WEBSITE ANALYSIS REPORT

http://elgranonan.com/2025/12/17/perverted-fan-debuts-with-gaby-uztariz-huge-asssss-gaby-uztariz-elgranonan-milkyperu/

10 Jul 2026 · 23:05:36.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

2hbw7dxxmfuu.l4.adsco.re1 captured requests
2hbw7dxxmfuu.n4.adsco.re1 captured requests
2hbw7dxxmfuu.s4.adsco.re1 captured requests
4.adsco.re2 captured requests
6.adsco.re2 captured requests
a.magsrv.com2 captured requests
a.pemsrv.com1 captured requests
adsco.re3 captured requests
c.adsco.re1 captured requests
cdn.popcash.net2 captured requests
creative.marzaent.com5 captured requests
elgranonan.com38 captured requests
flushpersist.com1 captured requests
fonts.googleapis.com3 captured requests
fonts.gstatic.com2 captured requests
go.marzaent.com5 captured requests
img.doppiocdn.com18 captured requests
intelligenceadx.com1 captured requests
pl28362067.effectivecpmnetwork.com1 captured requests
portalfluently.com1 captured requests
protrafficinspector.com1 captured requests
s.magsrv.com3 captured requests
s.pemsrv.com1 captured requests
static-proxy.strpst.com18 captured requests
video.xxxjmp.com6 captured requests
workdeadlinededicate.com1 captured requests
www.googletagmanager.com1 captured requests
www.intelligenceadx.com1 captured requests
xham.live1 captured requests
z6v2p9a8.bkcdn.net1 captured requests

Connections

creative.marzaent.com → fonts.googleapis.comLoads from2 captured connections
creative.marzaent.com → fonts.gstatic.comLoads from2 captured connections
creative.marzaent.com → go.marzaent.comCalls4 captured connections
creative.marzaent.com → img.doppiocdn.comLoads from18 captured connections
creative.marzaent.com → static-proxy.strpst.comLoads from18 captured connections
creative.marzaent.com → video.xxxjmp.comLoads from6 captured connections
creative.marzaent.com → xham.liveCalls1 captured connections
elgranonan.com → 2hbw7dxxmfuu.l4.adsco.reCalls1 captured connections
elgranonan.com → 2hbw7dxxmfuu.n4.adsco.reCalls1 captured connections
elgranonan.com → 2hbw7dxxmfuu.s4.adsco.reCalls1 captured connections
elgranonan.com → 4.adsco.reCalls2 captured connections
elgranonan.com → 6.adsco.reCalls2 captured connections
elgranonan.com → a.magsrv.comLoads from2 captured connections
elgranonan.com → a.pemsrv.comLoads from1 captured connections
elgranonan.com → adsco.reCalls3 captured connections
elgranonan.com → c.adsco.reLoads from1 captured connections
elgranonan.com → cdn.popcash.netLoads from2 captured connections
elgranonan.com → creative.marzaent.comEmbeds1 captured connections
elgranonan.com → flushpersist.comLoads from1 captured connections
elgranonan.com → fonts.googleapis.comLoads from1 captured connections
elgranonan.com → go.marzaent.comEmbeds1 captured connections
elgranonan.com → intelligenceadx.comLoads from1 captured connections
elgranonan.com → pl28362067.effectivecpmnetwork.comLoads from1 captured connections
elgranonan.com → portalfluently.comLoads from1 captured connections
elgranonan.com → protrafficinspector.comCalls1 captured connections
elgranonan.com → s.magsrv.comCalls3 captured connections
elgranonan.com → s.pemsrv.comCalls1 captured connections
elgranonan.com → workdeadlinededicate.comLoads from1 captured connections
elgranonan.com → www.googletagmanager.comCalls1 captured connections
elgranonan.com → www.intelligenceadx.comLoads from1 captured connections
elgranonan.com → z6v2p9a8.bkcdn.netLoads from1 captured connections
go.marzaent.com → creative.marzaent.comRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

23:05:04.689 GET 404 document 115.2 KB 1411 ms 1 alerts

23:05:06.244 GET 301 document 0 B 379 ms 1 alerts

23:05:06.628 GET 404 document 115.2 KB 139 ms 1 alerts

23:05:07.112 GET 200 stylesheet 307.2 KB 191 ms 1 alerts

23:05:07.114 GET 200 stylesheet 16.4 KB 88 ms —

23:05:07.116 GET 200 stylesheet 57.8 KB 212 ms 1 alerts

23:05:07.117 GET 200 script 85.5 KB 277 ms 1 alerts

23:05:07.119 GET 200 script 13.3 KB 287 ms 1 alerts

23:05:07.120 GET 200 script 95.5 KB 596 ms 1 alerts

23:05:07.122 GET 200 script 190.0 KB 3148 ms 2 alerts

23:05:07.124 GET 200 script 77.2 KB 348 ms 1 alerts

23:05:07.126 GET 200 script 5.7 KB 346 ms 1 alerts

23:05:07.128 GET 200 script 28.8 KB 349 ms 1 alerts

23:05:07.770 GET 200 script 83.4 KB 102 ms —

23:05:07.773 GET 200 xhr 40 B 110 ms —

23:05:07.775 GET 200 img 0 B 379 ms 2 alerts

23:05:07.779 GET 200 script 41.0 KB 73 ms 2 alerts

23:05:07.783 GET 200 script 120.9 KB 6527 ms —

23:05:07.784 GET 200 script 190.0 KB 23 ms 2 alerts

23:05:07.787 GET 200 script 108.3 KB 17 ms —

23:05:07.791 GET 200 script 108.3 KB 224 ms —

23:05:07.854 GET 200 font 75.4 KB 169 ms 1 alerts

23:05:07.931 GET 200 img 13.7 KB 135 ms 1 alerts

23:05:07.933 GET 200 img 15.9 KB 157 ms 1 alerts

23:05:07.934 GET 200 img 19.9 KB 199 ms 1 alerts

23:05:07.936 GET 200 img 13.0 KB 179 ms 1 alerts

23:05:07.937 GET 200 img 18.3 KB 380 ms 1 alerts

23:05:07.939 GET 200 img 17.0 KB 391 ms 1 alerts

23:05:07.940 GET 200 img 18.5 KB 376 ms 1 alerts

23:05:07.941 GET 200 img 18.9 KB 394 ms 1 alerts

23:05:07.943 GET 200 img 16.9 KB 357 ms 1 alerts

23:05:07.944 GET 200 img 8.9 KB 355 ms 1 alerts

23:05:07.946 GET 200 img 18.9 KB 382 ms 1 alerts

23:05:07.948 GET 200 img 13.7 KB 339 ms 1 alerts

23:05:07.950 GET 200 img 14.2 KB 379 ms 1 alerts

23:05:07.951 GET 200 img 21.0 KB 360 ms 1 alerts

23:05:07.953 GET 200 img 13.6 KB 370 ms 1 alerts

23:05:07.954 GET 200 img 16.5 KB 369 ms 1 alerts

23:05:07.956 GET 200 img 22.4 KB 259 ms 1 alerts

23:05:07.957 GET 200 img 20.3 KB 342 ms 1 alerts

23:05:07.959 GET 200 img 20.2 KB 340 ms 1 alerts

23:05:07.960 GET 200 img 14.6 KB 340 ms 1 alerts

23:05:07.962 GET 200 img 19.4 KB 373 ms 1 alerts

23:05:07.964 GET 200 img 21.8 KB 371 ms 1 alerts

23:05:07.965 GET 200 img 25.8 KB 369 ms 1 alerts

23:05:07.967 GET 200 img 15.8 KB 313 ms 1 alerts

23:05:07.980 POST 200 xhr 3.6 KB 843 ms 1 alerts

Transaction #84

Request / response

URL

POST HTTPS

https://s.magsrv.com/v1/api.php

IP / ASN

95.211.229.248

AS60781 · LeaseWeb Netherlands B.V.

Requested by: https://elgranonan.com/2025/12/17/perverted-fan-debuts-with-gaby-uztariz-huge-asssss-gaby-uztariz-elgranonan-milkyperu/

Resource information

File type: JSON text data
MIME type: application/json
First seen (UTC): 10 Jul 2026 · 23:05:49.745 UTC
Last seen (UTC): 10 Jul 2026 · 23:05:49.745 UTC
Times seen: 1

Size: 3.6 KB (3732 bytes)
MD5: 88576b5dfd6c00050dec8a4267b3c05c
SHA1: 55fb46db42e8d27f366494230a5d0ebf440214fa
SHA256: 38c13d47aaadb9dc2c208aff9989bdf89af2c110383f6c0044dedcd9480393e4

Certificate information

Issuer: Let's Encrypt · YE1
Subject: magsrv.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: D7:7E:74:E5:BE:35:61:21:88:6E:2B:94:B2:C2:80:E7:7A:B5:3A:D7
Valid from: Fri, 10 Jul 2026 15:24:15 GMT
Valid until: Thu, 08 Oct 2026 15:24:14 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

POST /v1/api.php HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://elgranonan.com/
Content-Type: text/plain
Content-Length: 588
Origin: https://elgranonan.com
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 Jul 2026 23:05:08 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://elgranonan.com
Access-Control-Allow-Credentials: true
Vary: Origin
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Set-Cookie: __uvt=s%3A34%3A%222-1ff24cfdf1fabf4fb52b76b0cc88cb14%22%3B; expires=Sun, 09 Jul 2028 23:05:08 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

Request body

Captured 588 B · Displayed 588 B

{"user":{"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","language":"en-US","referer":"https://elgranonan.com/2025/12/17/perverted-fan-debuts-with-gaby-uztariz-huge-asssss-gaby-uztariz-elgranonan-milkyperu/","consumer":"ad-provider","gdpr":{"gdpr":0},"screen_resolution":"1280x1024","window_orientation":"landscape","cookies":[],"scr_info":"YXN5bmN8fDM%3D"},"zones":[{"custom_targeting":{},"id":5717520,"extra_params":{"first_request":true,"zone_type":10}},{"custom_targeting":{},"id":5717220,"extra_params":{"first_request":true,"zone_type":10}}]}

23:05:08.156 GET 200 script 22.2 KB 124 ms 1 alerts

23:05:08.234 GET 200 script 96.0 KB 30 ms —

23:05:08.347 POST 204 beacon 0 B 157 ms —

http://elgranonan.com/2025/12/17/perverted-fan-debuts-with-gaby-uztariz-huge-asssss-gaby-uztariz-elgranonan-milkyperu/

Domain graph

Hostnames

Connections

Network requests

Transaction #84

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://elgranonan.com/2025/12/17/perverted-fan-debuts-with-gaby-uztariz-huge-asssss-gaby-uztariz-elgranonan-milkyperu/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #84

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

http://elgranonan.com/2025/12/17/perverted-fan-debuts-with-gaby-uztariz-huge-asssss-gaby-uztariz-elgranonan-milkyperu/

Domain graph

Network requests