WEBSITE ANALYSIS REPORT

http://pornbotnex.com/tag/francety-nude-videos/

07 Mar 2026 · 21:20:32.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

a.magsrv.com13 captured requests
cdn.show-sb.com1 captured requests
creative-sb1.com15 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com1 captured requests
go.xlivrdr.com2 captured requests
impregnablebowl.com6 captured requests
pornbotnex.com1 captured requests
pornwexo.com37 captured requests
preferencenail.com2 captured requests
protrafficinspector.com1 captured requests
realizationnewestfangs.com5 captured requests
s.magsrv.com22 captured requests
s.w.org6 captured requests
s3t3d2y1.afcdn.net15 captured requests
u3y8v8u4.aucdn.net3 captured requests
video.sacdnssedge.com2 captured requests
wayfarerorthodox.com2 captured requests
www.googletagmanager.com1 captured requests

Connections

pornbotnex.com → pornwexo.comRedirects to1 captured connections
pornwexo.com → a.magsrv.comLoads from13 captured connections
pornwexo.com → cdn.show-sb.comCalls1 captured connections
pornwexo.com → creative-sb1.comCalls3 captured connections
pornwexo.com → creative-sb1.comLoads from12 captured connections
pornwexo.com → flushpersist.comLoads from2 captured connections
pornwexo.com → fonts.googleapis.comLoads from1 captured connections
pornwexo.com → fonts.gstatic.comLoads from1 captured connections
pornwexo.com → go.xlivrdr.comCalls2 captured connections
pornwexo.com → impregnablebowl.comCalls1 captured connections
pornwexo.com → impregnablebowl.comLoads from5 captured connections
pornwexo.com → preferencenail.comLoads from2 captured connections
pornwexo.com → protrafficinspector.comCalls1 captured connections
pornwexo.com → realizationnewestfangs.comLoads from5 captured connections
pornwexo.com → s.magsrv.comCalls22 captured connections
pornwexo.com → s.w.orgLoads from6 captured connections
pornwexo.com → s3t3d2y1.afcdn.netLoads from15 captured connections
pornwexo.com → u3y8v8u4.aucdn.netLoads from3 captured connections
pornwexo.com → video.sacdnssedge.comLoads from2 captured connections
pornwexo.com → wayfarerorthodox.comLoads from2 captured connections
pornwexo.com → www.googletagmanager.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:20:06.381 GET 301 document 82.8 KB 123 ms —

21:20:06.453 GET 200 document 82.8 KB 299 ms —

21:20:06.944 GET 200 script 446.5 KB 719 ms —

21:20:06.946 GET 200 stylesheet 30.3 KB 26 ms —

21:20:06.948 GET 200 stylesheet 73.9 KB 26 ms —

21:20:06.949 GET 200 script 85.5 KB 94 ms —

21:20:06.950 GET 200 script 13.3 KB 93 ms —

21:20:06.951 GET 200 script 183.8 KB 49 ms 2 alerts

21:20:06.952 GET 200 img 20.8 KB 32 ms —

21:20:06.955 GET 200 img 29.8 KB 90 ms —

21:20:06.956 GET 200 img 27.1 KB 41 ms —

21:20:06.958 GET 200 img 82.2 KB 91 ms —

21:20:06.959 GET 200 img 73.7 KB 55 ms —

21:20:06.961 GET 200 img 72.4 KB 56 ms —

21:20:06.962 GET 200 img 23.8 KB 57 ms —

21:20:06.963 GET 200 img 110.7 KB 113 ms —

21:20:06.964 GET 200 img 59.3 KB 109 ms —

21:20:06.967 GET 200 img 10.4 KB 57 ms —

21:20:06.968 GET 200 img 12.8 KB 88 ms —

21:20:06.969 GET 200 img 21.4 KB 87 ms —

21:20:06.970 GET 200 img 43.9 KB 68 ms —

21:20:06.971 GET 200 img 13.0 KB 111 ms —

21:20:06.972 GET 200 img 43.5 KB 110 ms —

21:20:06.978 GET 200 img 12.0 KB 108 ms —

21:20:06.979 GET 200 img 67.9 KB 66 ms —

21:20:06.981 GET 200 img 66.6 KB 66 ms —

21:20:06.982 GET 200 img 34.7 KB 109 ms —

21:20:06.983 GET 200 img 20.1 KB 108 ms —

21:20:06.983 GET 200 img 34.0 KB 78 ms —

21:20:06.984 GET 200 img 7.1 KB 77 ms —

21:20:06.985 GET 200 script 4.4 KB 55 ms —

21:20:06.986 GET 200 script 23.7 KB 55 ms —

21:20:06.986 GET 200 script 20.0 KB 65 ms —

21:20:06.987 GET 200 script 5.6 KB 54 ms —

21:20:06.988 GET 200 script 35.5 KB 54 ms —

21:20:06.989 GET 200 script 683 B 65 ms —

21:20:06.994 GET 200 script 90.1 KB 831 ms —

21:20:06.996 GET 200 script 91.6 KB 1513 ms —

21:20:07.172 GET 200 img 327.6 KB 32 ms —

21:20:07.174 GET 200 script 183.8 KB 1 ms 2 alerts

21:20:07.176 GET 200 script 183.8 KB 1 ms 2 alerts

Transaction #12

Request / response

URL

GET HTTPS

https://a.magsrv.com/ad-provider.js

IP / ASN

95.173.205.14

AS60068 · Datacamp Limited

Requested by: https://pornwexo.com/tag/francety-nude-videos/

Resource information

File type: JavaScript source, ASCII text, with very long lines (39940)
MIME type: application/javascript
First seen (UTC): 03 Mar 2026 · 15:45:41.037 UTC
Last seen (UTC): 01 Apr 2026 · 14:37:10.582 UTC
Times seen: 860

Size: 183.8 KB (188235 bytes)
MD5: 7b192df4df142123e29010b2a61a35d0
SHA1: d6865fd0c4a95fdaf41e1e01d7750dac224a3b83
SHA256: 2d50878a4c8eca81a6659b4acd36cf2d76d3906cd1f0d2f3023f265ad66b23bb

Certificate information

Issuer: Let's Encrypt · E7
Subject: magsrv.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB
Valid from: Mon, 23 Feb 2026 08:20:01 GMT
Valid until: Sun, 24 May 2026 08:20:00 GMT

Technology fingerprints

CDN77 (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ad-provider.js HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pornwexo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Sat, 07 Mar 2026 21:20:07 GMT
content-type: application/javascript
etag: W/"d6865fd0c4a95fdaf41e1e01d77"
expires: Fri, 06 Mar 2026 17:25:27 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: EwwBX63NDQH3OAgAAAwBuUwKEwH3cwMAAAwBw7WvFwG3DwEAAA
x-77-nzt-ray: 2a494a15bbde0d33ac96ac696aedc209
x-77-cache: HIT
x-77-age: 2104
vary: Accept-Encoding
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: osloNO
X-Firefox-Spdy: h2

21:20:07.206 GET 200 script 183.8 KB 1 ms 2 alerts

21:20:07.208 GET 200 script 183.8 KB 1 ms 2 alerts

21:20:07.234 GET 200 script 183.8 KB 1 ms 2 alerts

21:20:07.243 GET 200 script 183.8 KB 1 ms 2 alerts

21:20:07.253 GET 200 font 75.4 KB 20 ms —

21:20:07.351 GET 200 script 183.8 KB 1 ms 2 alerts

21:20:07.353 GET 200 script 183.8 KB 1 ms 2 alerts

21:20:07.359 GET 200 script 183.8 KB 1 ms 2 alerts

21:20:07.363 GET 200 script 183.8 KB 1 ms 2 alerts

http://pornbotnex.com/tag/francety-nude-videos/

Domain graph

Hostnames

Connections

Network requests

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://pornbotnex.com/tag/francety-nude-videos/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://pornbotnex.com/tag/francety-nude-videos/

Domain graph

Network requests