audiomaster.se - URL scan, 16 Aug 2026
MalwareAnalyzer by Cyble scanned audiomaster.se and returned a unknown verdict (score 6). The page resolved to 194.9.94.85 on Loopia AB in SE. 6 domains and 1 IP were contacted. 10 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 16 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://audiomaster.se/wp-content/plugins/formcraft/file-upload/server/content/files/16072e9522aa02---11690172418.pdf - Domain: audiomaster.se · IP: 194.9.94.85 · AS39570 · SE
- Server: nginx
- Page title: Parked at Loopia
- HTTP status: 200 · text/html; charset=UTF-8
- Scan tier: fast · observed 2026-08-16 14:32:42 UTC
Malware communicating with this URL (10)
These samples were observed contacting or being served from audiomaster.se. Each links to its full analysis.
- Phishing - referenced ·
a300d4fb861cd106ca60fbce419789ec· first seen 2026-08-16 - Phishing - referenced ·
a5dcec4e27fa19e0933d80ab954b5df8· first seen 2026-08-16 - Phishing - referenced ·
f25881aaca466491d203e122e0e3a3b4· first seen 2026-08-16 - Phishing - referenced ·
67cb30a801147e792fe54c7efe545f78· first seen 2026-08-14 - Phishing - referenced ·
80c84c3bdcb0a04adedaa95785e2ef35· first seen 2026-08-14 - Phishing - referenced ·
e1c64540b34f4ad078b13bcde6451482· first seen 2026-08-14 - Phishing - referenced ·
b5ceb6c0a3e825d18cf450f54689de6a· first seen 2026-08-13 - Phishing - referenced ·
2e46094790ddfc0509e26dd62d4021db· first seen 2026-08-13 - Phishing - referenced ·
c4ef8b19ce616c1da53b734fb2288588· first seen 2026-08-13 - Phishing - referenced ·
c7fabebbe42ae140eff9d02ca43cace3· first seen 2026-08-13
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Served over plaintext HTTP
Detected technologies
- Nginx
- PHP
- Google Analytics
Contacted infrastructure
- 194.9.94.85 - AS39570 Loopia AB (Sweden)
Observed indicators
- audiomaster.se
- www.googletagmanager.com
- static.loopia.se
- whois.loopia.com
- www.loopia.com
- www.loopia.se
- 194.9.94.85
- http://audiomaster.se/wp-content/plugins/formcraft/file-upload/server/content/files/16072e9522aa02---11690172418.pdf
- https://www.googletagmanager.com/gtm.js?id=
- https://static.loopia.se/responsive/images/iOS-57.png
- https://static.loopia.se/responsive/images/iOS-72.png
- https://static.loopia.se/responsive/images/iOS-114.png
- https://static.loopia.se/responsive/styles/reset.css
- https://static.loopia.se/shared/style/2022-extra-pages.css
- http://audiomaster.se/assets/fonts.css
- https://www.googletagmanager.com/ns.html?id=GTM-NP3MFSK
- https://static.loopia.se/shared/images/additional-pages-hero-shape.webp
- http://whois.loopia.com/?utm_medium=sitelink&utm_source=loopia_parkingweb&utm_campaign=parkingweb&utm_content=whois
- https://www.loopia.com/login?utm_medium=sitelink&utm_source=loopia_parkingweb&utm_campaign=parkingweb&utm_content=login
- https://www.loopia.com/domainnames/?utm_medium=sitelink&utm_source=loopia_parkingweb&utm_campaign=parkingweb&utm_content=domain
Other scans of audiomaster.se (3)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown ·
http://audiomaster.se/wp-content/plugins/formcraft/file-upload/server/content/files/16140bf10e56d9-- - 16 Aug 2026 - unknown ·
http://audiomaster.se/wp-content/plugins/formcraft/file-upload/server/content/files/1607e6af3bd3da-- - 13 Aug 2026 - unknown ·
http://audiomaster.se/wp-content/plugins/formcraft/file-upload/server/content/files/160a4bcee507b7--
Questions about audiomaster.se
- Is audiomaster.se safe?
- The scan of audiomaster.se on 16 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with audiomaster.se?
- 10 analysed samples communicate with this URL, including Phishing.
- How was audiomaster.se checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of audiomaster.se
Scanned on MalwareAnalyzer by Cyble · Open interactive scan