ScanMalware.com

Security Scan Report: contrite.quirksturdy.icu

Submitted: Sep 14, 2026, 4:47:38 PMCompleted: Sep 14, 2026, 4:48:18 PMpubliccompleted

Summary

This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is contrite.quirksturdy.icu and was registered 5 months ago.

Submitted URL: https://contrite.quirksturdy.icu

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Domain is flagged by 2 corroborated threat feeds as a clickfix malware host; active origin outage prevented content inspection. Treat as malicious — avoid its links and downloads.

Risk Factors
Multi-source corroborated malware (clickfix) threat-intel match on the primary domain
Unranked domain (not in Cisco Umbrella top 1M) with no legitimate reputation
Suspicious .icu TLD repeatedly flagged by network IDS DNS/TLS heuristics
Domain age information unavailable

Details

Page Title

quirksturdy.icu | 522: Connection timed out

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

documentation technical

(68%)

Domain Information

Within the .icu top-level domain, 'contrite.quirksturdy.icu' is registered; it also runs on subdomain 'contrite'. Count 11 characters in 'quirksturdy' holding three vowels versus 8 consonants. It segments into two words: quirk, sturdy. The median word length lands at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://contrite.quirksturdy.icu

Page Load Overview

21.19s
Total Load Time
8
HTTP Requests
1
Domains
12 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:949 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical68% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
68%
technology software
62%
government public service
51%
cryptocurrency blockchain
51%
news media journalism
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.198.57Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.21.44.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
82--

Page Statistics

8
Requests
1
Unique Domains
16.4 KB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14BE15472B1F5127601A382923695FB6A79E0C517C7FF4494B3DDC2732F9EE82A903294

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:lnDa/D2KUlwG4Fh8/G4FUhf0424FB+skKm/jotQmHB+dWS8nRC3/paQxx:lDa/CieYTVyjoWQ+D8nM3Mex

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7007:2SQFwcTggIIQViSBDPmC5QBQASSgCBJKQ1Aci0eKDo5cUIiECBAkAEACFCTRSggQVAIAABQYECJCRoINBAAEJ6xIAhAwB0sB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c60000d7f7f3ff
Perceptual Hash:f439e4b49a673164
Difference Hash:1e3e8e8a34160606
Wavelet Hash:c70e0000d6c7f3ff
Color Hash:#7e862d

Other Hashes

Crop Resistant:1e3e8e8a34160606

Scan History

Scan history not available

Unable to load historical scan data