locprod1-elb-eu-west-1.prod.mozaws.net
Classification: Malicious
locprod1-elb-eu-west-1.prod.mozaws.net is a malicious hostname. Reported by 2 threat sources, last seen 2020-08-03.
Current activity
- Offline — no longer resolving. Last online 2023-07-05 23:31:55.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| MxResIcn.Heur | Hybrid-Analysis | 2020-05-22 14:00:37 | 2020-08-03 06:45:35 | ||
| Generic.Malware | Hybrid-Analysis | 2019-03-18 03:15:11 | 2020-07-20 06:00:34 | ||
| Unavailable | Hybrid-Analysis | 2020-06-24 12:46:05 | 2020-06-24 12:46:05 | ||
| Unsafe | Hybrid-Analysis | 2018-05-03 21:15:41 | 2020-06-09 21:00:11 | ||
| Trojan.PSW.Predator | Hybrid-Analysis | 2020-06-08 21:45:21 | 2020-06-08 21:45:21 | ||
| Worm.Chir | Hybrid-Analysis | 2019-03-26 21:17:18 | 2020-06-03 16:15:24 | ||
| W32.AIDetectVM | Hybrid-Analysis | 2020-05-03 17:01:55 | 2020-05-28 16:15:29 | ||
| Trojan.Inject | Hybrid-Analysis | 2020-02-22 14:00:06 | 2020-05-05 08:45:11 | ||
| Backdoor.Nhopro | Hybrid-Analysis | 2020-02-07 01:45:16 | 2020-02-07 01:45:16 | ||
| Agent | Hybrid-Analysis | 2019-03-25 06:17:09 | 2020-01-04 12:45:15 | ||
| BScope.Adware.MSIL | Hybrid-Analysis | 2019-08-12 17:00:28 | 2019-08-12 17:00:28 | ||
| BScope.Adware | Hybrid-Analysis | 2019-07-19 09:30:20 | 2019-07-19 09:30:20 | ||
| Troj_Gen.F04IE00CI19 | Hybrid-Analysis | 2019-03-25 09:30:11 | 2019-03-25 09:30:11 | ||
| BehavesLike.AdwareFileTour | Hybrid-Analysis | 2019-03-25 09:01:10 | 2019-03-25 09:01:10 | ||
| Downldr.gen | Hybrid-Analysis | 2019-03-25 08:30:21 | 2019-03-25 08:30:21 | ||
| Gen:Variant.Graftor | Hybrid-Analysis | 2019-03-25 05:00:07 | 2019-03-25 05:00:07 | ||
| Trojan.Generic | Hybrid-Analysis | 2019-03-21 20:15:26 | 2019-03-25 04:15:07 | ||
| Injector.CUAM | Hybrid-Analysis | 2019-03-24 20:15:06 | 2019-03-24 20:15:06 | ||
| Malicious site | Hybrid-Analysis | 2019-03-21 20:45:06 | 2019-03-24 10:45:18 | ||
| Packed.Generic | Hybrid-Analysis | 2019-03-24 00:17:05 | 2019-03-24 00:17:05 | ||
| Malware site | Hybrid-Analysis | 2019-03-21 15:00:08 | 2019-03-23 18:00:25 | ||
| Riskware | Hybrid-Analysis | 2019-03-23 15:00:07 | 2019-03-23 15:00:07 | ||
| Generic.com | Hybrid-Analysis | 2019-03-23 10:30:05 | 2019-03-23 10:30:05 | ||
| Adware.DealPly.1 | Hybrid-Analysis | 2019-03-23 06:15:08 | 2019-03-23 06:15:08 | ||
| CsQKHtaAI | Hybrid-Analysis | 2019-03-23 00:45:20 | 2019-03-23 00:45:20 | ||
| Phishing site | Hybrid-Analysis | 2019-03-22 13:00:14 | 2019-03-22 22:15:21 | ||
| Dropper.Trojan.Generic | Hybrid-Analysis | 2019-03-22 22:15:10 | 2019-03-22 22:15:10 | ||
| Sonbokli.A | Hybrid-Analysis | 2019-03-22 22:00:39 | 2019-03-22 22:00:39 | ||
| Asparnet.P | Hybrid-Analysis | 2019-03-22 16:30:37 | 2019-03-22 16:30:37 | ||
| malicious.high.ml | Hybrid-Analysis | 2019-03-22 16:00:56 | 2019-03-22 16:00:56 | ||
| Nemucod.21C8 | Hybrid-Analysis | 2019-03-22 14:16:13 | 2019-03-22 14:16:13 | ||
| BehavesLike.PDF.Suspicious | Hybrid-Analysis | 2019-03-22 13:00:23 | 2019-03-22 13:00:23 | ||
| Gen:Variant.Strictor | Hybrid-Analysis | 2019-03-21 19:45:22 | 2019-03-21 19:45:22 | ||
| Agent.cj | Hybrid-Analysis | 2019-03-21 19:00:19 | 2019-03-21 19:00:19 | ||
| BehavesLike.Trojan | Hybrid-Analysis | 2019-03-21 18:15:11 | 2019-03-21 18:15:11 | ||
| Gen:Variant.Application.Hacktool | Hybrid-Analysis | 2019-03-21 13:30:14 | 2019-03-21 13:30:14 | ||
| DeepScan:Generic.Ransom.GandCrab5 | Hybrid-Analysis | 2019-03-15 05:00:23 | 2019-03-15 05:00:23 | ||
| Gen:Heur.Ransom.REntS.Gen | Hybrid-Analysis | 2019-03-02 19:00:16 | 2019-03-02 19:00:16 | ||
| SGeneric | Hybrid-Analysis | 2018-09-03 18:15:15 | 2018-09-03 18:15:15 | ||
| apt,apt23,keyboy,piratepanda | Maltiverse | 2018-01-31 17:59:20 | 2018-01-31 17:59:20 |
Tags
apt apt23 keyboy piratepanda evasiveIP addresses resolved by this hostname
- 52.18.147.6 (2018-03-21 01:16:09)
- 52.209.235.142 (2018-03-21 01:16:09)
- 52.49.179.63 (2018-03-21 01:16:09)
- 34.249.232.228 (2018-01-31 17:59:21)
- 52.31.122.196 (2018-01-31 17:59:21)
- 52.210.121.26 (2018-01-31 17:59:21)
Whois information
- Domain
- mozaws.net
- TLD
- net
- DNSSEC
- ['unsigned', 'Unsigned', 'unsigned, Unsigned']
- Nameservers
- NS-1084.AWSDNS-07.ORG, NS-178.AWSDNS-22.COM, NS-1995.AWSDNS-57.CO.UK, NS-865.AWSDNS-44.NET
- Whois server
- whois.gandi.net
- Registrant
- GANDI SAS
- Address
- 63-65 boulevard Massena
- City
- Paris
- State
- Paris
- Country
- FR — France 🇫🇷
- Contact email
- [email protected], [email protected], [email protected]
- Domain created
- 2013-06-18 05:07:00
- Domain expires
- 2026-06-18 07:07:00
- First indexed
- 2018-01-31 17:59:21
- Last updated
- 2025-11-18 00:25:14