WEBSITE ANALYSIS REPORT

http://dpd.plzqtrvnmx.icu/com

30 May 2026 · 12:14:18.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

12:13:56.273 GET 302 document 2.4 KB 528 ms 4 alerts

12:13:56.724 GET 200 document 2.4 KB 424 ms 4 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://dpd.plzqtrvnmx.icu/com/

IP / ASN

172.67.167.120

AS13335 · CLOUDFLARENET

Requested by: Not recorded

Resource information

File type: HTML document, ASCII text, with CRLF, CR, LF line terminators
MIME type: text/html; charset=utf-8
First seen (UTC): 15 May 2026 · 06:40:41.776 UTC
Last seen (UTC): 11 Jun 2026 · 01:22:19.209 UTC
Times seen: 660

Size: 2.4 KB (2431 bytes)
MD5: 22d64c0cfc8c5f87c0aaf27611ed54c7
SHA1: a5941601fb2553f37bfcfc156dd410a0183c112f
SHA256: 7ea34d05f7a505b70d91780b4fd9c80a77634c6b64fa938dad42baebc866819d

Certificate information

Issuer: Let's Encrypt · E7
Subject: plzqtrvnmx.icu
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 6C:07:32:C3:60:23:2A:C1:F0:A3:E2:D8:DE:B2:3B:CB:71:8C:0B:7A
Valid from: Thu, 28 May 2026 07:11:15 GMT
Valid until: Wed, 26 Aug 2026 07:11:14 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
OpenDNS Phishing Block	medium	Phishing
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /com/ HTTP/1.1
Host: dpd.plzqtrvnmx.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Sat, 30 May 2026 12:13:57 GMT
content-type: text/html;charset=utf-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Tjd0KCW%2BMXdGv75jG4JU7WuL6wX5FcmoBZJuZx1x7zPrQS5n471sPSeyIroUIdjOIOA58yijmSiIZpXuqwQTePgmVVQo4HWKWMtCPqCqxcNQb%2FKm8p%2FWHdntf%2Fyzyz6dsIQu6tg%3D"}]}
cf-cache-status: DYNAMIC
vary: accept-encoding
content-encoding: br
cf-ray: a03da7dd88ab0883-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

12:13:57.366 GET 200 script 995.6 KB 1059 ms 4 alerts

12:13:57.368 GET 200 stylesheet 105.2 KB 562 ms 4 alerts

12:13:58.587 GET 200 script 302.9 KB 1000 ms 4 alerts

12:13:59.773 GET 200 fetch 302.9 KB 11 ms 4 alerts

12:14:00.094 GET 101 websocket 0 B 438 ms 4 alerts

12:14:00.159 GET 200 img 224.4 KB 1080 ms 4 alerts

12:14:00.213 GET 200 font 59.4 KB 753 ms 4 alerts

12:14:00.221 GET 200 font 58.6 KB 744 ms 4 alerts

12:14:00.567 GET 404 img 0 B 406 ms 4 alerts

http://dpd.plzqtrvnmx.icu/com

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://dpd.plzqtrvnmx.icu/com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://dpd.plzqtrvnmx.icu/com

Domain graph

Network requests