ocsp.sca1b.amazontrust.com
Classification: Neutral
ocsp.sca1b.amazontrust.com is a neutral hostname. Reported by 4 threat sources, last seen 2026-09-11. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Offline — no longer resolving. Last online 2025-05-24 06:09:12.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings showing the 100 most recent of 342
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Compromised verdict | Maltiverse | 2026-09-11 17:52:58 | 2026-09-11 17:52:58 | compromised | |
| Top Popularity Site | Cisco Umbrella | 2022-07-18 20:31:59 | 2025-05-24 06:09:13 | benign | |
| Top 1M Site | Cisco Umbrella | 2023-06-17 06:12:12 | 2023-12-02 06:26:06 | benign | |
| Safe Site | Cisco Umbrella | 2022-07-14 23:25:39 | 2022-07-16 01:16:01 | benign | |
| Malware | Hybrid-Analysis | 2019-05-15 11:15:12 | 2022-01-25 11:00:40 | ||
| Malicious site | Hybrid-Analysis | 2018-05-15 08:17:18 | 2022-01-25 10:31:21 | ||
| Phishing site | Hybrid-Analysis | 2018-05-28 04:00:38 | 2022-01-24 22:45:33 | ||
| JS:Trojan.Cryxos | Hybrid-Analysis | 2019-11-05 22:30:12 | 2022-01-24 17:45:54 | ||
| Malware site | Hybrid-Analysis | 2018-05-21 21:45:23 | 2022-01-24 16:45:32 | ||
| PDF:PhishingX | Hybrid-Analysis | 2021-09-29 21:15:27 | 2022-01-22 12:00:16 | ||
| Phish.AB38 | Hybrid-Analysis | 2020-11-19 02:00:05 | 2022-01-22 01:15:21 | ||
| Application.Deceptor | Hybrid-Analysis | 2020-02-19 22:45:20 | 2022-01-22 00:00:45 | ||
| Adware.RelevantKnowledge | Hybrid-Analysis | 2022-01-21 12:30:30 | 2022-01-21 12:30:30 | ||
| Artemis | Hybrid-Analysis | 2019-12-11 17:15:10 | 2022-01-20 07:15:17 | ||
| Unsafe.AI_Score_100% | Hybrid-Analysis | 2020-04-07 09:45:29 | 2022-01-19 18:30:32 | ||
| Trojan.PDF | Hybrid-Analysis | 2022-01-19 06:45:18 | 2022-01-19 06:45:18 | ||
| Adware | Hybrid-Analysis | 2019-02-06 21:00:11 | 2022-01-19 03:15:57 | ||
| Gen:Variant.Tedy | Hybrid-Analysis | 2022-01-17 20:17:45 | 2022-01-17 20:17:45 | ||
| IL:Trojan.MSILZilla | Hybrid-Analysis | 2022-01-09 20:00:12 | 2022-01-17 17:16:15 | ||
| Unsafe | Hybrid-Analysis | 2018-07-09 11:15:35 | 2022-01-16 14:00:58 | ||
| Trojan.Agent | Hybrid-Analysis | 2018-09-27 07:45:11 | 2022-01-16 05:00:13 | ||
| Application.Bundler | Hybrid-Analysis | 2022-01-09 18:15:38 | 2022-01-12 19:30:18 | ||
| UnwantedSig [PUP] | Hybrid-Analysis | 2022-01-12 17:16:06 | 2022-01-12 17:16:06 | ||
| Generic.ASMalwS | Hybrid-Analysis | 2022-01-12 09:45:44 | 2022-01-12 09:45:44 | ||
| Trojan.Generic | Hybrid-Analysis | 2018-04-09 15:15:21 | 2022-01-09 19:00:23 | ||
| Adware.Relevant | Hybrid-Analysis | 2022-01-08 15:00:42 | 2022-01-08 15:00:42 | ||
| Adware.iObit | Hybrid-Analysis | 2022-01-08 14:15:24 | 2022-01-08 14:15:24 | ||
| HTML:Script | Hybrid-Analysis | 2021-12-30 16:45:12 | 2022-01-04 16:45:12 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2018-10-16 01:30:11 | 2022-01-02 00:00:26 | ||
| Gen:Variant.Bulz | Hybrid-Analysis | 2021-03-14 00:45:29 | 2021-12-31 03:15:56 | ||
| VBA:Amphitryon.3653 | Hybrid-Analysis | 2021-11-19 02:30:56 | 2021-12-30 22:30:07 | ||
| Malicious_confidence_80% | Hybrid-Analysis | 2021-06-28 01:15:15 | 2021-12-30 16:30:29 | ||
| Malicious_confidence_70% | Hybrid-Analysis | 2021-07-19 16:45:21 | 2021-12-30 16:15:38 | ||
| Unsafe.AI_Score_98% | Hybrid-Analysis | 2020-12-06 19:15:35 | 2021-12-30 15:30:51 | ||
| GameHack.DR potentially unsafe | Hybrid-Analysis | 2020-11-01 00:45:09 | 2021-12-25 18:00:12 | ||
| PUP.Systweak | Hybrid-Analysis | 2021-12-25 14:30:26 | 2021-12-25 14:30:26 | ||
| HackTool.CheatEngine | Hybrid-Analysis | 2021-12-16 23:00:16 | 2021-12-21 19:45:26 | ||
| Vitzo.A potentially unwanted | Hybrid-Analysis | 2021-12-16 17:15:53 | 2021-12-16 17:15:53 | ||
| GlaryUtilities.B potentially unwanted | Hybrid-Analysis | 2021-11-29 12:15:40 | 2021-12-13 20:31:08 | ||
| Suspected of Trojan.Downloader | Hybrid-Analysis | 2021-09-25 22:00:32 | 2021-12-12 17:30:49 | ||
| Riskware | Hybrid-Analysis | 2021-10-18 07:16:24 | 2021-12-11 06:00:22 | ||
| Malware.Generic | Hybrid-Analysis | 2019-08-09 15:00:23 | 2021-12-11 05:30:20 | ||
| Adware.AdSearch.Script | Hybrid-Analysis | 2021-12-10 20:01:53 | 2021-12-10 20:01:53 | ||
| Win64.Generic | Hybrid-Analysis | 2021-12-08 12:00:19 | 2021-12-08 12:00:19 | ||
| Other:SNH | Hybrid-Analysis | 2021-06-01 05:00:07 | 2021-12-07 10:00:11 | ||
| OpenSubtitles.A potentially unwanted | Hybrid-Analysis | 2021-12-06 08:00:36 | 2021-12-06 08:00:36 | ||
| Application.DriverReviver | Hybrid-Analysis | 2019-07-26 02:17:08 | 2021-12-06 01:15:24 | ||
| Sabsik.FL.B | Hybrid-Analysis | 2021-12-03 19:30:56 | 2021-12-03 19:30:56 | ||
| Trojan.DOC.Phishing | Hybrid-Analysis | 2021-07-22 18:45:18 | 2021-11-29 17:15:30 | ||
| Adware.Alien | Hybrid-Analysis | 2021-10-31 10:15:30 | 2021-11-29 00:00:11 | ||
| Program.Unwanted | Hybrid-Analysis | 2018-10-06 19:00:11 | 2021-11-27 01:15:38 | ||
| Malware.Dropper | Hybrid-Analysis | 2019-12-30 17:15:06 | 2021-11-25 02:15:53 | ||
| JS.Heur.Phishing.6.49AA231F | Hybrid-Analysis | 2021-11-24 17:15:36 | 2021-11-24 17:15:36 | ||
| Adware.YTDownloader | Hybrid-Analysis | 2019-07-03 21:15:10 | 2021-11-24 16:45:28 | ||
| Phishing.FI | Hybrid-Analysis | 2021-11-24 16:15:47 | 2021-11-24 16:15:47 | ||
| HackTool.Crack | Hybrid-Analysis | 2021-11-23 01:31:11 | 2021-11-23 01:31:11 | ||
| Adware.Generic | Hybrid-Analysis | 2021-10-06 04:15:25 | 2021-11-21 14:30:27 | ||
| Unsafe.AI_Score_72% | Hybrid-Analysis | 2019-12-25 00:45:07 | 2021-11-19 15:30:59 | ||
| FileRepMetagen [Adw] | Hybrid-Analysis | 2021-11-19 02:16:09 | 2021-11-19 02:16:09 | ||
| Gen:Variant.Application.Wavesor | Hybrid-Analysis | 2021-11-18 22:00:26 | 2021-11-18 22:00:26 | ||
| Application.DealAlpha.1 | Hybrid-Analysis | 2021-11-18 09:45:31 | 2021-11-18 09:45:31 | ||
| CVE-2020-0601 | Hybrid-Analysis | 2021-11-16 18:45:37 | 2021-11-16 18:45:37 | ||
| BScope.Backdoor | Hybrid-Analysis | 2021-11-16 15:30:59 | 2021-11-16 15:30:59 | ||
| Phishing.JS | Hybrid-Analysis | 2021-11-15 08:15:23 | 2021-11-15 08:15:23 | ||
| Gen:Variant.MSILPerseus | Hybrid-Analysis | 2019-10-03 18:15:48 | 2021-11-15 07:31:18 | ||
| Gen:Variant.Jaik | Hybrid-Analysis | 2021-06-14 01:00:21 | 2021-11-12 07:15:52 | ||
| Gen:Variant.Adware.Zusy | Hybrid-Analysis | 2021-11-11 22:15:26 | 2021-11-11 22:15:26 | ||
| Gen:Variant.Application.Bundler | Hybrid-Analysis | 2021-11-11 17:17:08 | 2021-11-11 17:17:08 | ||
| Trojan.Malware.300983 | Hybrid-Analysis | 2020-05-30 14:00:36 | 2021-11-11 14:45:38 | ||
| Generic ML PUA | Hybrid-Analysis | 2021-07-02 21:30:24 | 2021-11-11 03:00:15 | ||
| Phish.BPV | Hybrid-Analysis | 2021-11-10 09:45:20 | 2021-11-10 09:45:20 | ||
| Application.Systweak | Hybrid-Analysis | 2021-08-13 03:15:31 | 2021-11-08 12:15:41 | ||
| HEUR:Trojan.Zapchast | Hybrid-Analysis | 2021-11-05 20:16:08 | 2021-11-05 20:16:08 | ||
| TrojanDownloader.Iframe | Hybrid-Analysis | 2021-11-05 18:45:11 | 2021-11-05 18:45:11 | ||
| Downloader.InstallIQ | Hybrid-Analysis | 2021-11-04 08:15:44 | 2021-11-04 08:15:44 | ||
| Malware.Heuristic | Hybrid-Analysis | 2021-03-28 19:31:01 | 2021-11-04 04:15:27 | ||
| Gen:Variant.Fragtor | Hybrid-Analysis | 2021-11-02 18:00:56 | 2021-11-02 18:00:56 | ||
| Trojan.Script.Generic | Hybrid-Analysis | 2020-08-26 15:00:21 | 2021-10-29 18:00:37 | ||
| Dropper.Trojan.Generic | Hybrid-Analysis | 2018-11-06 21:15:17 | 2021-10-22 14:01:32 | ||
| CVE-2014-3153 | Hybrid-Analysis | 2021-10-21 21:30:58 | 2021-10-21 21:30:58 | ||
| ScrInject.B | Hybrid-Analysis | 2021-10-21 12:45:25 | 2021-10-21 12:45:25 | ||
| malicious.c94637 | Hybrid-Analysis | 2021-10-19 16:45:27 | 2021-10-19 16:45:27 | ||
| HEUR:Trojan.Chapak | Hybrid-Analysis | 2021-10-19 15:01:10 | 2021-10-19 15:01:10 | ||
| Troj.Undef | Hybrid-Analysis | 2021-10-17 18:17:30 | 2021-10-17 18:17:30 | ||
| PUP.Optional | Hybrid-Analysis | 2018-11-20 18:45:15 | 2021-10-13 17:16:02 | ||
| Suspicious.Save | Hybrid-Analysis | 2021-10-13 11:15:24 | 2021-10-13 11:15:24 | ||
| HEUR:Trojan.PDF.Agent | Hybrid-Analysis | 2020-12-14 17:16:26 | 2021-10-12 14:30:08 | ||
| Adware.InstallCore.vl | Hybrid-Analysis | 2021-10-06 18:31:11 | 2021-10-06 18:31:11 | ||
| PUP.Win64.WinZipDriverUpdater.vl | Hybrid-Analysis | 2021-04-04 13:45:19 | 2021-10-06 09:30:25 | ||
| Macro.Downloader.MRGT | Hybrid-Analysis | 2019-09-06 14:15:06 | 2021-10-05 13:00:39 | ||
| TrojWare.MSIL.TrojanClicker.Lasdoma | Hybrid-Analysis | 2021-10-04 02:30:38 | 2021-10-04 02:30:38 | ||
| Gen:Variant.Zusy | Hybrid-Analysis | 2018-11-04 04:30:53 | 2021-10-04 02:15:32 | ||
| Trojan.AntiSandbox.GenericKD | Hybrid-Analysis | 2021-10-02 18:30:53 | 2021-10-02 18:30:53 | ||
| Gen:Variant.Cerbu | Hybrid-Analysis | 2021-10-02 01:45:22 | 2021-10-02 01:45:22 | ||
| Malicious_confidence_60% | Hybrid-Analysis | 2021-09-27 18:15:40 | 2021-09-27 18:15:40 | ||
| RegistryReviver.B potentially unwanted | Hybrid-Analysis | 2021-09-25 22:00:25 | 2021-09-25 22:00:25 | ||
| PUP.BitDriverUpdater.sd | Hybrid-Analysis | 2021-09-25 07:00:20 | 2021-09-25 07:00:20 | ||
| WaveBrowser.A potentially unwanted | Hybrid-Analysis | 2021-09-18 01:45:32 | 2021-09-18 01:45:32 | ||
| Trojan.Clicker.VB | Hybrid-Analysis | 2021-09-12 03:00:11 | 2021-09-12 03:00:11 | ||
| Trojan.Banker.ClipBanker | Hybrid-Analysis | 2021-09-11 14:30:38 | 2021-09-11 15:15:38 |
Tags
miner apt banker ramnit phishingIP addresses resolved by this hostname
- 52.85.117.215 (2018-04-14 18:17:25)
- 52.85.117.84 (2018-04-14 18:17:25)
- 52.85.117.152 (2018-04-14 18:17:25)
- 52.85.117.230 (2018-04-14 18:17:25)
- 52.85.117.236 (2018-04-14 18:17:25)
- 52.85.117.184 (2018-04-14 18:17:25)
- 52.85.117.118 (2018-04-14 18:17:25)
- 52.85.117.16 (2018-04-14 18:17:25)
- 52.84.127.140 (2018-04-13 01:17:55)
- 52.84.127.2 (2018-04-13 01:17:55)
- 52.84.127.216 (2018-04-13 01:17:55)
- 52.84.127.16 (2018-04-13 01:17:55)
- 52.84.127.90 (2018-04-13 01:17:55)
- 52.84.127.88 (2018-04-13 01:17:55)
- 52.84.127.133 (2018-04-13 01:17:55)
- 52.84.127.234 (2018-04-13 01:17:55)
- 52.84.127.228 (2018-04-09 15:15:22)
- 52.84.127.104 (2018-04-09 15:15:22)
- 52.84.127.211 (2018-04-09 15:15:22)
- 52.84.127.53 (2018-04-09 15:15:22)
- 52.84.127.6 (2018-04-09 15:15:22)
- 52.84.127.226 (2018-04-09 15:15:22)
- 52.84.127.131 (2018-04-09 15:15:22)
- 52.84.127.213 (2018-04-09 15:15:22)
- 52.84.118.215 (2018-03-16 06:01:11)
- 52.84.118.178 (2018-03-16 06:01:11)
- 52.84.118.114 (2018-03-16 06:01:11)
- 52.84.118.41 (2018-03-16 06:01:11)
- 52.84.118.252 (2018-03-16 06:01:11)
- 52.84.118.130 (2018-03-16 06:01:11)
- 52.84.118.126 (2018-03-16 06:01:11)
- 52.84.118.111 (2018-03-16 06:01:11)
- 52.84.63.136 (2018-03-14 15:02:56)
- 52.84.63.175 (2018-03-14 15:02:56)
- 52.84.63.231 (2018-03-14 15:02:56)
- 52.84.63.246 (2018-03-14 15:02:56)
- 52.84.63.176 (2018-03-14 15:02:56)
- 52.84.63.239 (2018-03-14 15:02:56)
- 52.84.63.168 (2018-03-14 15:02:56)
- 52.84.63.183 (2018-03-14 15:02:56)
- 54.230.51.132 (2018-03-13 11:15:42)
- 54.230.51.224 (2018-03-13 11:15:42)
- 54.230.51.127 (2018-03-13 11:15:42)
- 54.230.51.234 (2018-03-13 11:15:42)
- 54.230.51.253 (2018-03-13 11:15:42)
- 54.230.51.181 (2018-03-13 11:15:42)
- 54.230.51.51 (2018-03-13 11:15:42)
- 54.230.51.82 (2018-03-13 11:15:42)
- 52.85.146.211 (2017-10-17 19:32:43)
- 52.85.146.131 (2017-10-17 19:32:43)
- 52.85.146.247 (2017-10-17 19:32:43)
- 52.85.146.148 (2017-10-17 19:32:43)
- 52.85.146.198 (2017-10-17 19:32:43)
- 52.85.146.210 (2017-10-17 19:32:43)
- 52.85.146.34 (2017-10-17 19:32:43)
- 52.85.146.157 (2017-10-17 19:32:43)
- 3.161.210.53 (2025-05-24 06:09:12)
- 3.161.210.22 (2025-05-24 06:09:12)
- 3.161.210.107 (2025-05-24 06:09:12)
- 3.161.210.66 (2025-05-24 06:09:12)
Whois information
- AS name
- AS16509 Amazon.com, Inc.
- Domain
- amazontrust.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS-1249.AWSDNS-28.ORG, NS-1794.AWSDNS-32.CO.UK, NS-419.AWSDNS-52.COM, NS-612.AWSDNS-12.NET, ns-612.awsdns-12.net, ns-1794.awsdns-32.co.uk, ns-419.awsdns-52.com, ns-1249.awsdns-28.org
- Whois server
- whois.markmonitor.com
- Registrant
- MarkMonitor Inc.
- Address
- 410 Terry Ave N,
- City
- seattle
- State
- wa
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- Domain created
- 2007-05-11 18:34:14
- Domain expires
- 2027-05-11 18:34:14
- First indexed
- 2017-10-17 19:32:43
- Last updated
- 2026-09-11 17:52:58