WEBSITE ANALYSIS REPORT

http://plaxorvi-tok193847526.vercel.app/

20 Oct 2026 · 20:31:07.000 UTCpublic

Report tags: suspicious telegram_bot
Submit tags: openphish

Request review

Suspicious activity

7 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

20:30:38.425 GET 200 document 704 B 80 ms 5 alerts

Transaction #01

Request / response

URL

GET HTTPS

https://plaxorvi-tok193847526.vercel.app/

IP / ASN

64.29.17.67

AS16509 · AMAZON-02

Requested by: Not recorded

Resource information

File type: HTML document, ASCII text, with CRLF line terminators
MIME type: text/html; charset=utf-8
First seen (UTC): 12 Mar 2026 · 12:13:55.458 UTC
Last seen (UTC): 20 Oct 2026 · 20:32:10.557 UTC
Times seen: 22

Size: 704 B (704 bytes)
MD5: 3877e9806c4781b1ab122ee9f53ec17b
SHA1: 4b6a863fde943232bc3cdd41c31c9ca425b2d695
SHA256: 4d1bf45fb72ad55d2d43d33848bc9116e8627baadf8588daa67b16d2c01f7260

Certificate information

Issuer: Google Trust Services · WR1
Subject: *.vercel.app
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC
Valid from: Sat, 29 Aug 2026 19:48:09 GMT
Valid until: Fri, 27 Nov 2026 19:48:08 GMT

Technology fingerprints

HSTS (Security)
Vercel (PaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
OpenDNS Phishing Block	medium	Phishing
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: plaxorvi-tok193847526.vercel.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
accept-ranges: bytes
access-control-allow-origin: *
age: 93808
cache-control: public, max-age=0, must-revalidate
content-disposition: inline
content-type: text/html; charset=utf-8
date: Tue, 20 Oct 2026 20:30:38 GMT
etag: "3877e9806c4781b1ab122ee9f53ec17b"
last-modified: Mon, 19 Oct 2026 18:27:09 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::2g8tg-1792528238484-7a91f67c0bfe
content-length: 704
X-Firefox-Spdy: h2

20:30:38.720 GET 200 img 5.3 KB 35 ms 5 alerts

20:30:39.777 GET 200 document 22.9 KB 11 ms 5 alerts

20:30:40.112 GET 200 stylesheet 152.2 KB 24 ms 5 alerts

20:30:40.116 GET 200 script 85.5 KB 56 ms —

20:30:40.119 GET 200 stylesheet 24.1 KB 18 ms 5 alerts

20:30:40.120 GET 200 stylesheet 44.0 KB 234 ms 5 alerts

20:30:40.123 GET 200 stylesheet 24.7 KB 37 ms —

20:30:40.125 GET 200 script 28.7 KB 254 ms —

20:30:40.127 GET 200 stylesheet 68.7 KB 246 ms —

20:30:40.130 GET 200 stylesheet 21.3 KB 17 ms 5 alerts

20:30:40.134 GET 200 script 12.9 KB 15 ms 7 alerts

20:30:40.136 GET 200 script 2.9 KB 72 ms —

20:30:40.142 GET 200 img 1.20 MB 71 ms 5 alerts

20:30:40.145 GET 200 img 438.7 KB 61 ms 5 alerts

20:30:40.147 GET 200 img 3.9 KB 54 ms 5 alerts

20:30:40.410 GET 200 stylesheet 19.8 KB 70 ms —

20:30:40.411 GET 200 script 303.8 KB 104 ms —

20:30:40.498 GET 200 img 5.3 KB 14 ms 5 alerts

20:30:40.697 GET 200 fetch 302 B 167 ms —

20:30:40.903 GET 200 img 6.1 KB 47 ms —

20:30:40.904 GET 200 img 910 B 14 ms —

20:30:40.908 GET 200 img 1.8 KB 16 ms —

20:30:40.918 GET 200 script 30.7 KB 100 ms —

20:30:41.057 GET No response subdocument 0 B 0 ms 5 alerts

20:30:41.067 GET 200 stylesheet 19.8 KB 17 ms —

20:30:41.071 GET 200 img 1.6 KB 11 ms —

20:30:41.072 GET 200 img 43 B 53 ms —

20:30:41.073 GET 200 img 702 B 17 ms —

20:30:43.947 OPTIONS 200 xhr 0 B 41 ms —

20:30:44.050 GET 204 img 0 B 0 ms —

20:30:50.934 OPTIONS 200 fetch 0 B 30 ms —

20:30:53.948 OPTIONS 200 fetch 0 B 32 ms —

http://plaxorvi-tok193847526.vercel.app/

Domain graph

Hostnames

Connections

Network requests

Transaction #01

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://plaxorvi-tok193847526.vercel.app/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #01

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://plaxorvi-tok193847526.vercel.app/

Domain graph

Network requests