WEBSITE ANALYSIS REPORT

http://911fuck.com

04 Oct 2026 · 21:45:31.000 UTCpublic

Report tags
Submit tags: unknown

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:44:52.040 GET 200 document 57.5 KB 727 ms —

21:44:53.155 GET 200 stylesheet 14.4 KB 152 ms —

21:44:53.160 GET 200 script 219.3 KB 3099 ms 1 alerts

Transaction #145

Request / response

URL

GET HTTPS

https://a.magsrv.com/ad-provider.js

IP / ASN

95.173.205.14

AS60068 · Datacamp Limited

Requested by: https://911fuck.com/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (49490)
MIME type: application/javascript
First seen (UTC): 28 Sep 2026 · 12:00:03.828 UTC
Last seen (UTC): 06 Oct 2026 · 06:43:27.124 UTC
Times seen: 90

Size: 219.3 KB (224601 bytes)
MD5: 79201e85891ea1c63ba88a4465d82970
SHA1: ff5a7973d463d77b0fb434173becfcbd63700d5e
SHA256: 3b8d3fdc211a463eb4021320f4d8458f49ac6ac2ab648f6a6208c94243fc21dc

Certificate information

Issuer: Let's Encrypt · YE1
Subject: magsrv.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 80:88:B6:BE:82:11:1B:F6:B9:75:C8:8B:63:04:3F:AF:61:82:28:A5
Valid from: Wed, 09 Sep 2026 06:20:24 GMT
Valid until: Tue, 08 Dec 2026 06:20:23 GMT

Technology fingerprints

CDN77 (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ad-provider.js HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://911fuck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Sun, 04 Oct 2026 21:44:56 GMT
content-type: application/javascript
etag: W/"ff5a7973d463d77b0fb434173be"
expires: Mon, 28 Sep 2026 10:08:02 GMT
cache-control: max-age=1800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: k0bmpcwvXPqx/vm8KtbAdio9jbKadZXh8bDrsGk6/zkgkQorYklsQfzzRx43MLer4uy3wwc
x-77-nzt-ray: 2a494a154dd7df6bfdc8c26a998c700f
age: 562014
x-77-cache: HIT
x-77-age: 3704
vary: Accept-Encoding
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: osloNO
X-Firefox-Spdy: h2

21:44:53.179 GET No response script 0 B 0 ms —

21:44:53.185 GET 200 img 11.0 KB 152 ms —

21:44:53.186 GET 200 img 12.7 KB 274 ms —

21:44:53.188 GET 200 img 15.4 KB 301 ms —

21:44:53.190 GET 200 img 9.0 KB 299 ms —

21:44:53.191 GET 200 img 10.5 KB 298 ms —

21:44:53.193 GET 200 img 13.4 KB 420 ms —

21:44:53.194 GET 200 img 15.6 KB 448 ms —

21:44:53.196 GET 200 img 11.4 KB 447 ms —

21:44:53.197 GET 200 img 9.2 KB 446 ms —

21:44:53.198 GET 200 img 10.7 KB 445 ms —

21:44:53.199 GET 200 img 9.0 KB 444 ms —

21:44:53.200 GET 200 img 9.7 KB 443 ms —

21:44:53.201 GET 200 img 9.8 KB 442 ms —

21:44:53.202 GET 200 img 10.6 KB 440 ms —

21:44:53.203 GET 200 img 16.6 KB 560 ms —

21:44:53.204 GET 200 img 16.0 KB 561 ms —

21:44:53.205 GET 200 img 17.4 KB 588 ms —

21:44:53.207 GET 200 img 16.2 KB 586 ms —

21:44:53.207 GET 200 img 12.7 KB 587 ms —

21:44:53.209 GET 200 img 7.6 KB 585 ms —

21:44:53.210 GET 200 img 6.2 KB 584 ms —

21:44:53.210 GET 200 img 13.0 KB 585 ms —

21:44:53.212 GET 200 img 15.1 KB 583 ms —

21:44:53.213 GET 200 img 10.3 KB 581 ms —

21:44:53.214 GET 200 img 16.7 KB 586 ms —

21:44:53.215 GET 200 img 12.5 KB 585 ms —

21:44:53.217 GET 200 img 12.4 KB 584 ms —

21:44:53.218 GET 200 img 7.5 KB 583 ms —

21:44:53.219 GET 200 img 16.2 KB 697 ms —

21:44:53.220 GET 200 img 6.1 KB 696 ms —

21:44:53.221 GET 200 img 18.2 KB 696 ms —

21:44:53.222 GET 200 img 27.4 KB 695 ms —

21:44:53.223 GET 200 img 6.1 KB 695 ms —

21:44:53.224 GET 200 img 9.7 KB 694 ms —

21:44:53.225 GET 200 img 13.3 KB 721 ms —

21:44:53.226 GET 200 img 10.0 KB 720 ms —

21:44:53.227 GET 200 img 5.0 KB 719 ms —

21:44:53.228 GET 200 img 11.7 KB 718 ms —

21:44:53.230 GET 200 img 10.7 KB 717 ms —

21:44:53.231 GET 200 img 10.3 KB 715 ms —

21:44:53.232 GET 200 img 14.2 KB 715 ms —

21:44:53.233 GET 200 img 15.2 KB 713 ms —

21:44:53.235 GET 200 img 15.5 KB 712 ms —

21:44:53.236 GET 200 img 10.7 KB 710 ms —

21:44:53.239 GET 200 img 8.9 KB 714 ms —

21:44:53.241 GET 200 img 15.6 KB 712 ms —

http://911fuck.com

Domain graph

Hostnames

Connections

Network requests

Transaction #145

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://911fuck.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #145

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://911fuck.com

Domain graph

Network requests