WEBSITE ANALYSIS REPORT

http://plaxorvi-tok193847526.vercel.app/

20 Oct 2026 · 20:31:07.000 UTCpublic

Report tags: suspicious telegram_bot
Submit tags: openphish

Request review

Suspicious activity

7 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

20:30:38.425 GET 200 document 704 B 80 ms 5 alerts

20:30:38.720 GET 200 img 5.3 KB 35 ms 5 alerts

Transaction #05

Request / response

URL

GET HTTPS

https://plaxorvi-tok193847526.vercel.app/ico.ico

IP / ASN

64.29.17.67

AS16509 · AMAZON-02

Requested by: https://plaxorvi-tok193847526.vercel.app/

Resource information

File type: MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
MIME type: image/vnd.microsoft.icon
First seen (UTC): 25 Dec 2023 · 05:22:02.000 UTC
Last seen (UTC): 20 Oct 2026 · 20:46:34.850 UTC
Times seen: 14554

Size: 5.3 KB (5430 bytes)
MD5: 6701a4ba0b931af579be35b93631da04
SHA1: c8161484acccdd0cae1cd6484f56942cb7ffd7dc
SHA256: ce8a22ece441cfd0f09fb0359b8d683fed0e66f8bec0bbc067a8257c95b05fd8

Certificate information

Issuer: Google Trust Services · WR1
Subject: *.vercel.app
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC
Valid from: Sat, 29 Aug 2026 19:48:09 GMT
Valid until: Fri, 27 Nov 2026 19:48:08 GMT

Technology fingerprints

HSTS (Security)
Vercel (PaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ico.ico HTTP/1.1
Host: plaxorvi-tok193847526.vercel.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://plaxorvi-tok193847526.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
access-control-allow-origin: *
age: 30109
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="ico.ico"
content-encoding: br
content-type: image/vnd.microsoft.icon
date: Tue, 20 Oct 2026 20:30:38 GMT
etag: W/"6701a4ba0b931af579be35b93631da04"
last-modified: Tue, 20 Oct 2026 12:08:49 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::vhflh-1792528238722-5f17bccec56e
X-Firefox-Spdy: h2

20:30:39.777 GET 200 document 22.9 KB 11 ms 5 alerts

20:30:40.112 GET 200 stylesheet 152.2 KB 24 ms 5 alerts

20:30:40.116 GET 200 script 85.5 KB 56 ms —

20:30:40.119 GET 200 stylesheet 24.1 KB 18 ms 5 alerts

20:30:40.120 GET 200 stylesheet 44.0 KB 234 ms 5 alerts

20:30:40.123 GET 200 stylesheet 24.7 KB 37 ms —

20:30:40.125 GET 200 script 28.7 KB 254 ms —

20:30:40.127 GET 200 stylesheet 68.7 KB 246 ms —

20:30:40.130 GET 200 stylesheet 21.3 KB 17 ms 5 alerts

20:30:40.134 GET 200 script 12.9 KB 15 ms 7 alerts

20:30:40.136 GET 200 script 2.9 KB 72 ms —

20:30:40.142 GET 200 img 1.20 MB 71 ms 5 alerts

20:30:40.145 GET 200 img 438.7 KB 61 ms 5 alerts

20:30:40.147 GET 200 img 3.9 KB 54 ms 5 alerts

20:30:40.410 GET 200 stylesheet 19.8 KB 70 ms —

20:30:40.411 GET 200 script 303.8 KB 104 ms —

20:30:40.498 GET 200 img 5.3 KB 14 ms 5 alerts

20:30:40.697 GET 200 fetch 302 B 167 ms —

20:30:40.903 GET 200 img 6.1 KB 47 ms —

20:30:40.904 GET 200 img 910 B 14 ms —

20:30:40.908 GET 200 img 1.8 KB 16 ms —

20:30:40.918 GET 200 script 30.7 KB 100 ms —

20:30:41.057 GET No response subdocument 0 B 0 ms 5 alerts

20:30:41.067 GET 200 stylesheet 19.8 KB 17 ms —

20:30:41.071 GET 200 img 1.6 KB 11 ms —

20:30:41.072 GET 200 img 43 B 53 ms —

20:30:41.073 GET 200 img 702 B 17 ms —

20:30:43.947 OPTIONS 200 xhr 0 B 41 ms —

20:30:44.050 GET 204 img 0 B 0 ms —

20:30:50.934 OPTIONS 200 fetch 0 B 30 ms —

20:30:53.948 OPTIONS 200 fetch 0 B 32 ms —

http://plaxorvi-tok193847526.vercel.app/

Domain graph

Hostnames

Connections

Network requests

Transaction #05

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://plaxorvi-tok193847526.vercel.app/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #05

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://plaxorvi-tok193847526.vercel.app/

Domain graph

Network requests