urlquery.net
WEBSITE ANALYSIS REPORT

http://doramore.com/dorama/high-school-return-of-a-gangster

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document35.9 KB118 ms1 alerts
GET200stylesheet5.9 KB95 ms—
GET200stylesheet99.6 KB59 ms—
GET200stylesheet3.3 KB34 ms—
GET200stylesheet1013 B45 ms—
GET200script94.6 KB70 ms—
GET200script17.3 KB66 ms—
GET200stylesheet989 B57 ms1 alerts
GETNo responsescript0 B0 ms—
GET200script164.0 KB46 ms2 alerts
GET200stylesheet11.7 KB56 ms1 alerts
GET200stylesheet5.6 KB61 ms1 alerts
GET200stylesheet557 B78 ms1 alerts
GET200script87.4 KB58 ms—
GET200script43.3 KB45 ms—
GET200script8.7 KB46 ms—
GET200script13.0 KB58 ms1 alerts
GET200script7.1 KB40 ms1 alerts

Transaction #21

Request / response

URL

GET HTTPS
https://waust.at/s.js

IP / ASN

Country unknown 172.67.71.57

AS13335 · CLOUDFLARENET

Requested by
https://doramore.com/dorama/high-school-return-of-a-gangster

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /s.js HTTP/1.1
Host: waust.at
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://doramore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Sat, 18 Jul 2026 19:59:33 GMT
content-type: application/x-javascript
last-modified: Sun, 17 May 2026 17:20:31 GMT
etag: "6a09f8df-1c76"
expires: Sun, 19 Jul 2026 19:32:53 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
age: 1600
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=84Qo8Yhk7zW36kMLt7dVFHono1sRW%2BgoUlegjlDCNbNp%2BE%2F%2F1VjSg4mOonPG2E9zIiVx6TyrvsIN8kBpUKe58SmuaN4RkmebKDs9ZTcQ%2FqgH41I3ufjvdQO6"}]}
cf-cache-status: HIT
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
priority: u=3,i=?0
cf-ray: a1d4114d0efe1a30-OSL
server-timing: cfExtPri

GET200img41.6 KB105 ms1 alerts
GET200img56.4 KB97 ms1 alerts
GET200img85.7 KB102 ms1 alerts
GET200img52.5 KB103 ms1 alerts
GET200img126.0 KB160 ms1 alerts
GET200img77.5 KB106 ms1 alerts
GET200img0 B0 ms1 alerts
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot