Is kombuchase.com.br safe?

No. MalwareAnalyzer scanned kombuchase.com.br on 22 Aug 2026 and returned a malicious verdict with a score of 70 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was kombuchase.com.br checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

kombuchase.com.br - malicious URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned kombuchase.com.br and returned a malicious verdict (score 70), categorised as phishing. The page resolved to 104.21.68.53 on Cloudflare, Inc. in US. The domain was registered 887 days ago. 8 domains and 5 IPs were contacted, over 15 HTTP requests. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 70) · Confidence 82%
Scanned URL: https://kombuchase.com.br/
Domain: kombuchase.com.br · IP: 104.21.68.53 · AS13335 · US
Server: cloudflare
Page title: Kombucha-se - Intestino Inteligente - Bebida Refrescante - Kombucha-se - Intestino Inteligente - Bebida Refrescante
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 20 06: · subject CN=kombuchase.com.br
Evidenced operator: João Rodrigo Santos Milanez
HTTP requests captured: 15 · cookies set: 3 · outgoing links: 6
Scan tier: standard · observed 2026-08-22 17:37:10 UTC

Antivirus & YARA (1 of 48 engines)

YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)

Why this verdict

Domain impersonates chase (combosquat)
Runtime data beacon to to.getnitropack.com
A signature matched text in the page (DLV_HTML_Smuggling) — pages that discuss malware can match, so this alone is not a malicious verdict
Certificate issued < 48h ago

Detected technologies

Cloudflare
WordPress
Google Analytics

Contacted infrastructure

104.21.68.53 - AS13335 Cloudflare, Inc. (United States)
104.16.79.73 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

kombuchase.com.br
www.googletagmanager.com
cdn-ildpgka.nitrocdn.com
wa.me
www.instagram.com
nitropack.io
static.cloudflareinsights.com
to.getnitropack.com
104.21.68.53
172.67.186.223
104.16.79.73
104.18.33.151
104.18.39.246
https://kombuchase.com.br/
https://www.googletagmanager.com/
https://cdn-ildpgka.nitrocdn.com/
https://kombuchase.com.br/feed/
https://kombuchase.com.br/comments/feed/
https://kombuchase.com.br/wp-json/
https://kombuchase.com.br/wp-json/wp/v2/pages/11

Questions about kombuchase.com.br

Is kombuchase.com.br safe?: No. MalwareAnalyzer scanned kombuchase.com.br on 22 Aug 2026 and returned a malicious verdict with a score of 70 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was kombuchase.com.br checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of kombuchase.com.br

Scanned on MalwareAnalyzer by Cyble · Open interactive scan