WEBSITE ANALYSIS REPORT

http://nicefap.fun/dhbjxmoffhnc

11 Oct 2026 · 14:19:06.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:18:32.293 GET 404 document 7.4 KB 147 ms 1 alerts

14:18:32.604 GET 301 document 0 B 118 ms 1 alerts

14:18:32.729 GET 404 document 7.4 KB 206 ms 1 alerts

14:18:33.042 GET 200 stylesheet 215.5 KB 31 ms 1 alerts

14:18:33.044 GET 200 stylesheet 23.2 KB 46 ms 1 alerts

14:18:33.050 GET 200 script 85.5 KB 56 ms 1 alerts

14:18:33.051 GET 200 script 18.5 KB 48 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://nicefap.fun/themes/altum/assets/js/libraries/popper.min.js?v=4100

IP / ASN

104.21.62.166

AS13335 · CLOUDFLARENET

Requested by: https://nicefap.fun/dhbjxmoffhnc

Resource information

File type: JavaScript source, ASCII text, with very long lines (18860)
MIME type: text/javascript
First seen (UTC): 07 Mar 2023 · 01:03:31.000 UTC
Last seen (UTC): 23 Oct 2026 · 12:43:47.129 UTC
Times seen: 7592

Size: 18.5 KB (18994 bytes)
MD5: 3621381129597bf34d48a9e2623e05c9
SHA1: edb00146d1636c247c7afaa61f11aad0c0fc5120
SHA256: 3675f226f985b64eea6ae8544d5496a32d19993aae1ac4a3fa101263ef3206f7

Certificate information

Issuer: Google Trust Services · WE1
Subject: nicefap.fun
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 13:BE:DC:46:2A:6A:18:65:76:F5:00:39:4B:68:2D:2B:37:79:09:A3
Valid from: Wed, 30 Sep 2026 11:32:47 GMT
Valid until: Tue, 29 Dec 2026 12:30:16 GMT

Technology fingerprints

Litespeed Cache (Caching, WordPress plugins)
Cloudflare (CDN)
LiteSpeed Cache (Caching, WordPress plugins)
LiteSpeed (Web servers)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /themes/altum/assets/js/libraries/popper.min.js?v=4100 HTTP/1.1
Host: nicefap.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://nicefap.fun/dhbjxmoffhnc
Cookie: PHPSESSID=tsnl86unjgk5k6maurdv6uu9e5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Sun, 11 Oct 2026 14:18:33 GMT
content-type: text/javascript
server-timing: cfExtPri
cache-control: public, max-age=2592000
expires: Mon, 26 Oct 2026 20:32:40 GMT
last-modified: Thu, 26 Oct 2023 15:36:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
age: 1273552
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
priority: u=3,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=MGSBSSD1IM7pBH69XwuhsRB3TpPdW1uSOvx8jsKlcrtFtnwkkF%2Bf9SzmIcN1Pj%2B97rOgFC0cWF3ViosLfE1s0Qh8z5bK%2BejykiLFgKfvrn2M67bksz6RgQnwDl71YA%3D%3D"}]}
cf-ray: a48e7ea49be9712e-OSL
content-length: 6545

14:18:33.054 GET 200 script 61.9 KB 46 ms 1 alerts

14:18:33.055 GET 200 script 30.8 KB 18 ms 1 alerts

14:18:33.057 GET 200 script 55.5 KB 48 ms 1 alerts

14:18:33.059 GET 200 script 806.9 KB 53 ms 1 alerts

14:18:33.062 GET 200 script 465.1 KB 43 ms 1 alerts

14:18:33.135 GET 200 lazy-img 23.0 KB 16 ms 1 alerts

14:18:33.289 GET 200 img 20.8 KB 102 ms 1 alerts

14:18:33.292 GET 302 script 0 B 10 ms 1 alerts

14:18:33.331 GET 200 script 23.4 KB 29 ms 1 alerts

14:18:33.475 POST 200 xhr 0 B 14 ms 1 alerts

http://nicefap.fun/dhbjxmoffhnc

Domain graph

Hostnames

Connections