rrvchefs.com - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned rrvchefs.com and returned a unknown verdict (score 18), categorised as suspicious-infrastructure. The page resolved to 104.196.184.155 on Google LLC in US. The domain was registered 4125 days ago through Domain.com - Network Solutions, LLC. 1 domain and 1 IP were contacted. 12 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 18) · Confidence 21%
- Scanned URL:
https://rrvchefs.com/wp-content/plugins/super-forms/uploads/php/files/0a743e2acdd0c1c2603ea8e95466ee2c/28673319624.pdf - Domain: rrvchefs.com · IP: 104.196.184.155 · AS396982 · US
- Server: nginx
- Page title: 404 Not Found
- HTTP status: 404 · text/html
- Registrar: Domain.com - Network Solutions, LLC · domain age 4125 days · created 2015-05-07
- Scan tier: fast · observed 2026-08-22 20:56:10 UTC
Malware communicating with this URL (12)
These samples were observed contacting or being served from rrvchefs.com. Each links to its full analysis.
- Phishing - referenced ·
1c0606a0036925f19d32791877538c82· first seen 2026-08-22 - Phishing - referenced ·
5d452078a82102afede77958a40e491c· first seen 2026-08-22 - Phishing - referenced ·
5d0d4ca1c83b0d0efc48758c89e8c471· first seen 2026-08-19 - Phishing - referenced ·
5381f1b72acc5f9b0304849ec281a7b6· first seen 2026-08-17 - Phishing - referenced ·
a0f361171fbf03913323804e959b193d· first seen 2026-08-15 - Phishing - referenced ·
42e375b6bf1ffa0b484de9cda3a28ee8· first seen 2026-08-15 - Phishing - referenced ·
b783359bb51e49a3a289362e98870d25· first seen 2026-08-15 - Phishing - referenced ·
becb06e97d60d94b7be897b842fd0b66· first seen 2026-08-14 - Phishing - referenced ·
4c4135def0a17a259b2c17676ac3f63e· first seen 2026-08-14 - Phishing - referenced ·
d6de1773b0f09fe048bbcccc84a1d481· first seen 2026-08-13 - Phishing - referenced ·
4f63b882ff60071a7e2cdf7b4d8b3358· first seen 2026-08-13 - Phishing - referenced ·
8f2652305180294ec34867eb535289f4· first seen 2026-08-13
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Categories
- suspicious-infrastructure
Why this verdict
- Algorithmically-generated (DGA-like) hostname
Detected technologies
- Nginx
Contacted infrastructure
- 104.196.184.155 - AS396982 Google LLC (United States)
Observed indicators
- rrvchefs.com
- 104.196.184.155
- https://rrvchefs.com/wp-content/plugins/super-forms/uploads/php/files/0a743e2acdd0c1c2603ea8e95466ee2c/28673319624.pdf
Other scans of rrvchefs.com (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown ·
https://rrvchefs.com/wp-content/plugins/super-forms/uploads/php/files/55e9e5fcb26ed1b6786cd83249a6d4 - 13 Aug 2026 - unknown ·
https://rrvchefs.com/wp-content/plugins/super-forms/uploads/php/files/ac43799c66201867aef050cc84bb45
Questions about rrvchefs.com
- Is rrvchefs.com safe?
- The scan of rrvchefs.com on 22 Aug 2026 reached no verdict either way (score 18). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with rrvchefs.com?
- 12 analysed samples communicate with this URL, including Phishing.
- How was rrvchefs.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of rrvchefs.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan