WEBSITE ANALYSIS REPORT

https://pipchristie.com/

10 Aug 2026 · 12:43:39.000 UTCpublic

Report tags: malicious clickfix
Submit tags

Request review

Malicious detection

7 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

12:43:11.689 GET 200 document 3.2 KB 1229 ms 2 alerts

Transaction #01

Request / response

URL

GET HTTPS

https://pipchristie.com/

IP / ASN

50.87.253.236

AS46606 · UNIFIEDLAYER-AS-1

Requested by: Not recorded

Resource information

File type: HTML document, ASCII text, with very long lines (3259)
MIME type: text/html; charset=UTF-8
First seen (UTC): 10 Aug 2026 · 12:43:42.488 UTC
Last seen (UTC): 10 Aug 2026 · 12:43:42.488 UTC
Times seen: 1

Size: 3.2 KB (3283 bytes)
MD5: 7f309774b352e3a1aabc326e47e057ad
SHA1: adafba3eefbf73b9cbb6396449f9595f717ae46d
SHA256: 32e041396412fc5e2a285161a27e81536bc25b8376f6b3e1f335afb2e50fa3cf

Certificate information

Issuer: Let's Encrypt · YR2
Subject: mail.pipchristie.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 8A:41:1F:BD:F3:E1:85:66:BF:9D:3A:47:5F:77:42:3C:B3:AE:08:D4
Valid from: Mon, 29 Jun 2026 02:45:13 GMT
Valid until: Sun, 27 Sep 2026 02:45:12 GMT

Technology fingerprints

PHP (Programming languages)
Nginx:1.29.8 (Web servers, Reverse proxies)
Bluehost (Hosting)
WordPress (CMS, Blogs)
MySQL (Databases)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Malicious - Copy/Paste Social Engineering (ClickFix)	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: pipchristie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Mon, 10 Aug 2026 12:43:12 GMT
server: nginx/1.29.8
content-type: text/html; charset=UTF-8
content-length: 1926
link: <https://pipchristie.com/wp-json/>; rel="https://api.w.org/", <https://pipchristie.com/wp-json/wp/v2/pages/1197>; rel="alternate"; title="JSON"; type="application/json", <https://pipchristie.com/>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-server-cache: false
X-Firefox-Spdy: h2

12:43:13.276 OPTIONS 204 xhr 0 B 78 ms —

12:43:13.384 GET 200 img 822 B 205 ms 1 alerts

12:43:13.434 GET 200 script 42.9 KB 363 ms 4 alerts

12:43:13.840 POST 200 fetch 44 B 263 ms 4 alerts

12:43:13.877 GET 200 fetch 43 B 232 ms 4 alerts

12:43:20.765 POST 200 fetch 1 B 80 ms 4 alerts

12:43:22.292 POST 200 fetch 68 B 82 ms 4 alerts

12:43:23.884 POST 200 fetch 68 B 85 ms 4 alerts

12:43:25.480 POST 200 fetch 68 B 86 ms 4 alerts

12:43:27.073 POST 200 fetch 68 B 85 ms 4 alerts

12:43:28.665 POST 200 fetch 68 B 82 ms 4 alerts

12:43:30.259 POST 200 fetch 68 B 81 ms 4 alerts

12:43:31.852 POST 200 fetch 68 B 86 ms 4 alerts

12:43:33.445 POST 200 fetch 68 B 84 ms 4 alerts

12:43:35.041 POST 200 fetch 68 B 81 ms 4 alerts

12:43:36.632 POST 200 fetch 68 B 85 ms 4 alerts

https://pipchristie.com/

Domain graph

Hostnames

Connections