WEBSITE ANALYSIS REPORT

http://nicefap.fun

22 Aug 2026 · 11:12:26.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

alaphoid.com14 captured requests
cdn.fluidplayer.com1 captured requests
cdn.redgarto.com4 captured requests
cdn.show-sb.com1 captured requests
cdn.storageimagedisplay.com2 captured requests
cdrrnywfkfk3b44h.public.blob.vercel-storage.com1 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com3 captured requests
fonts.gstatic.com5 captured requests
mamshirt.com2 captured requests
nicefap.fun1 captured requests
portalfluently.com2 captured requests
raw.githubusercontent.com1 captured requests
slimgather.com2 captured requests
static.nresystems.com2 captured requests
superfap.icu163 captured requests
vivodemisrentas.net2 captured requests
www.worrisomegold.com2 captured requests

Connections

nicefap.fun → superfap.icuRedirects to1 captured connections
superfap.icu → alaphoid.comCalls6 captured connections
superfap.icu → alaphoid.comLoads from8 captured connections
superfap.icu → cdn.fluidplayer.comLoads from1 captured connections
superfap.icu → cdn.redgarto.comCalls3 captured connections
superfap.icu → cdn.redgarto.comLoads from1 captured connections
superfap.icu → cdn.show-sb.comCalls1 captured connections
superfap.icu → cdn.storageimagedisplay.comLoads from2 captured connections
superfap.icu → cdrrnywfkfk3b44h.public.blob.vercel-storage.comLoads from1 captured connections
superfap.icu → flushpersist.comLoads from2 captured connections
superfap.icu → fonts.googleapis.comLoads from3 captured connections
superfap.icu → fonts.gstatic.comLoads from5 captured connections
superfap.icu → mamshirt.comLoads from2 captured connections
superfap.icu → portalfluently.comLoads from2 captured connections
superfap.icu → raw.githubusercontent.comCalls1 captured connections
superfap.icu → slimgather.comCalls1 captured connections
superfap.icu → slimgather.comLoads from1 captured connections
superfap.icu → static.nresystems.comLoads from2 captured connections
superfap.icu → vivodemisrentas.netCalls1 captured connections
superfap.icu → vivodemisrentas.netLoads from1 captured connections
superfap.icu → www.worrisomegold.comCalls1 captured connections
superfap.icu → www.worrisomegold.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

11:11:44.202 GET 302 document 0 B 69 ms 1 alerts

11:11:44.281 GET 200 document 239.9 KB 164 ms —

11:11:44.792 GET 200 stylesheet 5.8 KB 88 ms —

11:11:44.794 GET 200 stylesheet 30.3 KB 27 ms —

11:11:44.796 GET 200 stylesheet 10.5 KB 308 ms —

11:11:44.797 GET 200 stylesheet 81.2 KB 18 ms —

11:11:44.799 GET 200 script 267.5 KB 6573 ms —

11:11:44.800 GET 200 script 85.5 KB 16 ms —

11:11:44.801 GET 200 script 13.3 KB 15 ms —

11:11:44.802 GET 200 script 10.3 KB 57 ms —

11:11:44.805 GET 200 script 1.3 KB 68 ms —

11:11:44.806 GET 200 script 41.2 KB 23 ms —

11:11:44.808 GET 200 script 683 B 62 ms —

11:11:44.809 GET 200 script 3.3 KB 58 ms —

11:11:44.815 GET 200 img 1.1 KB 70 ms —

11:11:46.307 GET 200 img 20.7 KB 13 ms —

11:11:51.565 GET 200 font 75.4 KB 24 ms —

11:11:51.567 GET 200 font 18.2 KB 105 ms —

11:11:51.569 GET 200 font 42.1 KB 111 ms —

11:11:51.571 GET 200 font 42.1 KB 110 ms —

11:11:51.576 GET 404 fetch 14 B 196 ms —

11:11:51.583 GET 200 script 85.5 KB 128 ms —

11:11:51.586 GET 200 script 104.8 KB 110 ms —

11:11:51.816 GET 200 script 4.2 KB 3171 ms —

11:11:51.818 GET 200 script 83.4 KB 148 ms 1 alerts

11:11:51.821 GET 200 img 0 B 0 ms —

11:11:51.825 GET 200 script 83.4 KB 159 ms 1 alerts

Transaction #163

Request / response

URL

GET HTTPS

https://portalfluently.com/sfp.js

IP / ASN

23.111.84.228

AS7979 · SERVERS-COM

Requested by: https://superfap.icu/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
MIME type: application/javascript; charset=utf-8
First seen (UTC): 18 Nov 2025 · 17:36:30.149 UTC
Last seen (UTC): 03 Sep 2026 · 10:37:11.150 UTC
Times seen: 27836

Size: 83.4 KB (85379 bytes)
MD5: b3a5ba94d627e64a77c0e11eaffc96ed
SHA1: f7358693b31e44211dd98b5aa0dc2a3f423286aa
SHA256: 600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34

Certificate information

Issuer: Let's Encrypt · YR2
Subject: portalfluently.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 04:7E:87:1C:D4:BF:C8:7A:47:9E:4C:FB:2A:44:D1:25:8D:83:7F:1A
Valid from: Mon, 17 Aug 2026 23:40:44 GMT
Valid until: Sun, 15 Nov 2026 23:40:43 GMT

Technology fingerprints

Nginx:1.30.2 (Web servers, Reverse proxies)
HSTS (Security)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /sfp.js HTTP/1.1
Host: portalfluently.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://superfap.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.30.2
Date: Sat, 22 Aug 2026 11:11:51 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
access-control-allow-origin: *
content-encoding: zstd
vary: Accept-Encoding
x-envoy-upstream-service-time: 2
Host: portalfluently.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 34c610ed0825b8f4af6343b72a61b39e
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

11:11:51.832 GET 200 script 4.2 KB 64 ms —

11:11:51.836 GET 200 script 36.4 KB 243 ms —

11:11:51.838 GET 200 img 0 B 0 ms —

11:11:51.850 GET 302 script 0 B 10 ms —

11:11:51.868 GET 200 script 20.3 KB 22 ms —

11:11:51.871 GET 200 xhr 76 B 93 ms —

11:11:51.872 GET 200 xhr 76 B 106 ms —

11:11:51.920 GET 200 img 12.7 KB 14 ms —

11:11:51.922 GET 200 img 90.1 KB 20 ms —

11:11:51.924 GET 200 img 98.0 KB 19 ms —

11:11:51.930 GET 200 img 98.4 KB 17 ms —

11:11:51.932 GET 200 img 98.3 KB 83 ms —

11:11:51.936 GET 200 img 25.6 KB 14 ms —

11:11:51.938 GET 200 img 14.6 KB 13 ms —

11:11:51.944 GET 200 img 98.8 KB 17 ms —

11:11:51.965 GET 200 img 78.5 KB 16 ms —

11:11:51.968 GET 200 img 98.3 KB 17 ms —

11:11:51.973 GET 200 img 81.9 KB 14 ms —

11:11:51.977 GET 200 img 98.8 KB 16 ms —

11:11:51.983 GET 200 img 61.8 KB 21 ms —

11:11:51.987 GET 200 img 15.3 KB 28 ms —

11:11:51.988 GET 200 img 24.1 KB 13 ms —

11:11:51.990 GET 200 img 98.9 KB 14 ms —

http://nicefap.fun

Domain graph

Hostnames

Connections

Network requests

Transaction #163

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://nicefap.fun

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #163

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://nicefap.fun

Domain graph

Network requests