urlquery.net
WEBSITE ANALYSIS REPORT

http://nunflix.cx/browser?keyword=Abnormal

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document116.6 KB167 ms1 alerts
GET200stylesheet476.7 KB13 ms1 alerts
GET200stylesheet18.0 KB22 ms—
GET200script82.4 KB12 ms—
GET200script18.2 KB13 ms—
GET200script59.2 KB17 ms—
GET200script145.0 KB17 ms—
GET200script90.8 KB625 ms—
GET200img7.8 KB9 ms1 alerts
GET200img36.2 KB10 ms1 alerts
GET200font318.0 KB15 ms1 alerts
GET200font106.4 KB15 ms1 alerts
GET200script107.3 KB99 ms—
GET200lazy-img39.1 KB25 ms—
GET200lazy-img36.2 KB23 ms—
GET200lazy-img24.3 KB230 ms—
GET200lazy-img22.1 KB19 ms—
GET200lazy-img8.1 KB193 ms—
GET200script83.4 KB121 ms2 alerts
GET200xhr40 B112 ms—
GET302script0 B4 ms1 alerts
GET200script83.4 KB132 ms2 alerts

Transaction #04

Request / response

URL

GET HTTPS
https://preferencenail.com/sfp.js

IP / ASN

The Netherlands 185.196.197.71

AS39572 · DataWeb Global Group B.V.

Requested by
https://nunflix.cx/browser?keyword=Abnormal

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Hagezi Threat Feed SinkholedmediumMalicious
Cloudflare DNS SinkholedmediumMalicious

HTTP headers

Request headers

GET /sfp.js HTTP/1.1
Host: preferencenail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://nunflix.cx/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Thu, 11 Jun 2026 06:31:25 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 32181
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: preferencenail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d52d0a388644b6f66bdd1c90b62cfbb4
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

GET200img0 B0 ms—
GET200script23.1 KB6 ms1 alerts
POST200xhr0 B16 ms1 alerts
GET200img381.4 KB22 ms1 alerts
GET200img381.4 KB23 ms1 alerts
GET200xhr5.1 KB282 ms—
GET200xhr2.2 KB28 ms2 alerts
GET200img0 B0 ms—
GET200xhr76.8 KB488 ms—
GET200xhr4.1 KB492 ms—
GET200img0 B472 ms1 alerts
GET200stylesheet16.4 KB85 ms—
GET200img1.2 KB11 ms—
GET200script82.4 KB14 ms—
GET200img5.3 KB12 ms—
GET200img10.2 KB11 ms—
GET200img201.5 KB14 ms—
GET200xhr17.9 KB577 ms—
GET200img0 B97 ms1 alerts
GET200img0 B381 ms1 alerts
GET200img0 B100 ms1 alerts
GET200img0 B0 ms—
GET200img0 B379 ms—
GET200font42.1 KB81 ms—
GET200font42.1 KB80 ms—
GET200img0 B0 ms3 alerts
GET200img0 B0 ms3 alerts
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot