This domain isn't a typical website you browse. It's a subdomain used for serving content through AWS CloudFront, likely part of the AppsFlyer SDK infrastructure. AppsFlyer is a well-known mobile attribution platform, so this endpoint is almost certainly legitimate. The security setup is solid, with a valid certificate and fast response times, though it still accepts older TLS versions that browsers have deprecated. For a backend asset, that's a minor concern. The real question isn't 'is hbaqkj-cdn-settings.appsflyersdk.com a scam?' — it's whether you should trust the root domain, appsflyersdk.com. If you're an app developer, ensure your SDK is configured to use the official AppsFlyer endpoints. For everyday users, this domain isn't something you'd visit directly. There's no data collection or payment here, so compliance isn't an issue. Overall, the signals point to a legitimate piece of infrastructure, not a scam.
Yes — hbaqkj-cdn-settings.appsflyersdk.com looks mostly safe
In plain English
This subdomain looks like a CDN asset belonging to AppsFlyer, a legitimate mobile analytics company. It's secured with modern encryption and hosted on AWS, though it still accepts older, less secure connections. There's no evidence of malicious activity, but the lack of confirmed ownership means you should verify the root domain's trustworthiness.
Where the score comes from
The connection uses modern encryption, but the server still accepts older, vulnerable TLS versions. That's a small but real risk for any endpoint, though less critical for a backend asset.
This is a subdomain of appsflyersdk.com, which strongly suggests it belongs to AppsFlyer, a known mobile attribution company. We can't confirm ownership directly, but the naming is consistent.
No blacklists or malware flags. The lack of web archive history is expected for a subdomain. Nothing suspicious here.
This is a backend CDN endpoint, not a consumer website. The absence of an about page, contact info, or social media is completely normal and expected.
No legal pages are needed for a technical asset that doesn't collect user data or process payments. No compliance concerns.
Fast, well-hosted on AWS CloudFront with a valid certificate. The missing DNSSEC is a minor detail, and the legacy TLS acceptance is the main downside.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →