Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Noticed an interesting thing whilst debugging one of my websocket applications that Google Chrome will push out 3 http requests upon a network connection status changing;

Quite disconcerting and looks almost as if some malware is checking out to a random server.

I don't quite understand the why though since they all return a 502 or have no response code at all since the destination does not exist.

On Disconnect:

Connection Down


Connection Up

I guess the main question is this normal and what the use is; howcome they wouldn't go for a dns lookup that actually exists?

share|improve this question
howcome they wouldn't go for a dns lookup that actually exists? Actually exists relative to who? Relative to my PC? zcpluzmxwt probably won't get anywhere. Relative to your malware-riddled box? zcpluzmxwt is probably in your hosts file. – Apr 8 '12 at 9:37 nothing in there that looks anything like the above, like I said its only when chrome is running that these requests are seen. – f0x Apr 8 '12 at 9:42
thanks for the comment though, ; seems the worst is always the first option. – f0x Apr 8 '12 at 11:41
up vote 6 down vote accepted

As I remember, this is a special feature of Chrome. This feature is used to help to detect if your provider specially process invalid dns entries. chromium bugtracker - latest message

share|improve this answer
:) thanks, seems like there were quite a few people with the same observation and theory. thanks again. – f0x Apr 8 '12 at 10:42

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.