WEBSITE ANALYSIS REPORT

http://haafedk2.com

03 Oct 2026 · 02:20:05.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

cdn.holdbitter.com7 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com6 captured requests
consumeririssalary.com6 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com7 captured requests
haafedk2.com50 captured requests
pl30117259.effectivecpmnetwork.com1 captured requests
pl30117260.effectivecpmnetwork.com1 captured requests
pl30117261.effectivecpmnetwork.com1 captured requests
portalfluently.com2 captured requests
protrafficinspector.com2 captured requests
realizationnewestfangs.com4 captured requests
spendsdetachment.com4 captured requests
www.highperformanceformat.com2 captured requests
zoologyfibre.com10 captured requests

Connections

haafedk2.com → cdn.holdbitter.comCalls3 captured connections
haafedk2.com → cdn.holdbitter.comLoads from4 captured connections
haafedk2.com → cdn.show-creative1.comCalls1 captured connections
haafedk2.com → cdn.storageimagedisplay.comLoads from6 captured connections
haafedk2.com → consumeririssalary.comCalls2 captured connections
haafedk2.com → consumeririssalary.comLoads from4 captured connections
haafedk2.com → flushpersist.comLoads from2 captured connections
haafedk2.com → fonts.googleapis.comLoads from2 captured connections
haafedk2.com → fonts.gstatic.comLoads from7 captured connections
haafedk2.com → pl30117259.effectivecpmnetwork.comLoads from1 captured connections
haafedk2.com → pl30117260.effectivecpmnetwork.comLoads from1 captured connections
haafedk2.com → pl30117261.effectivecpmnetwork.comLoads from1 captured connections
haafedk2.com → portalfluently.comLoads from2 captured connections
haafedk2.com → protrafficinspector.comCalls2 captured connections
haafedk2.com → realizationnewestfangs.comCalls3 captured connections
haafedk2.com → realizationnewestfangs.comLoads from1 captured connections
haafedk2.com → spendsdetachment.comCalls3 captured connections
haafedk2.com → spendsdetachment.comLoads from1 captured connections
haafedk2.com → www.highperformanceformat.comLoads from2 captured connections
haafedk2.com → zoologyfibre.comCalls3 captured connections
haafedk2.com → zoologyfibre.comLoads from7 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:19:22.986 GET 200 document 83.9 KB 1402 ms 2 alerts

02:19:24.581 GET 200 stylesheet 98.3 KB 25 ms 2 alerts

02:19:24.582 GET 200 stylesheet 13.4 KB 27 ms 2 alerts

02:19:24.587 GET 200 stylesheet 89.1 KB 10 ms 2 alerts

02:19:24.589 GET 200 stylesheet 107.8 KB 23 ms 2 alerts

02:19:24.591 GET 200 stylesheet 9.9 KB 32 ms 2 alerts

02:19:24.592 GET 200 stylesheet 1.4 KB 19 ms 2 alerts

02:19:24.594 GET 200 stylesheet 4.7 KB 27 ms 2 alerts

02:19:24.595 GET 200 stylesheet 54.5 KB 26 ms 2 alerts

02:19:24.835 GET 200 stylesheet 30.3 KB 9 ms 2 alerts

02:19:24.837 GET 200 stylesheet 28.0 KB 29 ms 2 alerts

02:19:24.839 GET 200 script 74.9 KB 592 ms —

02:19:24.842 GET 200 script 50.6 KB 561 ms 2 alerts

02:19:24.844 GET 200 script 1.2 KB 4 ms 2 alerts

02:19:24.846 GET 200 script 84.6 KB 638 ms 2 alerts

02:19:24.851 GET 200 script 58.3 KB 745 ms 2 alerts

02:19:24.853 GET 200 script 28.4 KB 489 ms 2 alerts

02:19:24.854 GET 200 script 1.4 KB 560 ms 2 alerts

02:19:24.855 GET 200 script 14.6 KB 516 ms 2 alerts

02:19:24.856 GET 200 script 1.3 KB 518 ms 2 alerts

02:19:24.858 GET 200 script 1.5 KB 532 ms 2 alerts

02:19:24.859 GET 200 script 6.9 KB 548 ms 2 alerts

02:19:24.860 GET 200 script 8.1 KB 525 ms 2 alerts

02:19:24.862 GET 200 script 8.1 KB 569 ms 2 alerts

02:19:24.863 GET 200 script 2.5 KB 588 ms 2 alerts

02:19:24.864 GET 200 script 6.0 KB 517 ms 2 alerts

02:19:24.865 GET 200 script 19.8 KB 521 ms 2 alerts

02:19:24.867 GET 200 script 7.9 KB 523 ms 2 alerts

02:19:24.869 GET 200 script 23.5 KB 520 ms 2 alerts

02:19:24.870 GET 200 script 476 B 552 ms 2 alerts

02:19:24.872 GET 200 script 68.3 KB 583 ms —

02:19:24.873 GET 200 script 50.6 KB 558 ms 2 alerts

02:19:24.875 GET 200 script 48.4 KB 170 ms —

02:19:24.877 GET 200 script 9.7 KB 533 ms 2 alerts

Transaction #16

Request / response

URL

GET HTTPS

https://haafedk2.com/ab-guard.js?v=3

IP / ASN

172.67.158.155

AS13335 · CLOUDFLARENET

Requested by: https://haafedk2.com/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text
MIME type: text/javascript
First seen (UTC): 03 Oct 2026 · 02:20:40.079 UTC
Last seen (UTC): 03 Oct 2026 · 02:20:40.079 UTC
Times seen: 1

Size: 9.7 KB (9950 bytes)
MD5: 82695699c65e5cc72eeac41724e8abd7
SHA1: 63c3cf80d92cab8a79cd848203dd27636a3f12d8
SHA256: 2b298864f7ff421da4530fa36a69853b27059ea42cc7eb09992b9e21b51aa462

Certificate information

Issuer: Google Trust Services · WE1
Subject: haafedk2.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: BB:90:0A:A4:D0:9F:BF:06:6C:7C:B0:19:45:E7:A1:81:FA:9E:5D:1A
Valid from: Sat, 12 Sep 2026 22:26:25 GMT
Valid until: Fri, 11 Dec 2026 23:23:50 GMT

Technology fingerprints

LiteSpeed Cache (Caching, WordPress plugins)
LiteSpeed (Web servers)
Litespeed Cache (Caching, WordPress plugins)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ab-guard.js?v=3 HTTP/1.1
Host: haafedk2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://haafedk2.com/
Cookie: PHPSESSID=ndhmee8gm3kicfacdi2ve60pfb; resx_visitor=4716_8b9d1aa714fa16957681f08918725f9a; resx_4716_load=%5B%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
etag: "26de-6a68c7dd-741c75;br"
last-modified: Tue, 28 Jul 2026 15:16:45 GMT
content-type: text/javascript
server-timing: cfExtPri
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Oct 2026 02:19:25 GMT
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=R3t9Jh5mqXJxGwn3nJWR2lUvFt%2F%2B25Wr9SrvSl%2FspvbkqeLwiAqjyBxBYjD7LiJwrBNzuhnhGCfFJd4fxKvc30QpqYLv0mZ1mDgdJ3QGSDjqwWybZ9izaQKiqmreIOM%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
priority: u=3,i=?0
cf-ray: a44876387c9e56cb-OSL
alt-svc: h3=":443"; ma=86400
content-length: 3420

02:19:24.881 GET 200 img 395.3 KB 40 ms 2 alerts

02:19:24.903 GET 200 img 3.1 KB 9 ms 2 alerts

02:19:24.905 GET 200 img 11.1 KB 9 ms 2 alerts

02:19:24.907 GET 200 img 3.4 KB 11 ms 2 alerts

02:19:24.908 GET 200 img 6.0 KB 10 ms 2 alerts

02:19:24.950 GET 200 stylesheet 28.3 KB 84 ms —

02:19:24.956 GET 200 stylesheet 19.8 KB 11 ms 2 alerts

02:19:24.958 GET 200 stylesheet 3.9 KB 10 ms 2 alerts

02:19:25.485 GET 200 script 37.1 KB 148 ms 1 alerts

02:19:25.492 GET 200 xhr 40 B 148 ms —

02:19:25.495 GET 200 font 47.2 KB 67 ms —

02:19:25.504 GET 200 xhr 40 B 133 ms —

02:19:25.624 GET 200 font 75.4 KB 858 ms 2 alerts

02:19:25.626 GET 200 font 47.2 KB 36 ms —

02:19:25.628 GET 200 font 47.2 KB 42 ms —

02:19:25.630 GET 200 font 26.0 KB 38 ms —

http://haafedk2.com

Domain graph

Hostnames

Connections

Network requests

Transaction #16

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://haafedk2.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #16

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://haafedk2.com

Domain graph

Network requests