WEBSITE ANALYSIS REPORT

http://nicefap.fun/sj2wszg0e3bin

08 Oct 2026 · 14:01:52.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:00:54.557 GET 404 document 7.4 KB 213 ms 1 alerts

Transaction #11

Request / response

URL

GET HTTPS

https://nicefap.fun/sj2wszg0e3bin

IP / ASN

104.21.62.166

AS13335 · CLOUDFLARENET

Requested by: Not recorded

Resource information

File type: HTML document, Unicode text, UTF-8 text, with very long lines (957)
MIME type: text/html; charset=UTF-8
First seen (UTC): 08 Oct 2026 · 14:01:57.402 UTC
Last seen (UTC): 08 Oct 2026 · 14:01:57.402 UTC
Times seen: 1

Size: 7.4 KB (7621 bytes)
MD5: 7ce8eae4154016e075d2314fb19a2673
SHA1: 1e5f7d88e7392d6570eabefc8391dbd61b2042fe
SHA256: 57bb9c8f8201c683b58dbc2c8b8440efe6cf384f18558b14525b680c9ffd47b5

Certificate information

Issuer: Google Trust Services · WE1
Subject: nicefap.fun
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 13:BE:DC:46:2A:6A:18:65:76:F5:00:39:4B:68:2D:2B:37:79:09:A3
Valid from: Wed, 30 Sep 2026 11:32:47 GMT
Valid until: Tue, 29 Dec 2026 12:30:16 GMT

Technology fingerprints

LiteSpeed Cache (Caching, WordPress plugins)
LiteSpeed (Web servers)
Litespeed Cache (Caching, WordPress plugins)
PHP:8.1.34 (Programming languages)
Popper (Miscellaneous)
Bootstrap (UI frameworks)
jQuery (JavaScript libraries)
Cloudflare (CDN)
Font Awesome (Font scripts)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /sj2wszg0e3bin HTTP/1.1
Host: nicefap.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 404 
date: Thu, 08 Oct 2026 14:00:54 GMT
content-type: text/html; charset=UTF-8
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-powered-by: PHP/8.1.34
set-cookie: PHPSESSID=3lsc9t1hq1sss5a9juduc7lvmb; path=/; SameSite=Lax; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
priority: u=0,i
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cS5iLnZSXM70y7AGlbSFCwACzNiqvp4NmszHwxPsrx5BtzMeuUz8HwUK0GLN6Sc%2F5O9s4McyIuT%2FwTd0fyoeqDPH8UtLW%2FOFLppiz2D84W9VlhHYSr6yh2hku7dlkw%3D%3D"}]}
content-encoding: zstd
cf-ray: a475acad5aa60b45-OSL
server-timing: cfExtPri

14:00:54.955 GET 301 document 0 B 257 ms 1 alerts

14:00:55.223 GET 404 document 7.4 KB 78 ms 1 alerts

14:00:55.423 GET 200 stylesheet 215.5 KB 37 ms 1 alerts

14:00:55.432 GET 200 stylesheet 23.2 KB 50 ms 1 alerts

14:00:55.436 GET 200 script 85.5 KB 45 ms 1 alerts

14:00:55.440 GET 200 script 18.5 KB 20 ms 1 alerts

14:00:55.444 GET 200 script 61.9 KB 43 ms 1 alerts

14:00:55.449 GET 200 script 30.8 KB 31 ms 1 alerts

14:00:55.453 GET 200 script 55.5 KB 50 ms 1 alerts

14:00:55.455 GET 200 script 806.9 KB 23 ms 1 alerts

14:00:55.459 GET 200 script 465.1 KB 43 ms 1 alerts

14:00:55.560 GET 200 lazy-img 23.0 KB 19 ms 1 alerts

14:00:55.745 GET 200 img 20.8 KB 18 ms 1 alerts

14:00:55.752 GET 302 script 0 B 7 ms 1 alerts

14:00:55.830 GET 200 script 22.3 KB 28 ms 1 alerts

14:00:56.017 POST 200 xhr 0 B 11 ms 1 alerts

http://nicefap.fun/sj2wszg0e3bin

Domain graph

Hostnames

Connections