WEBSITE ANALYSIS REPORT

http://quizverses-9d2f2.web.app/gobattleio.html

06 Sep 2026 · 04:02:19.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

04:01:36.907 GET 200 document 47.6 KB 178 ms —

04:01:37.448 GET 200 stylesheet 6.7 KB 89 ms —

04:01:37.450 GET 200 script 39.2 KB 10 ms —

04:01:37.451 GET 200 subdocument 0 B 52 ms —

04:01:37.452 GET 404 script 20.9 KB 11 ms —

04:01:37.456 GET 200 img 762.3 KB 263 ms —

04:01:37.781 GET 200 font 26.6 KB 78 ms —

04:01:37.782 GET 200 font 26.6 KB 76 ms —

04:01:37.784 GET 200 font 26.6 KB 75 ms —

04:01:37.785 GET 200 font 26.6 KB 74 ms —

04:01:37.786 GET 404 script 20.9 KB 10 ms —

04:01:37.788 GET 200 script 11.2 KB 32 ms —

04:01:37.955 GET 200 fetch 3.6 KB 10 ms —

04:01:37.957 GET 200 script 51 B 436 ms —

04:01:38.074 GET 200 img 559 B 10 ms —

04:01:39.286 GET 200 script 47.8 KB 188 ms 1 alerts

04:01:39.492 GET 200 script 4.3 KB 62 ms —

04:01:39.498 GET 200 xhr 40 B 128 ms —

04:01:39.646 GET 307 xhr 0 B 122 ms 2 alerts

04:01:39.781 GET 200 xhr 4.0 KB 48 ms 2 alerts

04:01:39.878 GET 200 img 60.0 KB 153 ms —

04:01:39.886 GET 200 img 0 B 0 ms 2 alerts

04:01:40.285 GET 200 script 47.9 KB 43 ms 1 alerts

04:01:40.340 GET 200 script 4.3 KB 42 ms —

04:01:40.344 GET 307 xhr 0 B 524 ms 2 alerts

04:01:40.493 POST 200 fetch 0 B 98 ms 2 alerts

04:01:40.877 GET 200 xhr 3.9 KB 118 ms 2 alerts

04:01:41.051 GET 200 img 53.0 KB 28 ms —

04:01:41.053 GET 200 img 0 B 0 ms 2 alerts

Transaction #35

Request / response

URL

GET HTTPS

https://workdeadlinededicate.com/impr.gif?sid=H4sIAAAAAAAC_1xST4gcxReumWx-_NCDIFE8SR9EFJzZqv47bW7BP6ds1EQieKp_PVvZnu5OV_fMZC5uXPG8evLgofeb3ewtKB686qw3QUh7WnAXQbwLSsCbzGZwFwvqvVf1Paq-7_F9ulefkj5qfvzO9Xxm0pSvB33qvHLbZCqfWGfjlsNon151bpss9K8602Uox68zz-_TV523tdzK113KKGWUOW-ZUif5dP0MhSkesjjoh36fsUGfBS6m5X9vbN2B5R2o8Sl5Fka1z_yWfAgjF8hGX72h7VaVF6-9OapTXuUlxurw_WwryycZRudlUnaQZIerbuS2JeSLLvLscKUC-Xh_qQLCtKT7_AlEdriiCjE-eMJWpNAZhHoak_ECOj2C4QvIfAdGPSKAVNi4gWz0YCMvJ_zeE5Qv0ZasPf4TZtKStZMryEYPr6Vm6tzM07oyeWYxTRqY6QJmuEBRH6GadWEmR5DVxzDqJ0K7LyIbHVzndclh1PFLlHEa-Zr1aMRkLwr8oBeH0aDnJpE7YMJPIqHOZmSSBbjtoF5u00GddFEXXYzUscPjQSLi0OexTqJEURZJHnheHPmBm4QyQC3vw6hdyHIbRbmNLfN5S8jPfz-6_Cus6sJWLem8-xHGqjlQqXVt80ClthZsld1V9pp5Xg33-EFeDXVGwMtdlKrZN8VduwNZXZrPEqvm-TJwUTVzLlQzN6oiKO9eFCv9sBdpFva4S_1eTBVNBIuSUPj7ia3qi61Ceb2Ixm4v9kLVE74YREGkBtwN94qVkTrf_7GJLX3sBNRXntKe1IyJRA7CwNORlq7LpZR8wGFNA2O7Z5OcmZZ88O0vKExLOi-8DMGPYNMjSHMJvL4MPpl7lIJvzt2AYpZ9s8mz4ZCPtO0PTbVZi77JofIGRbWG6l4HuiJ76Sm5Mn_v1rXvzsyiZ_-Hlj-S1YIsGxRlgzvmB4Jhev_rG0VlRmbGl-65WfFK_w98SefSZ5CmJc_9tXNm5PjxCWSxDVv8-9Y8tUVLtHwKNicQBUFqCFJ9_hkXDeyFsziv9-wnGJYdiLQzF2lJ9kVapruw5tgZuC6lkrmxigM_9gaJDnwWRTpgXqipF6Cy7Z0vf9__ZwAJq1tMTgQAAA==

IP / ASN

172.240.108.76

AS7979 · SERVERS-COM

Requested by: https://quizverses-9d2f2.web.app/gobattleio.html

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 17:29:49.637 UTC
Times seen: 19312417

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR2
Subject: workdeadlinededicate.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 64:94:D5:7E:85:BC:06:31:05:FA:D2:57:67:61:B8:39:DE:C2:0B:85
Valid from: Wed, 26 Aug 2026 05:39:42 GMT
Valid until: Tue, 24 Nov 2026 05:39:41 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /impr.gif?sid=H4sIAAAAAAAC_1xST4gcxReumWx-_NCDIFE8SR9EFJzZqv47bW7BP6ds1EQieKp_PVvZnu5OV_fMZC5uXPG8evLgofeb3ewtKB686qw3QUh7WnAXQbwLSsCbzGZwFwvqvVf1Paq-7_F9ulefkj5qfvzO9Xxm0pSvB33qvHLbZCqfWGfjlsNon151bpss9K8602Uox68zz-_TV523tdzK113KKGWUOW-ZUif5dP0MhSkesjjoh36fsUGfBS6m5X9vbN2B5R2o8Sl5Fka1z_yWfAgjF8hGX72h7VaVF6-9OapTXuUlxurw_WwryycZRudlUnaQZIerbuS2JeSLLvLscKUC-Xh_qQLCtKT7_AlEdriiCjE-eMJWpNAZhHoak_ECOj2C4QvIfAdGPSKAVNi4gWz0YCMvJ_zeE5Qv0ZasPf4TZtKStZMryEYPr6Vm6tzM07oyeWYxTRqY6QJmuEBRH6GadWEmR5DVxzDqJ0K7LyIbHVzndclh1PFLlHEa-Zr1aMRkLwr8oBeH0aDnJpE7YMJPIqHOZmSSBbjtoF5u00GddFEXXYzUscPjQSLi0OexTqJEURZJHnheHPmBm4QyQC3vw6hdyHIbRbmNLfN5S8jPfz-6_Cus6sJWLem8-xHGqjlQqXVt80ClthZsld1V9pp5Xg33-EFeDXVGwMtdlKrZN8VduwNZXZrPEqvm-TJwUTVzLlQzN6oiKO9eFCv9sBdpFva4S_1eTBVNBIuSUPj7ia3qi61Ceb2Ixm4v9kLVE74YREGkBtwN94qVkTrf_7GJLX3sBNRXntKe1IyJRA7CwNORlq7LpZR8wGFNA2O7Z5OcmZZ88O0vKExLOi-8DMGPYNMjSHMJvL4MPpl7lIJvzt2AYpZ9s8mz4ZCPtO0PTbVZi77JofIGRbWG6l4HuiJ76Sm5Mn_v1rXvzsyiZ_-Hlj-S1YIsGxRlgzvmB4Jhev_rG0VlRmbGl-65WfFK_w98SefSZ5CmJc_9tXNm5PjxCWSxDVv8-9Y8tUVLtHwKNicQBUFqCFJ9_hkXDeyFsziv9-wnGJYdiLQzF2lJ9kVapruw5tgZuC6lkrmxigM_9gaJDnwWRTpgXqipF6Cy7Z0vf9__ZwAJq1tMTgQAAA== HTTP/1.1
Host: workdeadlinededicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=01a074e1-071c-7545-9678-2f7281b4f7bd:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.RGBC8cIahr9Nrr8ms-VZd-35rac4y93X7vGRHlMloWc; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl29487208=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sun, 06 Sep 2026 04:01:41 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Platform,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: iprc_c+1b5a0a312f612180f45d3c5d7837a1ad=1438851; Path=/; Expires=Mon, 07 Sep 2026 04:01:41 GMT; Secure; SameSite=None
iprc_c-1438851=8; Path=/; Expires=Mon, 07 Sep 2026 04:01:41 GMT; Secure; SameSite=None
vary: Origin
x-envoy-upstream-service-time: 9
Host: workdeadlinededicate.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 517c67905b9ac83d10059590c8257b82
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

04:01:41.342 POST 200 fetch 0 B 408 ms 2 alerts

04:01:56.033 GET 200 script 71.3 KB 128 ms 1 alerts

04:01:56.182 GET 200 script 4.3 KB 49 ms —

04:01:56.185 GET 200 script 37.1 KB 144 ms 1 alerts

04:01:56.187 GET 200 img 0 B 92 ms 1 alerts

04:01:57.181 POST 200 fetch 0 B 92 ms 1 alerts

04:02:09.286 GET 200 script 47.8 KB 111 ms 1 alerts

04:02:09.416 GET 200 script 4.3 KB 72 ms —

04:02:09.419 GET 307 xhr 0 B 110 ms 1 alerts

04:02:09.536 GET 200 xhr 4.0 KB 46 ms 1 alerts

04:02:09.650 GET 200 img 40.8 KB 25 ms —

04:02:09.652 GET 200 img 0 B 0 ms 1 alerts

04:02:10.416 POST 200 fetch 0 B 92 ms 1 alerts

http://quizverses-9d2f2.web.app/gobattleio.html

Domain graph

Hostnames

Connections