WEBSITE ANALYSIS REPORT

https://wakeuptocrypto.com/guides/ai-agent-crypto-payment-scam-red-flags/

15 Oct 2026 · 01:18:05.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

01:17:33.299 GET 200 document 33.2 KB 135 ms —

01:17:33.829 GET 200 stylesheet 14.1 KB 15 ms —

01:17:33.833 GET 200 script 129 B 14 ms —

01:17:33.835 GET 200 script 52.9 KB 137 ms —

01:17:33.841 GET 200 img 90.5 KB 18 ms —

01:17:33.993 GET 200 xhr 40 B 104 ms —

01:17:33.994 GET 200 script 4.3 KB 57 ms —

01:17:34.116 GET 200 img 5.3 KB 13 ms —

01:17:34.117 GET 200 img 1.8 KB 13 ms —

01:17:34.120 GET 307 xhr 0 B 407 ms 2 alerts

01:17:34.272 GET 200 stylesheet 2.7 KB 16 ms —

01:17:34.273 GET 200 stylesheet 18.0 KB 16 ms —

01:17:34.279 GET 200 fetch 871 B 392 ms —

01:17:34.532 GET 200 xhr 4.0 KB 110 ms 2 alerts

01:17:34.682 GET 200 img 60.0 KB 109 ms —

01:17:34.683 GET 200 img 0 B 0 ms 2 alerts

Transaction #31

Request / response

URL

GET HTTPS

https://workdeadlinededicate.com/impr.gif?sid=H4sIAAAAAAAC_1xSPWwcRRSedSwkRIGEAigNuiIFkbjz_t7uJl3EXxMHkaAU0MzfOpPb29nszN6dr3IwUFuiQVTr7-y4swCJVBTojGiQIrydheKGho4CRAs654QDI817b-Z7mnnfp--z3fqU9FDTk_du6KnKc7oW9dzO63dUIfTYdNZvdzy3517r3FFFP7zWmSxCNbrqBWHPvdJ5R_KBXvNdz3U91-u8rSqZ6cnaGQpVHnpp1OuHPc9Lel7kY1L9_8bUDgx1IEan5CUo0b74a_YhFJ-jGH71pjQDq8s33hrWObW6wkgcfFAMCj0uMDwvs8pBVhwsu6FNS8gXK9DFwZIF9GhvwQJMtWTllSdgxcFyVLDR_tNpWQ5ZgIkXMB7NIfMjKDoH19tQ4pgAXGD9Jorhw3VdjenmU5Qu0Jas_vUH1Lglq08uohgeXs_VpHNL57VVujCYZA3UZA61MUdZH8FOV6DGR-D2YyjxmLgrr6EY7t-gdUWhxMll16NeIHy_y7NMduMgcLuUZbSbuLIfUZ4lIe2faaSyOahxUC-2clBnDurSwVCcdGiaZCzthzSVWZwJ14s5jYIgjcPIz_o8Qs0fQIkd8GoLZbWFgfq8Jc6l7eNLfx5feAwjHBhLMBLNvsiNb5qHIjc185bZX-agmWm7sUv3td2QBQGtdlCJZk-V9802uL0wm2ZGzPQiUGabGWWimSlhCar7z3AVnpTdOPWjLhMi6dIwilwWpIKm_b3M2Po_rUnYjVkSdWlAadejTEgWBnHii91y6SPnl-8eYSBPOpkfu1HqUcmEn8bUD9Mo8dMo5IHHPOoKGNVAGXIm5FS15KP0eZSqJeTTv8HoEUx-BK4ugNavgo5nsZ-A3kXqYlp8M6YDWZdW82qztLrH9RBCNyjtKuymA2nJbn5KLs7ev339-zOnyB-_hOQ_keUCrxqUVYN76geCjfzB1zdLq4ZqShfWuWWplc-BquO7v4Grlrz8uzzz8NXL34KXWzDlvy_NclO2JHv0LowmYCVBrghyef4VZQ3MM2d2Xu-aT7BROWC5M2N5RfZYXuU7MOqkk_i-63LPT0UahWmQZDIKvTiWkRf0pRtEsKa99_OVw38GAGKL3eZJBAAA

IP / ASN

172.240.127.244

AS7979 · SERVERS-COM

Requested by: https://wakeuptocrypto.com/guides/ai-agent-crypto-payment-scam-red-flags/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 22 Oct 2026 · 12:07:49.853 UTC
Times seen: 19282455

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR2
Subject: workdeadlinededicate.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 64:94:D5:7E:85:BC:06:31:05:FA:D2:57:67:61:B8:39:DE:C2:0B:85
Valid from: Wed, 26 Aug 2026 05:39:42 GMT
Valid until: Tue, 24 Nov 2026 05:39:41 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /impr.gif?sid=H4sIAAAAAAAC_1xSPWwcRRSedSwkRIGEAigNuiIFkbjz_t7uJl3EXxMHkaAU0MzfOpPb29nszN6dr3IwUFuiQVTr7-y4swCJVBTojGiQIrydheKGho4CRAs654QDI817b-Z7mnnfp--z3fqU9FDTk_du6KnKc7oW9dzO63dUIfTYdNZvdzy3517r3FFFP7zWmSxCNbrqBWHPvdJ5R_KBXvNdz3U91-u8rSqZ6cnaGQpVHnpp1OuHPc9Lel7kY1L9_8bUDgx1IEan5CUo0b74a_YhFJ-jGH71pjQDq8s33hrWObW6wkgcfFAMCj0uMDwvs8pBVhwsu6FNS8gXK9DFwZIF9GhvwQJMtWTllSdgxcFyVLDR_tNpWQ5ZgIkXMB7NIfMjKDoH19tQ4pgAXGD9Jorhw3VdjenmU5Qu0Jas_vUH1Lglq08uohgeXs_VpHNL57VVujCYZA3UZA61MUdZH8FOV6DGR-D2YyjxmLgrr6EY7t-gdUWhxMll16NeIHy_y7NMduMgcLuUZbSbuLIfUZ4lIe2faaSyOahxUC-2clBnDurSwVCcdGiaZCzthzSVWZwJ14s5jYIgjcPIz_o8Qs0fQIkd8GoLZbWFgfq8Jc6l7eNLfx5feAwjHBhLMBLNvsiNb5qHIjc185bZX-agmWm7sUv3td2QBQGtdlCJZk-V9802uL0wm2ZGzPQiUGabGWWimSlhCar7z3AVnpTdOPWjLhMi6dIwilwWpIKm_b3M2Po_rUnYjVkSdWlAadejTEgWBnHii91y6SPnl-8eYSBPOpkfu1HqUcmEn8bUD9Mo8dMo5IHHPOoKGNVAGXIm5FS15KP0eZSqJeTTv8HoEUx-BK4ugNavgo5nsZ-A3kXqYlp8M6YDWZdW82qztLrH9RBCNyjtKuymA2nJbn5KLs7ev339-zOnyB-_hOQ_keUCrxqUVYN76geCjfzB1zdLq4ZqShfWuWWplc-BquO7v4Grlrz8uzzz8NXL34KXWzDlvy_NclO2JHv0LowmYCVBrghyef4VZQ3MM2d2Xu-aT7BROWC5M2N5RfZYXuU7MOqkk_i-63LPT0UahWmQZDIKvTiWkRf0pRtEsKa99_OVw38GAGKL3eZJBAAA HTTP/1.1
Host: workdeadlinededicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=01a13d22-cffe-7330-abfa-80e65acf84a6:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.n32EJYNThkI89OdDYb0WfPLZN3SXyQZ6u9miJNfR-fY; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl31177910=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Thu, 15 Oct 2026 01:17:34 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version-List
access-control-allow-credentials: true
access-control-allow-origin: *
vary: Origin
x-envoy-upstream-service-time: 2
Host: workdeadlinededicate.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 275a3b79d5b02d9f58d30b682853d282
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

01:17:34.839 GET 200 subdocument 16.6 KB 257 ms —

01:17:35.007 POST 200 fetch 0 B 371 ms 2 alerts

01:17:35.136 GET 200 stylesheet 744 B 299 ms —

01:17:35.137 GET 200 script 176.4 KB 83 ms —

01:17:35.471 GET 200 script 159.0 KB 31 ms —

01:17:35.523 GET 200 script 236 B 16 ms —

01:17:35.532 GET 200 script 2.0 KB 16 ms —

01:17:35.542 POST 200 xhr 157 B 132 ms —

01:17:35.555 GET 200 script 3.6 KB 16 ms —

01:17:35.578 GET 200 script 27.9 KB 16 ms —

01:17:35.605 GET 200 script 137.8 KB 21 ms —

01:17:35.686 POST 200 fetch 131 B 21 ms —

01:17:35.687 OPTIONS 200 fetch 0 B 51 ms —

01:17:35.691 POST 200 fetch 131 B 23 ms —

01:17:35.692 POST 200 fetch 131 B 19 ms —

01:17:35.693 OPTIONS 200 fetch 0 B 45 ms —

01:17:35.694 OPTIONS 200 fetch 0 B 46 ms —

https://wakeuptocrypto.com/guides/ai-agent-crypto-payment-scam-red-flags/

Domain graph

Hostnames

Connections