serrechevalier-skifun.com - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned serrechevalier-skifun.com and returned a unknown verdict (score -12). The page resolved to 164.132.219.203 on OVH SAS in FR. The domain was registered 6852 days ago through PDR Ltd. d/b/a PublicDomainRegistry.com. 5 domains and 1 IP were contacted, over 6 HTTP requests. 1 malware sample communicates with this URL (Phishing). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://serrechevalier-skifun.com/imagesfile/nepuzenodatep.pdf - Domain: serrechevalier-skifun.com · IP: 164.132.219.203 · AS16276 · FR
- Server: Apache
- Page title: erreur 404 - marla singer : erreur 404
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com · domain age 6852 days · created 2007-11-17
- TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Oct 27 17: · subject CN=serrechevalier-skifun.com
- HTTP requests captured: 6
- Scan tier: standard · observed 2026-08-21 20:30:57 UTC
Malware communicating with this URL (1)
These samples were observed contacting or being served from serrechevalier-skifun.com. Each links to its full analysis.
- Phishing - referenced ·
f230bb611a2374b072937c6bde8ebf9f· first seen 2026-08-13
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Apache
- Google Analytics
- jQuery
Contacted infrastructure
- 164.132.219.203 - AS16276 OVH SAS (France)
Observed indicators
- serrechevalier-skifun.com
- ajax.googleapis.com
- www.apple.com
- www.marla-singer.com
- www.liseomatic.com
- 164.132.219.203
- https://serrechevalier-skifun.com/imagesfile/nepuzenodatep.pdf
- https://serrechevalier-skifun.com/imagesfile/styles/style.php?gauche=1&droite=0
- https://serrechevalier-skifun.com/imagesfile/styles/styleMenu.php
- https://serrechevalier-skifun.com/imagesfile/styles/stylePerso.php
- https://serrechevalier-skifun.com/imagesfile/styles/custom.css
- http://ajax.googleapis.com/ajax/libs/jquery/1.2.6/jquery.min.js
- https://serrechevalier-skifun.com/imagesfile/Scripts/jqueryslidemenu.js
- https://serrechevalier-skifun.com/imagesfile/Scripts/prototype.js
- https://serrechevalier-skifun.com/imagesfile/Scripts/index.js
- https://serrechevalier-skifun.com/imagesfile/imagesimage/favicon.ico
- https://serrechevalier-skifun.com/imagesfile/imagesimage/favicon.png
- http://www.apple.com/library/quicktime/scripts/ac_quicktime.js
- http://www.apple.com/library/quicktime/scripts/qtp_library.js
- http://www.apple.com/library/quicktime/stylesheets/qtp_library.css
Other scans of serrechevalier-skifun.com (1)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 21 Aug 2026 - unknown
Questions about serrechevalier-skifun.com
- Is serrechevalier-skifun.com safe?
- The scan of serrechevalier-skifun.com on 21 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with serrechevalier-skifun.com?
- 1 analysed samples communicate with this URL, including Phishing.
- How was serrechevalier-skifun.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of serrechevalier-skifun.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan