http://sha.work.gd/
13 detections · review the detection signals
Host summary
Observed host history, traffic, and infrastructure
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| shaa.hair 43 alerts | N/A | 2026-04-26 | 2026-06-17 | 2026-06-25 | 20.5 KB | 895.6 KB |  70.36.99.213 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| pl29524580.effectivecpmnetwork.com 2 alerts | N/A | 2026-05-14 | 2026-06-17 | 2026-06-25 | 1008 B | 1.1 KB | 172.240.253.132 | Nginx:1.28.2 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-06-28 | 510 B | 11.2 KB | 142.250.178.42 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| pl29524583.effectivecpmnetwork.com 2 alerts | N/A | 2026-05-14 | 2026-06-17 | 2026-06-25 | 1008 B | 1.1 KB | 172.240.127.243 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Nginx:1.28.2 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| pl29524582.effectivecpmnetwork.com 2 alerts | N/A | 2026-05-14 | 2026-06-14 | 2026-06-25 | 1004 B | 1.1 KB | 172.240.108.84 | Nginx:1.28.2 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| sha.work.gd 12 alerts | N/A | 2022-06-18 | 2026-07-03 | 2026-07-03 | 1.3 KB | 69.2 KB | 70.36.99.213 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. WordPress:7.0 CMS, Blogs WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system. MySQL Databases MySQL is an open-source relational database management system. PHP Programming languages PHP is a general-purpose scripting language used for web development. jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. jQuery Migrate:3.4.1 JavaScript libraries Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-06-28 | 1.1 KB | 85.8 KB | 142.250.178.35 | |
| www.highperformanceformat.com 12 alerts | 366864 | 2024-10-15 | 2024-10-23 | 2026-06-27 | 1.5 KB | 1.6 KB | 172.240.127.243 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Nginx:1.28.2 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
Observed certificates
Distinct fingerprints recorded in HTTP transactions
| Subject | Issuer | Valid from | Valid until | Fingerprint | Hosts |
|---|---|---|---|---|---|
| effectivecpmnetwork.com | Let's Encrypt · R13 | Thu, 14 May 2026 11:59:59 GMT | Wed, 12 Aug 2026 11:59:58 GMT | SHA25615:AB:AF:7C:3C:18:C2:2B:98:F1:9A:34:BA:CE:B3:89:AC:61:C4:CB:D0:34:81:73:BC:F5:7C:A6:0A:DE:7E:8C | pl29524580.effectivecpmnetwork.com pl29524583.effectivecpmnetwork.com pl29524582.effectivecpmnetwork.com |
| upload.video.google.com | Google Trust Services · WE2 | Mon, 15 Jun 2026 08:41:02 GMT | Mon, 07 Sep 2026 08:41:01 GMT | SHA2567D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4 | fonts.googleapis.com |
| highperformanceformat.com | Let's Encrypt · YR2 | Sun, 07 Jun 2026 22:27:03 GMT | Sat, 05 Sep 2026 22:27:02 GMT | SHA25635:BA:52:C1:31:7C:AD:F1:9A:03:6D:D2:37:B7:E5:67:B2:0A:BF:BB:B5:70:84:A4:4D:4E:AE:90:2A:2A:72:47 | www.highperformanceformat.com |
| *.gstatic.com | Google Trust Services · WE2 | Mon, 15 Jun 2026 08:41:01 GMT | Mon, 07 Sep 2026 08:41:00 GMT | SHA25629:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA | fonts.gstatic.com |