Archive Watch Central — investigation hub

Technical breakdown — how the reported code works

The reported script uses a repeating timer (a setInterval) that, on each tick, constructs a URL containing a randomized query string and issues a request. Because each request is different, responses do not hit caches and force the server to process the request. In the report the interval is ~300ms (≈3 requests per second), sustained as long as the page remains open.

Simplified pattern (not executed on this page):
// visual only — do not run
setInterval(function() {
  // build a randomized query string to avoid caching:
  // e.g. https://gyrovague.com/?s=abc123
  // (this demo does NOT perform a network fetch)
}, 300);

Practical effect: sustained, repeated requests at this cadence can consume CPU, database connections, memory and bandwidth on small/low-capacity sites — effectively DDoS-level load if persistent or multiplied across many visitors.

Timeline & community reaction

Public reporting and community threads document when the behavior was observed, show code screenshots, and debate motives and responsibility. The story spread on discussion platforms and drew technical scrutiny from multiple independent observers.

Who runs archive.today?

Archive.today is widely mirrored and uses multiple domains. Public reporting shows authorities have sought registrar information in order to unmask the site's anonymous operator; that legal and investigative context is separate from the specific technical behavior reported and is documented in news reports linked below.

Simulation of Repeated Request Attack (safe)
This is a visual simulation only — it does not send network requests. The log shows how the observed request URLs would look: https://gyrovague.com/?s=<random>.
Simulated request stream
Each dot = one simulated request (no network traffic).
Interval300ms
Requests / sec3.33
Total requests47
[Simulation log]
[5:37:28 PM] GET https://gyrovague.com/?s=ru2c7120
[5:37:28 PM] GET https://gyrovague.com/?s=9yjq77
[5:37:28 PM] GET https://gyrovague.com/?s=8wwp5j4a
[5:37:29 PM] GET https://gyrovague.com/?s=kkcc8y
[5:37:29 PM] GET https://gyrovague.com/?s=nnf0k5fd
[5:37:29 PM] GET https://gyrovague.com/?s=c3nlpv
[5:37:30 PM] GET https://gyrovague.com/?s=nuekd
[5:37:30 PM] GET https://gyrovague.com/?s=hhwlts8n
[5:37:30 PM] GET https://gyrovague.com/?s=dd1tc9
[5:37:30 PM] GET https://gyrovague.com/?s=xcompc
[5:37:31 PM] GET https://gyrovague.com/?s=75trh2dg
[5:37:31 PM] GET https://gyrovague.com/?s=blhovrbq
[5:37:31 PM] GET https://gyrovague.com/?s=7j4e
[5:37:32 PM] GET https://gyrovague.com/?s=6cd
[5:37:32 PM] GET https://gyrovague.com/?s=2qjni3
[5:37:32 PM] GET https://gyrovague.com/?s=xn2vb
[5:37:33 PM] GET https://gyrovague.com/?s=2486l0lh
[5:37:33 PM] GET https://gyrovague.com/?s=vur563
[5:37:33 PM] GET https://gyrovague.com/?s=up5
[5:37:33 PM] GET https://gyrovague.com/?s=cvwcdlx
[5:37:34 PM] GET https://gyrovague.com/?s=yw66g01g
[5:37:34 PM] GET https://gyrovague.com/?s=215ukm9
[5:37:34 PM] GET https://gyrovague.com/?s=8a137x4f
[5:37:35 PM] GET https://gyrovague.com/?s=j5gq74aj
[5:37:35 PM] GET https://gyrovague.com/?s=zaar4er
[5:37:35 PM] GET https://gyrovague.com/?s=18uu73
[5:37:36 PM] GET https://gyrovague.com/?s=b98eat2
[5:37:36 PM] GET https://gyrovague.com/?s=khs89y
[5:37:36 PM] GET https://gyrovague.com/?s=z9dvhb
[5:37:36 PM] GET https://gyrovague.com/?s=u4ai
[5:37:37 PM] GET https://gyrovague.com/?s=rfnu6c3q
[5:37:37 PM] GET https://gyrovague.com/?s=6alltquc
[5:37:37 PM] GET https://gyrovague.com/?s=9sltqp
[5:37:38 PM] GET https://gyrovague.com/?s=szx
[5:37:38 PM] GET https://gyrovague.com/?s=hlisup3
[5:37:38 PM] GET https://gyrovague.com/?s=8kbl8pd
[5:37:39 PM] GET https://gyrovague.com/?s=a5o9hp
[5:37:39 PM] GET https://gyrovague.com/?s=n3gjxqa6
[5:37:39 PM] GET https://gyrovague.com/?s=qzqb
[5:37:39 PM] GET https://gyrovague.com/?s=9ui1
[5:37:40 PM] GET https://gyrovague.com/?s=zuorm2
[5:37:40 PM] GET https://gyrovague.com/?s=lm6k
[5:37:40 PM] GET https://gyrovague.com/?s=brx
[5:37:41 PM] GET https://gyrovague.com/?s=6l5bd
[5:37:41 PM] GET https://gyrovague.com/?s=njxdoip
[5:37:41 PM] GET https://gyrovague.com/?s=9ul
[5:37:42 PM] GET https://gyrovague.com/?s=v5u8fvi
Tip: move the interval slider to show higher or lower request rates. Reset will clear the log and counters.
Executive summary

Reported technical fact: a CAPTCHA page on archive.today was reported to run client-side code that generated repeated requests to third-party blogs (example shown in the linked investigation). These repeated requests were observed at ~300ms intervals and are described in the linked materials as creating sustained load.
(All claims are attributed to the sources linked on this page.)

Comments