Is buy.applechevroletnorthfield.com safe?

No. MalwareAnalyzer scanned buy.applechevroletnorthfield.com on 22 Aug 2026 and returned a malicious verdict with a score of 62 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was buy.applechevroletnorthfield.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

buy.applechevroletnorthfield.com - malicious URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned buy.applechevroletnorthfield.com and returned a malicious verdict (score 62), categorised as phishing. The page resolved to 23.33.238.112 on Akamai Technologies, Inc. in AU. The domain was registered 1319 days ago through GoDaddy.com, LLC. 7 domains and 6 IPs were contacted, over 37 HTTP requests. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 62) · Confidence 68%
Scanned URL: https://buy.applechevroletnorthfield.com/
Domain: buy.applechevroletnorthfield.com · IP: 23.33.238.112 · AS20940 · AU
HTTP status: 200 · text/html; charset=utf-8
Registrar: GoDaddy.com, LLC · domain age 1319 days · created 2023-01-10
TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Nov 11 11: · subject CN=buy.applechevroletnorthfield.com
HTTP requests captured: 37
Scan tier: standard · observed 2026-08-22 20:33:25 UTC

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Runtime data beacon to bam.nr-data.net
Domain impersonates apple (combosquat)

Detected technologies

Next.js

Contacted infrastructure

23.33.238.112 - AS20940 Akamai Technologies, Inc. (Australia)

Observed indicators

buy.applechevroletnorthfield.com
tkprodpublic.blob.core.windows.net
s2.go-mpulse.net
js-agent.newrelic.com
bam.nr-data.net
preprodpublic.blob.core.windows.net
c.go-mpulse.net
23.33.238.112
57.150.87.97
162.247.243.39
162.247.243.29
20.60.6.132
23.214.34.186
https://buy.applechevroletnorthfield.com/
https://tkprodpublic.blob.core.windows.net/public-assets/aec-web/multibrand/scripts/real-time-monitoring.js
https://buy.applechevroletnorthfield.com/_next/static/css/7b44dcc49890f92f.css
https://buy.applechevroletnorthfield.com/_next/static/css/3c899cce8174ba65.css
https://buy.applechevroletnorthfield.com/_next/static/chunks/polyfills-42372ed130431b0a.js
https://buy.applechevroletnorthfield.com/_next/static/chunks/webpack-35f63b8c5c5537e5.js
https://buy.applechevroletnorthfield.com/_next/static/chunks/framework-3c2b6466a0e351f7.js

Questions about buy.applechevroletnorthfield.com

Is buy.applechevroletnorthfield.com safe?: No. MalwareAnalyzer scanned buy.applechevroletnorthfield.com on 22 Aug 2026 and returned a malicious verdict with a score of 62 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was buy.applechevroletnorthfield.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of buy.applechevroletnorthfield.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan