site-1038475.mozfiles.com - URL scan, 16 Aug 2026
MalwareAnalyzer by Cyble scanned site-1038475.mozfiles.com and returned a unknown verdict (score 0). The page resolved to 65.8.180.74 on Amazon.com, Inc. in US. The domain was registered 4440 days ago through Key-Systems GmbH. 1 domain and 1 IP were contacted. 16 malware samples communicate with this URL (SBadur). This is a point-in-time observation from 16 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 0%
- Scanned URL:
https://site-1038475.mozfiles.com/files/1038475/73404088927.pdf - Domain: site-1038475.mozfiles.com · IP: 65.8.180.74 · AS16509 · US
- Server: AmazonS3
- HTTP status: 404 · application/xml
- Registrar: Key-Systems GmbH · domain age 4440 days · created 2014-06-19
- Scan tier: fast · observed 2026-08-16 11:57:26 UTC
Malware communicating with this URL (16)
These samples were observed contacting or being served from site-1038475.mozfiles.com. Each links to its full analysis.
- normal_5f87403298869.pdf - referenced ·
2e229ff0e31ef36668abcc229d862128· first seen 2026-08-16 - kerilumila.pdf - referenced ·
adb462515a2fe2d2903746986cbc4276· first seen 2026-08-15 - SBadur - referenced ·
191af04d796181df0552f3c8922341d1· first seen 2026-08-13 - 8502473.pdf - referenced ·
c30ad0d2ec7af5f3fa2822c55d01f083· first seen 2026-08-12 - xojoxukuvuw.pdf - referenced ·
ed160669d3dfe3472e0f2839e361b832· first seen 2026-08-13 - rujapirekewepogi.pdf - referenced ·
7de13d7a8f83d4ff0276c2339728c0e6· first seen 2026-08-14 - normal_5f875077a1d8e.pdf - referenced ·
ef237d2f37bd5129ea37a8aaf880c864· first seen 2026-08-13 - 79435162241.pdf - referenced ·
0798ad09a5613c9f16f3ab2cf8e2d184· first seen 2026-08-14 - dibeviwolojikemurotowugun.pdf - referenced ·
a5234fb899c9fa51397b9eb750184192· first seen 2026-08-13 - normal_5f88b8513024a.pdf - referenced ·
a4b542cfdb590788d763e0101b4696ce· first seen 2026-08-13 - 355e35696.pdf - referenced ·
92e3d775c9f0266dd7d5217354940610· first seen 2026-08-13 - 41141575280.pdf - referenced ·
74f5c50bc995f1302770e194988e1fe0· first seen 2026-08-13 - 72013632211.pdf - referenced ·
e65291f95f60458105ca4e5273a5e7f6· first seen 2026-08-13 - pivob.pdf - referenced ·
0da0bfad85f3a17ebeddfc69f115e6fb· first seen 2026-08-12 - posesegu.pdf - referenced ·
911f2fa44e57fa326205e1d1c346d783· first seen 2026-08-12
Antivirus & YARA
The engine tier did not run for this scan, so its content is unjudged rather than clean.
Detected technologies
- Amazon CloudFront
Contacted infrastructure
- 65.8.180.74 - AS16509 Amazon.com, Inc. (US)
Observed indicators
- site-1038475.mozfiles.com
- 65.8.180.74
- https://site-1038475.mozfiles.com/files/1038475/73404088927.pdf
Other scans of site-1038475.mozfiles.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 19 Aug 2026 - unknown ·
https://site-1038475.mozfiles.com/files/1038475/71573539907.pdf - 19 Aug 2026 - unknown ·
https://site-1038475.mozfiles.com/files/1038475/16933221200.pdf - 19 Aug 2026 - unknown ·
https://site-1038475.mozfiles.com/files/1038475/16933221200.pdf - 19 Aug 2026 - unknown ·
https://site-1038475.mozfiles.com/files/1038475/50074287003.pdf - 19 Aug 2026 - unknown ·
https://site-1038475.mozfiles.com/files/1038475/50074287003.pdf - 16 Aug 2026 - unknown ·
https://site-1038475.mozfiles.com/files/1038475/jojilidapotobumureximev.pdf - 16 Aug 2026 - unknown
- 15 Aug 2026 - unknown ·
https://site-1038475.mozfiles.com/files/1038475/33167871731.pdf - 15 Aug 2026 - unknown ·
https://site-1038475.mozfiles.com/files/1038475/33167871731.pdf - 14 Aug 2026 - unknown ·
https://site-1038475.mozfiles.com/files/1038475/55293528809.pdf
Questions about site-1038475.mozfiles.com
- Is site-1038475.mozfiles.com safe?
- The scan of site-1038475.mozfiles.com on 16 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with site-1038475.mozfiles.com?
- 16 analysed samples communicate with this URL, including SBadur.
- How was site-1038475.mozfiles.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of site-1038475.mozfiles.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan