WEBSITE ANALYSIS REPORT

http://inidtrafan.life/cvkr/46285-onlyfans-leaked-nude

31 Dec 2025 · 10:26:28.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

10:26:06.153 GET 200 document 2.7 KB 10757 ms —

10:26:17.102 GET 200 script 438.8 KB 359 ms —

10:26:17.106 GET 403 script 0 B 774 ms 3 alerts

10:26:17.108 GET 403 script 0 B 762 ms 3 alerts

10:26:17.608 GET 403 script 0 B 95 ms 3 alerts

Transaction #14

Request / response

URL

GET HTTPS

https://pollingpayoff.com/4ee2db58adb8afc709a6004b40577412/invoke.js

IP / ASN

172.240.108.76

AS7979 · SERVERS-COM

Requested by: https://inidtrafan.life/cvkr/46285-onlyfans-leaked-nude

Resource information

File type: Not recorded
MIME type: application/javascript
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 09:29:56.102 UTC
Times seen: 19328616

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R13
Subject: pollingpayoff.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 38:5B:48:3E:00:12:AD:10:A2:3C:02:44:3E:B3:D3:9A:27:40:80:DA
Valid from: Sun, 02 Nov 2025 08:55:14 GMT
Valid until: Sat, 31 Jan 2026 08:55:13 GMT

Technology fingerprints

Envoy (Reverse proxies)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS0 Zero Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /4ee2db58adb8afc709a6004b40577412/invoke.js HTTP/1.1
Host: pollingpayoff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inidtrafan.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Wed, 31 Dec 2025 10:26:17 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 1
Host: pollingpayoff.com

10:26:17.707 POST 204 fetch 0 B 230 ms —

10:26:17.708 GET 200 img 42 B 640 ms —

10:26:17.711 GET No response img 0 B 0 ms —

10:26:18.685 GET 302 document 23.8 KB 331 ms 1 alerts

10:26:18.968 GET 200 document 23.8 KB 317 ms 3 alerts

10:26:19.379 POST 204 fetch 0 B 22 ms —

10:26:19.439 GET 200 script 130.9 KB 322 ms —

10:26:19.443 GET 200 img 80.3 KB 109 ms 1 alerts

10:26:19.725 GET 200 subdocument 21.8 KB 432 ms —

10:26:19.729 GET 200 xhr 0 B 34 ms 3 alerts

10:26:19.768 GET 200 img 14.7 KB 10 ms 1 alerts

10:26:20.098 GET 200 script 130.9 KB 42 ms —

10:26:20.231 GET 200 xhr 10.3 KB 298 ms —

10:26:20.258 GET 200 lazy-img 200 B 253 ms —

10:26:20.259 GET 200 lazy-img 391 B 654 ms —

10:26:20.582 GET 200 script 19.5 KB 183 ms —

10:26:20.724 GET 200 subdocument 12.9 KB 9 ms —

10:26:21.732 GET 204 img 0 B 51 ms —

10:26:21.734 GET 204 img 0 B 49 ms —

http://inidtrafan.life/cvkr/46285-onlyfans-leaked-nude

Domain graph

Hostnames

Connections