WEBSITE ANALYSIS REPORT

http://bookstation.org/book/splunk-query-language-cheat-sheet-4987197

01 Mar 2026 · 13:56:39.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

bookstation.org2 captured requests
cdn.show-creative1.com2 captured requests
cdn.show-sb.com2 captured requests
cdn.storageimagedisplay.com4 captured requests
creative-sb1.com25 captured requests
flushpersist.com3 captured requests
fonts.googleapis.com3 captured requests
fonts.gstatic.com8 captured requests
humiliationintenseperpetual.com4 captured requests
kettledroopingcontinuation.com11 captured requests
preferencenail.com5 captured requests
protrafficinspector.com2 captured requests
realizationnewestfangs.com10 captured requests
skinnycrawlinglax.com36 captured requests
weirdopt.com1 captured requests
www.googletagmanager.com1 captured requests

Connections

bookstation.org → cdn.show-creative1.comCalls2 captured connections
bookstation.org → cdn.show-sb.comCalls2 captured connections
bookstation.org → cdn.storageimagedisplay.comLoads from4 captured connections
bookstation.org → creative-sb1.comCalls12 captured connections
bookstation.org → creative-sb1.comLoads from13 captured connections
bookstation.org → flushpersist.comLoads from3 captured connections
bookstation.org → fonts.googleapis.comLoads from3 captured connections
bookstation.org → fonts.gstatic.comLoads from8 captured connections
bookstation.org → humiliationintenseperpetual.comLoads from4 captured connections
bookstation.org → kettledroopingcontinuation.comCalls3 captured connections
bookstation.org → kettledroopingcontinuation.comLoads from8 captured connections
bookstation.org → preferencenail.comLoads from5 captured connections
bookstation.org → protrafficinspector.comCalls2 captured connections
bookstation.org → realizationnewestfangs.comCalls3 captured connections
bookstation.org → realizationnewestfangs.comLoads from7 captured connections
bookstation.org → skinnycrawlinglax.comCalls6 captured connections
bookstation.org → skinnycrawlinglax.comLoads from30 captured connections
bookstation.org → weirdopt.comLoads from1 captured connections
bookstation.org → www.googletagmanager.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

13:56:15.685 GET 200 document 18.3 KB 168 ms —

13:56:16.163 GET 200 script 435.4 KB 236 ms —

13:56:16.166 GET 200 script 49.8 KB 882 ms 2 alerts

13:56:16.167 GET 200 script 49.8 KB 876 ms 2 alerts

13:56:16.717 GET 200 script 5.0 KB 673 ms 4 alerts

13:56:16.734 GET 200 xhr 40 B 198 ms 1 alerts

13:56:16.737 GET 200 script 110.6 KB 768 ms 4 alerts

13:56:16.739 GET 200 script 90.1 KB 780 ms 4 alerts

13:56:16.749 GET 200 script 5.0 KB 659 ms 4 alerts

13:56:16.756 GET 200 xhr 40 B 292 ms 1 alerts

13:56:16.759 GET 200 script 110.6 KB 750 ms 4 alerts

13:56:16.761 GET 200 script 90.1 KB 481 ms 4 alerts

13:56:16.765 GET 200 script 49.8 KB 99 ms 2 alerts

13:56:16.910 GET 307 xhr 4.3 KB 295 ms 4 alerts

13:56:16.922 GET 200 script 5.0 KB 648 ms 2 alerts

13:56:16.928 GET 307 xhr 4.2 KB 657 ms 2 alerts

13:56:16.930 GET 200 script 110.6 KB 750 ms 2 alerts

13:56:16.931 GET 200 script 90.1 KB 753 ms 2 alerts

13:56:16.934 GET 200 script 49.9 KB 102 ms 2 alerts

13:56:16.941 GET 307 xhr 4.2 KB 283 ms 4 alerts

13:56:17.050 GET 200 script 5.0 KB 676 ms 4 alerts

13:56:17.056 GET 307 xhr 4.2 KB 682 ms 4 alerts

13:56:17.057 GET 200 script 110.6 KB 775 ms 4 alerts

13:56:17.059 GET 200 script 90.1 KB 787 ms 4 alerts

13:56:17.282 GET 200 script 83.4 KB 158 ms 3 alerts

13:56:17.285 GET 200 xhr 4.3 KB 116 ms 4 alerts

13:56:17.286 GET 200 xhr 4.2 KB 115 ms 4 alerts

13:56:17.290 GET 200 img 0 B 665 ms 4 alerts

13:56:17.359 GET 200 script 0 B 132 ms 3 alerts

13:56:17.364 GET 200 script 83.4 KB 40 ms 3 alerts

13:56:17.365 GET 200 script 83.4 KB 151 ms 3 alerts

13:56:17.385 GET 200 xhr 4.2 KB 106 ms 2 alerts

13:56:17.530 GET 200 script 83.4 KB 22 ms 3 alerts

13:56:17.538 GET 200 img 68.9 KB 155 ms —

13:56:17.540 GET 200 img 0 B 106 ms 4 alerts

13:56:17.549 GET 200 img 83.2 KB 180 ms —

13:56:17.551 GET 200 img 0 B 98 ms 4 alerts

13:56:17.555 GET 200 xhr 4.2 KB 101 ms 4 alerts

13:56:17.575 GET 200 img 81.0 KB 101 ms —

13:56:17.578 GET 200 img 0 B 108 ms 2 alerts

13:56:17.595 GET 200 script 83.4 KB 23 ms 3 alerts

Transaction #19

Request / response

URL

GET HTTPS

https://preferencenail.com/sfp.js

IP / ASN

185.196.197.72

AS39572 · DataWeb Global Group B.V.

Requested by: https://bookstation.org/book/splunk-query-language-cheat-sheet-4987197

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
MIME type: application/javascript; charset=utf-8
First seen (UTC): 18 Nov 2025 · 17:36:30.149 UTC
Last seen (UTC): 03 Sep 2026 · 10:37:11.150 UTC
Times seen: 27836

Size: 83.4 KB (85379 bytes)
MD5: b3a5ba94d627e64a77c0e11eaffc96ed
SHA1: f7358693b31e44211dd98b5aa0dc2a3f423286aa
SHA256: 600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34

Certificate information

Issuer: Let's Encrypt · R12
Subject: preferencenail.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09
Valid from: Fri, 27 Feb 2026 01:24:35 GMT
Valid until: Thu, 28 May 2026 01:24:34 GMT

Technology fingerprints

Nginx:1.21.6 (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /sfp.js HTTP/1.1
Host: preferencenail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bookstation.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 01 Mar 2026 13:56:17 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 32181
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: preferencenail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d39769247cc7d0ca42d964345eb62802
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

13:56:17.677 GET 404 img 287 B 24 ms —

13:56:17.719 GET 200 img 73.9 KB 25 ms —

13:56:17.722 GET 200 img 0 B 99 ms 4 alerts

13:56:17.777 GET 200 xhr 5.2 KB 198 ms 4 alerts

13:56:18.044 GET 200 img 0 B 100 ms 4 alerts

13:56:18.046 GET 200 xhr 1.3 KB 184 ms 2 alerts

13:56:18.126 GET 200 xhr 5.5 KB 194 ms 4 alerts

13:56:18.186 GET 200 xhr 5.2 KB 193 ms 2 alerts

13:56:18.215 GET 200 xhr 5.1 KB 203 ms 4 alerts

http://bookstation.org/book/splunk-query-language-cheat-sheet-4987197

Domain graph

Hostnames

Connections

Network requests

Transaction #19

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://bookstation.org/book/splunk-query-language-cheat-sheet-4987197

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #19

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://bookstation.org/book/splunk-query-language-cheat-sheet-4987197

Domain graph

Network requests