urlquery Suspicious - DynDNS domain
VerdictSuspicious
Severitylow
WEBSITE ANALYSIS REPORT
http://orcolabo.work.gd/
public
Suspicious activity
Review evidence →9 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://orcolabo.work.gd/
- Submitted IP / ASN
45.140.14.11 AS60781 · LeaseWeb Netherlands B.V.
- Final URL
- http://orcolabo.work.gd/
- Final IP / ASN
- 45.140.14.11 AS60781 · LeaseWeb Netherlands B.V.
Final page
- Page title
- orcolabo.work.gd/
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 8.2 KB (8438 bytes)
Detections
Activity
- HTTP requests
- 24
- Observed hosts
- 6
- Script records
- 5
Estimated HTTP data
- Sent
- ~9.5 KB
- Received
- ~118.0 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
1Threat Detection Systems
5Cloudflare DNS Sinkholed
VerdictMalicious
Severitymedium
OpenDNS Content Category / Application Block
VerdictSuspicious
Severitymedium
Quad9 DNS Sinkholed
VerdictMalicious
Severitymedium
Hagezi Threat Feed Sinkholed
VerdictMalicious
Severitymedium
DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
IDS
1Suricata IDS ET INFO DYNAMIC_DNS HTTP Request to a *.work .gd Domain
VerdictVerdict not recorded
Severitymedium
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| cdn14tube.pro | N/A | 2024-02-14 | 2018-12-09 | 2026-04-08 | 6.7 KB | 0 B |  0.0.0.0 | |
| dcba.popcash.net | 494908 | 2012-08-13 | 2018-01-31 | 2026-06-02 | 442 B | 269 B |  98.86.21.191 | |
| boxwood.pro | 2162917 | 2019-10-22 | 2015-01-19 | 2026-04-08 | 356 B | 0 B | 0.0.0.0 | |
| orcolabo.work.gd 21 alerts | N/A | 2022-06-18 | 2026-06-03 | 2026-06-03 | 1.2 KB | 8.6 KB | 45.140.14.11 | Nginx:1.20.1 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. PHP:7.1.33 Programming languages PHP is a general-purpose scripting language used for web development. |
| www.housewives-online.co.uk | N/A | 2017-08-30 | 2019-07-09 | 2026-04-08 | 463 B | 0 B | 0.0.0.0 | |
| cdn.popcash.net | 609759 | 2012-08-13 | 2012-12-16 | 2026-06-02 | 330 B | 109.2 KB |  194.242.11.186 | Bunny CDN Not recorded Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. |