kamber.dk - suspicious URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned kamber.dk and returned a suspicious verdict (score 40). The page resolved to 35.214.161.189 on Google LLC in NL. 7 domains and 1 IP were contacted, over 10 HTTP requests. 7 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 40) · Confidence 43%
- Scanned URL:
https://kamber.dk/wp-content/plugins/super-forms/uploads/php/files/8aba6be3c9efd40533904217824da7ef/dikoxigaxaxanufefegajix.pdf - Domain: kamber.dk · IP: 35.214.161.189 · AS19527 · NL
- Server: nginx
- Page title: Side ikke fundet – Kamber.dk
- HTTP status: 404 · text/html; charset=UTF-8
- HTTP requests captured: 10
- Scan tier: fast · observed 2026-08-21 12:26:53 UTC
Malware communicating with this URL (7)
These samples were observed contacting or being served from kamber.dk. Each links to its full analysis.
- Phishing - referenced ·
00ea972dc577753423e60a9558209e36· first seen 2026-08-21 - Phishing - referenced ·
f2fd678112bbbd671d1cd03539e5d7f6· first seen 2026-08-20 - Phishing - referenced ·
1c32b1fac060d31088cb562762a59f86· first seen 2026-08-16 - Phishing - referenced ·
1c0a5a05e7f97ea33a6c887143ae8756· first seen 2026-08-15 - Phishing - referenced ·
b65a0e6af0f6e7ae79e3512da4211f37· first seen 2026-08-15 - Phishing - referenced ·
cd4887f3ae58bc778dd0b2068cbcdbe3· first seen 2026-08-14 - Phishing - referenced ·
8f6281aa3ab7e75c051617a4bf13c840· first seen 2026-08-14
Antivirus & YARA (1 of 47 engines)
- YARA: JPCERT/CC [yara]: JPCERT_LODEINFO (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- Antivirus/YARA detection in page content: JPCERT_LODEINFO
Detected technologies
- Nginx
- WordPress
- Google Analytics
- jQuery
Contacted infrastructure
- 35.214.161.189 - AS19527 Google LLC (Netherlands)
Observed indicators
- kamber.dk
- gmpg.org
- fonts.gstatic.com
- fonts.googleapis.com
- static.addtoany.com
- www.googletagmanager.com
- www.youtube.com
- 35.214.161.189
- https://kamber.dk/wp-content/plugins/super-forms/uploads/php/files/8aba6be3c9efd40533904217824da7ef/dikoxigaxaxanufefegajix.pdf
- https://gmpg.org/xfn/11
- https://fonts.gstatic.com/
- https://fonts.googleapis.com/
- https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN_r8OUuhpKKSTjw.woff2
- https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhpKKSTjw.woff2
- https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
- https://fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0bf8pkAg.woff2
- https://fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
- https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UNirkOUuhpKKSTjw.woff2
- https://kamber.dk/wp-content/uploads/siteground-optimizer-assets/siteground-optimizer-combined-css-4eaaf4daa1929997e02ff05fc3bcd47a.css
- https://static.addtoany.com/
Questions about kamber.dk
- Is kamber.dk safe?
- No. MalwareAnalyzer scanned kamber.dk on 21 Aug 2026 and returned a suspicious verdict with a score of 40 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with kamber.dk?
- 7 analysed samples communicate with this URL, including Phishing.
- How was kamber.dk checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of kamber.dk
Scanned on MalwareAnalyzer by Cyble · Open interactive scan