WEBSITE ANALYSIS REPORT

http://sha.work.gd/

03 Jul 2026 · 05:04:44.000 UTCpublic

Report tags: dyndns
Submit tags

Request review

Suspicious activity

13 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

05:04:20.851 GET No response document 0 B 0 ms 4 alerts

Transaction #53

Request / response

URL

GET HTTPS

https://sha.work.gd/

IP / ASN

Not recorded

Unknown

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: Not recorded
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 11:29:47.747 UTC
Times seen: 19330748

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Certificate and TLS information not recorded.

Technology fingerprints

No technology fingerprints recorded for this response.

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Suspicious - DynDNS domain	low	Suspicious
DigiCert UltraDNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: sha.work.gd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

Not recorded

05:04:21.140 GET 200 document 68.3 KB 1432 ms 4 alerts

05:04:22.730 GET 200 stylesheet 30.3 KB 428 ms 1 alerts

05:04:22.732 GET 200 stylesheet 80.8 KB 601 ms 1 alerts

05:04:22.734 GET 200 stylesheet 10.5 KB 87 ms —

05:04:22.736 GET 200 script 85.5 KB 582 ms 1 alerts

05:04:22.737 GET 200 script 13.3 KB 412 ms 1 alerts

05:04:22.738 GET 403 script 0 B 506 ms 1 alerts

05:04:22.748 GET 200 img 9.6 KB 1599 ms 1 alerts

05:04:22.750 GET 200 img 13.5 KB 727 ms 1 alerts

05:04:22.751 GET 200 img 18.0 KB 734 ms 1 alerts

05:04:22.753 GET 200 img 13.7 KB 733 ms 1 alerts

05:04:22.754 GET 200 img 22.5 KB 906 ms 1 alerts

05:04:22.755 GET 200 img 13.0 KB 729 ms 1 alerts

05:04:22.756 GET 200 img 22.6 KB 893 ms 1 alerts

05:04:22.757 GET 200 img 23.2 KB 734 ms 1 alerts

05:04:22.758 GET 200 img 17.4 KB 897 ms 1 alerts

05:04:22.759 GET 200 img 21.1 KB 907 ms 1 alerts

05:04:22.760 GET 200 img 17.2 KB 905 ms 1 alerts

05:04:22.761 GET 200 img 18.0 KB 906 ms 1 alerts

05:04:22.761 GET 200 img 17.2 KB 1060 ms 1 alerts

05:04:22.762 GET 200 img 14.6 KB 1065 ms 1 alerts

05:04:22.764 GET 200 img 11.3 KB 1078 ms 1 alerts

05:04:22.764 GET 200 img 21.1 KB 1078 ms 1 alerts

05:04:22.765 GET 200 img 16.5 KB 1078 ms 1 alerts

05:04:22.766 GET 200 img 20.6 KB 1078 ms 1 alerts

05:04:22.767 GET 200 img 18.8 KB 1226 ms 1 alerts

05:04:22.768 GET 200 img 21.3 KB 1234 ms 1 alerts

05:04:22.769 GET 200 img 23.4 KB 1250 ms 1 alerts

05:04:22.779 GET 403 script 0 B 792 ms 4 alerts

05:04:22.780 GET 403 script 0 B 398 ms 4 alerts

05:04:22.781 GET 200 script 41.0 KB 378 ms 1 alerts

05:04:22.783 GET 200 script 683 B 375 ms 1 alerts

05:04:22.788 GET 403 script 0 B 491 ms 1 alerts

05:04:22.789 GET 403 script 0 B 414 ms 1 alerts

05:04:22.791 GET 200 img 13.5 KB 1222 ms 1 alerts

05:04:22.792 GET 200 img 18.4 KB 1222 ms 1 alerts

05:04:22.793 GET 200 img 17.2 KB 1222 ms 1 alerts

05:04:22.794 GET 200 img 14.2 KB 1365 ms 1 alerts

05:04:22.795 GET 200 img 18.6 KB 1394 ms 1 alerts

05:04:22.795 GET 200 img 16.6 KB 1373 ms 1 alerts

05:04:22.796 GET 200 img 17.5 KB 1394 ms 1 alerts

05:04:22.797 GET 200 img 17.6 KB 1395 ms 1 alerts

05:04:22.798 GET 200 img 14.7 KB 1395 ms 1 alerts

05:04:22.799 GET 200 img 17.9 KB 1542 ms 1 alerts

05:04:22.800 GET 200 img 18.1 KB 1566 ms 1 alerts

05:04:22.801 GET 200 img 9.4 KB 1566 ms 1 alerts

05:04:23.360 GET 403 script 0 B 104 ms 1 alerts

05:04:23.441 GET 200 font 13.1 KB 333 ms 1 alerts

05:04:23.443 GET 200 font 42.1 KB 80 ms —

http://sha.work.gd/

Domain graph

Hostnames

Connections

Network requests

Transaction #53

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://sha.work.gd/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #53

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://sha.work.gd/

Domain graph

Network requests