Is amagigroup.net safe?

The scan of amagigroup.net on 22 Aug 2026 reached no verdict either way (score 10). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with amagigroup.net?

1 analysed samples communicate with this URL, including Phishing.

How was amagigroup.net checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

amagigroup.net - URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned amagigroup.net and returned a unknown verdict (score 10), categorised as credential-harvest. The page resolved to 35.209.7.161 on Google LLC in US. The domain was registered 2088 days ago through GoDaddy.com, LLC. 13 domains and 2 IPs were contacted, over 27 HTTP requests. 1 malware sample communicates with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 10) · Confidence 13%
Scanned URL: https://amagi.la/wp-content/plugins/formcraft/file-upload/server/content/files/1609c23bfb18db---73872185814.pdf
Domain: amagigroup.net · IP: 35.209.7.161 · AS15169 · US
Server: nginx
Page title: Inicio - Amagi Group Europa
HTTP status: 200 · text/html; charset=UTF-8
Registrar: GoDaddy.com, LLC · domain age 2088 days · created 2020-12-02
HTTP requests captured: 27
Scan tier: fast · observed 2026-08-22 11:46:02 UTC

Redirect chain

https://amagi.la/wp-content/plugins/formcraft/file-upload/server/content/files/1609c23bfb18db---73872185814.pdf
https://amagigroup.net/

Malware communicating with this URL (1)

These samples were observed contacting or being served from amagigroup.net. Each links to its full analysis.

Phishing - referenced · 5a45b815bc603a092d98e37e76b9e2bb · first seen 2026-08-22

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form

Detected technologies

Nginx
WordPress
Google Analytics
jQuery

Contacted infrastructure

35.209.7.161 - AS15169 Google LLC (United States)
34.174.15.233 - AS396982 Google LLC (United States)

Observed indicators

amagigroup.net
cdn.elementor.com
fonts.googleapis.com
www.googletagmanager.com
portalgia.amagigroup.net
www.facebook.com
ve.linkedin.com
www.instagram.com
x.com
wa.me
amagi-dev.amagigroup.net
cookiedatabase.org
www.google.com
35.209.7.161
34.174.15.233
https://amagigroup.net/
https://amagigroup.net/xmlrpc.php
https://amagigroup.net/en/home/
https://cdn.elementor.com/
https://fonts.googleapis.com/

Other scans of amagigroup.net (3)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

21 Aug 2026 - unknown
17 Aug 2026 - unknown
15 Aug 2026 - unknown

Questions about amagigroup.net

Is amagigroup.net safe?: The scan of amagigroup.net on 22 Aug 2026 reached no verdict either way (score 10). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with amagigroup.net?: 1 analysed samples communicate with this URL, including Phishing.
How was amagigroup.net checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of amagigroup.net

Scanned on MalwareAnalyzer by Cyble · Open interactive scan