WEBSITE ANALYSIS REPORT

http://haafedk2.com

03 Oct 2026 · 02:20:05.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

cdn.holdbitter.com7 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com6 captured requests
consumeririssalary.com6 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com7 captured requests
haafedk2.com50 captured requests
pl30117259.effectivecpmnetwork.com1 captured requests
pl30117260.effectivecpmnetwork.com1 captured requests
pl30117261.effectivecpmnetwork.com1 captured requests
portalfluently.com2 captured requests
protrafficinspector.com2 captured requests
realizationnewestfangs.com4 captured requests
spendsdetachment.com4 captured requests
www.highperformanceformat.com2 captured requests
zoologyfibre.com10 captured requests

Connections

haafedk2.com → cdn.holdbitter.comCalls3 captured connections
haafedk2.com → cdn.holdbitter.comLoads from4 captured connections
haafedk2.com → cdn.show-creative1.comCalls1 captured connections
haafedk2.com → cdn.storageimagedisplay.comLoads from6 captured connections
haafedk2.com → consumeririssalary.comCalls2 captured connections
haafedk2.com → consumeririssalary.comLoads from4 captured connections
haafedk2.com → flushpersist.comLoads from2 captured connections
haafedk2.com → fonts.googleapis.comLoads from2 captured connections
haafedk2.com → fonts.gstatic.comLoads from7 captured connections
haafedk2.com → pl30117259.effectivecpmnetwork.comLoads from1 captured connections
haafedk2.com → pl30117260.effectivecpmnetwork.comLoads from1 captured connections
haafedk2.com → pl30117261.effectivecpmnetwork.comLoads from1 captured connections
haafedk2.com → portalfluently.comLoads from2 captured connections
haafedk2.com → protrafficinspector.comCalls2 captured connections
haafedk2.com → realizationnewestfangs.comCalls3 captured connections
haafedk2.com → realizationnewestfangs.comLoads from1 captured connections
haafedk2.com → spendsdetachment.comCalls3 captured connections
haafedk2.com → spendsdetachment.comLoads from1 captured connections
haafedk2.com → www.highperformanceformat.comLoads from2 captured connections
haafedk2.com → zoologyfibre.comCalls3 captured connections
haafedk2.com → zoologyfibre.comLoads from7 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:19:22.986 GET 200 document 83.9 KB 1402 ms 2 alerts

02:19:24.581 GET 200 stylesheet 98.3 KB 25 ms 2 alerts

02:19:24.582 GET 200 stylesheet 13.4 KB 27 ms 2 alerts

02:19:24.587 GET 200 stylesheet 89.1 KB 10 ms 2 alerts

02:19:24.589 GET 200 stylesheet 107.8 KB 23 ms 2 alerts

02:19:24.591 GET 200 stylesheet 9.9 KB 32 ms 2 alerts

02:19:24.592 GET 200 stylesheet 1.4 KB 19 ms 2 alerts

02:19:24.594 GET 200 stylesheet 4.7 KB 27 ms 2 alerts

02:19:24.595 GET 200 stylesheet 54.5 KB 26 ms 2 alerts

02:19:24.835 GET 200 stylesheet 30.3 KB 9 ms 2 alerts

02:19:24.837 GET 200 stylesheet 28.0 KB 29 ms 2 alerts

02:19:24.839 GET 200 script 74.9 KB 592 ms —

02:19:24.842 GET 200 script 50.6 KB 561 ms 2 alerts

02:19:24.844 GET 200 script 1.2 KB 4 ms 2 alerts

02:19:24.846 GET 200 script 84.6 KB 638 ms 2 alerts

02:19:24.851 GET 200 script 58.3 KB 745 ms 2 alerts

02:19:24.853 GET 200 script 28.4 KB 489 ms 2 alerts

02:19:24.854 GET 200 script 1.4 KB 560 ms 2 alerts

02:19:24.855 GET 200 script 14.6 KB 516 ms 2 alerts

02:19:24.856 GET 200 script 1.3 KB 518 ms 2 alerts

02:19:24.858 GET 200 script 1.5 KB 532 ms 2 alerts

02:19:24.859 GET 200 script 6.9 KB 548 ms 2 alerts

02:19:24.860 GET 200 script 8.1 KB 525 ms 2 alerts

02:19:24.862 GET 200 script 8.1 KB 569 ms 2 alerts

02:19:24.863 GET 200 script 2.5 KB 588 ms 2 alerts

02:19:24.864 GET 200 script 6.0 KB 517 ms 2 alerts

02:19:24.865 GET 200 script 19.8 KB 521 ms 2 alerts

02:19:24.867 GET 200 script 7.9 KB 523 ms 2 alerts

02:19:24.869 GET 200 script 23.5 KB 520 ms 2 alerts

02:19:24.870 GET 200 script 476 B 552 ms 2 alerts

02:19:24.872 GET 200 script 68.3 KB 583 ms —

02:19:24.873 GET 200 script 50.6 KB 558 ms 2 alerts

Transaction #31

Request / response

URL

GET HTTPS

https://www.highperformanceformat.com/173e51533015fb151ff2aab56d03f303/invoke.js

IP / ASN

172.240.127.243

AS7979 · SERVERS-COM

Requested by: https://haafedk2.com/

Resource information

File type: JavaScript source, ASCII text, with very long lines (51856), with no line terminators
MIME type: application/javascript
First seen (UTC): 03 Oct 2026 · 02:20:40.158 UTC
Last seen (UTC): 03 Oct 2026 · 02:20:40.158 UTC
Times seen: 1

Size: 50.6 KB (51856 bytes)
MD5: 58e4d890f29cd8de0705911f0988d24f
SHA1: c1ce7ac9f3d7425d330ccf98453d8904de9eb5b5
SHA256: 3ecfd261b89f4af479444e6580526ec58110972dce1338ef433bc2b9b86742a9

Certificate information

Issuer: Let's Encrypt · YR2
Subject: highperformanceformat.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: B8:83:42:30:01:F1:50:DF:BA:43:AD:F5:FF:7C:75:43:E4:F3:14:B8
Valid from: Thu, 06 Aug 2026 23:52:39 GMT
Valid until: Wed, 04 Nov 2026 23:52:38 GMT

Technology fingerprints

Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /173e51533015fb151ff2aab56d03f303/invoke.js HTTP/1.1
Host: www.highperformanceformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://haafedk2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sat, 03 Oct 2026 02:19:25 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent
access-control-allow-origin: *
content-encoding: zstd
set-cookie: pip_f197d55f118607ab6a6242314354fb76=1; Path=/; Expires=Sun, 04 Oct 2026 02:19:25 GMT; Secure; SameSite=None
vary: Accept-Encoding
x-envoy-upstream-service-time: 8
Host: www.highperformanceformat.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c95956ca34703c86a40929f13ecca196
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

02:19:24.875 GET 200 script 48.4 KB 170 ms —

02:19:24.877 GET 200 script 9.7 KB 533 ms 2 alerts

02:19:24.881 GET 200 img 395.3 KB 40 ms 2 alerts

02:19:24.903 GET 200 img 3.1 KB 9 ms 2 alerts

02:19:24.905 GET 200 img 11.1 KB 9 ms 2 alerts

02:19:24.907 GET 200 img 3.4 KB 11 ms 2 alerts

02:19:24.908 GET 200 img 6.0 KB 10 ms 2 alerts

02:19:24.950 GET 200 stylesheet 28.3 KB 84 ms —

02:19:24.956 GET 200 stylesheet 19.8 KB 11 ms 2 alerts

02:19:24.958 GET 200 stylesheet 3.9 KB 10 ms 2 alerts

02:19:25.485 GET 200 script 37.1 KB 148 ms 1 alerts

02:19:25.492 GET 200 xhr 40 B 148 ms —

02:19:25.495 GET 200 font 47.2 KB 67 ms —

02:19:25.504 GET 200 xhr 40 B 133 ms —

02:19:25.624 GET 200 font 75.4 KB 858 ms 2 alerts

02:19:25.626 GET 200 font 47.2 KB 36 ms —

02:19:25.628 GET 200 font 47.2 KB 42 ms —

02:19:25.630 GET 200 font 26.0 KB 38 ms —

http://haafedk2.com

Domain graph

Hostnames

Connections

Network requests

Transaction #31

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://haafedk2.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #31

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://haafedk2.com

Domain graph

Network requests