WEBSITE ANALYSIS REPORT

http://gayxxxstage.cc/

05 Jun 2026 · 03:27:37.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

03:27:11.966 GET 200 document 79.1 KB 303 ms —

03:27:12.373 GET 200 img 11.1 KB 25 ms —

03:27:12.379 GET 200 img 4.4 KB 25 ms —

03:27:12.380 GET 200 img 8.4 KB 54 ms —

03:27:12.382 GET 200 img 7.1 KB 67 ms —

03:27:12.383 GET 200 img 8.6 KB 69 ms —

03:27:12.384 GET 200 img 14.1 KB 72 ms —

03:27:12.386 GET 200 script 188.1 KB 184 ms 2 alerts

03:27:12.387 GET 200 script 0 B 273 ms 1 alerts

03:27:12.399 GET 200 script 188.1 KB 208 ms 2 alerts

03:27:12.401 GET 200 script 188.1 KB 191 ms 2 alerts

03:27:12.403 GET 200 script 188.1 KB 192 ms 2 alerts

03:27:12.404 GET 200 script 188.1 KB 191 ms 2 alerts

03:27:12.407 GET 200 script 188.1 KB 90 ms 2 alerts

03:27:12.408 GET 200 script 188.1 KB 65 ms 2 alerts

03:27:12.409 GET 200 script 188.1 KB 64 ms 2 alerts

03:27:12.410 GET 200 script 188.1 KB 64 ms 2 alerts

03:27:12.411 GET 200 script 188.1 KB 63 ms 2 alerts

03:27:12.412 GET 200 script 188.1 KB 68 ms 2 alerts

03:27:12.413 GET 200 script 188.1 KB 68 ms 2 alerts

03:27:12.456 GET 200 lazy-img 14.9 KB 31 ms —

03:27:12.458 GET 200 lazy-img 9.1 KB 36 ms —

03:27:12.463 GET 200 lazy-img 10.2 KB 44 ms —

03:27:12.470 GET 200 lazy-img 5.4 KB 42 ms —

03:27:12.472 GET 200 lazy-img 13.7 KB 37 ms —

03:27:12.476 GET 200 lazy-img 12.7 KB 34 ms —

03:27:12.479 GET 200 lazy-img 2.1 KB 35 ms —

03:27:12.482 GET 200 lazy-img 7.0 KB 32 ms —

03:27:12.484 GET 200 lazy-img 9.2 KB 30 ms —

03:27:12.489 GET 200 lazy-img 5.5 KB 25 ms —

03:27:12.492 GET 200 lazy-img 6.5 KB 26 ms —

03:27:12.493 GET 200 lazy-img 5.8 KB 25 ms —

03:27:12.494 GET 200 lazy-img 7.7 KB 25 ms —

03:27:12.527 GET 200 lazy-img 6.4 KB 25 ms —

03:27:12.564 GET 200 lazy-img 5.3 KB 26 ms —

03:27:12.598 GET 200 lazy-img 5.6 KB 26 ms —

03:27:12.600 GET 200 lazy-img 22.8 KB 27 ms —

03:27:12.601 GET 200 lazy-img 7.6 KB 25 ms —

03:27:12.844 POST 200 xhr 112.1 KB 1014 ms 1 alerts

03:27:12.846 POST 200 xhr 31.0 KB 325 ms 1 alerts

03:27:13.097 GET 404 img 196 B 28 ms —

03:27:13.163 GET 200 img 51.9 KB 375 ms 1 alerts

03:27:13.167 GET 200 img 7.4 KB 221 ms 1 alerts

03:27:13.168 GET 200 img 14.6 KB 347 ms 1 alerts

03:27:13.170 GET 200 img 15.2 KB 355 ms 1 alerts

03:27:13.232 GET 200 img 6.0 KB 310 ms 1 alerts

03:27:13.242 GET 200 img 23.0 KB 285 ms 1 alerts

03:27:13.246 GET 200 img 27.5 KB 105 ms 1 alerts

03:27:13.251 GET 200 xhr 0 B 29 ms 1 alerts

03:27:13.252 GET 200 xhr 0 B 118 ms 1 alerts

Transaction #46

Request / response

URL

GET HTTPS

https://s.magsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01QS24DIQy9Si8Q5B8eyLrdtlKqHIACE3WRVupU0UTy4QskmpQH2Jj3jA0B6Q7alCfiPU17ZIvoIjghh17s9e1ggnZK13VdL59lcTkbxqghGMXgVQwhgAYxH5E8B0MMNnHgKXSffIidJWBs0NA4IsObwI7vz/ZyPBg6VI6bATMcTxtB8xoowIpAXVhzZEgSSko6V5W5lDpxxjQLzpC6AO4FL7/pVHvFcINDULIO2LDrdEZhamW1ATbCabl+ZbON1joZ1o82qB/6sn+ZHpgesrEv7pxOy8/F5e9zC91VeLscgZ6JsVaNraf28bNK1JSrrx+gvpbCrH84E472rQEAAA==&cb=e2e_6a2242111461d4.73750027

IP / ASN

95.211.229.247

AS60781 · LeaseWeb Netherlands B.V.

Requested by: https://gayxxxstage.cc/

Resource information

File type: Not recorded
MIME type: text/html; charset=UTF-8
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 17:29:49.637 UTC
Times seen: 19312417

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · E8
Subject: magsrv.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 1B:A8:8E:90:72:61:08:71:A5:13:8D:29:3B:4D:D4:5B:13:72:B5:91
Valid from: Mon, 04 May 2026 11:08:14 GMT
Valid until: Sun, 02 Aug 2026 11:08:13 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cimp.php?t=api&data=H4sIAAAAAAAAA01QS24DIQy9Si8Q5B8eyLrdtlKqHIACE3WRVupU0UTy4QskmpQH2Jj3jA0B6Q7alCfiPU17ZIvoIjghh17s9e1ggnZK13VdL59lcTkbxqghGMXgVQwhgAYxH5E8B0MMNnHgKXSffIidJWBs0NA4IsObwI7vz/ZyPBg6VI6bATMcTxtB8xoowIpAXVhzZEgSSko6V5W5lDpxxjQLzpC6AO4FL7/pVHvFcINDULIO2LDrdEZhamW1ATbCabl+ZbON1joZ1o82qB/6sn+ZHpgesrEv7pxOy8/F5e9zC91VeLscgZ6JsVaNraf28bNK1JSrrx+gvpbCrH84E472rQEAAA==&cb=e2e_6a2242111461d4.73750027 HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gayxxxstage.cc
DNT: 1
Connection: keep-alive
Referer: https://gayxxxstage.cc/
Cookie: __uvt=s%3A34%3A%222-4c619691dedafe9682b1c91234e3f66c%22%3B
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 05 Jun 2026 03:27:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://gayxxxstage.cc
Access-Control-Allow-Credentials: true
Vary: Origin
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

http://gayxxxstage.cc/

Domain graph

Hostnames

Connections

Network requests

Transaction #46

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://gayxxxstage.cc/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #46

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://gayxxxstage.cc/

Domain graph

Network requests