site-1038808.mozfiles.com - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned site-1038808.mozfiles.com and returned a unknown verdict (score 0). The page resolved to 65.8.180.74 on Amazon.com, Inc. in US. The domain was registered 4443 days ago through Key-Systems GmbH. 1 domain and 1 IP were contacted. 23 malware samples communicate with this URL. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 0%
- Scanned URL:
https://site-1038808.mozfiles.com/files/1038808/sagin.pdf - Domain: site-1038808.mozfiles.com · IP: 65.8.180.74 · AS16509 · US
- Server: AmazonS3
- HTTP status: 404 · application/xml
- Registrar: Key-Systems GmbH · domain age 4443 days · created 2014-06-19
- Scan tier: fast · observed 2026-08-19 15:38:05 UTC
Malware communicating with this URL (23)
These samples were observed contacting or being served from site-1038808.mozfiles.com. Each links to its full analysis.
- lidaj.pdf - referenced ·
1f0b4220af517a03f48fac11cc2191ce· first seen 2026-08-19 - muranudisilama.pdf - referenced ·
2c5fd4321085a5c0540ab3f14748cb51· first seen 2026-08-19 - pijupegika.pdf - referenced ·
2615e457810d98acae492475b365e878· first seen 2026-08-16 - normal_5f87a70bd32f6.pdf - referenced ·
de9b8a3361f770e7180e9d8303f5f410· first seen 2026-08-16 - jepiromemevok.pdf - referenced ·
8656860787986e31d8f81b168b73db84· first seen 2026-08-15 - normal_5f871eaa88bd9.pdf - referenced ·
72617e1741149ff54fb70c8b625bf114· first seen 2026-08-15 - 92ea8dff.pdf - referenced ·
ba19d074d0f4f31cf232a737484e91a3· first seen 2026-08-12 - e46c2907dfd.pdf - referenced ·
de422a82fa2b21ebc889157080b52e5a· first seen 2026-08-13 - 9223048438.pdf - referenced ·
5eab1abd6903dce27531483f0d5bc7e2· first seen 2026-08-13 - 12936181645.pdf - referenced ·
aa84166da97b1d460b8d6cae738176cb· first seen 2026-08-14 - jolul_zeruzosulivob_bazikikizoladu_menepolepon.pdf - referenced ·
a39a59b1d17ab6a1722f218c6e58517d· first seen 2026-08-12 - normal_5f8706da29e4e.pdf - referenced ·
9b5def87eaf61eeaa81f892b60760e25· first seen 2026-08-14 - 2c4124ab5dcd01.pdf - referenced ·
a2f4f96645162406910b32be8ef0947b· first seen 2026-08-14 - gozawawi.pdf - referenced ·
700b2cb80a588d9dee8b5b6929fd786a· first seen 2026-08-13 - normal_5f873c1bef7da.pdf - referenced ·
7d6fce429809c0c5a1caba32fd2ad1a8· first seen 2026-08-13
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Detected technologies
- Amazon CloudFront
Contacted infrastructure
- 65.8.180.74 - AS16509 Amazon.com, Inc. (US)
Observed indicators
- site-1038808.mozfiles.com
- 65.8.180.74
- https://site-1038808.mozfiles.com/files/1038808/sagin.pdf
Other scans of site-1038808.mozfiles.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 19 Aug 2026 - unknown ·
https://site-1038808.mozfiles.com/files/1038808/45725968796.pdf - 19 Aug 2026 - unknown ·
https://site-1038808.mozfiles.com/files/1038808/xekuzuzizejiwo.pdf - 19 Aug 2026 - unknown
- 19 Aug 2026 - unknown ·
https://site-1038808.mozfiles.com/files/1038808/rogiz.pdf - 19 Aug 2026 - unknown ·
https://site-1038808.mozfiles.com/files/1038808/rogiz.pdf - 17 Aug 2026 - unknown ·
https://site-1038808.mozfiles.com/files/1038808/fofuvorakafosu.pdf - 16 Aug 2026 - unknown ·
https://site-1038808.mozfiles.com/files/1038808/79248673109.pdf - 14 Aug 2026 - unknown ·
https://site-1038808.mozfiles.com/files/1038808/20606016688.pdf - 14 Aug 2026 - unknown ·
https://site-1038808.mozfiles.com/files/1038808/79248673109.pdf - 14 Aug 2026 - unknown ·
https://site-1038808.mozfiles.com/files/1038808/79248673109.pdf
Questions about site-1038808.mozfiles.com
- Is site-1038808.mozfiles.com safe?
- The scan of site-1038808.mozfiles.com on 19 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with site-1038808.mozfiles.com?
- 23 analysed samples communicate with this URL.
- How was site-1038808.mozfiles.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of site-1038808.mozfiles.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan