WEBSITE ANALYSIS REPORT

http://hanime.city/series/hametsu-no-yuuwaku-episode-2/

30 Dec 2025 · 08:54:14.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4031a423ab.82d36b5fc4.com1 captured requests
accounts.google.com3 captured requests
acscdn.com3 captured requests
adexchangeclear.com4 captured requests
cdn.storageimagedisplay.com4 captured requests
cdnjs.cloudflare.com2 captured requests
contractexcitedly.com5 captured requests
enrtx.com1 captured requests
flushpersist.com1 captured requests
fp.metricswpsh.com2 captured requests
hanime.city31 captured requests
inadsexchange.com3 captured requests
js.capndr.com2 captured requests
js.wpadmngr.com1 captured requests
kettledroopingcontinuation.com3 captured requests
na.nawpush.com1 captured requests
nereserv.com2 captured requests
ntvpforever.com2 captured requests
preferencenail.com1 captured requests
protrafficinspector.com2 captured requests
realizationnewestfangs.com3 captured requests
rule34video.city4 captured requests
static.cloudflareinsights.com1 captured requests
usrpubtrk.com1 captured requests
wayfarerorthodox.com7 captured requests
weirdopt.com1 captured requests

Connections

hanime.city → 4031a423ab.82d36b5fc4.comCalls1 captured connections
hanime.city → accounts.google.comLoads from3 captured connections
hanime.city → acscdn.comLoads from3 captured connections
hanime.city → adexchangeclear.comCalls4 captured connections
hanime.city → cdn.storageimagedisplay.comLoads from4 captured connections
hanime.city → cdnjs.cloudflare.comLoads from2 captured connections
hanime.city → contractexcitedly.comLoads from5 captured connections
hanime.city → enrtx.comCalls1 captured connections
hanime.city → flushpersist.comLoads from1 captured connections
hanime.city → fp.metricswpsh.comCalls2 captured connections
hanime.city → inadsexchange.comLoads from3 captured connections
hanime.city → js.capndr.comLoads from2 captured connections
hanime.city → js.wpadmngr.comLoads from1 captured connections
hanime.city → kettledroopingcontinuation.comCalls2 captured connections
hanime.city → kettledroopingcontinuation.comLoads from1 captured connections
hanime.city → na.nawpush.comCalls1 captured connections
hanime.city → nereserv.comCalls2 captured connections
hanime.city → ntvpforever.comCalls2 captured connections
hanime.city → preferencenail.comLoads from1 captured connections
hanime.city → protrafficinspector.comCalls2 captured connections
hanime.city → realizationnewestfangs.comCalls2 captured connections
hanime.city → realizationnewestfangs.comLoads from1 captured connections
hanime.city → rule34video.cityLoads from4 captured connections
hanime.city → static.cloudflareinsights.comLoads from1 captured connections
hanime.city → usrpubtrk.comCalls1 captured connections
hanime.city → wayfarerorthodox.comCalls4 captured connections
hanime.city → wayfarerorthodox.comLoads from3 captured connections
hanime.city → weirdopt.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:53:51.408 GET 200 document 70.2 KB 825 ms 1 alerts

08:53:52.434 GET 200 stylesheet 34.5 KB 562 ms 1 alerts

08:53:52.436 GET 200 stylesheet 79.8 KB 569 ms 1 alerts

08:53:52.437 GET 200 script 105.7 KB 559 ms 1 alerts

08:53:52.438 GET 200 stylesheet 30.3 KB 556 ms 1 alerts

08:53:52.439 GET 200 stylesheet 39.1 KB 557 ms 1 alerts

08:53:52.440 GET 200 imageset 105.4 KB 1170 ms 1 alerts

08:53:52.441 GET 200 script 167.2 KB 75 ms 1 alerts

08:53:52.442 GET 200 stylesheet 30.3 KB 52 ms —

08:53:52.443 GET 200 script 45.2 KB 835 ms 1 alerts

Transaction #67

Request / response

URL

GET HTTPS

https://contractexcitedly.com/9657fa51230eb69fbef21185a5970f35/invoke.js

IP / ASN

172.240.127.244

AS7979 · SERVERS-COM

Requested by: https://hanime.city/series/hametsu-no-yuuwaku-episode-2/

Resource information

File type: JavaScript source, ASCII text, with very long lines (46249), with no line terminators
MIME type: application/javascript
First seen (UTC): 30 Dec 2025 · 08:54:26.881 UTC
Last seen (UTC): 30 Dec 2025 · 08:54:26.881 UTC
Times seen: 1

Size: 45.2 KB (46249 bytes)
MD5: 929c6dba44da61ec0d5aa1cca6030a9f
SHA1: ef50b42a3c4c0c29d2f5cc6327fb94f5dca4ce47
SHA256: faf86747e445bb9eb1c5fe89a5f91d7b9601fe77ca695dc55bbf7e79280dabbe

Certificate information

Issuer: Let's Encrypt · R13
Subject: contractexcitedly.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: B4:B7:42:E1:97:39:90:AF:97:DD:9B:9B:4C:3D:2C:FB:C5:BB:4B:BB
Valid from: Wed, 03 Dec 2025 00:47:15 GMT
Valid until: Tue, 03 Mar 2026 00:47:14 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /9657fa51230eb69fbef21185a5970f35/invoke.js HTTP/1.1
Host: contractexcitedly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hanime.city/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 30 Dec 2025 08:53:52 GMT
Content-Type: application/javascript
Content-Length: 18488
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 3
Host: contractexcitedly.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 5dbd124dee45494e5c1bb03a7987a58b
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

08:53:52.444 GET 200 script 19 B 551 ms 1 alerts

08:53:52.445 GET 200 script 85.4 KB 567 ms 1 alerts

08:53:52.446 GET 200 script 84.9 KB 569 ms 1 alerts

08:53:52.447 GET 200 script 41.8 KB 559 ms 1 alerts

08:53:52.448 GET 200 script 27.9 KB 577 ms 1 alerts

08:53:52.450 GET 200 script 20.0 KB 558 ms 1 alerts

08:53:52.450 GET 200 script 45.2 KB 821 ms 1 alerts

08:53:52.451 GET 200 script 104.3 KB 832 ms 1 alerts

08:53:52.452 GET 200 script 144.3 KB 220 ms 1 alerts

08:53:52.454 GET 200 script 19.5 KB 53 ms —

08:53:53.293 GET 200 font 14.5 KB 12 ms 1 alerts

08:53:53.296 GET 200 font 75.4 KB 926 ms 1 alerts

08:53:53.298 GET 200 font 43.3 KB 912 ms 1 alerts

08:53:53.300 GET 200 font 14.5 KB 12 ms 1 alerts

08:53:53.301 GET 200 font 14.4 KB 12 ms 1 alerts

08:53:53.390 GET 200 font 75.4 KB 52 ms —

08:53:53.392 GET 301 media 1.72 MB 694 ms —

08:53:53.427 GET 200 other 5.6 KB 555 ms 1 alerts

08:53:53.468 GET 200 xhr 40 B 475 ms —

08:53:53.497 GET 200 script 45.2 KB 115 ms 1 alerts

08:53:53.499 GET 301 media 1.71 MB 590 ms —

08:53:53.501 GET 200 img 368 B 577 ms 1 alerts

08:53:53.601 GET 200 lazy-img 80.1 KB 546 ms 1 alerts

08:53:53.604 GET 200 lazy-img 523 B 553 ms 1 alerts

08:53:53.615 GET 200 lazy-img 77.2 KB 912 ms 1 alerts

08:53:53.616 GET 200 lazy-img 67.7 KB 913 ms 1 alerts

08:53:53.617 GET 200 lazy-img 100.2 KB 547 ms 1 alerts

08:53:53.618 GET 200 lazy-img 67.8 KB 914 ms 1 alerts

08:53:53.625 GET 200 lazy-img 64.0 KB 942 ms 1 alerts

08:53:53.685 GET 200 xhr 40 B 32 ms —

08:53:53.686 GET 200 script 26.2 KB 8 ms 1 alerts

08:53:53.689 GET 200 script 45.2 KB 103 ms 1 alerts

08:53:53.796 GET 200 fetch 1.9 KB 256 ms 1 alerts

08:53:53.798 GET 307 xhr 4.5 KB 713 ms 3 alerts

08:53:53.799 GET 307 xhr 4.9 KB 728 ms 4 alerts

08:53:53.821 GET 307 xhr 4.9 KB 712 ms 3 alerts

08:53:53.832 GET 200 fetch 1.9 KB 175 ms 1 alerts

08:53:53.857 GET 200 fetch 1.9 KB 193 ms 1 alerts

08:53:53.887 GET 200 font 43.3 KB 315 ms 1 alerts

08:53:53.901 GET 307 xhr 4.5 KB 665 ms 3 alerts

http://hanime.city/series/hametsu-no-yuuwaku-episode-2/

Domain graph

Hostnames

Connections

Network requests

Transaction #67

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://hanime.city/series/hametsu-no-yuuwaku-episode-2/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #67

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://hanime.city/series/hametsu-no-yuuwaku-episode-2/

Domain graph

Network requests