WEBSITE ANALYSIS REPORT

http://xafonsen.info/nows/9295834

30 Aug 2026 · 17:07:22.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:06:46.783 GET 200 document 496 B 204 ms —

17:06:47.434 GET 200 script 504.4 KB 140 ms —

17:06:47.554 GET 200 img 496 B 27 ms —

17:06:48.187 GET 200 document 41.4 KB 3362 ms 1 alerts

Transaction #14

Request / response

URL

GET HTTPS

https://nya5.com/link?z=5851592&var=H5nQ7aE0wC

IP / ASN

104.18.33.160

AS13335 · CLOUDFLARENET

Requested by: Not recorded

Resource information

File type: HTML document, ASCII text, with very long lines (38985)
MIME type: text/html; charset=utf8
First seen (UTC): 30 Aug 2026 · 17:07:32.356 UTC
Last seen (UTC): 30 Aug 2026 · 17:07:32.356 UTC
Times seen: 1

Size: 41.4 KB (42355 bytes)
MD5: 7f3c4245c4045065f2031e2cf1f50f38
SHA1: 3aefbae3b32a6c0c4d5e5c9e95dd9ce68a903dd0
SHA256: dd32adb837642ce23dc8bae8c88454d0480fffb4608deb0f08fcffefcaa15b2c

Certificate information

Issuer: Google Trust Services · WE1
Subject: nya5.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: B7:6D:A2:9C:CE:52:4D:95:B3:50:3C:90:1B:28:27:C5:77:14:45:16
Valid from: Mon, 27 Jul 2026 22:12:14 GMT
Valid until: Sun, 25 Oct 2026 23:12:06 GMT

Technology fingerprints

HSTS (Security)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /link?z=5851592&var=H5nQ7aE0wC HTTP/1.1
Host: nya5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://xafonsen.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Sun, 30 Aug 2026 17:06:51 GMT
content-type: text/html; charset=utf8
server: cloudflare
set-cookie: OAID=0083a22e760b4d43fe96d740a83a4c94; expires=Mon, 30 Aug 2027 17:06:51 GMT; path=/; secure; SameSite=None
oaidts=1788109611; expires=Mon, 30 Aug 2027 17:06:51 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
__cf_bm=FnEbNwB2mFUQtXIi41k5r7QkSWQp5yF337vOkeDJ7ok-1788109611.3175867-1.0.1.1-xuUstkT3kbRb9snEqgvr1hRZsFW2JDO.7lpP46CLJIW_IlpYZUzF2l2JYg3R1w6M1bkeqnrFW_CHsiNyUqH4sDBaLHlgwtEy7Cx2SBq2vbL4vXNxXx9O1m87hV3TWFNS; HttpOnly; SameSite=None; Secure; Path=/; Domain=nya5.com; Expires=Sun, 30 Aug 2026 17:36:51 GMT
x-trace-id: a574d67f3fa3ac34b6ba64c5ec47e881
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *, *
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: accept-encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: a335636eba5f5ebd-OSL
X-Firefox-Spdy: h2

17:06:51.655 GET 204 img 0 B 24 ms 1 alerts

17:06:51.665 GET 200 lazy-img 43 B 80 ms 1 alerts

17:06:51.912 POST 302 document 0 B 82 ms 1 alerts

17:06:51.998 GET 200 document 269.2 KB 158 ms —

17:06:52.256 GET 200 stylesheet 2.9 KB 11 ms —

17:06:52.260 GET 200 script 1.04 MB 38 ms —

17:06:52.263 GET 200 img 258 B 11 ms —

17:06:52.266 GET 200 img 742 B 53 ms —

17:06:52.267 GET 200 script 240.1 KB 88 ms —

17:06:52.268 POST 204 beacon 0 B 23 ms —

17:06:52.274 GET 200 font 38.6 KB 61 ms —

17:06:52.286 POST 204 csp 0 B 0 ms —

17:06:52.315 GET 200 xhr 102 B 63 ms —

17:06:52.351 POST 204 beacon 0 B 22 ms —

17:06:52.353 POST 204 beacon 0 B 21 ms —

17:06:52.362 GET 200 stylesheet 6.9 KB 15 ms —

17:06:52.367 POST 204 beacon 0 B 21 ms —

17:06:52.403 POST 204 beacon 0 B 20 ms —

17:06:52.438 POST 200 xhr 53 B 86 ms —

17:06:52.441 OPTIONS 200 xhr 0 B 81 ms —

17:06:52.693 GET 200 script 162.4 KB 10 ms —

17:06:52.695 GET 200 script 143.6 KB 12 ms —

17:06:52.697 GET 200 fetch 12.5 KB 10 ms —

17:06:52.699 POST 204 beacon 0 B 21 ms —

17:06:52.700 POST 204 beacon 0 B 24 ms —

17:06:52.717 GET 200 img 1.3 KB 15 ms —

17:06:52.791 GET 200 xhr 39 B 32 ms —

17:06:52.815 GET 200 script 299.3 KB 13 ms —

17:06:52.821 POST 204 beacon 0 B 21 ms —

17:06:52.825 POST 204 beacon 0 B 20 ms —

17:06:52.843 GET 200 xhr 102 B 36 ms —

17:06:52.911 GET 200 script 26.1 KB 10 ms —

17:06:52.914 POST 204 beacon 0 B 20 ms —

17:06:52.916 GET 204 xhr 0 B 25 ms —

17:06:52.966 POST 204 beacon 0 B 21 ms —

17:06:52.970 GET 200 script 200.5 KB 12 ms —

17:06:52.973 POST 204 beacon 0 B 22 ms —

17:06:53.005 GET 200 script 2.0 KB 10 ms —

17:06:53.432 POST 200 xhr 131 B 82 ms —

17:06:53.433 OPTIONS 200 xhr 0 B 81 ms —

http://xafonsen.info/nows/9295834

Domain graph

Hostnames

Connections

Network requests

Transaction #14

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://xafonsen.info/nows/9295834

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #14

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://xafonsen.info/nows/9295834

Domain graph

Network requests