WEBSITE ANALYSIS REPORT

http://cdn.aabdw.com/2142/fr.html?z=4333855&var=1113043721588314113&var_3=11385852_ScGWkoDYpm&country=HT&s=1113043721588314113&svar=1786934027&ssk=518f2e5ad1fb1deabbb582859b9c50f6&abtest=1561561&md5Ip=Y2U4Y2E2NTJlMmI4ZWIwNWRiODJiM2M0MWE4Y2ZmNDA&zdekrIp=YjNhNDg2YWM0ZTE0OTk2YjFiMDc0MWEyYThhZjNlZmQ&expires=1786934420&ruid=6a82723c-6a82-6a82-6a82-6a82723c8dc7&stest=63f21c31eec45845bc4a725f45d77fe0

17 Aug 2026 · 02:35:53.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:35:24.880 GET 403 document 64.3 KB 125 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://cdn.aabdw.com/2142/fr.html?z=4333855&var=1113043721588314113&var_3=11385852_ScGWkoDYpm&country=HT&s=1113043721588314113&svar=1786934027&ssk=518f2e5ad1fb1deabbb582859b9c50f6&abtest=1561561&md5Ip=Y2U4Y2E2NTJlMmI4ZWIwNWRiODJiM2M0MWE4Y2ZmNDA&zdekrIp=YjNhNDg2YWM0ZTE0OTk2YjFiMDc0MWEyYThhZjNlZmQ&expires=1786934420&ruid=6a82723c-6a82-6a82-6a82-6a82723c8dc7&stest=63f21c31eec45845bc4a725f45d77fe0

IP / ASN

45.133.44.1

AS39572 · DataWeb Global Group B.V.

Requested by: Not recorded

Resource information

File type: HTML document, Unicode text, UTF-8 text, with very long lines (35179)
MIME type: text/html; charset=utf-8
First seen (UTC): 15 Aug 2026 · 03:49:41.363 UTC
Last seen (UTC): 17 Aug 2026 · 02:35:54.971 UTC
Times seen: 3

Size: 64.3 KB (65839 bytes)
MD5: 6477d523bbe4f1407a797880e3945d38
SHA1: 8126f3f98de6b39d0f7ac5c5f277911e1d35f1d4
SHA256: 7cffaec958ce7952ea14cb4d308ae44b2c855fc7fd5d50821dc101699fd3df9e

Certificate information

Issuer: Let's Encrypt · YR2
Subject: cdn.aabdw.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 16:C8:E7:AD:07:68:FB:3A:EB:32:E1:11:60:00:00:B0:21:6E:54:14
Valid from: Sun, 09 Aug 2026 02:34:35 GMT
Valid until: Sat, 07 Nov 2026 02:34:34 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)
Astro:5.12.3 (Static site generator, JavaScript frameworks)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /2142/fr.html?z=4333855&var=1113043721588314113&var_3=11385852_ScGWkoDYpm&country=HT&s=1113043721588314113&svar=1786934027&ssk=518f2e5ad1fb1deabbb582859b9c50f6&abtest=1561561&md5Ip=Y2U4Y2E2NTJlMmI4ZWIwNWRiODJiM2M0MWE4Y2ZmNDA&zdekrIp=YjNhNDg2YWM0ZTE0OTk2YjFiMDc0MWEyYThhZjNlZmQ&expires=1786934420&ruid=6a82723c-6a82-6a82-6a82-6a82723c8dc7&stest=63f21c31eec45845bc4a725f45d77fe0 HTTP/1.1
Host: cdn.aabdw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 403 
date: Mon, 17 Aug 2026 02:35:24 GMT
content-type: text/html; charset=utf-8
server: nginx
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
x-cdn-host-id: AH0543
x-proxy-cache: MISS
X-Firefox-Spdy: h2

02:35:25.128 GET 403 document 64.3 KB 26 ms 1 alerts

02:35:25.413 GET 200 stylesheet 3.9 KB 95 ms —

02:35:25.464 GET 200 img 11.9 KB 24 ms 1 alerts

02:35:25.467 POST 200 beacon 16 B 32 ms 1 alerts

02:35:25.536 GET 200 script 4.6 KB 20 ms 1 alerts

02:35:25.538 GET 200 script 1.6 KB 20 ms 1 alerts

02:35:25.541 GET 200 script 3.0 KB 20 ms 1 alerts

02:35:25.542 GET 200 script 2.2 KB 19 ms 1 alerts

02:35:25.544 GET 200 script 25.6 KB 23 ms 1 alerts

02:35:25.546 GET 200 img 29.3 KB 34 ms 1 alerts

02:35:25.555 GET 200 font 21.0 KB 77 ms —

02:35:25.556 GET 200 font 21.0 KB 76 ms —

02:35:25.576 GET 200 script 3.7 KB 20 ms 1 alerts

02:35:25.578 GET 200 script 25.3 KB 20 ms 1 alerts

02:35:25.581 GET 200 script 3.4 KB 20 ms 1 alerts

02:35:25.583 GET 200 script 13.3 KB 20 ms 1 alerts

02:35:25.584 GET 200 script 3.7 KB 20 ms 1 alerts

02:35:25.586 GET 200 script 5.1 KB 20 ms 1 alerts

02:35:25.588 GET 200 script 1.7 KB 19 ms 1 alerts

02:35:25.589 GET 200 script 2.7 KB 19 ms 1 alerts

02:35:25.591 GET 200 script 1.7 KB 19 ms 1 alerts

02:35:25.593 GET 200 script 767 B 21 ms 1 alerts

02:35:25.597 GET 200 script 11.6 KB 20 ms 1 alerts

02:35:25.598 GET 200 script 3.3 KB 20 ms 1 alerts

02:35:25.600 GET 200 script 12.2 KB 20 ms 1 alerts

02:35:25.601 GET 200 script 409 B 20 ms 1 alerts

02:35:25.604 GET 200 script 888 B 19 ms 1 alerts

02:35:25.606 GET 200 script 660 B 19 ms 1 alerts

02:35:25.608 GET 200 script 1.6 KB 20 ms 1 alerts

02:35:25.609 GET 200 script 886 B 19 ms 1 alerts

02:35:25.612 GET 200 script 523 B 20 ms 1 alerts

02:35:25.613 GET 200 script 1.4 KB 19 ms 1 alerts

02:35:25.614 GET 200 script 695 B 19 ms 1 alerts

02:35:25.615 GET 200 script 1.7 KB 19 ms 1 alerts

02:35:25.616 GET 200 script 2.5 KB 19 ms 1 alerts

02:35:25.617 GET 200 script 719 B 19 ms 1 alerts

02:35:25.619 GET 200 script 1.8 KB 20 ms 1 alerts

02:35:25.620 GET 200 script 811 B 19 ms 1 alerts

02:35:25.621 GET 200 script 6.0 KB 19 ms 1 alerts

02:35:25.622 GET 200 script 855 B 19 ms 1 alerts

02:35:25.623 GET 200 script 669 B 20 ms 1 alerts

02:35:25.625 GET 200 script 2.0 KB 19 ms 1 alerts

02:35:25.626 GET 200 script 516 B 20 ms 1 alerts

02:35:25.629 GET 200 script 1.5 KB 20 ms 1 alerts

02:35:25.639 GET 200 script 1.2 KB 20 ms 1 alerts

02:35:25.640 GET 200 script 650 B 20 ms 1 alerts

02:35:25.646 GET 200 script 380 B 20 ms 1 alerts

02:35:25.647 GET 200 script 640 B 19 ms 1 alerts

02:35:25.752 GET 200 script 16.1 KB 40 ms —

Domain graph

Hostnames

Connections