPOoItJqm3tQoABRKxNI%2B5kEZNVB6vBhY%3D"}]}
cf-ray: 95bbf8666c8456c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
142.250.178.99200 OK 40 kB URL GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP 142.250.178.99:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Hash 9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vineypexel.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 04 Jul 2025 08:13:08 GMT
expires: Sat, 04 Jul 2026 08:13:08 GMT
cache-control: public, max-age=31536000
age: 323057
last-modified: Thu, 29 May 2025 23:30:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET cdn.creative-stat1.com/sb/chat/mob/ssp/1/css/style.css
172.67.133.15200 OK 4.6 kB URL GET cdn.creative-stat1.com/sb/chat/mob/ssp/1/css/style.css
IP 172.67.133.15:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectcreative-stat1.com
FingerprintEA:78:8B:9D:53:DF:84:5F:BA:B0:1B:CB:77:59:D8:9B:CC:8C:CC:86
ValidityWed, 11 Jun 2025 22:34:34 GMT - Tue, 09 Sep 2025 23:32:59 GMT
Hash 630f303dfe147dec2c4a226287393b69
3e9f8270b84e09595181bd55de6785a89f53ba10
967d085a33a12064d83cb38f582c3e418e021a2d523dd9597bb75dc00589fec7
GET /sb/chat/mob/ssp/1/css/style.css HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vineypexel.site
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:24 GMT
content-type: text/css
server: cloudflare
last-modified: Mon, 21 Feb 2022 08:25:04 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"62134c60-1209"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=dSfLpENO%2Bqj7fgHjC5nURk7HSiCof2v%2B%2BJENGcEHmu2NspK%2FWyQa1GKGKUIhslps8XiLol8xNZ2d4%2B1tHOFujP%2FekO20Ww3NzmGzngoINONe0Fr9"}]}
cf-ray: 95bbf87a1df4b4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET invadedisheartentrail.com/pixel/sbs?c=1
172.240.108.68200 OK 0 B URL GET invadedisheartentrail.com/pixel/sbs?c=1
IP 172.240.108.68:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectinvadedisheartentrail.com
Fingerprint08:0C:3A:CB:74:EB:7F:4A:F9:4A:02:C4:2D:78:E1:65:99:B4:98:44
ValiditySat, 28 Jun 2025 21:47:00 GMT - Fri, 26 Sep 2025 21:46:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: invadedisheartentrail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Cookie: uid_id2=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26595752=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 08 Jul 2025 01:57:25 GMT
Content-Length: 0
Connection: keep-alive
Host: invadedisheartentrail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET vineypexel.site/wp-content/themes/responsive/core/css/style.min.css?ver=6.1.9
104.21.16.1200 OK 803 kB URL GET vineypexel.site/wp-content/themes/responsive/core/css/style.min.css?ver=6.1.9
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 803 kB (803199 bytes)
Hash d653fbcd9e09ce1ef14b4c1aed18d417
7f27fbce6f195ee199998e0e798ec993a9c8fc00
6252b90ca9044518292b78db3131087997edc129b3c2f5c28cc4f1b41a6c7e59
GET /wp-content/themes/responsive/core/css/style.min.css?ver=6.1.9 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/css
content-length: 37767
cache-control: public, max-age=604800
expires: Thu, 10 Jul 2025 13:35:51 GMT
last-modified: Mon, 05 May 2025 15:40:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
age: 390089
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=l8GWWNhWQ8dChzcxzKO%2BBrzoHmZuHmCLJDf6WiDWLSj8iftdr7nM1VZ07IrCP1UXgrD%2FJPm%2BsrOhTCgJmIIxmW3Ehp%2FZ2kjaBbM1Q8Q%3D"}]}
cf-ray: 95bbf8664c7256c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET recordedthereby.com/sfp.js
185.196.197.71200 OK 85 kB URL GET recordedthereby.com/sfp.js
IP 185.196.197.71:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subjectrecordedthereby.com
Fingerprint2A:D0:9D:DD:AA:41:5F:C3:79:E8:7C:1A:1A:BF:32:81:D6:15:07:7E
ValidityFri, 04 Jul 2025 22:04:01 GMT - Thu, 02 Oct 2025 22:04:00 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash a7a3e992059fa9d57cde442897200fff
0c5e6902d0431e7df5fca3852c98b964a29ec14e
c95964506739cccd2108ac681126f65e845fe0c400a3cfe427a0cdaac84f6eaf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 08 Jul 2025 01:57:21 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 28255
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: recordedthereby.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 9ea99c8f3aef29b966d4d59b97f56c0d
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET unseenreport.com/pxf.gif?uuid=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=4c4fa4c2d751fa77432cc68e1be6f84c&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=1
192.243.59.20200 OK 0 B URL GET unseenreport.com/pxf.gif?uuid=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=4c4fa4c2d751fa77432cc68e1be6f84c&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=1
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint70:62:DC:6C:0A:F4:AA:56:4E:74:DC:EF:DA:CC:60:5A:C4:34:CE:F2
ValiditySat, 17 May 2025 22:34:21 GMT - Fri, 15 Aug 2025 22:34:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=e1d2ad83-b58c-4e6d-a639-e9a7d7f41515&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=4c4fa4c2d751fa77432cc68e1be6f84c&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=1 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 08 Jul 2025 01:57:23 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Host: unseenreport.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c86c92941b1cb2936bbb2e398774fa1b
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
POST vineypexel.site/wp-json/wp-statistics/v2/hit
104.21.16.1200 OK 76 B URL POST vineypexel.site/wp-json/wp-statistics/v2/hit
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
Hash 5fc571c5d4984e3e6cca43db811641d0
fbca5b3cf8150be469463dc69217b12e4c105bf9
fb69ca528afbd8348adb78a661b2d647aae3d90395ffcfe701506fc4671ca63c
POST /wp-json/wp-statistics/v2/hit HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-WPS-TS: MTc1MTkzOTg0MQ==
Content-Length: 163
Origin: https://vineypexel.site
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 08 Jul 2025 01:57:37 GMT
content-type: application/json; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bxpe0mNknURsYo6EZAN7MApOKqYEBDt21wjHcpdEahklFvapKH6DVp8xCoy7qLvQqdbx2wqkWMpJwSvflT%2BBOhGsFnjFu5d2fbRGrvHENJDXYU5PzxUpHiQ7dRdQ64d2Gio%3D"}],"group":"cf-nel","max_age":604800}
x-robots-tag: noindex
link: <https://vineypexel.site/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: POST
access-control-allow-origin: https://vineypexel.site
access-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE
access-control-allow-credentials: true
vary: Origin
x-litespeed-cache-control: no-cache
cache-control: no-cache, no-store, must-revalidate, max-age=0
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 95bbf86c8baf712a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1426&min_rtt=0&rtt_var=979&sent=207&recv=241&lost=0&retrans=0&sent_bytes=24696&recv_bytes=14565&delivery_rate=1318151&ss_exit_cwnd=14914&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=47dfba934962d350&ts=16988&inflight_dur=81&x=40"
GET vineypexel.site/fk8flr7zm214/
104.21.16.1200 OK 183 kB URL User Request GET vineypexel.site/fk8flr7zm214/
IP 104.21.16.1:443
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type HTML document, ASCII text, with very long lines (47024)
Size 183 kB (182601 bytes)
Hash 9cd08b2279a271c40374269c07b1efa4
4f86e5ceda93ea0371ec6afb41ff853ffc9ae950
f591a5c0515d007156f777732524e1255ea8cea65032410cf727ee46d5d9ca4e
GET /fk8flr7zm214/ HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:20 GMT
content-type: text/html; charset=UTF-8
x-pingback: https://vineypexel.site/xmlrpc.php
link: <https://vineypexel.site/wp-json/>; rel="https://api.w.org/", <https://vineypexel.site/wp-json/wp/v2/posts/1548>; rel="alternate"; title="JSON"; type="application/json", <https://vineypexel.site/?p=1548>; rel=shortlink
x-litespeed-cache: hit
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=vb9fKQ4xpOGs9UYpXUckeOML9BW4ymNl5kiP8CkuVqnGFxWB7aD%2BGaopgs9Eb60y4cV0N6z7PE8QkUIbnwq0UuPiDL1Y6YlH1htpcD4%3D"}]}
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 95bbf85f48fa56c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET vineypexel.site/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
104.21.16.1200 OK 11 kB URL GET vineypexel.site/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type ASCII text, with very long lines (11256), with no line terminators
Hash 2b0dd7eecea03b4bdedb94ba622fdb03
703becba85161118dd6fc66af465428ef43f561c
b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/css
content-length: 2394
cache-control: public, max-age=604800
expires: Sat, 12 Jul 2025 14:39:43 GMT
last-modified: Tue, 29 Sep 2020 19:53:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
age: 213457
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=QBeSpN8qJ9F2CPwA9ff3BXj4hSeVCW3jn9ti6Z33IY%2BwTmLGEIg2fSTjd%2FH4thnRcKC7kN4LxDnSu5OVdCKFo1olG0ubeyHJUUxDrBA%3D"}]}
cf-ray: 95bbf8665c8256c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET vineypexel.site/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
104.21.16.1200 OK 88 kB URL GET vineypexel.site/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
IP 104.21.16.1:443
Requested by https://vineypexel.site/fk8flr7zm214/
Certificate IssuerGoogle Trust Services
Subjectvineypexel.site
FingerprintBD:62:B0:B1:AB:E2:D3:83:01:EC:D0:68:9B:EF:57:8E:13:4C:0D:9F
ValiditySat, 31 May 2025 03:45:29 GMT - Fri, 29 Aug 2025 04:43:46 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 826eb77e86b02ab7724fe3d0141ff87c
79cd3587d565afe290076a8d36c31c305a573d18
cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: vineypexel.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vineypexel.site/fk8flr7zm214/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 08 Jul 2025 01:57:21 GMT
content-type: text/javascript
content-length: 29744
last-modified: Mon, 28 Aug 2023 21:14:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
etag:
cache-control: max-age=14400
cf-cache-status: REVALIDATED
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=LS6puP9vBV7DnxeV4Q%2BrLaRtfQQ9MLoIv7q%2Bl6sBwsNJDCWA2Btvd6peVo%2Bqi%2BpR7bAk8gbq2e58q9OqhdF5F0OCEQ63NmOUiyJOpyU%3D"}]}
cf-ray: 95bbf8666c8756c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2