WEBSITE ANALYSIS REPORT

http://regina-sk.agencycanada.com/dr-jeffrey-d-booker/

09 Nov 2025 · 03:15:18.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

app.convertkit.com2 captured requests
barajind.top1 captured requests
cdn.show-sb.com1 captured requests
creative-sb1.com6 captured requests
f.convertkit.com1 captured requests
flushpersist.com1 captured requests
fonts.googleapis.com4 captured requests
fonts.gstatic.com8 captured requests
maps.googleapis.com24 captured requests
maps.gstatic.com5 captured requests
pl19273138.revenuecpmgate.com1 captured requests
preferencenail.com1 captured requests
professionaltrafficmonitor.com1 captured requests
regina-sk.agencycanada.com11 captured requests
torchfriendlypay.com9 captured requests
www.google.com11 captured requests

Connections

regina-sk.agencycanada.com → app.convertkit.comCalls2 captured connections
regina-sk.agencycanada.com → barajind.topLoads from1 captured connections
regina-sk.agencycanada.com → cdn.show-sb.comCalls1 captured connections
regina-sk.agencycanada.com → creative-sb1.comCalls3 captured connections
regina-sk.agencycanada.com → creative-sb1.comLoads from3 captured connections
regina-sk.agencycanada.com → f.convertkit.comLoads from1 captured connections
regina-sk.agencycanada.com → flushpersist.comLoads from1 captured connections
regina-sk.agencycanada.com → fonts.googleapis.comLoads from2 captured connections
regina-sk.agencycanada.com → fonts.gstatic.comLoads from6 captured connections
regina-sk.agencycanada.com → maps.googleapis.comCalls1 captured connections
regina-sk.agencycanada.com → maps.googleapis.comLoads from5 captured connections
regina-sk.agencycanada.com → maps.gstatic.comLoads from2 captured connections
regina-sk.agencycanada.com → pl19273138.revenuecpmgate.comLoads from1 captured connections
regina-sk.agencycanada.com → preferencenail.comLoads from1 captured connections
regina-sk.agencycanada.com → professionaltrafficmonitor.comCalls1 captured connections
regina-sk.agencycanada.com → torchfriendlypay.comCalls1 captured connections
regina-sk.agencycanada.com → torchfriendlypay.comLoads from8 captured connections
regina-sk.agencycanada.com → www.google.comEmbeds1 captured connections
www.google.com → fonts.googleapis.comLoads from2 captured connections
www.google.com → fonts.gstatic.comLoads from2 captured connections
www.google.com → maps.googleapis.comCalls5 captured connections
www.google.com → maps.googleapis.comLoads from13 captured connections
www.google.com → maps.gstatic.comLoads from3 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

03:14:55.621 GET 200 document 54.2 KB 245 ms —

03:14:56.029 GET 200 stylesheet 34.0 KB 156 ms —

03:14:56.031 GET 200 script 83.0 KB 814 ms 4 alerts

03:14:56.032 GET 200 script 10 B 347 ms 3 alerts

03:14:56.033 GET 200 script 37.1 KB 82 ms —

03:14:56.036 GET 200 img 1.7 KB 162 ms —

03:14:56.037 GET 200 script 37.1 KB 140 ms —

03:14:56.561 GET 200 script 83.4 KB 206 ms 3 alerts

Transaction #78

Request / response

URL

GET HTTPS

https://preferencenail.com/sfp.js

IP / ASN

185.196.197.72

AS39572 · DataWeb Global Group B.V.

Requested by: https://regina-sk.agencycanada.com/dr-jeffrey-d-booker/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
MIME type: application/javascript; charset=utf-8
First seen (UTC): 08 Jul 2025 · 10:38:39.799 UTC
Last seen (UTC): 07 Jul 2026 · 20:05:43.095 UTC
Times seen: 15231

Size: 83.4 KB (85386 bytes)
MD5: 46a6fef91632b94d14252fe324c1585f
SHA1: 387cebbd261b8fe947fe9805875300f2ceeb5cfd
SHA256: 36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5

Certificate information

Issuer: Let's Encrypt · R12
Subject: preferencenail.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C
Valid from: Wed, 29 Oct 2025 23:40:35 GMT
Valid until: Tue, 27 Jan 2026 23:40:34 GMT

Technology fingerprints

Nginx:1.21.6 (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /sfp.js HTTP/1.1
Host: preferencenail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://regina-sk.agencycanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 09 Nov 2025 03:14:56 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 32182
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: preferencenail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: f94bf786c7f8705b76a5d4a0e080168f
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

03:14:56.567 GET 200 xhr 40 B 213 ms —

03:14:56.569 GET 200 script 6.3 KB 711 ms 3 alerts

03:14:56.574 GET 200 subdocument 2.2 KB 645 ms —

03:14:56.605 GET 200 stylesheet 17.0 KB 399 ms —

03:14:56.612 GET 200 img 10.4 KB 125 ms —

03:14:56.615 GET 200 img 1.7 KB 146 ms —

03:14:56.758 GET 302 script 9.7 KB 11 ms —

03:14:56.776 GET 200 script 9.7 KB 10 ms —

03:14:56.951 GET 200 script 590.3 KB 362 ms —

03:14:56.964 GET 200 img 3.8 KB 142 ms —

03:14:56.967 GET 200 img 1.1 KB 132 ms —

03:14:56.976 POST 200 xhr 0 B 11 ms —

03:14:57.025 GET 200 font 47.2 KB 195 ms —

03:14:57.026 GET 200 font 47.2 KB 352 ms —

03:14:57.027 GET 200 font 47.2 KB 176 ms —

03:14:57.075 GET 200 xhr 5.8 KB 587 ms 3 alerts

03:14:57.112 GET 200 script 225.8 KB 94 ms —

03:14:57.203 GET 200 script 12.6 KB 23 ms —

03:14:57.237 GET 200 script 281.8 KB 18 ms —

03:14:57.238 GET 200 script 6.8 KB 17 ms —

03:14:57.239 GET 200 script 2.6 KB 18 ms —

03:14:57.275 GET 200 font 26.0 KB 10 ms —

03:14:57.346 GET 200 xhr 3 B 83 ms —

03:14:57.383 GET 200 script 124.9 KB 45 ms —

03:14:57.386 GET 200 script 309.2 KB 86 ms —

03:14:57.387 GET 200 script 101.3 KB 69 ms —

03:14:57.388 GET 200 script 52.6 KB 50 ms —

03:14:57.394 GET 200 script 124.9 KB 76 ms —

03:14:57.398 GET 200 script 309.2 KB 76 ms —

03:14:57.401 GET 200 script 81.6 KB 66 ms —

03:14:57.428 GET 200 script 3.4 KB 37 ms —

03:14:57.435 GET 200 script 30.2 KB 35 ms —

03:14:57.438 GET 200 script 3.5 KB 33 ms —

03:14:57.480 GET 200 img 37.9 KB 139 ms —

03:14:57.552 GET 200 img 326 B 30 ms —

03:14:57.621 GET 200 img 3.3 KB 32 ms —

03:14:57.621 GET 200 img 1.6 KB 30 ms —

03:14:57.627 GET 200 xhr 3 B 32 ms —

03:14:57.631 GET 200 script 32.0 KB 22 ms —

03:14:57.679 OPTIONS 200 xhr 0 B 29 ms —

03:14:57.681 GET 200 img 0 B 95 ms 3 alerts

03:14:57.684 GET 200 xhr 1.3 KB 172 ms 1 alerts

http://regina-sk.agencycanada.com/dr-jeffrey-d-booker/

Domain graph

Hostnames

Connections

Network requests

Transaction #78

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://regina-sk.agencycanada.com/dr-jeffrey-d-booker/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #78

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://regina-sk.agencycanada.com/dr-jeffrey-d-booker/

Domain graph

Network requests