WEBSITE ANALYSIS REPORT

http://bwz0ijo.pages.dev/

21 Aug 2026 · 19:44:32.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

bwz0ijo.pages.dev2 captured requests
cdn.redgarto.com6 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com16 captured requests
exemplarfederallithe.com18 captured requests
fizzyacerbitymellow.com1 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
furiousexpansion.com2 captured requests
go.realus.lt2 captured requests
kettledroopingcontinuation.com11 captured requests
mamshirt.com1 captured requests
portalfluently.com2 captured requests
protrafficinspector.com5 captured requests
racingorchestra.com6 captured requests
sleepoverlimitprofound.com18 captured requests
spendsdetachment.com1 captured requests

Connections

bwz0ijo.pages.dev → cdn.redgarto.comCalls3 captured connections
bwz0ijo.pages.dev → cdn.redgarto.comLoads from3 captured connections
bwz0ijo.pages.dev → cdn.show-creative1.comCalls1 captured connections
bwz0ijo.pages.dev → cdn.storageimagedisplay.comLoads from16 captured connections
bwz0ijo.pages.dev → exemplarfederallithe.comCalls2 captured connections
bwz0ijo.pages.dev → exemplarfederallithe.comLoads from16 captured connections
bwz0ijo.pages.dev → fizzyacerbitymellow.comLoads from1 captured connections
bwz0ijo.pages.dev → flushpersist.comLoads from2 captured connections
bwz0ijo.pages.dev → fonts.googleapis.comLoads from1 captured connections
bwz0ijo.pages.dev → fonts.gstatic.comLoads from2 captured connections
bwz0ijo.pages.dev → furiousexpansion.comCalls2 captured connections
bwz0ijo.pages.dev → go.realus.ltLoads from2 captured connections
bwz0ijo.pages.dev → kettledroopingcontinuation.comCalls4 captured connections
bwz0ijo.pages.dev → kettledroopingcontinuation.comLoads from7 captured connections
bwz0ijo.pages.dev → mamshirt.comLoads from1 captured connections
bwz0ijo.pages.dev → portalfluently.comLoads from2 captured connections
bwz0ijo.pages.dev → protrafficinspector.comCalls5 captured connections
bwz0ijo.pages.dev → racingorchestra.comLoads from6 captured connections
bwz0ijo.pages.dev → sleepoverlimitprofound.comCalls2 captured connections
bwz0ijo.pages.dev → sleepoverlimitprofound.comLoads from16 captured connections
bwz0ijo.pages.dev → spendsdetachment.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:44:02.128 GET 200 document 20.7 KB 257 ms —

19:44:02.736 GET 200 script 77.5 KB 123 ms 1 alerts

19:44:02.739 GET 200 script 32.3 KB 360 ms 1 alerts

19:44:02.740 GET 200 script 32.2 KB 147 ms 1 alerts

19:44:02.742 GET 200 script 32.3 KB 127 ms 1 alerts

19:44:02.743 GET 200 script 32.2 KB 111 ms 1 alerts

19:44:02.745 GET 200 script 94.8 KB 133 ms 1 alerts

19:44:02.746 GET No response script 0 B 0 ms —

19:44:02.908 GET 200 script 83.4 KB 145 ms 1 alerts

19:44:02.909 GET 200 xhr 40 B 93 ms —

19:44:02.912 GET 200 img 0 B 94 ms 2 alerts

19:44:02.918 GET 200 script 83.4 KB 135 ms 1 alerts

Transaction #87

Request / response

URL

GET HTTPS

https://portalfluently.com/sfp.js

IP / ASN

23.111.84.228

AS7979 · SERVERS-COM

Requested by: https://bwz0ijo.pages.dev/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
MIME type: application/javascript; charset=utf-8
First seen (UTC): 18 Nov 2025 · 17:36:30.149 UTC
Last seen (UTC): 03 Sep 2026 · 10:37:11.150 UTC
Times seen: 27836

Size: 83.4 KB (85379 bytes)
MD5: b3a5ba94d627e64a77c0e11eaffc96ed
SHA1: f7358693b31e44211dd98b5aa0dc2a3f423286aa
SHA256: 600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34

Certificate information

Issuer: Let's Encrypt · YR2
Subject: portalfluently.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 04:7E:87:1C:D4:BF:C8:7A:47:9E:4C:FB:2A:44:D1:25:8D:83:7F:1A
Valid from: Mon, 17 Aug 2026 23:40:44 GMT
Valid until: Sun, 15 Nov 2026 23:40:43 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.30.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /sfp.js HTTP/1.1
Host: portalfluently.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://bwz0ijo.pages.dev/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.30.2
Date: Fri, 21 Aug 2026 19:44:02 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
access-control-allow-origin: *
content-encoding: zstd
vary: Accept-Encoding
x-envoy-upstream-service-time: 1
Host: portalfluently.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 3581ea8b322d711030e870d6b12ef09a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

19:44:02.920 GET 200 xhr 40 B 100 ms —

19:44:02.922 GET 200 script 4.2 KB 76 ms —

19:44:02.926 GET No response script 0 B 0 ms —

19:44:02.977 GET 200 xhr 40 B 26 ms —

19:44:02.979 GET 200 xhr 14.1 KB 411 ms 1 alerts

19:44:02.981 GET 200 xhr 40 B 22 ms —

19:44:02.982 GET 200 xhr 0 B 388 ms 1 alerts

19:44:02.984 GET 200 xhr 40 B 22 ms —

19:44:02.986 GET 200 xhr 14.1 KB 146 ms 1 alerts

19:44:03.090 GET 200 xhr 14.2 KB 534 ms 1 alerts

19:44:03.091 GET 200 xhr 0 B 388 ms 1 alerts

19:44:03.093 GET 200 xhr 14.1 KB 131 ms 1 alerts

19:44:03.109 GET 200 img 0 B 466 ms —

19:44:03.146 GET 200 img 17.9 KB 312 ms —

19:44:03.148 GET 200 img 121.9 KB 126 ms —

19:44:03.149 GET 200 img 102.4 KB 313 ms —

19:44:03.152 GET 200 img 128.0 KB 144 ms —

19:44:03.157 GET 200 img 0 B 0 ms 1 alerts

19:44:03.158 GET 200 img 0 B 0 ms 1 alerts

19:44:03.159 GET 200 img 0 B 0 ms 1 alerts

19:44:03.160 GET 200 img 0 B 0 ms 1 alerts

19:44:03.161 GET 200 img 0 B 0 ms 1 alerts

19:44:03.162 GET 200 img 0 B 0 ms 1 alerts

19:44:03.163 GET 200 img 0 B 0 ms 1 alerts

19:44:03.164 GET 200 img 0 B 0 ms 1 alerts

19:44:03.231 GET 200 img 32.9 KB 62 ms —

19:44:03.233 GET 200 img 97.9 KB 77 ms —

19:44:03.235 GET 200 img 16.1 KB 69 ms —

19:44:03.236 GET 200 img 151.4 KB 78 ms —

19:44:03.250 GET 200 img 0 B 0 ms 1 alerts

19:44:03.252 GET 200 img 0 B 0 ms 1 alerts

19:44:03.253 GET 200 img 0 B 0 ms 1 alerts

19:44:03.254 GET 200 img 0 B 0 ms 1 alerts

19:44:03.256 GET 200 img 0 B 0 ms 1 alerts

19:44:03.257 GET 200 img 0 B 0 ms 1 alerts

19:44:03.258 GET 200 img 0 B 0 ms 1 alerts

19:44:03.259 GET 200 img 0 B 0 ms 1 alerts

19:44:03.404 GET 200 img 142.7 KB 24 ms —

http://bwz0ijo.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #87

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://bwz0ijo.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #87

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://bwz0ijo.pages.dev/

Domain graph

Network requests