WEBSITE ANALYSIS REPORT

http://ongayporn.click/

17 Apr 2026 · 07:56:36.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

07:56:11.589 GET 200 document 125.7 KB 377 ms —

07:56:12.060 GET 200 script 7.1 KB 227 ms —

07:56:12.065 GET 200 script 0 B 191 ms 1 alerts

07:56:12.072 GET 200 script 7.1 KB 178 ms —

07:56:12.075 GET 200 script 7.1 KB 181 ms —

07:56:12.078 GET 200 script 7.1 KB 160 ms —

07:56:12.419 GET 200 lazy-img 13.3 KB 24 ms —

07:56:12.422 GET 200 lazy-img 11.2 KB 23 ms —

07:56:12.423 GET 200 lazy-img 4.4 KB 138 ms —

07:56:12.425 GET 200 lazy-img 11.5 KB 135 ms —

07:56:12.427 GET 200 lazy-img 13.2 KB 139 ms —

07:56:12.429 GET 200 lazy-img 5.2 KB 138 ms —

07:56:12.430 GET 200 lazy-img 5.6 KB 153 ms —

07:56:12.431 GET 200 lazy-img 9.1 KB 25 ms —

07:56:12.433 GET 200 lazy-img 8.6 KB 43 ms —

07:56:12.435 GET 200 lazy-img 5.9 KB 76 ms —

07:56:12.436 GET 200 lazy-img 1.5 KB 77 ms —

07:56:12.437 GET 200 lazy-img 7.0 KB 75 ms —

07:56:12.440 GET 200 lazy-img 6.4 KB 72 ms —

07:56:12.441 GET 200 lazy-img 10.1 KB 72 ms —

07:56:12.442 GET 200 lazy-img 10.2 KB 78 ms —

07:56:12.443 GET 200 lazy-img 4.6 KB 94 ms —

07:56:12.446 GET 200 lazy-img 12.8 KB 91 ms —

07:56:12.450 GET 200 lazy-img 9.1 KB 88 ms —

07:56:12.452 GET 200 lazy-img 9.2 KB 86 ms —

07:56:12.454 GET 200 lazy-img 5.3 KB 110 ms —

07:56:12.458 GET 200 lazy-img 5.8 KB 80 ms —

07:56:12.459 GET 200 lazy-img 7.8 KB 105 ms —

07:56:12.461 GET 200 lazy-img 5.3 KB 118 ms —

07:56:12.463 GET 200 lazy-img 6.9 KB 126 ms —

07:56:12.464 GET 200 lazy-img 8.5 KB 126 ms —

07:56:12.466 GET 200 lazy-img 9.9 KB 125 ms —

07:56:12.467 GET 200 lazy-img 7.8 KB 123 ms —

07:56:12.469 GET 200 lazy-img 6.0 KB 98 ms —

07:56:12.486 GET 200 xhr 365 B 327 ms —

07:56:12.487 GET 200 xhr 365 B 329 ms —

07:56:12.488 GET 200 xhr 365 B 325 ms —

07:56:12.491 GET 200 xhr 365 B 324 ms —

07:56:12.829 GET 200 img 5.1 KB 23 ms —

07:56:12.830 GET 200 img 467 B 23 ms —

07:56:12.839 GET 200 script 184.0 KB 178 ms 2 alerts

07:56:12.855 GET 200 script 184.0 KB 141 ms 2 alerts

07:56:12.856 GET 200 script 184.0 KB 127 ms 2 alerts

Transaction #16

Request / response

URL

GET HTTPS

https://a.magsrv.com/ad-provider.js

IP / ASN

95.173.205.15

AS60068 · Datacamp Limited

Requested by: https://ongayporn.click/

Resource information

File type: JavaScript source, ASCII text, with very long lines (39940)
MIME type: application/javascript
First seen (UTC): 15 Apr 2026 · 13:08:57.834 UTC
Last seen (UTC): 22 Apr 2026 · 10:25:44.153 UTC
Times seen: 172

Size: 184.0 KB (188413 bytes)
MD5: 7aed630ee31d3f9cff55e0b1f5e3e811
SHA1: cf93796454e8c42585ad9e5ff39ca4017d55a301
SHA256: bf409d98c411ec137c473af54cf2c3626c221541e42779aa4dcbd91ae26ea576

Certificate information

Issuer: Let's Encrypt · E7
Subject: magsrv.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB
Valid from: Mon, 23 Feb 2026 08:20:01 GMT
Valid until: Sun, 24 May 2026 08:20:00 GMT

Technology fingerprints

CDN77 (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ad-provider.js HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ongayporn.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Fri, 17 Apr 2026 07:56:12 GMT
content-type: application/javascript
etag: W/"cf93796454e8c42585ad9e5ff39"
expires: Thu, 16 Apr 2026 17:34:49 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: k15eEr80ik9ovMOdnbLw3wCsfQ/ytdkrlP7BD8W24co3FVaEQgDAu7fmJilu/apd9jGbfiM
x-77-nzt-ray: 2a494a15ee5e68e9c1e7e16994a4e436
x-77-cache: HIT
x-77-age: 8347
vary: Accept-Encoding
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: osloNO
X-Firefox-Spdy: h2

07:56:12.863 GET 200 script 184.0 KB 113 ms 2 alerts

07:56:13.069 POST 200 xhr 15.2 KB 277 ms 1 alerts

07:56:13.071 POST 200 xhr 15.3 KB 277 ms 1 alerts

07:56:13.077 POST 200 xhr 15.3 KB 263 ms 1 alerts

07:56:13.087 POST 200 xhr 15.2 KB 246 ms 1 alerts

07:56:13.323 GET 200 xhr 0 B 26 ms 1 alerts

07:56:13.326 GET 200 xhr 0 B 25 ms 1 alerts

http://ongayporn.click/

Domain graph

Hostnames

Connections

Network requests

Transaction #16

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://ongayporn.click/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #16

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://ongayporn.click/

Domain graph

Network requests