WEBSITE ANALYSIS REPORT

http://kontrol7.prynxo.com/

30 May 2026 · 19:50:59.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

a.adspector.io1 captured requests
a64842e9de.198b531aae.com1 captured requests
ad.twinrdengine.com2 captured requests
cdn.60ah.com2 captured requests
creative.rmhfrtnd.com2 captured requests
flepquix.com1 captured requests
fonts.googleapis.com2 captured requests
fp.metricswpsh.com2 captured requests
go.cambaddies.com2 captured requests
go.mavrtracktor.com1 captured requests
go.rmhfrtnd.com2 captured requests
js.cabnnr.com2 captured requests
js.wpadmngr.com1 captured requests
kontrol7.prynxo.com1 captured requests
lacenocturne.com1 captured requests
n2j9y0x0.bxcdn.net1 captured requests
na.nawpush.com1 captured requests
ntvpforever.com2 captured requests
plushcinema.com3 captured requests
preroll.hostave3.net1 captured requests
rtbbtr.com3 captured requests
s.magsrv.com2 captured requests
senzoriq.com4 captured requests
silkallurex.com1 captured requests
trendbuzz.to1 captured requests
video.rmhfrtnd.com1 captured requests
video.sacdnssedge.com3 captured requests

Connections

creative.rmhfrtnd.com → fonts.googleapis.comLoads from2 captured connections
creative.rmhfrtnd.com → go.rmhfrtnd.comCalls1 captured connections
creative.rmhfrtnd.com → go.rmhfrtnd.comLoads from1 captured connections
creative.rmhfrtnd.com → video.rmhfrtnd.comLoads from1 captured connections
go.mavrtracktor.com → go.cambaddies.comRedirects to1 captured connections
kontrol7.prynxo.com → senzoriq.comRedirects to1 captured connections
lacenocturne.com → a.adspector.ioEmbeds1 captured connections
lacenocturne.com → a64842e9de.198b531aae.comCalls1 captured connections
lacenocturne.com → flepquix.comCalls1 captured connections
lacenocturne.com → fp.metricswpsh.comCalls2 captured connections
lacenocturne.com → js.cabnnr.comLoads from1 captured connections
lacenocturne.com → js.wpadmngr.comLoads from1 captured connections
lacenocturne.com → na.nawpush.comCalls1 captured connections
lacenocturne.com → ntvpforever.comCalls2 captured connections
lacenocturne.com → rtbbtr.comCalls1 captured connections
lacenocturne.com → rtbbtr.comEmbeds1 captured connections
plushcinema.com → ad.twinrdengine.comCalls1 captured connections
plushcinema.com → ad.twinrdengine.comEmbeds1 captured connections
plushcinema.com → go.cambaddies.comCalls1 captured connections
plushcinema.com → go.cambaddies.comEmbeds1 captured connections
plushcinema.com → go.mavrtracktor.comCalls1 captured connections
plushcinema.com → trendbuzz.toEmbeds1 captured connections
plushcinema.com → video.sacdnssedge.comLoads from3 captured connections
rtbbtr.com → cdn.60ah.comEmbeds1 captured connections
rtbbtr.com → cdn.60ah.comLoads from1 captured connections
rtbbtr.com → creative.rmhfrtnd.comEmbeds1 captured connections
rtbbtr.com → js.cabnnr.comLoads from1 captured connections
rtbbtr.com → preroll.hostave3.netLoads from1 captured connections
rtbbtr.com → preroll.hostave3.netRedirects to1 captured connections
senzoriq.com → silkallurex.comEmbeds1 captured connections
silkallurex.com → plushcinema.comEmbeds1 captured connections
trendbuzz.to → lacenocturne.comEmbeds1 captured connections
trendbuzz.to → n2j9y0x0.bxcdn.netLoads from1 captured connections
trendbuzz.to → s.magsrv.comCalls1 captured connections
trendbuzz.to → s.magsrv.comEmbeds1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:50:36.446 GET 302 document 14.9 KB 207 ms —

19:50:36.579 GET 200 document 14.9 KB 186 ms —

19:50:37.074 GET No response img 0 B 0 ms —

19:50:37.274 GET 200 document 469 B 59 ms —

19:50:37.382 GET 200 subdocument 220 B 193 ms —

19:50:37.405 GET 404 img 0 B 9 ms —

19:50:37.613 GET 200 subdocument 107 B 195 ms —

19:50:37.848 GET 200 subdocument 10.1 KB 63 ms —

19:50:37.937 GET 200 fetch 3.9 KB 267 ms —

19:50:38.118 GET 302 fetch 2.3 KB 272 ms —

19:50:38.276 GET 200 fetch 2.3 KB 232 ms —

19:50:38.532 GET 206 media 1.50 MB 356 ms —

19:50:38.543 GET 200 subdocument 2 B 141 ms —

19:50:38.546 GET 200 subdocument 103 B 62 ms —

19:50:38.825 GET 206 media 35.7 KB 2 ms —

19:50:38.904 GET 200 subdocument 304 B 62 ms —

19:50:38.911 GET 206 media 439.9 KB 24 ms —

19:50:39.021 GET 200 subdocument 10.9 KB 234 ms —

19:50:39.298 GET 200 fetch 15.4 KB 197 ms 1 alerts

19:50:39.523 GET 206 media 3.51 MB 447 ms —

19:50:39.530 GET 200 subdocument 0 B 307 ms 1 alerts

Transaction #36

Request / response

URL

GET HTTPS

https://s.magsrv.com/vregister.php?a=vimp&tracking_event=impression&t=imp&idzone=5933356&is_vast=1&should_log=0&cb=e2e_6a1b3f8f644f60.09298726&e339c55bd45652885fa3ad3874ecd723=tsVuZ8uHLtt4ddvPhq49fXXh65.ddlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM66XJW2bMcd1c2uBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn588e3jtrgbqgrcz48PPjjw7a4G8ZpXM.vnnz59e2uBtpitx6anDPrw8a4G2mJJ2IHpc.vHv47c.WuBu1imBiuCaXPjy78e3bv57a4G5qs.nDXA2zTNdU5Tnz1wNtuWwNOZ8NcDbTFNMDlOfDXA3BVPny68.nTXVYznw12sR2OZ8N3Dhw5a57GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmieBraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58dbl7T7Erzi9cy8rld01MWfHWw2vXhO5nx8a3ZqZGK89cDcrld01MWfHW1NZLXTgvNTA9BKxHmUWdrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS58L.GuypyleBvPhrspjXfYqfz7d.THhzryYY8NcfPnx5Yd7u8.LvLr38eGOXnXBJPS5VVBNKvVWxXZVnx1wST0uVVQTSrwS2sRwNr0uMVTS58NdLjrlLlK9UFbi781VcrEjmddLkrbNmOO6ubWw2zHM1Fnw1wNzOuuU58eXDpw8a4G42JW4JXl52HnM.Xbt54dtbl7jVlcE0q9cEjmfDdw5a4G22K2GnJa3Kc.WuBtpimmByleqaylpzPhrlmqapgnrz4a4JWpnpYK5l5Jm3M.GutyqteSZtzPhrpcegmlXecmlYkcXgbz4a56Zr8F6q2K7Ks9vHXA3OxTXK5Tnw1tQV4LvOTSsSOLwN58.PTny6dNcrlbDVkFeC89M1.C9eE7meuVythqyCvBeema_BdtypqmCeuCaXPWw2zHM1Eva5TnrgknpcqqgmlXYjjXgltYjgbXpcYqmlqz4a6rGeWfDXVYzzz4a6mqYJ6168J3M7WKq9dTVME9a8rEjmeupqmCete1ynPWzTNdU5Sva5Tnw12058NcEtblMrEefDXLMu7ZK3Vnw1wN0uVTzS1QWuLxsYTWV58NcDclkdcGM0rmfDW5IxBGvBVPnw11NUwT1rtuVsQR58emupqmCete1ymqCaXPjrgbYbtcprgqcpXYbXrwncz5cdcDc9M1.GfDWw2vS5RY5VWvS5VZHXnx1wNyuV3TUxL14TuZ8dcDbTEk7ED0q9eE7mfDXTWyvBLa5LXNTgvA3nrprZXgltclrmpwXlYkcz1xOYL2sR2OL8c.GuJzBe1iOxxflnw1xOYL2sR2OL88.GuJzBe1iOxxfpnw1xOYL2sR2OL9c.GuJzBe1iOxxftnw1xOYL2sR2OL98.GuJzBe1iOxxfxnw1xOYL2sR2OL.c.GuJzBe1iOxxfjwz4a2m5V7KmHnM.fXz21swNr1PsNwSvL2sR2OZ8NdTjU0ra7LlVa9rEdjmfDdw4cOOtixquCaVd2OaanPhu462LGq4JpV2nII8.G7hw5a4G66WHXYGl6prKWnM.Wt1iONlhqJeeaqCuCaXPhrYbXqcptgleXfmqrzq3SMPVU27mppNbUcDkta78EtdS9lTDzmfHW1ZVXNIvaxHY4vxz1tWVVzSL2sR2OL8s9bVlVc0i9rEdji_PPXU41NK2uzA2u1NJJBVVBNLnw3cOOuBuvCdxeypyleBvPhrgbYqqcrXrwncz7a2bKY89dlTlK7TE88Er2fDXZU5Su0xPPBK8u7S5RY5K1hnw12VOUrtMTzwSvLxuWuR567bLIG8.Pfxw49.Hbn549.HDr34cO_LsxxZ5u.He3To6zrrgkcqrYknz49_HDj34dufnW1NNFA41NLU5LXnxg

IP / ASN

95.211.229.245

AS60781 · LeaseWeb Netherlands B.V.

Requested by: https://trendbuzz.to/vastad.php?id=velvetsera.com

Resource information

File type: Not recorded
MIME type: text/html; charset=UTF-8
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 10:29:58.057 UTC
Times seen: 19329754

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · E8
Subject: magsrv.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 1B:A8:8E:90:72:61:08:71:A5:13:8D:29:3B:4D:D4:5B:13:72:B5:91
Valid from: Mon, 04 May 2026 11:08:14 GMT
Valid until: Sun, 02 Aug 2026 11:08:13 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /vregister.php?a=vimp&tracking_event=impression&t=imp&idzone=5933356&is_vast=1&should_log=0&cb=e2e_6a1b3f8f644f60.09298726&e339c55bd45652885fa3ad3874ecd723=tsVuZ8uHLtt4ddvPhq49fXXh65.ddlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM66XJW2bMcd1c2uBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn588e3jtrgbqgrcz48PPjjw7a4G8ZpXM.vnnz59e2uBtpitx6anDPrw8a4G2mJJ2IHpc.vHv47c.WuBu1imBiuCaXPjy78e3bv57a4G5qs.nDXA2zTNdU5Tnz1wNtuWwNOZ8NcDbTFNMDlOfDXA3BVPny68.nTXVYznw12sR2OZ8N3Dhw5a57GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmieBraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58dbl7T7Erzi9cy8rld01MWfHWw2vXhO5nx8a3ZqZGK89cDcrld01MWfHW1NZLXTgvNTA9BKxHmUWdrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS58L.GuypyleBvPhrspjXfYqfz7d.THhzryYY8NcfPnx5Yd7u8.LvLr38eGOXnXBJPS5VVBNKvVWxXZVnx1wST0uVVQTSrwS2sRwNr0uMVTS58NdLjrlLlK9UFbi781VcrEjmddLkrbNmOO6ubWw2zHM1Fnw1wNzOuuU58eXDpw8a4G42JW4JXl52HnM.Xbt54dtbl7jVlcE0q9cEjmfDdw5a4G22K2GnJa3Kc.WuBtpimmByleqaylpzPhrlmqapgnrz4a4JWpnpYK5l5Jm3M.GutyqteSZtzPhrpcegmlXecmlYkcXgbz4a56Zr8F6q2K7Ks9vHXA3OxTXK5Tnw1tQV4LvOTSsSOLwN58.PTny6dNcrlbDVkFeC89M1.C9eE7meuVythqyCvBeema_BdtypqmCeuCaXPWw2zHM1Eva5TnrgknpcqqgmlXYjjXgltYjgbXpcYqmlqz4a6rGeWfDXVYzzz4a6mqYJ6168J3M7WKq9dTVME9a8rEjmeupqmCete1ynPWzTNdU5Sva5Tnw12058NcEtblMrEefDXLMu7ZK3Vnw1wN0uVTzS1QWuLxsYTWV58NcDclkdcGM0rmfDW5IxBGvBVPnw11NUwT1rtuVsQR58emupqmCete1ymqCaXPjrgbYbtcprgqcpXYbXrwncz5cdcDc9M1.GfDWw2vS5RY5VWvS5VZHXnx1wNyuV3TUxL14TuZ8dcDbTEk7ED0q9eE7mfDXTWyvBLa5LXNTgvA3nrprZXgltclrmpwXlYkcz1xOYL2sR2OL8c.GuJzBe1iOxxflnw1xOYL2sR2OL88.GuJzBe1iOxxfpnw1xOYL2sR2OL9c.GuJzBe1iOxxftnw1xOYL2sR2OL98.GuJzBe1iOxxfxnw1xOYL2sR2OL.c.GuJzBe1iOxxfjwz4a2m5V7KmHnM.fXz21swNr1PsNwSvL2sR2OZ8NdTjU0ra7LlVa9rEdjmfDdw4cOOtixquCaVd2OaanPhu462LGq4JpV2nII8.G7hw5a4G66WHXYGl6prKWnM.Wt1iONlhqJeeaqCuCaXPhrYbXqcptgleXfmqrzq3SMPVU27mppNbUcDkta78EtdS9lTDzmfHW1ZVXNIvaxHY4vxz1tWVVzSL2sR2OL8s9bVlVc0i9rEdji_PPXU41NK2uzA2u1NJJBVVBNLnw3cOOuBuvCdxeypyleBvPhrgbYqqcrXrwncz7a2bKY89dlTlK7TE88Er2fDXZU5Su0xPPBK8u7S5RY5K1hnw12VOUrtMTzwSvLxuWuR567bLIG8.Pfxw49.Hbn549.HDr34cO_LsxxZ5u.He3To6zrrgkcqrYknz49_HDj34dufnW1NNFA41NLU5LXnxg HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trendbuzz.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 30 May 2026 19:50:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

19:50:39.723 GET 200 subdocument 281 B 353 ms —

19:50:40.145 GET 200 script 132.8 KB 699 ms 1 alerts

19:50:40.747 GET 200 xhr 1.4 KB 263 ms 1 alerts

19:50:40.989 OPTIONS 204 xhr 0 B 510 ms —

19:50:40.996 GET 200 xhr 0 B 511 ms —

19:50:40.999 GET 200 script 83.2 KB 428 ms —

19:50:41.001 OPTIONS 204 xhr 0 B 520 ms 1 alerts

19:50:41.314 POST 200 xhr 15 B 32 ms —

19:50:41.429 POST 200 xhr 60 B 381 ms 1 alerts

19:50:41.471 GET 204 subdocument 0 B 343 ms —

19:50:41.473 GET 200 subdocument 15.1 KB 519 ms —

19:50:41.478 GET 200 xhr 0 B 336 ms —

19:50:41.903 GET 200 stylesheet 1.9 KB 181 ms —

19:50:41.905 GET 302 img 42 B 39 ms —

19:50:41.908 GET 200 script 376 B 21 ms —

19:50:41.914 GET 200 subdocument 2.0 KB 180 ms —

19:50:41.947 GET 200 img 42 B 126 ms —

19:50:42.304 GET 200 xhr 0 B 83 ms —

19:50:42.567 GET 200 subdocument 1.3 KB 167 ms 1 alerts

19:50:42.751 GET 200 stylesheet 5.3 KB 276 ms —

19:50:42.752 GET 200 stylesheet 4.8 KB 374 ms —

19:50:42.754 GET 200 script 161.0 KB 39 ms 1 alerts

19:50:43.055 GET 200 fetch 7.1 KB 221 ms 1 alerts

19:50:43.222 GET 200 img 691.1 KB 264 ms 1 alerts

19:50:43.437 GET 200 img 0 B 45 ms 1 alerts

http://kontrol7.prynxo.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #36

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://kontrol7.prynxo.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #36

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://kontrol7.prynxo.com/

Domain graph

Network requests