WEBSITE ANALYSIS REPORT

http://xafonsen.info/nows/9295834

30 Aug 2026 · 17:07:22.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:06:46.783 GET 200 document 496 B 204 ms —

17:06:47.434 GET 200 script 504.4 KB 140 ms —

17:06:47.554 GET 200 img 496 B 27 ms —

17:06:48.187 GET 200 document 41.4 KB 3362 ms 1 alerts

17:06:51.655 GET 204 img 0 B 24 ms 1 alerts

17:06:51.665 GET 200 lazy-img 43 B 80 ms 1 alerts

Transaction #06

Request / response

URL

GET HTTPS

https://nya5.com/sftouch?branchId=0&p_rid=33da0e8d-c492-491a-a22a-d7a6faaa0995&p_src=sf&rb=QsRcFV198oL5amIJxoejaOl3IEXf-ReaIi9pGTEs2rsU38tZVKp4qKZ5agoiIWr9vr0fs2BTAIeRlgiO7-wxJ3viZwvff-Jl3Mz6pj4t4jDXD7mSJRWVFYVG-724Hhf3kDtlUS3yesw6QeLu0cgdlRodjSIB_kxVD83Yj0c93NB94Kv_qB4EhGq1t8gO77s62V9w4ToU9KFIq0fqRkEqFucC9mxTOLHfvK9wlaw-38HpmZmXkLPvHCcO3vMU1oNOafw8xWF4eZzC38cRwQrK0Cokeyu9rChFcrMyRWMT1TRI-u8OOA0GQEBbanusY9XHa0xKv-b2rSAuxmRQdffYTsh8OkI0NJ6V3nuPkQ%3D%3D&userId=0083a22e760b4d43fe96d740a83a4c94&w_img=1&z=5851593

IP / ASN

104.18.33.160

AS13335 · CLOUDFLARENET

Requested by: https://nya5.com/link?z=5851592&var=H5nQ7aE0wC

Resource information

File type: GIF image data, version 89a, 1 x 1
MIME type: image/gif
First seen (UTC): 05 Apr 2023 · 03:49:37.000 UTC
Last seen (UTC): 24 Oct 2026 · 08:28:35.778 UTC
Times seen: 117043

Size: 43 B (43 bytes)
MD5: df3e567d6f16d040326c7a0ea29a4f41
SHA1: ea7df583983133b62712b5e73bffbcd45cc53736
SHA256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87

Certificate information

Issuer: Google Trust Services · WE1
Subject: nya5.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: B7:6D:A2:9C:CE:52:4D:95:B3:50:3C:90:1B:28:27:C5:77:14:45:16
Valid from: Mon, 27 Jul 2026 22:12:14 GMT
Valid until: Sun, 25 Oct 2026 23:12:06 GMT

Technology fingerprints

HSTS (Security)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /sftouch?branchId=0&p_rid=33da0e8d-c492-491a-a22a-d7a6faaa0995&p_src=sf&rb=QsRcFV198oL5amIJxoejaOl3IEXf-ReaIi9pGTEs2rsU38tZVKp4qKZ5agoiIWr9vr0fs2BTAIeRlgiO7-wxJ3viZwvff-Jl3Mz6pj4t4jDXD7mSJRWVFYVG-724Hhf3kDtlUS3yesw6QeLu0cgdlRodjSIB_kxVD83Yj0c93NB94Kv_qB4EhGq1t8gO77s62V9w4ToU9KFIq0fqRkEqFucC9mxTOLHfvK9wlaw-38HpmZmXkLPvHCcO3vMU1oNOafw8xWF4eZzC38cRwQrK0Cokeyu9rChFcrMyRWMT1TRI-u8OOA0GQEBbanusY9XHa0xKv-b2rSAuxmRQdffYTsh8OkI0NJ6V3nuPkQ%3D%3D&userId=0083a22e760b4d43fe96d740a83a4c94&w_img=1&z=5851593 HTTP/1.1
Host: nya5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://nya5.com/link?z=5851592&var=H5nQ7aE0wC
Cookie: OAID=0083a22e760b4d43fe96d740a83a4c94; oaidts=1788109611; __cf_bm=FnEbNwB2mFUQtXIi41k5r7QkSWQp5yF337vOkeDJ7ok-1788109611.3175867-1.0.1.1-xuUstkT3kbRb9snEqgvr1hRZsFW2JDO.7lpP46CLJIW_IlpYZUzF2l2JYg3R1w6M1bkeqnrFW_CHsiNyUqH4sDBaLHlgwtEy7Cx2SBq2vbL4vXNxXx9O1m87hV3TWFNS
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Sun, 30 Aug 2026 17:06:51 GMT
content-type: image/gif
content-length: 43
server: cloudflare
x-trace-id: b39d8b4f6ff14b8c939832e4c9b61852
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *, *
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
cf-ray: a3356370eabd5ebd-OSL
X-Firefox-Spdy: h2

17:06:51.912 POST 302 document 0 B 82 ms 1 alerts

17:06:51.998 GET 200 document 269.2 KB 158 ms —

17:06:52.256 GET 200 stylesheet 2.9 KB 11 ms —

17:06:52.260 GET 200 script 1.04 MB 38 ms —

17:06:52.263 GET 200 img 258 B 11 ms —

17:06:52.266 GET 200 img 742 B 53 ms —

17:06:52.267 GET 200 script 240.1 KB 88 ms —

17:06:52.268 POST 204 beacon 0 B 23 ms —

17:06:52.274 GET 200 font 38.6 KB 61 ms —

17:06:52.286 POST 204 csp 0 B 0 ms —

17:06:52.315 GET 200 xhr 102 B 63 ms —

17:06:52.351 POST 204 beacon 0 B 22 ms —

17:06:52.353 POST 204 beacon 0 B 21 ms —

17:06:52.362 GET 200 stylesheet 6.9 KB 15 ms —

17:06:52.367 POST 204 beacon 0 B 21 ms —

17:06:52.403 POST 204 beacon 0 B 20 ms —

17:06:52.438 POST 200 xhr 53 B 86 ms —

17:06:52.441 OPTIONS 200 xhr 0 B 81 ms —

17:06:52.693 GET 200 script 162.4 KB 10 ms —

17:06:52.695 GET 200 script 143.6 KB 12 ms —

17:06:52.697 GET 200 fetch 12.5 KB 10 ms —

17:06:52.699 POST 204 beacon 0 B 21 ms —

17:06:52.700 POST 204 beacon 0 B 24 ms —

17:06:52.717 GET 200 img 1.3 KB 15 ms —

17:06:52.791 GET 200 xhr 39 B 32 ms —

17:06:52.815 GET 200 script 299.3 KB 13 ms —

17:06:52.821 POST 204 beacon 0 B 21 ms —

17:06:52.825 POST 204 beacon 0 B 20 ms —

17:06:52.843 GET 200 xhr 102 B 36 ms —

17:06:52.911 GET 200 script 26.1 KB 10 ms —

17:06:52.914 POST 204 beacon 0 B 20 ms —

17:06:52.916 GET 204 xhr 0 B 25 ms —

17:06:52.966 POST 204 beacon 0 B 21 ms —

17:06:52.970 GET 200 script 200.5 KB 12 ms —

17:06:52.973 POST 204 beacon 0 B 22 ms —

17:06:53.005 GET 200 script 2.0 KB 10 ms —

17:06:53.432 POST 200 xhr 131 B 82 ms —

17:06:53.433 OPTIONS 200 xhr 0 B 81 ms —

http://xafonsen.info/nows/9295834

Domain graph

Hostnames

Connections

Network requests

Transaction #06

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://xafonsen.info/nows/9295834

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #06

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://xafonsen.info/nows/9295834

Domain graph

Network requests