WEBSITE ANALYSIS REPORT

http://oowebxseries.com/episode/seeti-maar-seeti-maar-episode-3

27 Jan 2026 · 15:50:55.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

a.magsrv.com1 captured requests
a.pemsrv.com1 captured requests
acscdn.com5 captured requests
adexchangeclear.com8 captured requests
cdn.storageimagedisplay.com2 captured requests
cdn.tailwindcss.com2 captured requests
flushpersist.com1 captured requests
inadsexchange.com1 captured requests
kettledroopingcontinuation.com3 captured requests
oowebxseries.com8 captured requests
pl27761225.effectivegatecpm.com1 captured requests
pl27955466.effectivegatecpm.com1 captured requests
preferencenail.com1 captured requests
protrafficinspector.com2 captured requests
realizationnewestfangs.com1 captured requests
replacementgoodwilljunkie.com2 captured requests
s.magsrv.com13 captured requests
s3t3d2y1.afcdn.net3 captured requests
track.plusinfolab.com3 captured requests
unpkg.com8 captured requests
usrpubtrk.com1 captured requests
video.maalcdn.com1 captured requests
weirdopt.com1 captured requests
www.highperformanceformat.com6 captured requests
zmaal.net18 captured requests

Connections

oowebxseries.com → a.magsrv.comLoads from1 captured connections
oowebxseries.com → a.pemsrv.comLoads from1 captured connections
oowebxseries.com → acscdn.comLoads from5 captured connections
oowebxseries.com → adexchangeclear.comCalls8 captured connections
oowebxseries.com → cdn.storageimagedisplay.comLoads from2 captured connections
oowebxseries.com → cdn.tailwindcss.comLoads from2 captured connections
oowebxseries.com → flushpersist.comLoads from1 captured connections
oowebxseries.com → inadsexchange.comLoads from1 captured connections
oowebxseries.com → kettledroopingcontinuation.comCalls2 captured connections
oowebxseries.com → kettledroopingcontinuation.comLoads from1 captured connections
oowebxseries.com → pl27761225.effectivegatecpm.comLoads from1 captured connections
oowebxseries.com → pl27955466.effectivegatecpm.comLoads from1 captured connections
oowebxseries.com → preferencenail.comLoads from1 captured connections
oowebxseries.com → protrafficinspector.comCalls2 captured connections
oowebxseries.com → realizationnewestfangs.comLoads from1 captured connections
oowebxseries.com → replacementgoodwilljunkie.comCalls1 captured connections
oowebxseries.com → replacementgoodwilljunkie.comLoads from1 captured connections
oowebxseries.com → s.magsrv.comCalls13 captured connections
oowebxseries.com → s3t3d2y1.afcdn.netLoads from3 captured connections
oowebxseries.com → track.plusinfolab.comCalls2 captured connections
oowebxseries.com → track.plusinfolab.comLoads from1 captured connections
oowebxseries.com → unpkg.comLoads from8 captured connections
oowebxseries.com → usrpubtrk.comCalls1 captured connections
oowebxseries.com → video.maalcdn.comLoads from1 captured connections
oowebxseries.com → weirdopt.comLoads from1 captured connections
oowebxseries.com → www.highperformanceformat.comLoads from6 captured connections
oowebxseries.com → zmaal.netLoads from18 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

15:50:32.000 GET 200 document 110.0 KB 445 ms —

15:50:32.497 GET 302 script 397.7 KB 70 ms —

15:50:32.500 GET 302 script 45.0 KB 114 ms —

15:50:32.501 GET 200 script 2.6 KB 1060 ms —

15:50:32.502 GET 200 script 181.8 KB 79 ms 2 alerts

15:50:32.503 GET 200 script 42.7 KB 801 ms 3 alerts

15:50:32.504 GET 302 stylesheet 0 B 308 ms —

15:50:32.506 GET 200 script 163.9 KB 93 ms 1 alerts

15:50:32.598 GET 200 script 397.7 KB 5 ms —

15:50:32.669 GET 200 script 45.0 KB 20 ms —

15:50:33.397 GET 200 script 45.2 KB 820 ms 3 alerts

Transaction #12

Request / response

URL

GET HTTPS

https://www.highperformanceformat.com/a14ab8d2da9e4edbaffdff31f759e339/invoke.js

IP / ASN

172.240.127.243

AS7979 · SERVERS-COM

Requested by: https://oowebxseries.com/episode/seeti-maar-seeti-maar-episode-3

Resource information

File type: JavaScript source, ASCII text, with very long lines (46292), with no line terminators
MIME type: application/javascript
First seen (UTC): 27 Jan 2026 · 15:51:05.491 UTC
Last seen (UTC): 27 Jan 2026 · 15:51:05.491 UTC
Times seen: 1

Size: 45.2 KB (46292 bytes)
MD5: f96bfc542f4a686909f126a3fb4c85de
SHA1: 00ed7f1bfa37f0a5f2b9c49cf4fc8b552026efd5
SHA256: cf9f3a5b6d432834c66fe55d15706b6b5b66c01383555e308eb9357a8fb5f189

Certificate information

Issuer: Let's Encrypt · R12
Subject: highperformanceformat.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: FF:6C:F9:E0:24:86:DF:99:47:19:6C:03:2B:17:E7:3B:21:C6:76:11
Valid from: Tue, 09 Dec 2025 22:06:14 GMT
Valid until: Mon, 09 Mar 2026 22:06:13 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /a14ab8d2da9e4edbaffdff31f759e339/invoke.js HTTP/1.1
Host: www.highperformanceformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 27 Jan 2026 15:50:33 GMT
Content-Type: application/javascript
Content-Length: 18479
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 4
Host: www.highperformanceformat.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 07543931bc13773ed9e828cbd5d01c89
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

15:50:33.400 GET 200 script 45.2 KB 821 ms 3 alerts

15:50:33.401 GET 200 script 45.2 KB 833 ms 3 alerts

15:50:33.472 GET 200 script 45.2 KB 764 ms 3 alerts

15:50:33.474 GET 200 script 45.2 KB 746 ms 3 alerts

15:50:33.476 GET 200 script 45.2 KB 755 ms 3 alerts

15:50:33.490 GET 200 img 9.4 KB 122 ms 2 alerts

15:50:33.492 GET 200 img 9.6 KB 104 ms 2 alerts

15:50:33.495 GET 200 img 8.6 KB 102 ms 2 alerts

15:50:33.497 GET 200 img 9.5 KB 95 ms 2 alerts

15:50:33.500 GET 200 img 10.8 KB 95 ms 2 alerts

15:50:33.575 GET 200 img 14.1 KB 85 ms 2 alerts

15:50:33.577 GET 200 img 7.3 KB 36 ms 2 alerts

15:50:33.581 GET 200 img 7.1 KB 41 ms 2 alerts

15:50:33.585 GET 200 img 8.2 KB 52 ms 2 alerts

15:50:33.587 GET 200 img 11.1 KB 44 ms 2 alerts

15:50:33.588 GET 200 img 11.6 KB 47 ms 2 alerts

15:50:33.589 GET 200 img 5.8 KB 47 ms 2 alerts

15:50:33.590 GET 200 img 7.7 KB 47 ms 2 alerts

15:50:33.591 GET 200 img 9.9 KB 43 ms 2 alerts

15:50:33.592 GET 200 img 9.5 KB 47 ms 2 alerts

15:50:33.593 GET 200 img 6.3 KB 43 ms 2 alerts

15:50:33.593 GET 200 img 7.1 KB 41 ms 2 alerts

15:50:34.104 POST 200 xhr 18.8 KB 439 ms 1 alerts

15:50:34.108 GET 200 script 119.5 KB 150 ms —

15:50:34.109 GET 200 fetch 398 B 189 ms 1 alerts

15:50:34.110 GET 200 xhr 40 B 267 ms —

15:50:34.111 GET 200 xhr 3.4 KB 707 ms 1 alerts

15:50:34.114 GET 404 stylesheet 0 B 55 ms —

15:50:34.116 GET 200 xhr 40 B 262 ms —

15:50:34.119 GET 302 script 155.5 KB 32 ms —

15:50:34.342 GET 302 stylesheet 0 B 53 ms —

15:50:34.345 GET 200 script 155.5 KB 52 ms —

15:50:34.404 GET 200 script 104.3 KB 809 ms 3 alerts

15:50:34.416 GET 307 xhr 4.6 KB 724 ms 4 alerts

15:50:34.417 GET 200 script 44.9 KB 14 ms 1 alerts

15:50:34.421 GET 200 script 40.8 KB 12 ms 1 alerts

15:50:34.422 GET 200 script 55.3 KB 16 ms 1 alerts

15:50:34.424 POST 204 beacon 0 B 188 ms 3 alerts

15:50:34.439 GET 404 stylesheet 0 B 48 ms —

http://oowebxseries.com/episode/seeti-maar-seeti-maar-episode-3

Domain graph

Hostnames

Connections

Network requests

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://oowebxseries.com/episode/seeti-maar-seeti-maar-episode-3

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://oowebxseries.com/episode/seeti-maar-seeti-maar-episode-3

Domain graph

Network requests