WEBSITE ANALYSIS REPORT

http://horeklaf.life/cimeu/4/79190-dughter-swap-porn

09 Nov 2025 · 17:32:47.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

addictedfastestgasp.com1 captured requests
api.linguise.com1 captured requests
assets.squarespace.com11 captured requests
cdn.storageimagedisplay.com4 captured requests
definitions.sqspcdn.com4 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com8 captured requests
horeklaf.life3 captured requests
images.squarespace-cdn.com8 captured requests
int.tantanapp.com3 captured requests
preferencenail.com2 captured requests
professionaltrafficmonitor.com1 captured requests
recovernotionvideo.com11 captured requests
region1.analytics.google.com3 captured requests
static.linguise.com2 captured requests
static1.squarespace.com6 captured requests
tantanapp.com1 captured requests
torchfriendlypay.com1 captured requests
weirdopt.com1 captured requests
wl12wbq.meet-hot-love.com1 captured requests
www.google.no1 captured requests
www.googletagmanager.com1 captured requests

Connections

horeklaf.life → addictedfastestgasp.comLoads from1 captured connections
horeklaf.life → cdn.storageimagedisplay.comLoads from4 captured connections
horeklaf.life → flushpersist.comLoads from2 captured connections
horeklaf.life → preferencenail.comLoads from2 captured connections
horeklaf.life → professionaltrafficmonitor.comCalls1 captured connections
horeklaf.life → recovernotionvideo.comCalls1 captured connections
horeklaf.life → recovernotionvideo.comLoads from10 captured connections
horeklaf.life → region1.analytics.google.comCalls3 captured connections
horeklaf.life → torchfriendlypay.comLoads from1 captured connections
horeklaf.life → weirdopt.comLoads from1 captured connections
horeklaf.life → wl12wbq.meet-hot-love.comRedirects to2 captured connections
horeklaf.life → www.google.noLoads from1 captured connections
horeklaf.life → www.googletagmanager.comLoads from1 captured connections
int.tantanapp.com → api.linguise.comCalls1 captured connections
int.tantanapp.com → assets.squarespace.comLoads from11 captured connections
int.tantanapp.com → definitions.sqspcdn.comLoads from4 captured connections
int.tantanapp.com → fonts.googleapis.comLoads from1 captured connections
int.tantanapp.com → fonts.gstatic.comLoads from8 captured connections
int.tantanapp.com → images.squarespace-cdn.comLoads from1 captured connections
int.tantanapp.com → static.linguise.comLoads from2 captured connections
int.tantanapp.com → static1.squarespace.comLoads from6 captured connections
tantanapp.com → int.tantanapp.comRedirects to1 captured connections
wl12wbq.meet-hot-love.com → tantanapp.comRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:32:20.756 GET 200 document 2.6 KB 895 ms 1 alerts

17:32:21.815 GET 200 script 434.8 KB 323 ms —

17:32:21.817 GET 200 script 42.4 KB 925 ms 2 alerts

17:32:22.124 GET 200 img 2.5 KB 18 ms 1 alerts

17:32:22.303 POST 204 fetch 0 B 85 ms —

17:32:22.304 GET 200 img 42 B 308 ms —

17:32:22.404 GET 200 xhr 40 B 175 ms —

17:32:22.407 GET 200 xhr 15.1 KB 725 ms 2 alerts

17:32:22.409 GET 200 script 109.5 KB 844 ms 2 alerts

17:32:22.412 GET 200 script 83.1 KB 814 ms 2 alerts

17:32:22.910 GET 200 img 0 B 100 ms 2 alerts

17:32:22.913 GET 200 img 0 B 100 ms 2 alerts

17:32:22.915 GET 200 img 0 B 110 ms 2 alerts

17:32:22.918 GET 200 img 0 B 642 ms 2 alerts

17:32:22.919 GET 200 img 74.8 KB 161 ms —

17:32:22.921 GET 200 img 91.3 KB 201 ms —

17:32:22.922 GET 200 img 53.0 KB 179 ms —

17:32:22.924 GET 200 img 74.1 KB 157 ms —

17:32:22.926 GET 200 img 0 B 642 ms 2 alerts

17:32:22.927 GET 200 img 0 B 649 ms 2 alerts

17:32:22.929 GET 200 img 0 B 174 ms 2 alerts

17:32:22.931 GET 200 img 0 B 211 ms 2 alerts

17:32:22.958 GET 200 script 83.4 KB 165 ms 4 alerts

17:32:22.983 GET 200 img 0 B 661 ms 3 alerts

17:32:22.988 GET 200 script 0 B 150 ms 3 alerts

17:32:22.990 GET 200 script 83.4 KB 164 ms 4 alerts

Transaction #35

Request / response

URL

GET HTTPS

https://preferencenail.com/sfp.js

IP / ASN

185.196.197.72

AS39572 · DataWeb Global Group B.V.

Requested by: https://horeklaf.life/cimeu/4/79190-dughter-swap-porn

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
MIME type: application/javascript; charset=utf-8
First seen (UTC): 08 Jul 2025 · 10:38:39.799 UTC
Last seen (UTC): 07 Jul 2026 · 20:05:43.095 UTC
Times seen: 15231

Size: 83.4 KB (85386 bytes)
MD5: 46a6fef91632b94d14252fe324c1585f
SHA1: 387cebbd261b8fe947fe9805875300f2ceeb5cfd
SHA256: 36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5

Certificate information

Issuer: Let's Encrypt · R12
Subject: preferencenail.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C
Valid from: Wed, 29 Oct 2025 23:40:35 GMT
Valid until: Tue, 27 Jan 2026 23:40:34 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /sfp.js HTTP/1.1
Host: preferencenail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://horeklaf.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 09 Nov 2025 17:32:23 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 32182
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: preferencenail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c97ad5415af739faf78541024abe3a6d
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

17:32:23.632 GET 200 img 0 B 658 ms 3 alerts

17:32:23.633 GET 200 img 0 B 684 ms 3 alerts

17:32:24.500 POST 302 document 276.9 KB 223 ms 1 alerts

17:32:24.611 POST 204 fetch 0 B 32 ms —

17:32:24.728 GET 302 document 276.9 KB 279 ms 2 alerts

17:32:24.974 GET 302 document 276.9 KB 3308 ms —

17:32:26.759 GET 200 document 276.9 KB 577 ms —

17:32:27.132 POST 204 fetch 0 B 33 ms —

17:32:27.243 GET 200 stylesheet 9.8 KB 751 ms —

17:32:27.246 GET 200 script 114.9 KB 203 ms —

17:32:27.249 GET 200 script 43.5 KB 218 ms —

17:32:27.254 GET 200 script 837.7 KB 240 ms —

17:32:27.256 GET 200 script 89.4 KB 249 ms —

17:32:27.259 GET 200 script 240.1 KB 259 ms —

17:32:27.261 GET 200 script 711.6 KB 152 ms —

17:32:27.265 GET 200 script 1.08 MB 138 ms —

17:32:27.268 GET 200 script 106.0 KB 100 ms —

17:32:27.270 GET 200 stylesheet 2.2 KB 153 ms —

17:32:27.271 GET 200 script 28.5 KB 98 ms —

17:32:27.274 GET 200 stylesheet 1.0 KB 490 ms —

17:32:27.275 GET 200 stylesheet 969 B 548 ms —

17:32:27.277 GET 200 script 272 B 547 ms —

17:32:27.279 GET 200 script 6.3 KB 541 ms —

17:32:27.280 GET 200 stylesheet 1.47 MB 417 ms —

http://horeklaf.life/cimeu/4/79190-dughter-swap-porn

Domain graph

Hostnames

Connections

Network requests

Transaction #35

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://horeklaf.life/cimeu/4/79190-dughter-swap-porn

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #35

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://horeklaf.life/cimeu/4/79190-dughter-swap-porn

Domain graph

Network requests