urlquery.net
WEBSITE ANALYSIS REPORT

http://v1.doodtv.online/nonton/snos-047-sub-indo

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document41.0 KB437 ms—
GET200stylesheet201 B76 ms—
GET200script229 B73 ms—
GET200stylesheet170.0 KB20 ms—
GET200stylesheet11.8 KB18 ms—
GET200script203.8 KB46 ms—
GET200script143.9 KB73 ms—
GET200img23.8 KB46 ms—
GET200img31.7 KB44 ms—
GET200img14.7 KB44 ms—
GET200img3.6 KB41 ms—
GET200img5.8 KB41 ms—
GET200subdocument275 B3373 ms2 alerts
GET200subdocument275 B3177 ms2 alerts

Transaction #110

Request / response

URL

GET HTTPS
https://a.magsrv.com/iframe.php?idzone=5781380&size=300x50

IP / ASN

Norway 95.173.205.14

AS60068 · Datacamp Limited

Requested by
https://v1.doodtv.online/nonton/snos-047-sub-indo

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Cloudflare DNS SinkholedmediumMalicious
Hagezi Threat Feed SinkholedmediumMalicious

HTTP headers

Request headers

GET /iframe.php?idzone=5781380&size=300x50 HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://v1.doodtv.online/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Mon, 20 Jul 2026 18:45:56 GMT
content-type: text/html; charset=UTF-8
expires: Mon, 20 Jul 2026 19:58:41 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: k5MDJFJ1s8MBDaieCjJKqrG3Re90sjSe/wVVDgStT3NGtZnTpjlmOM9m4IkANTLl7A
x-77-nzt-ray: 2a494a159ad9abeb096d5e6a182f7805
x-77-cache: HIT
x-77-age: 9
vary: Accept-Encoding
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: osloNO
X-Firefox-Spdy: h2

GET200subdocument275 B3369 ms2 alerts
GET200subdocument275 B6571 ms2 alerts
GET200subdocument275 B40 ms2 alerts
GET200subdocument275 B39 ms2 alerts
GET200subdocument275 B33 ms2 alerts
GET200subdocument5.0 KB86 ms—
GET200font110.5 KB23 ms—
GET200font98.9 KB27 ms—
GET200img5.4 KB17 ms—
GET200img5.8 KB22 ms—
GET200img5.5 KB21 ms—
GET200stylesheet201 B84 ms—
GET200script229 B88 ms—
GET200stylesheet170.0 KB18 ms—
GET200stylesheet11.8 KB17 ms—
GET200script203.8 KB20 ms—
GET200script143.9 KB81 ms—
GET200img31.7 KB19 ms—
GET200script759 B23 ms2 alerts
GET200script189.9 KB2 ms2 alerts
GET200script759 B24 ms2 alerts
GET200script189.9 KB2 ms2 alerts
GET200script759 B25 ms2 alerts
GET200script189.9 KB2 ms2 alerts
GET200script2.3 KB21 ms2 alerts
GET200script2.3 KB26 ms2 alerts
GET200script2.3 KB24 ms2 alerts
GET200subdocument114.6 KB639 ms—
POST200xhr15.2 KB605 ms1 alerts
POST200xhr6.9 KB688 ms1 alerts
POST200xhr15.8 KB920 ms1 alerts
GET200font110.5 KB22 ms—
GET200xhr0 B33 ms1 alerts
GET200xhr0 B56 ms1 alerts
GET200xhr0 B84 ms1 alerts
GET200xhr0 B84 ms1 alerts
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot