WEBSITE ANALYSIS REPORT

http://www.fanfiction.ws/s/12409808/1/Losing-Him

05 Mar 2026 · 06:19:28.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:19:02.571 GET 200 document 35.4 KB 439 ms —

06:19:03.150 GET 200 stylesheet 113.9 KB 400 ms —

06:19:03.154 GET 200 script 156.6 KB 401 ms —

06:19:03.156 GET 403 img 0 B 151 ms —

06:19:03.158 GET 403 script 0 B 229 ms —

06:19:03.160 GET 200 script 105.2 KB 878 ms 1 alerts

06:19:03.623 GET 200 script 49.8 KB 168 ms 1 alerts

06:19:03.629 GET 200 font 24.0 KB 396 ms —

06:19:03.822 GET 200 xhr 40 B 318 ms 1 alerts

06:19:03.826 GET 200 script 110.6 KB 837 ms 3 alerts

06:19:03.829 GET 200 script 90.1 KB 834 ms 3 alerts

06:19:03.835 GET 403 img 0 B 1 ms —

06:19:03.837 GET 403 script 0 B 1 ms —

06:19:03.884 GET 200 img 0 B 686 ms 3 alerts

06:19:03.886 GET 200 script 83.4 KB 189 ms 3 alerts

06:19:03.887 GET 200 xhr 40 B 359 ms 1 alerts

06:19:03.898 GET 200 script 0 B 188 ms 3 alerts

06:19:04.053 GET 307 xhr 4.2 KB 665 ms 3 alerts

06:19:04.359 GET 200 script 83.4 KB 23 ms 3 alerts

06:19:04.485 GET 200 img 4.3 KB 9 ms —

06:19:04.486 GET 200 img 1.4 KB 8 ms —

06:19:04.593 GET 200 xhr 4.2 KB 132 ms 3 alerts

06:19:04.653 GET 200 img 0 B 698 ms 3 alerts

06:19:04.654 GET 200 img 0 B 689 ms 3 alerts

06:19:04.750 GET 200 img 31.4 KB 273 ms —

06:19:04.751 GET 200 img 0 B 103 ms 3 alerts

06:19:04.862 GET 200 xhr 5.2 KB 295 ms 3 alerts

06:19:05.164 GET 200 img 0 B 100 ms 3 alerts

06:19:05.165 GET 200 xhr 2.3 KB 485 ms 1 alerts

06:19:05.652 GET 200 img 0 B 98 ms 3 alerts

06:19:05.660 GET 200 xhr 76.9 KB 503 ms 3 alerts

06:19:05.661 GET 200 xhr 6.5 KB 516 ms 3 alerts

06:19:05.771 GET 200 stylesheet 16.4 KB 278 ms —

06:19:05.774 GET 200 img 1.2 KB 12 ms 3 alerts

06:19:05.775 GET 200 img 33.1 KB 10 ms 3 alerts

06:19:05.777 GET 200 script 82.4 KB 16 ms 3 alerts

06:19:05.870 GET 200 script 7.3 KB 18 ms 3 alerts

06:19:05.896 GET 200 xhr 16.5 KB 593 ms 3 alerts

06:19:06.148 GET 200 img 0 B 96 ms 3 alerts

06:19:06.159 GET 200 img 0 B 105 ms 3 alerts

06:19:06.493 GET 200 img 0 B 97 ms 3 alerts

06:19:06.668 GET 200 img 0 B 103 ms 3 alerts

Transaction #35

Request / response

URL

GET HTTPS

https://wayfarerorthodox.com/impr.gif?sid=H4sIAAAAAAAC_1RSPW8cVRR9s3aBRIESLDqkKShA4PWbj53dSYpIER8N2IQEWRES6H3M2I-dnTfMm9ndbOUQoIHCoUBANXt2bYMIEZQ0CK0pQJaQMp2LuMlPQEqNdr2SxS3uvU_n6Once-4X4_KMrKNkp---o0cqSdhGq0ntl7dVKvXA2Ju3bIc26VV7W6WBf9UezlPev-J4fpO-Yr8Via7ecKlDqUMd-02VR7EebixQqOxB6DRD2vTdptPyMcz__zZlA4ZZkP0zchlK1s89iT-AEjOkvV9ej0y30Nlrb_TKhBU6R18evZ92Uz1I0bto49xCnB4t2dCmJuTbBnR6tJwAuj-dTwCuatJ44TF4erSUCd4_OFfKE0QpuHwWg_4MUTKDYjMIfQ9KPiKAkNjcQto73NT5gN05R9kcrcnq03-hBjVZfbyGtPfweqKG9k2dlIXSqcEwrqCGM6idGbLyGMXIghocQxSfQsl_yMbTt5H2plsm0VDy9CWvzTsdNwjXA8Hlut-O6ToPO8F6Kwpa3I0C4bvuYkUqnoGZFZTGQqkslLGFMrPQk6e2Tzu-cJgXxKEUbeoz35cRp2HHpZSFoo1S3IWS-xD55z9kcrfo9j13WuRldFimwnju2HlQfpQlLnVC6lF_7Byesxac6ZwzdpDle-iq-49al2F2KxjZgClqYt3YQ19WBzIxrqkOZWJK7iyru6xeNdHFzpgd6GInSglYvo9cVlOVfWLuQRQrk1Fs5ETPE-NFNWFcVhMli8Y4OyOX5nu3Dp_5Et3o1Jai046CqEV5ELZ4wFuBF_AgFMLz43aHxTCqgjINMGNhpGry6of7yFRNLm3fBmfHMMkxhFoBK18EG1RguxVG6c8xS2Ml5i42BwZSV8iKVRR3rHFyRp6fvHfr-h8L_9mRRCROrv323Ty-h8grZHmFj9WfBDvJ3V-3skL11IjNv7pZsCJaAVM1sa78DqFqsvbk4eI221_dgMj2YLKTa9_89PXfhFgwmoBnFhJVE2_tLyTRBcZ4BROdkGWAX_Rj8xl2cgs8sSY8ya0pT_Lk_rlUo07t2ItcQWmnHTheJ44cz5cibnX8UAaMel6EwtTqR_v2fwEAAP__nceKnR0EAAA=

IP / ASN

172.240.108.68

AS7979 · SERVERS-COM

Requested by: https://www.fanfiction.ws/s/12409808/1/Losing-Him

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 02:29:54.290 UTC
Times seen: 19321257

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R12
Subject: wayfarerorthodox.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 17:4A:E8:7A:8D:4C:22:69:70:30:C3:3D:6A:72:7A:68:E9:D2:3C:83
Valid from: Fri, 27 Feb 2026 00:35:17 GMT
Valid until: Thu, 28 May 2026 00:35:16 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /impr.gif?sid=H4sIAAAAAAAC_1RSPW8cVRR9s3aBRIESLDqkKShA4PWbj53dSYpIER8N2IQEWRES6H3M2I-dnTfMm9ndbOUQoIHCoUBANXt2bYMIEZQ0CK0pQJaQMp2LuMlPQEqNdr2SxS3uvU_n6Once-4X4_KMrKNkp---o0cqSdhGq0ntl7dVKvXA2Ju3bIc26VV7W6WBf9UezlPev-J4fpO-Yr8Via7ecKlDqUMd-02VR7EebixQqOxB6DRD2vTdptPyMcz__zZlA4ZZkP0zchlK1s89iT-AEjOkvV9ej0y30Nlrb_TKhBU6R18evZ92Uz1I0bto49xCnB4t2dCmJuTbBnR6tJwAuj-dTwCuatJ44TF4erSUCd4_OFfKE0QpuHwWg_4MUTKDYjMIfQ9KPiKAkNjcQto73NT5gN05R9kcrcnq03-hBjVZfbyGtPfweqKG9k2dlIXSqcEwrqCGM6idGbLyGMXIghocQxSfQsl_yMbTt5H2plsm0VDy9CWvzTsdNwjXA8Hlut-O6ToPO8F6Kwpa3I0C4bvuYkUqnoGZFZTGQqkslLGFMrPQk6e2Tzu-cJgXxKEUbeoz35cRp2HHpZSFoo1S3IWS-xD55z9kcrfo9j13WuRldFimwnju2HlQfpQlLnVC6lF_7Byesxac6ZwzdpDle-iq-49al2F2KxjZgClqYt3YQ19WBzIxrqkOZWJK7iyru6xeNdHFzpgd6GInSglYvo9cVlOVfWLuQRQrk1Fs5ETPE-NFNWFcVhMli8Y4OyOX5nu3Dp_5Et3o1Jai046CqEV5ELZ4wFuBF_AgFMLz43aHxTCqgjINMGNhpGry6of7yFRNLm3fBmfHMMkxhFoBK18EG1RguxVG6c8xS2Ml5i42BwZSV8iKVRR3rHFyRp6fvHfr-h8L_9mRRCROrv323Ty-h8grZHmFj9WfBDvJ3V-3skL11IjNv7pZsCJaAVM1sa78DqFqsvbk4eI221_dgMj2YLKTa9_89PXfhFgwmoBnFhJVE2_tLyTRBcZ4BROdkGWAX_Rj8xl2cgs8sSY8ya0pT_Lk_rlUo07t2ItcQWmnHTheJ44cz5cibnX8UAaMel6EwtTqR_v2fwEAAP__nceKnR0EAAA= HTTP/1.1
Host: wayfarerorthodox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fanfiction.ws/
Cookie: uid_id2=37b88269-6cbd-47f0-b986-5e65b2e6c422:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.ZrfdfqiBgoXLZZMOW-_TXMkHMq-5odrgGdfagJ3dukg; pdhtkv=true; uncs=2; pdhtkv32=true; uncs32=1; u_pl20190304=1; pdhtkv29=true; uncs29=1; u_pl27658379=1; slecdc87e6e50b695b6b5636b69cc34f78af=[6399844]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 05 Mar 2026 06:19:06 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
access-control-allow-origin: *
vary: Origin
access-control-allow-credentials: true
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
set-cookie: iprc_l+e402543e66c9d6df7ec49cffa1e67123=6399844; expires=Fri, 06 Mar 2026 06:19:06 GMT; path=/; secure; SameSite=None
iprc_l:6399844=1; expires=Fri, 06 Mar 2026 06:19:06 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 3
Host: wayfarerorthodox.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: bb489b8b5feb30b6c030b50911cc8745
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

06:19:06.670 GET 200 img 0 B 94 ms 3 alerts

06:19:06.678 GET 200 font 42.1 KB 148 ms —

06:19:06.679 GET 200 font 42.1 KB 212 ms —

http://www.fanfiction.ws/s/12409808/1/Losing-Him

Domain graph

Hostnames

Connections