WEBSITE ANALYSIS REPORT

http://nicefap.fun

04 Sep 2026 · 16:55:31.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

alaphoid.com26 captured requests
cdn.bakestubborn.com9 captured requests
cdn.fluidplayer.com1 captured requests
cdn.show-sb.com2 captured requests
cdn.storageimagedisplay.com4 captured requests
cdrrnywfkfk3b44h.public.blob.vercel-storage.com1 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com3 captured requests
fonts.gstatic.com7 captured requests
mamshirt.com2 captured requests
nicefap.fun1 captured requests
portalfluently.com2 captured requests
raw.githubusercontent.com1 captured requests
s.w.org1 captured requests
seminarycentral.org7 captured requests
slimgather.com2 captured requests
static.nresystems.com2 captured requests
superfap.icu161 captured requests
vivodemisrentas.net3 captured requests
www.welcome-step.com2 captured requests

Connections

nicefap.fun → superfap.icuRedirects to1 captured connections
superfap.icu → alaphoid.comCalls11 captured connections
superfap.icu → alaphoid.comLoads from15 captured connections
superfap.icu → cdn.bakestubborn.comCalls6 captured connections
superfap.icu → cdn.bakestubborn.comLoads from3 captured connections
superfap.icu → cdn.fluidplayer.comLoads from1 captured connections
superfap.icu → cdn.show-sb.comCalls2 captured connections
superfap.icu → cdn.storageimagedisplay.comLoads from4 captured connections
superfap.icu → cdrrnywfkfk3b44h.public.blob.vercel-storage.comLoads from1 captured connections
superfap.icu → flushpersist.comLoads from2 captured connections
superfap.icu → fonts.googleapis.comLoads from3 captured connections
superfap.icu → fonts.gstatic.comLoads from7 captured connections
superfap.icu → mamshirt.comLoads from2 captured connections
superfap.icu → portalfluently.comLoads from2 captured connections
superfap.icu → raw.githubusercontent.comCalls1 captured connections
superfap.icu → s.w.orgLoads from1 captured connections
superfap.icu → seminarycentral.orgCalls7 captured connections
superfap.icu → slimgather.comCalls1 captured connections
superfap.icu → slimgather.comLoads from1 captured connections
superfap.icu → static.nresystems.comLoads from2 captured connections
superfap.icu → vivodemisrentas.netCalls2 captured connections
superfap.icu → vivodemisrentas.netLoads from1 captured connections
superfap.icu → www.welcome-step.comCalls1 captured connections
superfap.icu → www.welcome-step.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:54:47.519 GET 302 document 0 B 220 ms 1 alerts

16:54:47.748 GET 200 document 241.4 KB 240 ms —

16:54:48.324 GET 200 stylesheet 5.8 KB 85 ms —

16:54:48.327 GET 200 stylesheet 30.3 KB 26 ms —

16:54:48.328 GET 200 stylesheet 10.5 KB 316 ms —

16:54:48.331 GET 200 stylesheet 81.2 KB 19 ms —

16:54:48.332 GET 200 script 267.5 KB 3193 ms —

16:54:48.334 GET 200 script 85.5 KB 22 ms —

16:54:48.335 GET 200 script 13.3 KB 22 ms —

16:54:48.337 GET 200 script 10.3 KB 63 ms —

16:54:48.339 GET 200 script 1.3 KB 68 ms —

16:54:48.341 GET 200 script 41.2 KB 26 ms —

16:54:48.343 GET 200 script 683 B 70 ms —

16:54:48.344 GET 200 script 3.3 KB 66 ms —

16:54:48.351 GET 200 img 1.1 KB 68 ms —

16:54:49.844 GET 200 img 20.7 KB 17 ms —

16:54:51.652 GET 200 font 75.4 KB 63 ms —

16:54:51.653 GET 200 font 18.2 KB 84 ms —

16:54:51.655 GET 200 font 42.1 KB 82 ms —

16:54:51.655 GET 200 font 42.1 KB 81 ms —

16:54:51.695 GET 404 fetch 14 B 37 ms —

16:54:51.701 GET 200 script 79.4 KB 6587 ms —

16:54:51.702 GET 200 script 106.8 KB 100 ms —

16:54:53.079 GET 200 img 7.7 KB 22 ms —

16:54:53.080 GET 200 img 1.2 KB 56 ms —

16:54:58.334 GET 200 script 4.3 KB 3183 ms —

16:54:58.337 GET 200 script 37.1 KB 139 ms 1 alerts

Transaction #89

Request / response

URL

GET HTTPS

https://portalfluently.com/sfp.js

IP / ASN

172.255.141.4

AS7979 · SERVERS-COM

Requested by: https://superfap.icu/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (37943), with no line terminators
MIME type: application/javascript; charset=utf-8
First seen (UTC): 03 Sep 2026 · 11:38:17.004 UTC
Last seen (UTC): 23 Oct 2026 · 11:56:41.085 UTC
Times seen: 5053

Size: 37.1 KB (37950 bytes)
MD5: 8b2235271c16f8771b21b86e1f28b646
SHA1: 79076a682bb500cf7ce5a0c3b7791f444f0b4745
SHA256: 2c474c90d59dd2f40732e241bcaa6d9dfdcad896d3689f7e3a4d0383aecdc7ae

Certificate information

Issuer: Let's Encrypt · YR2
Subject: portalfluently.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 04:7E:87:1C:D4:BF:C8:7A:47:9E:4C:FB:2A:44:D1:25:8D:83:7F:1A
Valid from: Mon, 17 Aug 2026 23:40:44 GMT
Valid until: Sun, 15 Nov 2026 23:40:43 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.30.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /sfp.js HTTP/1.1
Host: portalfluently.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://superfap.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.30.2
Date: Fri, 04 Sep 2026 16:54:58 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
access-control-allow-origin: *
content-encoding: zstd
vary: Accept-Encoding
x-envoy-upstream-service-time: 2
Host: portalfluently.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: ef0f3fab097be4d3e9f3c197c66d68bd
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

16:54:58.338 POST 200 fetch 0 B 57 ms —

16:54:58.340 GET 200 img 0 B 0 ms —

16:54:58.344 GET 200 script 37.1 KB 122 ms 1 alerts

16:54:58.346 GET 200 script 4.3 KB 3185 ms —

16:54:58.349 GET 200 script 36.4 KB 174 ms —

16:54:58.354 GET 200 img 0 B 0 ms —

16:54:58.365 GET 302 script 0 B 9 ms —

16:54:58.378 GET 200 xhr 76 B 104 ms —

16:54:58.380 GET 200 xhr 76 B 96 ms —

16:54:58.388 GET 200 script 21.8 KB 9 ms —

16:54:58.570 GET 200 img 98.0 KB 23 ms —

16:54:58.572 GET 200 img 10.8 KB 37 ms —

16:54:58.573 GET 200 img 17.6 KB 18 ms —

16:54:58.574 GET 200 img 71.4 KB 24 ms —

16:54:58.576 GET 200 img 57.7 KB 19 ms —

16:54:58.577 GET 200 img 14.2 KB 25 ms —

16:54:58.578 GET 200 img 24.8 KB 18 ms —

16:54:58.580 GET 200 img 15.3 KB 26 ms —

16:54:58.581 GET 200 img 98.9 KB 20 ms —

16:54:58.583 GET 200 img 198.2 KB 28 ms —

16:54:58.584 GET 200 img 55.1 KB 23 ms —

16:54:58.586 GET 200 img 14.8 KB 20 ms —

16:54:58.587 GET 200 img 98.8 KB 21 ms —

http://nicefap.fun

Domain graph

Hostnames

Connections

Network requests

Transaction #89

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://nicefap.fun

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #89

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://nicefap.fun

Domain graph

Network requests