p.ch - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned p.ch and returned a unknown verdict (score 0). 1 domain and 0 IPs were contacted. 15 malware samples communicate with this URL (Zusy). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 3%
- Scanned URL:
https://p.ch/ - Domain: p.ch
- Scan tier: fast · observed 2026-08-19 14:59:08 UTC
Malware communicating with this URL (15)
These samples were observed contacting or being served from p.ch. Each links to its full analysis.
- Zusy - referenced ·
753280e2792c3ad209c2d3b9156d6870· first seen 2026-08-19 - 8859e50a799112354610f43695eacc8c77a0cf6c28b3f249f62a0304d04241ca - referenced ·
8859e50a799112354610f43695eacc8c· first seen 2026-08-19 - 12765aebbdace3fa4083ba5917fa34583421e12d70acd9ca5e5724ab089623c7 - referenced ·
12765aebbdace3fa4083ba5917fa3458· first seen 2026-08-17 - 3bd660d5a68559f377571af75ea2515a035749db3db0274220ebb1c4c01c83d1 - referenced ·
3bd660d5a68559f377571af75ea2515a· first seen 2026-08-16 - 75ddce79208b75992556db252d6096bf2c1b94c71897d3172a6a76138209ee40 - referenced ·
75ddce79208b75992556db252d6096bf· first seen 2026-08-16 - 3807c2d6e4780a2230830f1e6f929bfbf4ed7f88205acb5443e039f366e55ace - referenced ·
3807c2d6e4780a2230830f1e6f929bfb· first seen 2026-08-16 - 3229124.pdf - referenced ·
f8545977f01f8bc4badaef043d726740· first seen 2026-08-15 - 6b0efb12ea042575544fe2c396f1c64ec47391569c69aa12c6b0d920caa8baef - referenced ·
6b0efb12ea042575544fe2c396f1c64e· first seen 2026-08-15 - 207ab3e9d444aace2a2e2456a8e69a67e79b8a348402e5b34a18226982e4aa82 - referenced ·
207ab3e9d444aace2a2e2456a8e69a67· first seen 2026-08-15 - 3f300976af531d4511f180f84294042b2b01e4f379000723eba9938cd0b412c9 - referenced ·
3f300976af531d4511f180f84294042b· first seen 2026-08-15 - ee1bae0b40a44b6be95b6291eab0ef2e1f8464af5e04754ab8594d5e2593ead7 - referenced ·
ee1bae0b40a44b6be95b6291eab0ef2e· first seen 2026-08-14 - 3249447b70ba135fc67d5e77c20df07fba5dcf2eaa9003794fe5a34030435369 - referenced ·
3249447b70ba135fc67d5e77c20df07f· first seen 2026-08-14 - 0f86cc0f4ee9e9f6d5d7f7f9a4242e26aee4432e2d636c9967e771942f511042 - referenced ·
0f86cc0f4ee9e9f6d5d7f7f9a4242e26· first seen 2026-08-14 - codeMirror.plugin.min.js - referenced ·
c87f083330dda171b3a1c1b912c21859· first seen 2026-08-12 - codeMirror.bundle.min.js - referenced ·
7b5277fff495c8fc86f70c16bec5efaa· first seen 2026-08-12
Why this verdict
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- p.ch
- https://p.ch/
Questions about p.ch
- Is p.ch safe?
- The scan of p.ch on 19 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with p.ch?
- 15 analysed samples communicate with this URL, including Zusy.
- How was p.ch checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of p.ch
Scanned on MalwareAnalyzer by Cyble · Open interactive scan