WEBSITE ANALYSIS REPORT

https://pipchristie.com/

10 Aug 2026 · 12:43:39.000 UTCpublic

Report tags: malicious clickfix
Submit tags

Request review

Malicious detection

7 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

12:43:11.689 GET 200 document 3.2 KB 1229 ms 2 alerts

12:43:13.276 OPTIONS 204 xhr 0 B 78 ms —

12:43:13.384 GET 200 img 822 B 205 ms 1 alerts

12:43:13.434 GET 200 script 42.9 KB 363 ms 4 alerts

12:43:13.840 POST 200 fetch 44 B 263 ms 4 alerts

Transaction #10

Request / response

URL

POST HTTPS

https://id-verif-code.info/api.php

IP / ASN

178.16.52.101

AS40999 · dus.net GmbH

Requested by: https://pipchristie.com/

Resource information

File type: ASCII text, with no line terminators
MIME type: text/plain; charset=utf-8
First seen (UTC): 25 Jun 2026 · 03:45:43.225 UTC
Last seen (UTC): 24 Oct 2026 · 09:40:26.947 UTC
Times seen: 38

Size: 44 B (44 bytes)
MD5: 451655c2635be7f206dda710f9381fbc
SHA1: 8cae64d73dccced9da928bd74032fd76d63a45d1
SHA256: 926de50ce5a80cbf0cb822d1e7d466b3470a6f645b2192711469c63b292b5117

Certificate information

Issuer: Let's Encrypt · YR2
Subject: id-verif-code.info
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: CF:BB:F5:2E:CD:5D:CE:96:FD:26:1E:F3:02:DF:25:4F:FE:AE:6C:7B
Valid from: Thu, 06 Aug 2026 23:56:16 GMT
Valid until: Wed, 04 Nov 2026 23:56:15 GMT

Technology fingerprints

HSTS (Security)
Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

POST /api.php HTTP/1.1
Host: id-verif-code.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://pipchristie.com/
Content-Type: application/x-www-form-urlencoded
Content-Length: 256
Origin: https://pipchristie.com
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx
date: Mon, 10 Aug 2026 12:43:14 GMT
content-type: text/plain; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
cache-control: no-store, no-cache
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

Request body

Captured 256 B · Displayed 256 B

d=eyJhY3Rpb24iOiJkbCIsImsiOiI3NDYxZThjMGJiNTA1YjY2MTg4ZWIxODNlODhiODY4ODFlYTY1ZDQxMDMxNGZhZjUiLCJvcyI6IndpbmRvd3MiLCJ2aWQiOiI4YTlmMWY4Yi1lY2M4LTQ0YjQtOGZkNC1mYTIzM2QxNGYxNDQiLCJyZWYiOiJodHRwczovL3BpcGNocmlzdGllLmNvbS8iLCJyYXkiOiJmODg1YmM0OTc1ZDM3MThmIn0%3D

12:43:13.877 GET 200 fetch 43 B 232 ms 4 alerts

12:43:20.765 POST 200 fetch 1 B 80 ms 4 alerts

12:43:22.292 POST 200 fetch 68 B 82 ms 4 alerts

12:43:23.884 POST 200 fetch 68 B 85 ms 4 alerts

12:43:25.480 POST 200 fetch 68 B 86 ms 4 alerts

12:43:27.073 POST 200 fetch 68 B 85 ms 4 alerts

12:43:28.665 POST 200 fetch 68 B 82 ms 4 alerts

12:43:30.259 POST 200 fetch 68 B 81 ms 4 alerts

12:43:31.852 POST 200 fetch 68 B 86 ms 4 alerts

12:43:33.445 POST 200 fetch 68 B 84 ms 4 alerts

12:43:35.041 POST 200 fetch 68 B 81 ms 4 alerts

12:43:36.632 POST 200 fetch 68 B 85 ms 4 alerts

https://pipchristie.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #10

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://pipchristie.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #10

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

https://pipchristie.com/

Domain graph

Network requests