WEBSITE ANALYSIS REPORT

http://yes.jo3.org/

07 Jun 2026 · 14:16:50.000 UTCpublic

Report tags: dyndns
Submit tags

Request review

Suspicious activity

21 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:16:26.903 GET No response document 0 B 0 ms 4 alerts

14:16:27.489 GET 200 document 87.0 KB 1037 ms 4 alerts

14:16:28.718 GET 200 stylesheet 30.3 KB 509 ms 5 alerts

14:16:28.722 GET 200 stylesheet 73.9 KB 702 ms 5 alerts

14:16:28.724 GET 200 script 85.5 KB 693 ms 5 alerts

14:16:28.726 GET 200 script 13.3 KB 501 ms 5 alerts

14:16:28.728 GET 200 script 49.9 KB 782 ms 4 alerts

14:16:28.731 GET 200 script 0 B 0 ms 4 alerts

14:16:28.741 GET 200 img 0 B 0 ms 5 alerts

14:16:28.744 GET 200 img 0 B 0 ms 5 alerts

14:16:28.745 GET 200 img 0 B 0 ms 5 alerts

14:16:28.747 GET 200 img 0 B 0 ms 5 alerts

14:16:28.748 GET 200 img 0 B 0 ms 5 alerts

14:16:28.749 GET No response img 0 B 0 ms 5 alerts

14:16:28.750 GET No response img 0 B 0 ms 5 alerts

14:16:28.768 GET 200 script 0 B 0 ms 4 alerts

14:16:28.769 GET 200 script 132.8 KB 238 ms —

14:16:28.770 GET 200 script 0 B 0 ms 4 alerts

14:16:28.771 GET 200 script 4.4 KB 443 ms 5 alerts

14:16:28.772 GET 200 script 23.7 KB 460 ms 5 alerts

14:16:28.773 GET 200 script 20.0 KB 594 ms 5 alerts

14:16:28.774 GET 200 script 5.6 KB 607 ms 5 alerts

14:16:28.779 GET 200 script 35.5 KB 608 ms 5 alerts

14:16:28.781 GET 200 script 683 B 610 ms 5 alerts

14:16:28.782 GET 200 script 0 B 0 ms 3 alerts

14:16:28.783 GET 200 script 0 B 0 ms 4 alerts

14:16:28.785 GET No response img 0 B 0 ms 5 alerts

14:16:28.786 GET No response img 0 B 0 ms 5 alerts

14:16:28.787 GET No response img 0 B 0 ms 5 alerts

14:16:28.788 GET No response img 0 B 0 ms 5 alerts

14:16:28.789 GET No response img 0 B 0 ms 5 alerts

14:16:28.790 GET No response img 0 B 0 ms 5 alerts

14:16:28.791 GET No response img 0 B 0 ms 5 alerts

14:16:28.792 GET 200 img 0 B 0 ms 5 alerts

14:16:28.793 GET 200 img 0 B 0 ms 5 alerts

14:16:28.794 GET 200 img 0 B 0 ms 5 alerts

14:16:28.795 GET 200 img 0 B 0 ms 5 alerts

14:16:28.796 GET 200 img 0 B 0 ms 5 alerts

14:16:28.797 GET 200 img 0 B 0 ms 5 alerts

14:16:28.798 GET 200 img 0 B 0 ms 5 alerts

14:16:28.799 GET 200 img 0 B 0 ms 5 alerts

14:16:28.800 GET 200 img 0 B 0 ms 5 alerts

14:16:28.801 GET 200 img 0 B 0 ms 5 alerts

14:16:28.802 GET 200 img 0 B 0 ms 5 alerts

14:16:28.803 GET 200 img 0 B 0 ms 5 alerts

14:16:28.804 GET 200 img 0 B 0 ms 5 alerts

14:16:28.805 GET 200 img 0 B 0 ms 5 alerts

14:16:28.806 GET 200 img 0 B 0 ms 5 alerts

14:16:28.807 GET 200 img 0 B 0 ms 5 alerts

Transaction #35

Request / response

URL

GET HTTP

http://yaa.work.gd/wp/wp-content/uploads/2026/05/riding-patients-cock-nickey-huntsman-and-lil-d.jpg

IP / ASN

70.36.99.213

AS22439 · PERFECT-INTERNATIONAL

Requested by: http://yes.jo3.org/

Resource information

File type: Not recorded
MIME type: Not recorded
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 18:29:54.333 UTC
Times seen: 19313519

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Certificate and TLS information not recorded.

Technology fingerprints

No technology fingerprints recorded for this response.

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Suspicious - DynDNS domain	low	Suspicious
DigiCert UltraDNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /wp/wp-content/uploads/2026/05/riding-patients-cock-nickey-huntsman-and-lil-d.jpg HTTP/1.1
Host: yaa.work.gd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate
Sec-GPC: 1
Connection: keep-alive
Referer: http://yes.jo3.org/
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

Not recorded

14:16:28.809 GET 200 img 0 B 0 ms 5 alerts

http://yes.jo3.org/

Domain graph

Hostnames

Connections

Network requests

Transaction #35

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://yes.jo3.org/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #35

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://yes.jo3.org/

Domain graph

Network requests