WEBSITE ANALYSIS REPORT

https://ag-gbs-essen.de/

15 Jul 2026 · 21:44:10.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:43:41.935 GET 503 document 4.1 KB 370 ms —

21:43:42.507 GET 200 stylesheet 1.3 KB 39 ms —

21:43:42.509 GET 200 stylesheet 1.9 KB 45 ms —

21:43:42.512 GET 200 stylesheet 2.7 KB 44 ms —

21:43:42.519 GET 200 script 81.9 KB 113 ms —

21:43:42.522 GET 200 script 8.5 KB 110 ms —

21:43:42.524 GET 200 script 231.3 KB 61 ms —

21:43:42.527 GET 200 script 95.4 KB 114 ms —

21:43:42.529 GET 200 script 21 B 132 ms —

21:43:42.532 GET 200 script 9.8 KB 130 ms —

21:43:42.534 GET 200 script 491 B 127 ms —

21:43:42.536 GET 200 script 28.4 KB 126 ms —

21:43:42.729 GET 200 script 50.2 KB 487 ms 4 alerts

21:43:43.227 GET 200 script 5.0 KB 377 ms 2 alerts

Transaction #04

Request / response

URL

GET HTTPS

https://workdeadlinededicate.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js

IP / ASN

172.240.108.84

AS7979 · SERVERS-COM

Requested by: https://ag-gbs-essen.de/

Resource information

File type: JavaScript source, ASCII text, with very long lines (5126), with no line terminators
MIME type: application/javascript
First seen (UTC): 04 May 2026 · 13:56:21.086 UTC
Last seen (UTC): 10 Aug 2026 · 10:29:39.496 UTC
Times seen: 7126

Size: 5.0 KB (5126 bytes)
MD5: 9454b75035bf1e7fbd8bc933d239763a
SHA1: 05ac0f19656d2fd1882cb0ec3bc347cf2dbec25e
SHA256: 261c1fc4c2d7eadeabb8edc511b4d3681cad5a27060128b4c3a6690484ccaffd

Certificate information

Issuer: Let's Encrypt · YR1
Subject: workdeadlinededicate.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 10:47:66:26:DB:09:A5:17:78:DA:F0:CB:92:C3:2C:F2:8D:0B:43:39
Valid from: Sat, 27 Jun 2026 03:50:31 GMT
Valid until: Fri, 25 Sep 2026 03:50:30 GMT

Technology fingerprints

Nginx:1.28.2 (Web servers, Reverse proxies)
HSTS (Security)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1
Host: workdeadlinededicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://ag-gbs-essen.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Wed, 15 Jul 2026 21:43:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Platform,X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List
access-control-allow-origin: *
content-encoding: zstd
vary: Accept-Encoding
x-envoy-upstream-service-time: 2
Host: workdeadlinededicate.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c16e03bb71b72ff43718e4d76b3f89da
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

21:43:43.234 GET 200 xhr 40 B 114 ms —

21:43:43.236 GET 200 script 18.2 KB 383 ms 2 alerts

21:43:43.367 GET 307 xhr 0 B 375 ms 2 alerts

21:43:43.628 GET 200 xhr 0 B 413 ms 1 alerts

21:43:43.747 GET 200 xhr 4.0 KB 146 ms 2 alerts

21:43:43.924 GET 200 img 102.1 KB 118 ms —

21:43:43.925 GET 200 img 0 B 0 ms 2 alerts

21:43:43.999 GET 404 img 808 B 38 ms —

https://ag-gbs-essen.de/

Domain graph

Hostnames

Connections