WEBSITE ANALYSIS REPORT

http://www.ducksurvival.wiki/guides/platforms-ios-pc-steam-guide

03 Jul 2026 · 09:42:42.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

09:42:13.137 GET 200 document 100.8 KB 8799 ms —

09:42:22.161 GET 200 stylesheet 16.9 KB 77 ms —

09:42:22.164 GET 200 stylesheet 142.1 KB 330 ms —

09:42:22.166 GET 200 script 3.7 KB 82 ms —

09:42:22.168 GET 200 script 169.0 KB 317 ms —

09:42:22.173 GET 200 script 168.9 KB 395 ms —

09:42:22.175 GET 200 script 572 B 88 ms —

09:42:22.177 GET 200 script 5.7 KB 98 ms —

09:42:22.179 GET 200 script 46.8 KB 305 ms —

09:42:22.182 GET 200 script 21.3 KB 156 ms —

09:42:22.184 GET 200 script 12.4 KB 160 ms —

09:42:22.187 GET 200 script 8.8 KB 131 ms —

09:42:22.188 GET 200 script 30.2 KB 217 ms —

09:42:22.191 GET 200 script 15.8 KB 210 ms —

09:42:22.192 GET 200 script 21.4 KB 187 ms —

09:42:22.195 GET 200 script 13.3 KB 196 ms —

09:42:22.196 GET 200 script 18.4 KB 184 ms —

09:42:22.198 GET 200 script 24.8 KB 198 ms —

09:42:22.200 GET 200 script 9.4 KB 118 ms —

09:42:22.202 GET 200 script 36.0 KB 178 ms —

09:42:22.204 GET 200 script 181 B 102 ms —

09:42:22.206 GET 200 script 8.0 KB 136 ms —

09:42:22.208 GET 200 script 154 B 100 ms —

09:42:22.209 GET 200 script 169.5 KB 253 ms —

09:42:22.211 GET 200 script 13.0 KB 184 ms —

09:42:22.213 GET 200 script 7.5 KB 157 ms —

09:42:22.215 GET 200 script 32.6 KB 180 ms —

09:42:22.216 GET 200 script 11.3 KB 134 ms —

09:42:22.218 GET 200 script 33.1 KB 192 ms —

09:42:22.220 GET 200 script 10.3 KB 128 ms —

09:42:22.222 GET 200 script 356 B 101 ms —

09:42:22.224 GET 200 script 8.4 KB 122 ms —

09:42:22.508 GET 200 script 475.2 KB 670 ms —

09:42:22.569 GET 200 imageset 550.2 KB 294 ms —

09:42:22.570 GET 200 imageset 25.8 KB 235 ms —

09:42:22.617 GET 200 subdocument 1.0 KB 77 ms —

09:42:22.623 GET 200 font 35.0 KB 155 ms —

09:42:22.625 GET 200 font 35.0 KB 188 ms —

09:42:22.626 GET 200 font 35.0 KB 150 ms —

09:42:22.666 GET 200 subdocument 1.0 KB 49 ms —

09:42:22.669 GET 200 subdocument 1.0 KB 526 ms —

09:42:22.814 GET 200 script 50.4 KB 2190 ms 4 alerts

Transaction #23

Request / response

URL

GET HTTPS

https://www.highperformanceformat.com/d4f88fce5896c83110188bf73e87c784/invoke.js

IP / ASN

172.240.253.132

AS7979 · SERVERS-COM

Requested by: https://www.ducksurvival.wiki/ads/banner-320x50.html

Resource information

File type: JavaScript source, ASCII text, with very long lines (51615), with no line terminators
MIME type: application/javascript
First seen (UTC): 03 Jul 2026 · 09:42:51.124 UTC
Last seen (UTC): 03 Jul 2026 · 09:42:51.124 UTC
Times seen: 1

Size: 50.4 KB (51615 bytes)
MD5: f3f6f011a3936afb4b4622b64b65c720
SHA1: a4537569bc48cb9dda68b8f5d7f1a14be86088a6
SHA256: f52510641216d3c62385692972cc579d223f1f27134caa21a5968e17e002f97b

Certificate information

Issuer: Let's Encrypt · YR2
Subject: highperformanceformat.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 54:46:9A:99:5D:9F:19:5B:67:21:55:1F:5C:6F:38:A2:52:41:7E:57
Valid from: Sun, 07 Jun 2026 22:27:03 GMT
Valid until: Sat, 05 Sep 2026 22:27:02 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.28.2 (Web servers, Reverse proxies)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /d4f88fce5896c83110188bf73e87c784/invoke.js HTTP/1.1
Host: www.highperformanceformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://www.ducksurvival.wiki/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Fri, 03 Jul 2026 09:42:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: X-UCBrowser-Device-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-Device-User-Agent
access-control-allow-origin: *
content-encoding: zstd
vary: Accept-Encoding
x-envoy-upstream-service-time: 5
Host: www.highperformanceformat.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 26fe2fee00461b42b3a74727c7a857d4
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

09:42:22.816 GET 200 script 50.4 KB 1507 ms 4 alerts

09:42:22.973 GET 200 img 80.7 KB 165 ms —

09:42:22.974 GET 200 img 963 B 108 ms —

09:42:23.120 GET 200 script 50.4 KB 1124 ms 4 alerts

09:42:23.313 POST 204 fetch 0 B 484 ms —

09:42:23.323 GET 200 font 35.0 KB 124 ms —

09:42:23.325 GET 200 font 40.3 KB 154 ms —

09:42:23.326 GET 200 font 14.0 KB 122 ms —

http://www.ducksurvival.wiki/guides/platforms-ios-pc-steam-guide

Domain graph

Hostnames

Connections