WEBSITE ANALYSIS REPORT

http://sos-animals.info

14 Oct 2026 · 06:58:25.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

a.magsrv.com4 captured requests
abt.s3.yandex.net1 captured requests
cdn.jsdelivr.net2 captured requests
creative.marzaent.com5 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com2 captured requests
fp.spac.me1 captured requests
go.marzaent.com5 captured requests
img.doppiocdn.com18 captured requests
inf-xts.spac.me15 captured requests
mobtop.com1 captured requests
no.topcams.tv1 captured requests
s.magsrv.com11 captured requests
sos-animals.info1 captured requests
static-proxy.strpst.com18 captured requests
uaas.yandex.ru1 captured requests
usersporn.com19 captured requests
video.xxxjmp.com5 captured requests
www.google.no1 captured requests
www.googletagmanager.com1 captured requests
z6v2p9a8.bkcdn.net18 captured requests

Connections

creative.marzaent.com → fonts.googleapis.comLoads from2 captured connections
creative.marzaent.com → fonts.gstatic.comLoads from2 captured connections
creative.marzaent.com → go.marzaent.comCalls4 captured connections
creative.marzaent.com → img.doppiocdn.comLoads from18 captured connections
creative.marzaent.com → no.topcams.tvCalls1 captured connections
creative.marzaent.com → static-proxy.strpst.comLoads from18 captured connections
creative.marzaent.com → video.xxxjmp.comLoads from5 captured connections
go.marzaent.com → creative.marzaent.comRedirects to1 captured connections
sos-animals.info → usersporn.comRedirects to1 captured connections
usersporn.com → a.magsrv.comLoads from4 captured connections
usersporn.com → abt.s3.yandex.netLoads from1 captured connections
usersporn.com → cdn.jsdelivr.netLoads from2 captured connections
usersporn.com → creative.marzaent.comEmbeds1 captured connections
usersporn.com → fp.spac.meLoads from1 captured connections
usersporn.com → go.marzaent.comEmbeds1 captured connections
usersporn.com → inf-xts.spac.meLoads from3 captured connections
usersporn.com → mobtop.comLoads from1 captured connections
usersporn.com → s.magsrv.comCalls11 captured connections
usersporn.com → uaas.yandex.ruCalls1 captured connections
usersporn.com → www.google.noLoads from1 captured connections
usersporn.com → www.googletagmanager.comLoads from1 captured connections
usersporn.com → z6v2p9a8.bkcdn.netCalls4 captured connections
usersporn.com → z6v2p9a8.bkcdn.netLoads from14 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:57:47.159 GET 301 document 0 B 994 ms 1 alerts

06:57:48.162 GET 200 document 201.0 KB 298 ms —

06:57:48.796 GET 200 script 284.9 KB 23 ms —

06:57:48.802 GET 200 script 179.6 KB 22 ms —

06:57:49.178 GET 200 script 1.2 KB 5 ms —

06:57:49.190 GET 200 imageset 4.2 KB 384 ms —

06:57:49.192 GET 200 imageset 5.5 KB 156 ms —

06:57:49.194 GET 200 imageset 1.8 KB 380 ms —

06:57:49.197 GET 200 stylesheet 172.6 KB 31 ms —

06:57:49.199 GET 200 stylesheet 72.5 KB 16 ms —

06:57:49.201 GET 200 stylesheet 310 B 11 ms —

06:57:49.204 GET 200 imageset 2.1 KB 136 ms —

06:57:49.308 GET 200 img 73.4 KB 17 ms —

06:57:49.313 GET 200 img 9.5 KB 12 ms —

06:57:49.315 GET 200 img 17.0 KB 14 ms —

06:57:49.318 GET 200 img 11.4 KB 13 ms —

06:57:49.321 GET 200 img 300 B 10 ms —

06:57:49.323 GET 200 img 7.1 KB 11 ms —

06:57:49.325 GET 200 img 5.3 KB 10 ms —

06:57:49.407 GET 200 lazy-imageset 3.2 KB 33 ms —

06:57:49.408 GET 200 lazy-imageset 2.4 KB 34 ms —

06:57:49.412 GET 200 lazy-imageset 2.6 KB 33 ms —

06:57:49.415 GET 200 lazy-imageset 3.9 KB 34 ms —

06:57:49.417 GET 200 lazy-imageset 4.4 KB 38 ms —

06:57:49.418 GET 200 lazy-imageset 6.2 KB 54 ms —

06:57:49.420 GET 200 lazy-imageset 5.8 KB 37 ms —

06:57:49.421 GET 200 lazy-imageset 4.5 KB 54 ms —

06:57:49.437 GET 200 script 1.5 KB 61 ms —

06:57:49.483 GET 200 img 2.3 KB 35 ms —

06:57:49.485 GET 200 img 2.5 KB 35 ms —

06:57:49.486 GET 200 img 3.3 KB 35 ms —

06:57:49.510 GET 200 script 724 B 53 ms —

06:57:49.579 GET 200 img 18.8 KB 13 ms —

06:57:49.581 GET 200 img 689 B 30 ms —

06:57:49.589 GET 200 script 534.9 KB 137 ms —

06:57:49.591 GET 200 script 283.8 KB 69 ms —

06:57:49.594 GET 200 script 14.2 KB 165 ms —

06:57:49.601 GET 200 img 347 B 162 ms —

06:57:50.204 GET 200 xhr 173 B 205 ms —

06:57:50.304 GET 206 media 333.6 KB 576 ms —

06:57:50.389 GET 200 img 42 B 86 ms —

06:57:52.602 GET 200 script 219.4 KB 6505 ms 1 alerts

Transaction #80

Request / response

URL

GET HTTPS

https://a.magsrv.com/ad-provider.js

IP / ASN

95.173.205.14

AS60068 · Datacamp Limited

Requested by: https://usersporn.com/videocat/cats/indian-teen/mobile/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (49490)
MIME type: application/javascript
First seen (UTC): 13 Oct 2026 · 00:54:24.757 UTC
Last seen (UTC): 14 Oct 2026 · 12:38:11.313 UTC
Times seen: 24

Size: 219.4 KB (224687 bytes)
MD5: 48e78ec99b3ca9890a276832a10fdef0
SHA1: adff4b755e5fd06ced2b2bcacd9fc37c25f097b2
SHA256: 9ce40bcc94757ef0e7921d5125b5583af49f22f89f056de2aaf34f83d09da988

Certificate information

Issuer: Let's Encrypt · YE1
Subject: magsrv.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 80:88:B6:BE:82:11:1B:F6:B9:75:C8:8B:63:04:3F:AF:61:82:28:A5
Valid from: Wed, 09 Sep 2026 06:20:24 GMT
Valid until: Tue, 08 Dec 2026 06:20:23 GMT

Technology fingerprints

CDN77 (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ad-provider.js HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://usersporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Wed, 14 Oct 2026 06:57:59 GMT
content-type: application/javascript
etag: W/"adff4b755e5fd06ced2b2bcacd9"
expires: Tue, 13 Oct 2026 14:43:34 GMT
cache-control: max-age=1800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: kzU8UOeCwd+TGIYGNvf9V14NaIODO1y9+CS7s5/dZE4iVTegCwq5AIRdHfbsOgdSWD+Wo0g
x-77-nzt-ray: 2a494a15f64425461c28cf6a6472fd05
age: 830
x-77-cache: HIT
x-77-age: 2631
vary: Accept-Encoding
content-encoding: gzip
server: CDN77-Turbo
alt-svc: h3=":443"; ma=86400
x-77-pop: osloNO

06:57:52.605 GET 200 script 219.4 KB 3337 ms 1 alerts

06:57:52.609 GET 200 script 219.4 KB 13 ms 1 alerts

06:57:52.612 GET 200 script 219.4 KB 12 ms 1 alerts

06:57:52.703 GET 200 script 30.8 KB 10 ms —

06:57:52.954 POST 200 xhr 33.4 KB 973 ms 1 alerts

06:57:53.952 GET 200 img 7.5 KB 16 ms —

06:57:53.955 GET 200 img 7.5 KB 17 ms —

06:57:53.957 GET 200 img 13.2 KB 15 ms —

http://sos-animals.info

Domain graph

Hostnames

Connections

Network requests

Transaction #80

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://sos-animals.info

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #80

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://sos-animals.info

Domain graph

Network requests