WEBSITE ANALYSIS REPORT

http://90d9dh0.pages.dev/

23 May 2026 · 14:08:57.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:08:33.026 GET 200 document 4.0 KB 235 ms —

14:08:33.433 GET 200 script 95.3 KB 858 ms 2 alerts

14:08:33.435 GET 200 script 47.0 KB 855 ms 2 alerts

14:08:33.437 GET 200 script 47.0 KB 866 ms 2 alerts

14:08:33.438 GET 200 script 47.0 KB 864 ms 2 alerts

14:08:33.440 GET 200 script 46.9 KB 858 ms 2 alerts

14:08:33.442 GET No response script 0 B 0 ms —

14:08:33.442 GET 200 script 90.7 KB 893 ms 2 alerts

14:08:34.053 GET 200 img 0 B 667 ms 2 alerts

14:08:34.056 GET 200 script 83.4 KB 164 ms 2 alerts

Transaction #83

Request / response

URL

GET HTTPS

https://preferencenail.com/sfp.js

IP / ASN

185.196.197.71

AS39572 · DataWeb Global Group B.V.

Requested by: https://90d9dh0.pages.dev/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
MIME type: application/javascript; charset=utf-8
First seen (UTC): 18 Nov 2025 · 17:36:30.149 UTC
Last seen (UTC): 03 Sep 2026 · 10:37:11.150 UTC
Times seen: 27836

Size: 83.4 KB (85379 bytes)
MD5: b3a5ba94d627e64a77c0e11eaffc96ed
SHA1: f7358693b31e44211dd98b5aa0dc2a3f423286aa
SHA256: 600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34

Certificate information

Issuer: Let's Encrypt · R12
Subject: preferencenail.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8
Valid from: Tue, 28 Apr 2026 01:34:17 GMT
Valid until: Mon, 27 Jul 2026 01:34:16 GMT

Technology fingerprints

Nginx:1.28.2 (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /sfp.js HTTP/1.1
Host: preferencenail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://90d9dh0.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sat, 23 May 2026 14:08:34 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 32181
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: preferencenail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 868727420a1ed67736ae9e5ed5a036c9
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

14:08:34.058 GET 200 xhr 40 B 321 ms —

14:08:34.072 GET 200 script 83.4 KB 174 ms 2 alerts

14:08:34.073 GET 200 xhr 40 B 322 ms —

14:08:34.090 GET 200 script 5.0 KB 721 ms 2 alerts

14:08:34.104 GET No response script 0 B 0 ms —

14:08:34.137 GET 200 xhr 40 B 348 ms —

14:08:34.140 GET 200 xhr 13.7 KB 619 ms 1 alerts

14:08:34.142 GET 200 xhr 40 B 279 ms —

14:08:34.143 GET 200 xhr 13.9 KB 656 ms 1 alerts

14:08:34.144 GET 200 script 101.3 KB 506 ms 1 alerts

14:08:34.146 GET 200 xhr 40 B 152 ms —

14:08:34.149 GET 200 xhr 13.8 KB 416 ms 1 alerts

14:08:34.179 GET 200 img 0 B 404 ms 1 alerts

14:08:34.543 GET 200 xhr 14.2 KB 121 ms 1 alerts

14:08:34.547 GET 200 xhr 14.3 KB 103 ms 1 alerts

14:08:34.549 GET 200 xhr 14.3 KB 129 ms 1 alerts

14:08:34.632 GET 200 xhr 5.0 KB 210 ms 2 alerts

14:08:34.646 GET 200 img 0 B 127 ms 1 alerts

14:08:34.667 GET 200 img 0 B 108 ms 1 alerts

14:08:34.673 GET 200 img 0 B 553 ms 1 alerts

14:08:34.682 GET 200 img 0 B 544 ms 1 alerts

14:08:34.685 GET 200 img 91.3 KB 239 ms —

14:08:34.694 GET 200 img 25.2 KB 255 ms —

14:08:34.696 GET 200 img 16.6 KB 244 ms —

14:08:34.698 GET 200 img 24.8 KB 256 ms —

14:08:34.700 GET 200 img 0 B 169 ms 1 alerts

14:08:34.702 GET 200 img 0 B 170 ms 1 alerts

14:08:34.703 GET 200 img 0 B 497 ms 1 alerts

14:08:34.704 GET 200 img 0 B 496 ms 1 alerts

14:08:34.757 GET 200 img 0 B 211 ms 1 alerts

14:08:34.760 GET 200 img 0 B 208 ms 1 alerts

14:08:34.761 GET 200 img 0 B 302 ms 1 alerts

14:08:34.765 GET 200 img 0 B 306 ms 1 alerts

14:08:34.766 GET 200 img 21.0 KB 77 ms —

14:08:34.770 GET 200 img 17.0 KB 81 ms —

14:08:34.771 GET 200 img 25.4 KB 82 ms —

14:08:34.773 GET 200 img 154.3 KB 108 ms —

14:08:34.775 GET 200 img 0 B 353 ms 1 alerts

14:08:34.782 GET 200 img 0 B 355 ms 1 alerts

14:08:34.786 GET 200 img 0 B 375 ms 1 alerts

http://90d9dh0.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #83

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://90d9dh0.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #83

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://90d9dh0.pages.dev/

Domain graph

Network requests