WEBSITE ANALYSIS REPORT

http://dpd.plzqtrvnmx.icu/com

30 May 2026 · 12:14:18.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

12:13:56.273 GET 302 document 2.4 KB 528 ms 4 alerts

12:13:56.724 GET 200 document 2.4 KB 424 ms 4 alerts

12:13:57.366 GET 200 script 995.6 KB 1059 ms 4 alerts

12:13:57.368 GET 200 stylesheet 105.2 KB 562 ms 4 alerts

12:13:58.587 GET 200 script 302.9 KB 1000 ms 4 alerts

12:13:59.773 GET 200 fetch 302.9 KB 11 ms 4 alerts

12:14:00.094 GET 101 websocket 0 B 438 ms 4 alerts

12:14:00.159 GET 200 img 224.4 KB 1080 ms 4 alerts

12:14:00.213 GET 200 font 59.4 KB 753 ms 4 alerts

Transaction #07

Request / response

URL

GET HTTPS

https://dpd.plzqtrvnmx.icu/com/assets/BOnPfxxG.woff

IP / ASN

172.67.167.120

AS13335 · CLOUDFLARENET

Requested by: https://dpd.plzqtrvnmx.icu/com/

Resource information

File type: Web Open Font Format, TrueType, length 60781, version 1.0
MIME type: font/woff; charset=utf-8
First seen (UTC): 21 Apr 2023 · 20:51:14.000 UTC
Last seen (UTC): 23 Oct 2026 · 09:14:58.062 UTC
Times seen: 2135

Size: 59.4 KB (60781 bytes)
MD5: 20398ebf2986259c88014178d7044844
SHA1: 02422f7f86e44268579b2b3694ca72eaaa8a301a
SHA256: 9e462606602d426b676f2b6f9c0b6629b02f91204214898f7d4a56749c4e00d0

Certificate information

Issuer: Let's Encrypt · E7
Subject: plzqtrvnmx.icu
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 6C:07:32:C3:60:23:2A:C1:F0:A3:E2:D8:DE:B2:3B:CB:71:8C:0B:7A
Valid from: Thu, 28 May 2026 07:11:15 GMT
Valid until: Wed, 26 Aug 2026 07:11:14 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /com/assets/BOnPfxxG.woff HTTP/1.1
Host: dpd.plzqtrvnmx.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dpd.plzqtrvnmx.icu/com/assets/D4JU2Bjy.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 OK
server: cloudflare
date: Sat, 30 May 2026 12:14:00 GMT
content-type: font/woff;charset=utf-8
vary: accept-encoding
priority: u=4,i=?0
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Sat, 30 May 2026 12:14:00 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=lL%2F4JAkCTrE2nGhBTt2DW2YyMM5sr6aXeyObd%2BUJb7o6os6o5AsjLHw9PJQobrUAytilCWt1gd7kS5cSuAJvmqCBOXFmEGuGjPtseaSHYYZBuOZkPHbYLpN40xUzIAiAUodq%2Fs8%3D"}]}
cf-ray: a03da7f35c2f76ef-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

12:14:00.221 GET 200 font 58.6 KB 744 ms 4 alerts

12:14:00.567 GET 404 img 0 B 406 ms 4 alerts

http://dpd.plzqtrvnmx.icu/com

Domain graph

Hostnames

Connections

Network requests

Transaction #07

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://dpd.plzqtrvnmx.icu/com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #07

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://dpd.plzqtrvnmx.icu/com

Domain graph

Network requests