site-1037113.mozfiles.com - URL scan, 17 Aug 2026
MalwareAnalyzer by Cyble scanned site-1037113.mozfiles.com and returned a unknown verdict (score -12). The page resolved to 65.8.180.12 on Amazon.com, Inc. in US. 1 domain and 1 IP were contacted. 40 malware samples communicate with this URL. This is a point-in-time observation from 17 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://site-1037113.mozfiles.com/files/1037113/38713816065.pdf - Domain: site-1037113.mozfiles.com · IP: 65.8.180.12 · AS16509 · US
- Server: AmazonS3
- HTTP status: 404 · application/xml
- TLS issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M01 · valid to Oct 18 23: · subject CN=*.mozfiles.com
- Scan tier: standard · observed 2026-08-17 01:21:54 UTC
Malware communicating with this URL (40)
These samples were observed contacting or being served from site-1037113.mozfiles.com. Each links to its full analysis.
- widegorebezovuxun.pdf - referenced ·
9d578feecb12b5bd7209fd06c64fa37d· first seen 2026-08-16 - 75854064517.pdf - referenced ·
21e17f8d62edd9ea9e22cd1248aefd5c· first seen 2026-08-16 - gunebijapifafejunokujasat.pdf - referenced ·
a83975a7bf3f9e96c95e95d109d88d5f· first seen 2026-08-16 - gawigodisodos.pdf - referenced ·
a6e5a28a9350b0c4d68c2370adb9a3de· first seen 2026-08-16 - 393e0.pdf - referenced ·
1b360a7592551629b98dc8d7564c8304· first seen 2026-08-16 - 93000563081.pdf - referenced ·
766452208fbba8d95812b6c422afe0e7· first seen 2026-08-15 - jazapoxutob.pdf - referenced ·
777cc8ec1cd39100fec783f1c055cf6c· first seen 2026-08-13 - sipab.pdf - referenced ·
99cbfdcab068c602bccb0908e97e7bec· first seen 2026-08-15 - purakiwufovepiv.pdf - referenced ·
7f8ccf24a1908f8b4a7520ddb6001e2c· first seen 2026-08-14 - xovex.pdf - referenced ·
6909a65c885610f9efe7bbb0c190fe79· first seen 2026-08-13 - wuxojuzoponed-lerozuxe-vogenovi-fubig.pdf - referenced ·
1f551ff06d8309d0d52078b03192bdfd· first seen 2026-08-12 - normal_5f878cd00e0e4.pdf - referenced ·
0a400bd339c223981759cd791ed92368· first seen 2026-08-14 - gubaxelas.pdf - referenced ·
bcba0d73f05c1b997be54600b541b8e6· first seen 2026-08-13 - 69e8388.pdf - referenced ·
7e62e94e39bd842ef3f6428117c343b5· first seen 2026-08-14 - 88903597425.pdf - referenced ·
75298d23ea6c05315f2c053a1c555fb4· first seen 2026-08-14
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Amazon CloudFront
Contacted infrastructure
- 65.8.180.12 - AS16509 Amazon.com, Inc. (United States)
Observed indicators
- site-1037113.mozfiles.com
- 65.8.180.12
- https://site-1037113.mozfiles.com/files/1037113/38713816065.pdf
Other scans of site-1037113.mozfiles.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 19 Aug 2026 - unknown ·
https://site-1037113.mozfiles.com/files/1037113/36499323508.pdf - 19 Aug 2026 - unknown ·
https://site-1037113.mozfiles.com/files/1037113/36499323508.pdf - 19 Aug 2026 - unknown ·
https://site-1037113.mozfiles.com/files/1037113/gofedepiwiwigatozibi.pdf - 19 Aug 2026 - unknown ·
https://site-1037113.mozfiles.com/files/1037113/pigalivutomisunivuj.pdf - 19 Aug 2026 - unknown ·
https://site-1037113.mozfiles.com/files/1037113/lutefewapakikevoniteti.pdf - 19 Aug 2026 - unknown ·
https://site-1037113.mozfiles.com/files/1037113/kojikizaboduva.pdf - 19 Aug 2026 - unknown ·
https://site-1037113.mozfiles.com/files/1037113/kojikizaboduva.pdf - 17 Aug 2026 - unknown
- 16 Aug 2026 - unknown ·
https://site-1037113.mozfiles.com/files/1037113/46015651682.pdf - 16 Aug 2026 - unknown ·
https://site-1037113.mozfiles.com/files/1037113/46015651682.pdf
Questions about site-1037113.mozfiles.com
- Is site-1037113.mozfiles.com safe?
- The scan of site-1037113.mozfiles.com on 17 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with site-1037113.mozfiles.com?
- 40 analysed samples communicate with this URL.
- How was site-1037113.mozfiles.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of site-1037113.mozfiles.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan