ocsp.rootg2.amazontrust.com
Classification: Whitelisted
ocsp.rootg2.amazontrust.com is a whitelisted (trusted) hostname. Reported by 4 threat sources, last seen 2026-08-10.
Current activity
- Online — resolving/reachable. Last checked 2026-08-10 07:48:12.
Blacklist sightings showing the 100 most recent of 413
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Matched whitelist source: Misp_crl_hostname | Maltiverse | 2026-08-10 07:48:13 | 2026-08-10 07:48:13 | benign | |
| OCSP Domain | Maltiverse | 2024-03-20 13:17:51 | 2025-06-18 08:34:57 | ||
| Top Popularity Site | Cisco Umbrella | 2022-07-18 20:33:00 | 2025-06-11 08:37:18 | benign | |
| Safe Site | Cisco Umbrella | 2022-07-14 23:26:33 | 2022-07-16 01:17:23 | benign | |
| Malware | Hybrid-Analysis | 2019-05-15 11:15:11 | 2022-01-25 11:00:39 | ||
| Malware site | Hybrid-Analysis | 2018-05-21 21:45:23 | 2022-01-25 10:46:02 | ||
| Malicious site | Hybrid-Analysis | 2018-05-15 08:17:18 | 2022-01-25 10:31:21 | ||
| Phishing site | Hybrid-Analysis | 2018-05-28 04:00:38 | 2022-01-24 23:16:15 | ||
| JS:Trojan.Cryxos | Hybrid-Analysis | 2019-11-05 22:30:11 | 2022-01-24 17:45:54 | ||
| JS.Phishing | Hybrid-Analysis | 2022-01-24 13:30:16 | 2022-01-24 13:30:16 | ||
| Unsafe | Hybrid-Analysis | 2018-07-09 11:15:35 | 2022-01-23 13:17:11 | ||
| PDF:PhishingX | Hybrid-Analysis | 2021-09-29 21:15:26 | 2022-01-22 12:00:15 | ||
| Phish.AB38 | Hybrid-Analysis | 2020-11-19 02:00:05 | 2022-01-22 01:15:20 | ||
| Application.Deceptor | Hybrid-Analysis | 2020-02-19 22:45:20 | 2022-01-22 00:00:44 | ||
| Adware.RelevantKnowledge | Hybrid-Analysis | 2022-01-21 12:30:25 | 2022-01-21 12:30:25 | ||
| Artemis | Hybrid-Analysis | 2019-12-11 17:15:10 | 2022-01-20 07:15:16 | ||
| Unsafe.AI_Score_100% | Hybrid-Analysis | 2020-04-07 09:45:28 | 2022-01-19 18:30:32 | ||
| AGEN.1144657 | Hybrid-Analysis | 2021-12-07 00:45:31 | 2022-01-19 08:30:27 | ||
| Trojan.PDF | Hybrid-Analysis | 2022-01-19 06:45:17 | 2022-01-19 06:45:17 | ||
| Adware | Hybrid-Analysis | 2019-02-06 21:00:11 | 2022-01-19 03:15:57 | ||
| Gen:Variant.Tedy | Hybrid-Analysis | 2022-01-17 20:17:45 | 2022-01-17 20:17:45 | ||
| IL:Trojan.MSILZilla | Hybrid-Analysis | 2022-01-09 20:00:12 | 2022-01-17 17:16:15 | ||
| Trojan.Agent | Hybrid-Analysis | 2018-09-27 07:45:11 | 2022-01-16 05:00:13 | ||
| Application.Bundler | Hybrid-Analysis | 2022-01-09 18:15:38 | 2022-01-12 19:30:18 | ||
| UnwantedSig [PUP] | Hybrid-Analysis | 2022-01-12 17:16:06 | 2022-01-12 17:16:06 | ||
| Malicious_confidence_80% | Hybrid-Analysis | 2021-06-28 01:15:15 | 2022-01-12 14:31:18 | ||
| Malicious_confidence_70% | Hybrid-Analysis | 2021-07-19 16:45:20 | 2022-01-10 03:16:01 | ||
| Trojan.Generic | Hybrid-Analysis | 2018-04-09 15:15:23 | 2022-01-09 19:00:23 | ||
| Adware.Relevant | Hybrid-Analysis | 2022-01-08 15:00:42 | 2022-01-08 15:00:42 | ||
| Adware.iObit | Hybrid-Analysis | 2022-01-08 14:15:24 | 2022-01-08 14:15:24 | ||
| VEX.Webshell | Hybrid-Analysis | 2022-01-07 18:00:33 | 2022-01-07 18:00:33 | ||
| Trojan.Exploit.MSOfficeWord.GenericKDS | Hybrid-Analysis | 2022-01-06 13:00:37 | 2022-01-06 13:00:37 | ||
| HTML:Script | Hybrid-Analysis | 2021-11-21 18:15:38 | 2022-01-04 16:45:12 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2018-10-16 01:30:11 | 2022-01-02 00:00:25 | ||
| Gen:Variant.Bulz | Hybrid-Analysis | 2021-03-14 00:45:28 | 2021-12-31 03:15:55 | ||
| VBA:Amphitryon.3653 | Hybrid-Analysis | 2021-11-19 02:30:55 | 2021-12-30 22:30:07 | ||
| Unsafe.AI_Score_98% | Hybrid-Analysis | 2020-12-06 19:15:35 | 2021-12-30 15:30:51 | ||
| Redirect.F697 | Hybrid-Analysis | 2021-12-06 15:30:32 | 2021-12-28 16:16:38 | ||
| GameHack.DR potentially unsafe | Hybrid-Analysis | 2020-11-01 00:45:08 | 2021-12-25 18:00:11 | ||
| PUP.Systweak | Hybrid-Analysis | 2021-12-25 14:30:25 | 2021-12-25 14:30:25 | ||
| HackTool.CheatEngine | Hybrid-Analysis | 2021-12-16 23:00:15 | 2021-12-21 19:45:26 | ||
| PUP.Optional | Hybrid-Analysis | 2018-11-20 18:45:15 | 2021-12-20 21:30:18 | ||
| Vitzo.A potentially unwanted | Hybrid-Analysis | 2021-12-16 17:15:52 | 2021-12-16 17:15:52 | ||
| GlaryUtilities.B potentially unwanted | Hybrid-Analysis | 2021-11-29 12:15:39 | 2021-12-13 20:31:07 | ||
| Suspected of Trojan.Downloader | Hybrid-Analysis | 2021-09-25 22:00:31 | 2021-12-12 17:30:49 | ||
| Riskware | Hybrid-Analysis | 2018-06-02 18:15:24 | 2021-12-11 06:00:22 | ||
| Malware.Generic | Hybrid-Analysis | 2019-08-09 15:00:23 | 2021-12-11 05:30:20 | ||
| Adware.AdSearch.Script | Hybrid-Analysis | 2021-12-10 20:01:53 | 2021-12-10 20:01:53 | ||
| Other:SNH | Hybrid-Analysis | 2021-06-01 05:00:07 | 2021-12-07 10:00:11 | ||
| OpenSubtitles.A potentially unwanted | Hybrid-Analysis | 2021-12-06 08:00:35 | 2021-12-06 08:00:35 | ||
| Application.DriverReviver | Hybrid-Analysis | 2019-07-26 02:17:08 | 2021-12-06 01:15:23 | ||
| Sabsik.FL.B | Hybrid-Analysis | 2021-12-03 19:30:56 | 2021-12-04 17:15:22 | ||
| Gen:Variant.Adware.Nemesis | Hybrid-Analysis | 2021-12-01 05:00:35 | 2021-12-01 05:00:35 | ||
| Trojan.DOC.Phishing | Hybrid-Analysis | 2020-04-17 01:45:06 | 2021-11-29 17:15:29 | ||
| Adware.Alien | Hybrid-Analysis | 2021-10-31 10:15:29 | 2021-11-29 00:00:10 | ||
| Program.Unwanted | Hybrid-Analysis | 2018-10-06 19:00:11 | 2021-11-27 01:15:38 | ||
| Malware.Dropper | Hybrid-Analysis | 2019-12-30 17:15:06 | 2021-11-25 02:15:52 | ||
| JS.Heur.Phishing.6.49AA231F | Hybrid-Analysis | 2021-11-24 17:15:35 | 2021-11-24 17:15:35 | ||
| Adware.YTDownloader | Hybrid-Analysis | 2019-07-03 21:15:10 | 2021-11-24 16:45:28 | ||
| Phishing.FI | Hybrid-Analysis | 2021-11-24 16:15:46 | 2021-11-24 16:15:46 | ||
| HackTool.Crack | Hybrid-Analysis | 2021-11-23 01:31:10 | 2021-11-23 01:31:10 | ||
| Script.INF | Hybrid-Analysis | 2021-11-21 21:45:14 | 2021-11-21 21:45:14 | ||
| Trojan.GenericS | Hybrid-Analysis | 2021-11-21 17:17:12 | 2021-11-21 17:17:12 | ||
| Adware.Generic | Hybrid-Analysis | 2021-10-06 04:15:25 | 2021-11-21 14:30:26 | ||
| Unsafe.AI_Score_72% | Hybrid-Analysis | 2019-12-25 00:45:07 | 2021-11-19 15:30:59 | ||
| FileRepMetagen [Adw] | Hybrid-Analysis | 2021-11-19 02:16:08 | 2021-11-19 02:16:08 | ||
| Gen:Variant.Application.Wavesor | Hybrid-Analysis | 2021-11-18 22:00:26 | 2021-11-18 22:00:26 | ||
| VBS.Trojan.Gregory | Hybrid-Analysis | 2021-11-18 17:15:49 | 2021-11-18 17:15:49 | ||
| Application.DealAlpha.1 | Hybrid-Analysis | 2021-11-18 09:45:31 | 2021-11-18 09:45:31 | ||
| CVE-2020-0601 | Hybrid-Analysis | 2021-11-16 18:45:36 | 2021-11-16 18:45:36 | ||
| BScope.Backdoor | Hybrid-Analysis | 2021-11-16 15:30:59 | 2021-11-16 15:30:59 | ||
| Phishing.JS | Hybrid-Analysis | 2021-11-15 08:15:23 | 2021-11-15 08:15:23 | ||
| Gen:Variant.MSILPerseus | Hybrid-Analysis | 2019-08-30 07:45:05 | 2021-11-15 07:31:17 | ||
| Gen:Variant.Jaik | Hybrid-Analysis | 2021-06-14 01:00:20 | 2021-11-12 07:15:52 | ||
| Gen:Variant.Adware.Zusy | Hybrid-Analysis | 2021-11-11 22:15:25 | 2021-11-11 22:15:25 | ||
| Gen:Variant.Application.Bundler | Hybrid-Analysis | 2021-11-11 17:17:08 | 2021-11-11 17:17:08 | ||
| Trojan.Malware.300983 | Hybrid-Analysis | 2020-05-30 14:00:35 | 2021-11-11 14:45:37 | ||
| Generic ML PUA | Hybrid-Analysis | 2021-07-02 21:30:23 | 2021-11-11 03:00:14 | ||
| Phish.BPV | Hybrid-Analysis | 2021-11-10 09:45:20 | 2021-11-10 09:45:20 | ||
| Application.Systweak | Hybrid-Analysis | 2021-08-13 03:15:31 | 2021-11-08 12:15:40 | ||
| HEUR:Trojan.Zapchast | Hybrid-Analysis | 2021-11-05 20:16:08 | 2021-11-05 20:16:08 | ||
| TrojanDownloader.Iframe | Hybrid-Analysis | 2021-11-05 18:45:11 | 2021-11-05 18:45:11 | ||
| Downloader.InstallIQ | Hybrid-Analysis | 2021-11-04 08:15:43 | 2021-11-04 08:15:43 | ||
| Malware.Heuristic | Hybrid-Analysis | 2021-03-28 19:31:01 | 2021-11-04 04:15:26 | ||
| Gen:Variant.Fragtor | Hybrid-Analysis | 2021-11-02 18:00:55 | 2021-11-02 18:00:55 | ||
| Trojan.Script.Generic | Hybrid-Analysis | 2020-08-26 15:00:21 | 2021-10-29 18:00:36 | ||
| PUP.Bundler | Hybrid-Analysis | 2021-10-18 18:00:26 | 2021-10-28 01:16:00 | ||
| Malicious_confidence_60% | Hybrid-Analysis | 2021-03-31 19:17:10 | 2021-10-27 03:17:08 | ||
| Phish | Hybrid-Analysis | 2019-05-31 07:00:39 | 2021-10-25 05:45:17 | ||
| Phish.AQD | Hybrid-Analysis | 2021-09-13 14:01:01 | 2021-10-22 20:00:36 | ||
| Dropper.Trojan.Generic | Hybrid-Analysis | 2018-11-06 21:15:17 | 2021-10-22 14:01:31 | ||
| CVE-2014-3153 | Hybrid-Analysis | 2021-10-21 21:30:58 | 2021-10-21 21:30:58 | ||
| DotSetupIo.B potentially unwanted | Hybrid-Analysis | 2021-09-18 20:15:15 | 2021-10-21 17:45:42 | ||
| ScrInject.B | Hybrid-Analysis | 2021-10-21 12:45:24 | 2021-10-21 12:45:24 | ||
| malicious.c94637 | Hybrid-Analysis | 2021-10-19 16:45:27 | 2021-10-19 16:45:27 | ||
| HEUR:Trojan.Chapak | Hybrid-Analysis | 2021-10-19 15:01:06 | 2021-10-19 15:01:06 | ||
| Troj.Undef | Hybrid-Analysis | 2021-10-17 18:17:29 | 2021-10-17 18:17:29 | ||
| Phish.A624 | Hybrid-Analysis | 2021-10-15 13:30:28 | 2021-10-15 13:30:28 | ||
| Suspicious.Save | Hybrid-Analysis | 2021-10-13 11:15:23 | 2021-10-13 11:15:23 | ||
| HEUR:Trojan.PDF.Agent | Hybrid-Analysis | 2020-12-14 17:16:26 | 2021-10-12 14:30:07 |
Tags
miner phishing apt banker ramnitIP addresses resolved by this hostname
- 52.85.117.227 (2018-04-14 18:17:25)
- 52.85.117.222 (2018-04-14 18:17:25)
- 52.85.117.62 (2018-04-14 18:17:25)
- 52.85.117.192 (2018-04-14 18:17:25)
- 52.85.117.208 (2018-04-14 18:17:25)
- 52.85.117.247 (2018-04-14 18:17:25)
- 52.85.117.162 (2018-04-14 18:17:25)
- 52.85.117.65 (2018-04-14 18:17:25)
- 52.84.31.169 (2018-04-13 22:30:16)
- 52.84.31.192 (2018-04-13 22:30:16)
- 52.84.31.98 (2018-04-13 22:30:16)
- 52.84.31.189 (2018-04-13 22:30:16)
- 52.84.31.97 (2018-04-13 22:30:16)
- 52.84.31.235 (2018-04-13 22:30:16)
- 52.84.31.57 (2018-04-13 22:30:16)
- 52.84.31.105 (2018-04-13 22:30:16)
- 52.84.127.252 (2018-04-09 15:15:24)
- 52.84.127.20 (2018-04-09 15:15:24)
- 52.84.127.200 (2018-04-09 15:15:24)
- 52.84.127.119 (2018-04-09 15:15:24)
- 52.84.127.36 (2018-04-09 15:15:24)
- 52.84.127.40 (2018-04-09 15:15:24)
- 52.84.127.230 (2018-04-09 15:15:24)
- 52.84.127.97 (2018-04-09 15:15:24)
- 52.85.146.124 (2018-04-07 10:26:06)
- 52.85.146.14 (2018-04-07 10:26:06)
- 52.85.146.147 (2018-04-07 10:26:06)
- 52.85.146.212 (2018-04-07 10:26:06)
- 52.85.146.2 (2018-04-07 10:26:06)
- 52.85.146.201 (2018-04-07 10:26:06)
- 52.85.146.224 (2018-04-07 10:26:06)
- 52.85.146.150 (2018-04-07 10:26:06)
- 52.84.63.202 (2018-03-14 15:02:58)
- 52.84.63.110 (2018-03-14 15:02:58)
- 52.84.63.134 (2018-03-14 15:02:58)
- 52.84.63.220 (2018-03-14 15:02:58)
- 52.84.63.226 (2018-03-14 15:02:58)
- 52.84.63.144 (2018-03-14 15:02:58)
- 52.84.63.218 (2018-03-14 15:02:58)
- 52.84.63.63 (2018-03-14 15:02:58)
- 54.230.51.11 (2018-03-13 11:15:44)
- 54.230.51.59 (2018-03-13 11:15:44)
- 54.230.51.115 (2018-03-13 11:15:44)
- 54.230.51.142 (2018-03-13 11:15:44)
- 54.230.51.179 (2018-03-13 11:15:44)
- 54.230.51.103 (2018-03-13 11:15:44)
- 54.230.51.198 (2018-03-13 11:15:44)
- 54.230.51.232 (2018-03-13 11:15:44)
- 52.84.31.172 (2017-10-17 19:32:41)
- 52.84.31.194 (2017-10-17 19:32:41)
- 52.84.31.246 (2017-10-17 19:32:41)
- 52.84.31.222 (2017-10-17 19:32:41)
- 52.84.31.32 (2017-10-17 19:32:41)
- 52.84.31.242 (2017-10-17 19:32:41)
- 52.84.31.218 (2017-10-17 19:32:41)
- 52.84.31.65 (2017-10-17 19:32:41)
- 18.67.34.93 (2025-03-01 02:10:53)
- 2600:9000:215f:4e00:0:566:22d4:f421 (2025-04-23 08:25:13)
- 2600:9000:215f:5400:0:566:22d4:f421 (2025-04-23 08:25:13)
- 2600:9000:215f:5a00:0:566:22d4:f421 (2025-04-23 08:25:13)
- 2600:9000:215f:6800:0:566:22d4:f421 (2025-04-23 08:25:13)
- 2600:9000:215f:2800:0:566:22d4:f421 (2025-04-23 08:25:13)
- 2600:9000:215f:4800:0:566:22d4:f421 (2025-04-30 08:40:10)
- 2600:9000:215f:a600:0:566:22d4:f421 (2025-04-30 08:40:10)
- 2600:9000:215f:1600:0:566:22d4:f421 (2025-04-30 08:40:10)
- 2600:9000:215f:be00:0:566:22d4:f421 (2025-04-30 08:40:10)
- 2600:9000:215f:d000:0:566:22d4:f421 (2025-04-30 08:40:10)
- 2600:9000:215f:9c00:0:566:22d4:f421 (2025-04-30 08:40:10)
- 2600:9000:215f:b200:0:566:22d4:f421 (2025-05-03 01:54:39)
- 2600:9000:215f:ce00:0:566:22d4:f421 (2025-05-03 01:54:39)
- 2600:9000:215f:b800:0:566:22d4:f421 (2025-05-03 01:54:39)
- 2600:9000:215f:c000:0:566:22d4:f421 (2025-05-03 01:54:39)
- 2600:9000:215f:2e00:0:566:22d4:f421 (2025-05-03 01:54:39)
- 2600:9000:215f:7a00:0:566:22d4:f421 (2025-05-03 01:54:39)
- 2600:9000:215f:f400:0:566:22d4:f421 (2025-05-03 01:54:39)
- 2600:9000:215f:2a00:0:566:22d4:f421 (2025-05-24 01:45:18)
- 2600:9000:215f:6000:0:566:22d4:f421 (2025-05-24 01:45:18)
- 2600:9000:215f:a200:0:566:22d4:f421 (2025-05-24 01:45:18)
- 2600:9000:215f:6c00:0:566:22d4:f421 (2025-05-24 01:45:18)
- 2600:9000:215f:ee00:0:566:22d4:f421 (2025-05-24 01:45:18)
- 2600:9000:215f:cc00:0:566:22d4:f421 (2025-05-24 01:45:18)
- 2600:9000:215f:fe00:0:566:22d4:f421 (2025-05-28 08:51:09)
- 2600:9000:215f:e400:0:566:22d4:f421 (2025-05-28 08:51:09)
- 2600:9000:215f:5200:0:566:22d4:f421 (2025-05-28 08:51:09)
- 2600:9000:215f:f800:0:566:22d4:f421 (2025-05-28 08:51:09)
- 2600:9000:215f:3400:0:566:22d4:f421 (2025-05-28 08:51:09)
- 2600:9000:215f:8000:0:566:22d4:f421 (2025-05-28 08:51:09)
- 2600:9000:215f:1e00:0:566:22d4:f421 (2025-05-28 08:51:09)
- 2600:9000:215f:c400:0:566:22d4:f421 (2025-05-28 08:51:09)
- 2600:9000:215f:5600:0:566:22d4:f421 (2025-06-11 08:37:16)
- 52.85.108.44 (2025-06-11 08:37:16)
- 2600:9000:215f:f200:0:566:22d4:f421 (2025-06-11 08:37:16)
- 2600:9000:215f:d200:0:566:22d4:f421 (2025-06-11 08:37:16)
- 2600:9000:215f:1a00:0:566:22d4:f421 (2025-06-11 08:37:16)
- 2600:9000:215f:8400:0:566:22d4:f421 (2025-06-11 08:37:16)
- 2600:9000:215f:5800:0:566:22d4:f421 (2025-06-11 08:37:16)
- 2600:9000:215f:400:0:566:22d4:f421 (2025-06-11 08:37:16)
- 2600:9000:215f:9200:0:566:22d4:f421 (2025-06-11 08:37:16)
- 2600:9000:21a2:4c00:0:566:22d5:d9e1 (2026-08-10 07:48:12)
- 2600:9000:21a2:a000:0:566:22d5:d9e1 (2026-08-10 07:48:12)
- 2600:9000:21a2:a800:0:566:22d5:d9e1 (2026-08-10 07:48:12)
- 13.225.191.58 (2026-08-10 07:48:12)
- 2600:9000:21a2:5000:0:566:22d5:d9e1 (2026-08-10 07:48:12)
- 2600:9000:21a2:7a00:0:566:22d5:d9e1 (2026-08-10 07:48:12)
- 2600:9000:21a2:5800:0:566:22d5:d9e1 (2026-08-10 07:48:12)
- 2600:9000:21a2:8400:0:566:22d5:d9e1 (2026-08-10 07:48:12)
- 2600:9000:21a2:9200:0:566:22d5:d9e1 (2026-08-10 07:48:12)
Whois information
- AS name
- AS16509 Amazon.com, Inc.
- Domain
- amazontrust.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS-1249.AWSDNS-28.ORG, NS-1794.AWSDNS-32.CO.UK, NS-419.AWSDNS-52.COM, NS-612.AWSDNS-12.NET, ns-1794.awsdns-32.co.uk, ns-612.awsdns-12.net, ns-419.awsdns-52.com, ns-1249.awsdns-28.org
- Whois server
- whois.markmonitor.com
- Registrant
- MarkMonitor Inc.
- Address
- 410 Terry Ave N,
- City
- seattle
- State
- wa
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- Domain created
- 2007-05-11 18:34:14
- Domain expires
- 2027-05-11 18:34:14
- First indexed
- 2017-10-17 19:32:41
- Last updated
- 2026-08-10 07:48:13