WEBSITE ANALYSIS REPORT

http://ongayporn.click/

17 Apr 2026 · 07:56:36.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

07:56:11.589 GET 200 document 125.7 KB 377 ms —

07:56:12.060 GET 200 script 7.1 KB 227 ms —

07:56:12.065 GET 200 script 0 B 191 ms 1 alerts

07:56:12.072 GET 200 script 7.1 KB 178 ms —

07:56:12.075 GET 200 script 7.1 KB 181 ms —

07:56:12.078 GET 200 script 7.1 KB 160 ms —

07:56:12.419 GET 200 lazy-img 13.3 KB 24 ms —

07:56:12.422 GET 200 lazy-img 11.2 KB 23 ms —

07:56:12.423 GET 200 lazy-img 4.4 KB 138 ms —

07:56:12.425 GET 200 lazy-img 11.5 KB 135 ms —

07:56:12.427 GET 200 lazy-img 13.2 KB 139 ms —

07:56:12.429 GET 200 lazy-img 5.2 KB 138 ms —

07:56:12.430 GET 200 lazy-img 5.6 KB 153 ms —

07:56:12.431 GET 200 lazy-img 9.1 KB 25 ms —

07:56:12.433 GET 200 lazy-img 8.6 KB 43 ms —

07:56:12.435 GET 200 lazy-img 5.9 KB 76 ms —

07:56:12.436 GET 200 lazy-img 1.5 KB 77 ms —

07:56:12.437 GET 200 lazy-img 7.0 KB 75 ms —

07:56:12.440 GET 200 lazy-img 6.4 KB 72 ms —

07:56:12.441 GET 200 lazy-img 10.1 KB 72 ms —

07:56:12.442 GET 200 lazy-img 10.2 KB 78 ms —

07:56:12.443 GET 200 lazy-img 4.6 KB 94 ms —

07:56:12.446 GET 200 lazy-img 12.8 KB 91 ms —

07:56:12.450 GET 200 lazy-img 9.1 KB 88 ms —

07:56:12.452 GET 200 lazy-img 9.2 KB 86 ms —

07:56:12.454 GET 200 lazy-img 5.3 KB 110 ms —

07:56:12.458 GET 200 lazy-img 5.8 KB 80 ms —

07:56:12.459 GET 200 lazy-img 7.8 KB 105 ms —

07:56:12.461 GET 200 lazy-img 5.3 KB 118 ms —

07:56:12.463 GET 200 lazy-img 6.9 KB 126 ms —

07:56:12.464 GET 200 lazy-img 8.5 KB 126 ms —

07:56:12.466 GET 200 lazy-img 9.9 KB 125 ms —

07:56:12.467 GET 200 lazy-img 7.8 KB 123 ms —

07:56:12.469 GET 200 lazy-img 6.0 KB 98 ms —

07:56:12.486 GET 200 xhr 365 B 327 ms —

07:56:12.487 GET 200 xhr 365 B 329 ms —

07:56:12.488 GET 200 xhr 365 B 325 ms —

07:56:12.491 GET 200 xhr 365 B 324 ms —

07:56:12.829 GET 200 img 5.1 KB 23 ms —

07:56:12.830 GET 200 img 467 B 23 ms —

07:56:12.839 GET 200 script 184.0 KB 178 ms 2 alerts

07:56:12.855 GET 200 script 184.0 KB 141 ms 2 alerts

07:56:12.856 GET 200 script 184.0 KB 127 ms 2 alerts

07:56:12.863 GET 200 script 184.0 KB 113 ms 2 alerts

07:56:13.069 POST 200 xhr 15.2 KB 277 ms 1 alerts

07:56:13.071 POST 200 xhr 15.3 KB 277 ms 1 alerts

Transaction #29

Request / response

URL

POST HTTPS

https://s.magsrv.com/v1/api.php

IP / ASN

95.211.229.247

AS60781 · LeaseWeb Netherlands B.V.

Requested by: https://ongayporn.click/

Resource information

File type: JSON text data
MIME type: application/json
First seen (UTC): 17 Apr 2026 · 07:56:41.728 UTC
Last seen (UTC): 17 Apr 2026 · 07:56:41.728 UTC
Times seen: 1

Size: 15.3 KB (15671 bytes)
MD5: 838cb677a64c4669c2318057c5e129f1
SHA1: 641a4882473762fe02f28a62f246d80865b14912
SHA256: 08198d6a4f43803767be1ef172990c10d0b2488801fbbb2490bf15d709d43ceb

Certificate information

Issuer: Let's Encrypt · E7
Subject: magsrv.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB
Valid from: Mon, 23 Feb 2026 08:20:01 GMT
Valid until: Sun, 24 May 2026 08:20:00 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

POST /v1/api.php HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 391
Origin: https://ongayporn.click
DNT: 1
Connection: keep-alive
Referer: https://ongayporn.click/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Apr 2026 07:56:13 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://ongayporn.click
Access-Control-Allow-Credentials: true
Vary: Origin
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Set-Cookie: __uvt=s%3A32%3A%225c0480b8d0e363ddcfc0ba5305c86bd3%22%3B; expires=Sun, 16 Apr 2028 07:56:13 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

Request body

Captured 391 B · Displayed 391 B

{"user":{"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","language":"en-US","referer":"about:srcdoc","consumer":"ad-provider","gdpr":{"gdpr":0},"screen_resolution":"1280x1024","window_orientation":"landscape","cookies":[],"scr_info":"YXN5bmN8fDM%3D"},"zones":[{"custom_targeting":{},"id":5862818,"extra_params":{"first_request":true,"zone_type":10}}]}

07:56:13.077 POST 200 xhr 15.3 KB 263 ms 1 alerts

07:56:13.087 POST 200 xhr 15.2 KB 246 ms 1 alerts

07:56:13.323 GET 200 xhr 0 B 26 ms 1 alerts

07:56:13.326 GET 200 xhr 0 B 25 ms 1 alerts

http://ongayporn.click/

Domain graph

Hostnames

Connections

Network requests

Transaction #29

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://ongayporn.click/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #29

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

http://ongayporn.click/

Domain graph

Network requests