www.ambredore.com - URL scan, 15 Aug 2026
MalwareAnalyzer by Cyble scanned www.ambredore.com and returned a unknown verdict (score -12). The page resolved to 80.232.225.83 on AVEPLAST, SIA in LV. The domain was registered 4760 days ago through NameSilo, LLC. 6 domains and 1 IP were contacted, over 21 HTTP requests. 3 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 15 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://www.ambredore.com/wp-content/plugins/formcraft/file-upload/server/content/files/1606d0a29eef69---1258476193.pdf - Domain: www.ambredore.com · IP: 80.232.225.83 · AS12578 · LV
- Server: Apache
- Page title: Страница не найдена | Питомник Папильонов в Риге
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: NameSilo, LLC · domain age 4760 days · created 2013-08-02
- TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Oct 5 20: · subject CN=ambredore.com
- HTTP requests captured: 21
- Scan tier: fast · observed 2026-08-15 02:40:17 UTC
Redirect chain
http://www.ambredore.com/wp-content/plugins/formcraft/file-upload/server/content/files/1606d0a29eef69---1258476193.pdfhttps://www.ambredore.com/wp-content/plugins/formcraft/file-upload/server/content/files/1606d0a29eef69---1258476193.pdf
Malware communicating with this URL (3)
These samples were observed contacting or being served from www.ambredore.com. Each links to its full analysis.
- Phishing - referenced ·
65b8b9a8b6ea88287212fe8d6f17e896· first seen 2026-08-15 - Phishing - referenced ·
e627e9304298b381f460a78d6b7b1b07· first seen 2026-08-14 - Phishing - referenced ·
ad9d46e8a698d772945f838896b3a1f0· first seen 2026-08-13
Antivirus & YARA (0 of 44 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Apache
- WordPress
- Google Analytics
- jQuery
Contacted infrastructure
- 80.232.225.83 - AS12578 AVEPLAST, SIA (Latvia)
Observed indicators
- www.ambredore.com
- fonts.googleapis.com
- s3.amazonaws.com
- code.jquery.com
- www.facebook.com
- www.sps.lv
- 80.232.225.83
- https://www.ambredore.com/wp-content/plugins/formcraft/file-upload/server/content/files/1606d0a29eef69---1258476193.pdf
- https://www.ambredore.com/wp-content/plugins/sitepress-multilingual-cms/res/css/language-selector.css?v=2.9.1
- http://fonts.googleapis.com/css?family=Marck+Script&subset=latin,latin-ext,cyrillic
- http://fonts.googleapis.com/css?family=PT+Sans&subset=latin,cyrillic,cyrillic-ext
- https://www.ambredore.com/wp-content/themes/sps-ambredore/style.css
- https://www.ambredore.com/feed
- https://www.ambredore.com/feed/atom
- https://www.ambredore.com/wp-content/themes/sps-ambredore/js/html5.js
- https://s3.amazonaws.com/nwapi/nwmatcher/nwmatcher-1.2.4-min.js
- https://www.ambredore.com/wp-content/themes/sps-ambredore/js/the-tooltip/selectivizr-min.js
- https://www.ambredore.com/comments/feed
- https://www.ambredore.com/wp-content/plugins/js_composer/assets/bootstrap/css/bootstrap.css?ver=3.4.12
- https://www.ambredore.com/wp-content/plugins/js_composer/assets/css/js_composer_front.css?ver=3.4.12
Other scans of www.ambredore.com (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown ·
https://www.ambredore.com/wp-content/plugins/formcraft/file-upload/server/content/files/160a29910952 - 14 Aug 2026 - unknown ·
https://www.ambredore.com/wp-content/plugins/formcraft/file-upload/server/content/files/1606cbb28c57
Questions about www.ambredore.com
- Is www.ambredore.com safe?
- The scan of www.ambredore.com on 15 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.ambredore.com?
- 3 analysed samples communicate with this URL, including Phishing.
- How was www.ambredore.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.ambredore.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan