WEBSITE ANALYSIS REPORT

https://dpd.plzqtrvnmx.icu/com

30 May 2026 · 18:50:51.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

18:50:28.273 GET 302 document 2.4 KB 556 ms 4 alerts

18:50:28.735 GET 200 document 2.4 KB 515 ms 4 alerts

18:50:29.433 GET 200 script 995.6 KB 934 ms 4 alerts

18:50:29.435 GET 200 stylesheet 105.2 KB 476 ms 4 alerts

18:50:30.505 GET 200 script 302.9 KB 889 ms 4 alerts

18:50:31.571 GET 200 fetch 302.9 KB 14 ms 4 alerts

18:50:31.887 GET 101 websocket 0 B 396 ms 4 alerts

18:50:31.945 GET 200 img 224.4 KB 985 ms 4 alerts

18:50:31.985 GET 200 font 59.4 KB 1048 ms 4 alerts

18:50:31.991 GET 200 font 58.6 KB 621 ms 4 alerts

Transaction #05

Request / response

URL

GET HTTPS

https://dpd.plzqtrvnmx.icu/com/assets/OwDWr5DG.woff

IP / ASN

172.67.167.120

AS13335 · CLOUDFLARENET

Requested by: https://dpd.plzqtrvnmx.icu/com/

Resource information

File type: Web Open Font Format, TrueType, length 60042, version 1.0
MIME type: font/woff; charset=utf-8
First seen (UTC): 21 Apr 2023 · 20:51:14.000 UTC
Last seen (UTC): 12 Oct 2026 · 16:02:36.513 UTC
Times seen: 2135

Size: 58.6 KB (60042 bytes)
MD5: 32319d6149e2659c974fef61dfd5cc42
SHA1: e2aedccccdbad3f63b14e27941c59e7ba533cc51
SHA256: c99d0b5a290e48d4e4cbb86c29dd12436f465696702a81ded130a411f1e98cd3

Certificate information

Issuer: Let's Encrypt · E7
Subject: plzqtrvnmx.icu
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 6C:07:32:C3:60:23:2A:C1:F0:A3:E2:D8:DE:B2:3B:CB:71:8C:0B:7A
Valid from: Thu, 28 May 2026 07:11:15 GMT
Valid until: Wed, 26 Aug 2026 07:11:14 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /com/assets/OwDWr5DG.woff HTTP/1.1
Host: dpd.plzqtrvnmx.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dpd.plzqtrvnmx.icu/com/assets/D4JU2Bjy.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 OK
server: cloudflare
date: Sat, 30 May 2026 18:50:32 GMT
content-type: font/woff;charset=utf-8
vary: accept-encoding
priority: u=4,i=?0
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Sat, 30 May 2026 18:50:32 GMT
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3NWZyZQJcRgfHNxH%2B9po%2FSWz26rKuzYDpZS7K1%2FAUQhUdRM4QynVnUKNHtfN6TINbF5ovco2apOuJ0bWDDfQbXonH0KqEVO0tpeQjTR6K41SuRAHsjVegnnRMRfWGmfhO2I3gKU%3D"}]}
cf-ray: a03feccdff285fac-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

18:50:32.337 GET 404 img 0 B 440 ms 4 alerts

https://dpd.plzqtrvnmx.icu/com

Domain graph

Hostnames

Connections

Network requests

Transaction #05

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://dpd.plzqtrvnmx.icu/com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #05

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://dpd.plzqtrvnmx.icu/com

Domain graph

Network requests