WEBSITE ANALYSIS REPORT

http://guzelyafe.life/evdu/109404-onlyfans-leaked-nude

09 Nov 2025 · 08:54:40.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

accounts.google.com3 captured requests
addictedfastestgasp.com1 captured requests
api.hcaptcha.com1 captured requests
apis.google.com2 captured requests
bat.bing.com4 captured requests
cdn.cookielaw.org4 captured requests
cdn.segment.com6 captured requests
cdn.storageimagedisplay.com4 captured requests
cdnjs.cloudflare.com1 captured requests
ct.pinterest.com5 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com1 captured requests
geolocation.onetrust.com1 captured requests
guzelyafe.life2 captured requests
hcaptcha.com1 captured requests
mpsnare.iesnare.com2 captured requests
newassets.hcaptcha.com3 captured requests
pollingpayoff.com1 captured requests
preferencenail.com2 captured requests
professionaltrafficmonitor.com2 captured requests
protect.zoosk.com2 captured requests
region1.analytics.google.com2 captured requests
s.pinimg.com2 captured requests
sentimentalrailing.com11 captured requests
static3.zoosk.com33 captured requests
torchfriendlypay.com1 captured requests
weirdopt.com1 captured requests
wl12wbq.meet-hot-love.com1 captured requests
www.google.com2 captured requests
www.google.no1 captured requests
www.googletagmanager.com5 captured requests
www.gstatic.com1 captured requests
www.snv3gy4trk.com1 captured requests
www.zoosk.com8 captured requests

Connections

accounts.google.com → www.gstatic.comLoads from1 captured connections
guzelyafe.life → addictedfastestgasp.comLoads from1 captured connections
guzelyafe.life → cdn.storageimagedisplay.comLoads from4 captured connections
guzelyafe.life → flushpersist.comLoads from2 captured connections
guzelyafe.life → pollingpayoff.comLoads from1 captured connections
guzelyafe.life → preferencenail.comLoads from2 captured connections
guzelyafe.life → professionaltrafficmonitor.comCalls2 captured connections
guzelyafe.life → region1.analytics.google.comCalls2 captured connections
guzelyafe.life → sentimentalrailing.comCalls1 captured connections
guzelyafe.life → sentimentalrailing.comLoads from10 captured connections
guzelyafe.life → torchfriendlypay.comLoads from1 captured connections
guzelyafe.life → weirdopt.comLoads from1 captured connections
guzelyafe.life → wl12wbq.meet-hot-love.comRedirects to1 captured connections
guzelyafe.life → www.google.noLoads from1 captured connections
guzelyafe.life → www.googletagmanager.comLoads from1 captured connections
newassets.hcaptcha.com → api.hcaptcha.comCalls1 captured connections
wl12wbq.meet-hot-love.com → www.zoosk.comRedirects to1 captured connections
www.zoosk.com → accounts.google.comEmbeds1 captured connections
www.zoosk.com → apis.google.comLoads from2 captured connections
www.zoosk.com → bat.bing.comCalls1 captured connections
www.zoosk.com → bat.bing.comLoads from3 captured connections
www.zoosk.com → cdn.cookielaw.orgCalls2 captured connections
www.zoosk.com → cdn.cookielaw.orgLoads from2 captured connections
www.zoosk.com → cdn.segment.comCalls1 captured connections
www.zoosk.com → cdn.segment.comLoads from5 captured connections
www.zoosk.com → cdnjs.cloudflare.comLoads from1 captured connections
www.zoosk.com → ct.pinterest.comCalls4 captured connections
www.zoosk.com → ct.pinterest.comEmbeds1 captured connections
www.zoosk.com → fonts.googleapis.comLoads from1 captured connections
www.zoosk.com → fonts.gstatic.comLoads from1 captured connections
www.zoosk.com → geolocation.onetrust.comCalls1 captured connections
www.zoosk.com → hcaptcha.comLoads from1 captured connections
www.zoosk.com → mpsnare.iesnare.comLoads from2 captured connections
www.zoosk.com → newassets.hcaptcha.comEmbeds2 captured connections
www.zoosk.com → protect.zoosk.comCalls1 captured connections
www.zoosk.com → protect.zoosk.comLoads from1 captured connections
www.zoosk.com → s.pinimg.comLoads from2 captured connections
www.zoosk.com → static3.zoosk.comLoads from33 captured connections
www.zoosk.com → www.google.comCalls1 captured connections
www.zoosk.com → www.google.comLoads from1 captured connections
www.zoosk.com → www.googletagmanager.comLoads from4 captured connections
www.zoosk.com → www.snv3gy4trk.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:54:14.203 GET 200 document 2.5 KB 855 ms —

08:54:15.164 GET 200 script 104.2 KB 863 ms 2 alerts

08:54:15.168 GET 200 script 434.8 KB 170 ms —

08:54:15.170 GET 200 script 42.4 KB 833 ms 3 alerts

08:54:15.749 GET 200 img 0 B 705 ms 3 alerts

08:54:15.755 GET 200 script 83.4 KB 167 ms 3 alerts

Transaction #65

Request / response

URL

GET HTTPS

https://preferencenail.com/sfp.js

IP / ASN

185.196.197.72

AS39572 · DataWeb Global Group B.V.

Requested by: https://guzelyafe.life/evdu/109404-onlyfans-leaked-nude

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
MIME type: application/javascript; charset=utf-8
First seen (UTC): 08 Jul 2025 · 10:38:39.799 UTC
Last seen (UTC): 07 Jul 2026 · 20:05:43.095 UTC
Times seen: 15231

Size: 83.4 KB (85386 bytes)
MD5: 46a6fef91632b94d14252fe324c1585f
SHA1: 387cebbd261b8fe947fe9805875300f2ceeb5cfd
SHA256: 36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5

Certificate information

Issuer: Let's Encrypt · R12
Subject: preferencenail.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C
Valid from: Wed, 29 Oct 2025 23:40:35 GMT
Valid until: Tue, 27 Jan 2026 23:40:34 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /sfp.js HTTP/1.1
Host: preferencenail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guzelyafe.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 09 Nov 2025 08:54:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 32182
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: preferencenail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 02ee0e80177616f35a62fbbe7b238d69
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

08:54:15.759 GET 200 xhr 40 B 246 ms —

08:54:15.771 GET 200 script 0 B 138 ms 2 alerts

08:54:15.782 GET 200 xhr 40 B 247 ms —

08:54:15.783 GET 200 xhr 15.1 KB 734 ms 2 alerts

08:54:15.785 GET 200 script 109.5 KB 809 ms 2 alerts

08:54:15.788 GET 200 script 83.1 KB 503 ms 2 alerts

08:54:16.290 POST 204 fetch 0 B 152 ms —

08:54:16.292 GET 200 img 42 B 145 ms —

08:54:16.294 GET 404 img 315 B 620 ms 1 alerts

08:54:16.323 GET 200 script 83.4 KB 23 ms 3 alerts

08:54:16.334 GET 200 img 0 B 100 ms 2 alerts

08:54:16.345 GET 200 img 0 B 108 ms 2 alerts

08:54:16.347 GET 200 img 0 B 94 ms 2 alerts

08:54:16.354 GET 200 img 0 B 173 ms 2 alerts

08:54:16.362 GET 200 img 98.6 KB 346 ms —

08:54:16.364 GET 200 img 67.8 KB 320 ms —

08:54:16.370 GET 200 img 53.0 KB 339 ms —

08:54:16.371 GET 200 img 51.8 KB 285 ms —

08:54:16.374 GET 200 img 0 B 157 ms 2 alerts

08:54:16.375 GET 200 img 0 B 371 ms 2 alerts

08:54:16.376 GET 200 img 0 B 177 ms 2 alerts

08:54:16.377 GET 200 img 0 B 664 ms 2 alerts

08:54:17.037 GET 200 img 0 B 654 ms 2 alerts

08:54:17.039 GET 200 img 0 B 662 ms 2 alerts

08:54:18.060 GET 302 document 84.0 KB 234 ms 1 alerts

08:54:18.271 GET 200 document 84.0 KB 314 ms —

08:54:18.631 POST 204 fetch 0 B 17 ms —

08:54:18.709 GET 200 stylesheet 4.0 KB 198 ms —

08:54:18.712 GET 200 script 328.7 KB 302 ms —

08:54:18.715 GET 200 script 120.9 KB 136 ms —

08:54:18.717 GET 200 script 251.6 KB 72 ms —

08:54:18.721 GET 200 script 1.50 MB 59 ms —

08:54:18.723 GET 200 script 3.44 MB 90 ms —

08:54:18.897 GET 200 stylesheet 227 B 19 ms —

08:54:18.899 GET 200 stylesheet 269.7 KB 14 ms —

08:54:18.941 GET 200 script 106.4 KB 147 ms —

08:54:18.942 GET 200 script 76.0 KB 59 ms —

08:54:18.949 GET 200 script 478.0 KB 97 ms —

08:54:19.007 GET 200 font 7.7 KB 234 ms —

08:54:19.293 GET 200 script 138.1 KB 20 ms —

08:54:19.296 GET 200 script 742.5 KB 25 ms —

08:54:19.302 GET 200 script 106.0 KB 23 ms —

08:54:19.304 GET 200 script 82.8 KB 22 ms —

08:54:19.306 GET 200 script 15.9 KB 20 ms —

http://guzelyafe.life/evdu/109404-onlyfans-leaked-nude

Domain graph

Hostnames

Connections

Network requests

Transaction #65

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://guzelyafe.life/evdu/109404-onlyfans-leaked-nude

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #65

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://guzelyafe.life/evdu/109404-onlyfans-leaked-nude

Domain graph

Network requests