WEBSITE ANALYSIS REPORT

http://w2.shangri-lafrontiermanga.com/data:text/javascript;base64,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

31 May 2026 · 14:01:03.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:00:40.281 GET 301 document 107.2 KB 2049 ms —

14:00:42.216 GET 302 document 107.2 KB 87 ms —

14:00:42.307 GET 200 document 107.2 KB 133 ms —

14:00:42.898 GET 200 document 99.3 KB 230 ms —

14:00:43.102 GET 200 stylesheet 116.5 KB 32 ms —

14:00:43.106 GET 200 stylesheet 57.7 KB 51 ms —

14:00:43.108 GET 200 stylesheet 19.9 KB 31 ms —

14:00:43.110 GET 200 stylesheet 97.2 KB 30 ms —

14:00:43.112 GET 200 stylesheet 75 B 29 ms —

14:00:43.114 GET 200 stylesheet 13.8 KB 225 ms —

14:00:43.118 GET 200 stylesheet 25.8 KB 48 ms —

14:00:43.121 GET 200 stylesheet 53.4 KB 46 ms —

14:00:43.122 GET 200 script 85.5 KB 50 ms —

14:00:43.123 GET 200 script 13.3 KB 104 ms —

14:00:43.125 GET 200 imageset 240.8 KB 98 ms —

14:00:43.125 GET 200 script 95.4 KB 740 ms 3 alerts

14:00:43.126 GET 200 imageset 174.9 KB 101 ms —

14:00:43.127 GET 200 script 583 B 86 ms —

14:00:43.128 GET 200 script 2 B 128 ms —

14:00:43.129 GET 200 script 4.4 KB 99 ms —

14:00:43.130 GET 200 script 8.5 KB 114 ms —

14:00:43.132 GET 200 script 1.7 KB 113 ms —

14:00:43.133 GET 200 script 2.1 KB 112 ms —

14:00:43.329 GET 200 font 47.1 KB 263 ms —

14:00:43.332 GET 200 font 17.3 KB 267 ms —

14:00:43.333 GET 200 font 23.0 KB 240 ms —

14:00:43.334 GET 200 font 22.5 KB 258 ms —

14:00:43.623 GET 200 img 0 B 754 ms 1 alerts

14:00:43.632 GET 200 script 5.0 KB 739 ms 1 alerts

Transaction #29

Request / response

URL

GET HTTPS

https://workdeadlinededicate.com/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js

IP / ASN

172.240.127.242

AS7979 · SERVERS-COM

Requested by: https://w2.shangri-lafrontiermanga.com/

Resource information

File type: JavaScript source, ASCII text, with very long lines (5126), with no line terminators
MIME type: application/javascript
First seen (UTC): 04 May 2026 · 13:56:21.086 UTC
Last seen (UTC): 10 Aug 2026 · 10:29:39.496 UTC
Times seen: 7126

Size: 5.0 KB (5126 bytes)
MD5: 9454b75035bf1e7fbd8bc933d239763a
SHA1: 05ac0f19656d2fd1882cb0ec3bc347cf2dbec25e
SHA256: 261c1fc4c2d7eadeabb8edc511b4d3681cad5a27060128b4c3a6690484ccaffd

Certificate information

Issuer: Let's Encrypt · R13
Subject: workdeadlinededicate.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: B2:89:22:5D:2D:93:D6:5F:5A:1E:20:6A:F9:7C:82:61:CD:1B:4B:5A
Valid from: Tue, 28 Apr 2026 00:44:47 GMT
Valid until: Mon, 27 Jul 2026 00:44:46 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js HTTP/1.1
Host: workdeadlinededicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sun, 31 May 2026 14:00:44 GMT
Content-Type: application/javascript
Content-Length: 2569
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Model,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform
x-envoy-upstream-service-time: 1
Host: workdeadlinededicate.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d2caee2427dd77a39c88c319efd1e30d
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

14:00:43.634 GET 200 script 83.4 KB 155 ms 2 alerts

14:00:43.636 GET 200 xhr 40 B 249 ms —

14:00:44.000 GET 200 img 13.9 KB 31 ms —

14:00:44.003 GET 200 img 722 B 98 ms —

14:00:44.356 GET 200 img 0 B 660 ms 2 alerts

Domain graph

Hostnames

Connections