DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://nicefap.fun/ebmlnubvtejak
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://nicefap.fun/ebmlnubvtejak
- Submitted IP / ASN
172.67.137.138 AS13335 · Cloudflare, Inc.
- Final URL
- https://www.totalav.com/started/me?exit
- Final IP / ASN
- Not recorded
Final page
- Page title
- Get Started! - TotalAV
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 28.8 KB (29501 bytes)
Detections
Activity
- HTTP requests
- 128
- Observed hosts
- 13
- Script records
- 33
Estimated HTTP data
- Sent
- ~85.8 KB
- Received
- ~152.66 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| slimgather.com | N/A | 2026-04-18 | 2026-05-09 | 2026-10-16 | 505 B | 37.2 KB |  88.85.68.219 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| mamshirt.com | N/A | 2023-04-14 | 2026-07-24 | 2026-10-19 | 1.3 KB | 11.5 KB | 104.21.21.108 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| cdn.show-creative1.com 1 alerts | 392451 | 2024-08-20 | 2024-08-27 | 2026-10-19 | 484 B | 2.3 KB | 172.67.208.42 | jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| xuali.b-cdn.net | N/A | 2016-04-25 | 2026-10-20 | 2026-10-20 | 36.8 KB | 147.41 MB |  185.111.111.159 | Bunny CDN Not recorded |
| cdn.cloudpiko.com | N/A | 2026-10-19 | 2026-10-19 | 2026-10-19 | 3.3 KB | 137.5 KB | 172.67.146.89 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| www.insecure-brief.com | N/A | 2026-09-15 | 2026-10-20 | 2026-10-20 | 961 B | 0 B |  45.133.44.1 | |
| static.nresystems.com | N/A | 2001-02-22 | 2026-05-13 | 2026-10-18 | 631 B | 1.1 KB | 104.18.18.137 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| benchform.org | N/A | 2026-08-20 | 2026-09-18 | 2026-10-14 | 1.1 KB | 126.7 KB | 104.21.52.122 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. |
| mifap.li | N/A | N/A | 2026-08-06 | 2026-10-16 | 7.1 KB | 2.90 MB | 104.21.66.252 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. LiteSpeed Cache Caching, WordPress plugins LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress. LiteSpeed Web servers LiteSpeed is a high-scalability web server. Litespeed Cache Caching, WordPress plugins LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress. |
| nicefap.fun 18 alerts | N/A | 2026-08-02 | 2026-08-06 | 2026-10-20 | 10.7 KB | 1.88 MB | 104.21.62.166 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. LiteSpeed Cache Caching, WordPress plugins LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress. LiteSpeed Web servers LiteSpeed is a high-scalability web server. Litespeed Cache Caching, WordPress plugins LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress. jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. Cloudflare Browser Insights Analytics, RUM Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users. Bootstrap UI frameworks Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components. Popper Miscellaneous Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element. Font Awesome Font scripts Font Awesome is a font and icon toolkit based on CSS and Less. PHP:8.1.34 Programming languages PHP is a general-purpose scripting language used for web development. |
| biomanos.org | N/A | 2026-08-20 | 2026-09-20 | 2026-10-16 | 6.8 KB | 141.7 KB | 172.67.164.62 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. |
| apiguinee.org | N/A | 2026-08-20 | 2026-09-18 | 2026-10-14 | 1.0 KB | 1.3 KB | 172.67.132.24 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-10-18 | 487 B | 17.0 KB | 142.250.178.42 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |