Is www.rpsbchamber.org safe?

No. MalwareAnalyzer scanned www.rpsbchamber.org on 15 Aug 2026 and returned a malicious verdict with a score of 56 out of 100, categorised as suspicious-infrastructure and credential-harvest. Treat it as hostile until it is re-checked.

How was www.rpsbchamber.org checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.rpsbchamber.org - malicious URL scan, 15 Aug 2026

MalwareAnalyzer by Cyble scanned www.rpsbchamber.org and returned a malicious verdict (score 56), categorised as suspicious-infrastructure, credential-harvest. The page resolved to 198.49.23.144 on Squarespace, Inc. in US. The domain was registered 3066 days ago through GoDaddy.com, LLC. 9 domains and 2 IPs were contacted, over 26 HTTP requests. The request followed 1 redirect before landing. This is a point-in-time observation from 15 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 56) · Confidence 68%
Scanned URL: http://rpsbchamber.org/editorData/file/wujejorem.pdf
Domain: www.rpsbchamber.org · IP: 198.49.23.144 · AS53831 · US
Server: Squarespace
Page title: Rocky Point - Sound Beach Chamber of Commerce
HTTP status: 404 · text/html;charset=utf-8
Registrar: GoDaddy.com, LLC · domain age 3066 days · created 2018-03-23
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Oct 21 16: · subject CN=www.rpsbchamber.org
HTTP requests captured: 26
Scan tier: standard · observed 2026-08-15 16:55:57 UTC

Redirect chain

http://rpsbchamber.org/editorData/file/wujejorem.pdf
https://www.rpsbchamber.org/editorData/file/wujejorem.pdf

Antivirus & YARA (1 of 44 engines)

YARA: Trellix/McAfee ATR [yara]: ATR_REvil_Sodinokibi (page content)

Why this verdict

Antivirus/YARA detection in page content: ATR_REvil_Sodinokibi
Algorithmically-generated (DGA-like) hostname
Valid TLS, no impersonation or off-origin credential post
Credential-harvesting form

Contacted infrastructure

198.49.23.144 - AS53831 Squarespace, Inc. (United States)
198.49.23.145 - AS53831 Squarespace, Inc. (United States)

Observed indicators

www.rpsbchamber.org
images.squarespace-cdn.com
file.squarespace-cdn.com
assets.squarespace.com
definitions.sqspcdn.com
static1.squarespace.com
rockypointsoundbeachchamberofcommerce.growthzoneapp.com
www.facebook.com
www.instagram.com
198.49.23.144
198.49.23.145
https://www.rpsbchamber.org/editorData/file/wujejorem.pdf
https://images.squarespace-cdn.com/content/v1/69164ad2cc2956011ab81010/eac07fbf-6c87-4536-ba8c-48cf10ff7400/favicon.ico?format=100w
http://images.squarespace-cdn.com/content/v1/69164ad2cc2956011ab81010/d493f935-aab6-423d-abfa-3c2a1a2127e4/Rocky+point+sound+beach+chamber+of+commerce+logo.png?format=1500w
https://images.squarespace-cdn.com/
https://file.squarespace-cdn.com/
https://assets.squarespace.com/@sqs/polyfiller/1.6/legacy.js
https://assets.squarespace.com/@sqs/polyfiller/1.6/modern.js
https://assets.squarespace.com/universal/scripts-compressed/visitor-site-error-reporter-976d22448e700b77-min.en-US.js
https://assets.squarespace.com/universal/scripts-compressed/extract-css-runtime-ed1dc0df5968e326-min.en-US.js

Other scans of www.rpsbchamber.org (2)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

23 Aug 2026 - unknown · https://www.rpsbchamber.org/editorData/file/9709771098.pdf
23 Aug 2026 - unknown · https://www.rpsbchamber.org/editorData/file/9709771098.pdf

Questions about www.rpsbchamber.org

Is www.rpsbchamber.org safe?: No. MalwareAnalyzer scanned www.rpsbchamber.org on 15 Aug 2026 and returned a malicious verdict with a score of 56 out of 100, categorised as suspicious-infrastructure and credential-harvest. Treat it as hostile until it is re-checked.
How was www.rpsbchamber.org checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.rpsbchamber.org

Scanned on MalwareAnalyzer by Cyble · Open interactive scan