static.s123-cdn-static-b.com
Classification: Malicious
static.s123-cdn-static-b.com is a malicious hostname. Linked to Deathransom malware. 36 sightings, last seen 2026-09-13. Resolves to 15.235.54.226 and 4 more.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 20:38:30.
- Stores phishing content — Phishing resources are hosted here.
MITRE ATT&CK associations
Malware families: DEATHRANSOM (S0616)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Compromised verdict | Maltiverse | 2026-09-13 22:31:44 | 2026-09-13 22:31:44 | compromised | |
| Exploit.pidief | Maltiverse Threat Observatory | 2024-09-12 06:20:19 | 2025-11-07 12:21:35 | ||
| Malicious behavior | Maltiverse Threat Observatory | 2025-07-16 15:21:36 | 2025-11-07 12:21:35 | ||
| Phishing.artifact | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-11-07 12:21:35 | ||
| Phishing.artifact.pdf | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-11-07 12:21:35 | ||
| Trojan.generic | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2025-11-07 12:21:35 | ||
| Trojan.pdf | Maltiverse Threat Observatory | 2025-09-24 09:21:34 | 2025-11-07 12:21:35 | ||
| Deathransom | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-07-03 16:21:39 | S0616 DEATHRANSOM | |
| Top Popularity Site | Cisco Umbrella | 2022-11-05 14:11:54 | 2022-11-12 11:10:26 | benign |
IP addresses resolved by this hostname
- 15.235.54.226 (2025-01-03 14:02:27)
- 148.113.190.161 (2026-10-16 04:40:27)
- 2607:5300:20e:a100:: (2026-10-16 04:40:27)
- 109.61.86.193 (2026-10-17 20:38:30)
- 2a02:6ea0:f904::1163:1 (2026-10-17 20:38:30)
Whois information
- AS name
- AS7430 Hewlett-Packard Company
- Domain
- s123-cdn-static-b.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS-1210.AWSDNS-23.ORG, NS-1620.AWSDNS-10.CO.UK, NS-335.AWSDNS-41.COM, NS-630.AWSDNS-14.NET, ns-1210.awsdns-23.org, ns-1620.awsdns-10.co.uk, ns-335.awsdns-41.com, ns-630.awsdns-14.net
- Registrant
- Amazon Registrar, Inc.
- Address
- 604 Cameron Street
- City
- Alexandria
- State
- VA
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected], d1fce25f8bfe6f08017b9ff3569279fb39fd97491d97954b201ba9172deeca7c@s123-cdn-static-b.com.whoisproxy.org, d1fce25f8bfe6f08017b9ff3569279fba2d9692d1e4c0835bae0a6aa7e349213@s123-cdn-static-b.com.whoisproxy.org, d1fce25f8bfe6f08017b9ff3569279fb5006046ce18cafd18437386c6b9b59df@s123-cdn-static-b.com.whoisproxy.org, d1fce25f8bfe6f08017b9ff3569279fb7ae2730fae6c30c62ae95b5ad237a30e@s123-cdn-static-b.com.whoisproxy.org, 833e5106e47f2f8c57489e5701ef713134f932b351ca0de68d64b61cb6bf7324@s123-cdn-static-b.com.whoisproxy.org, 833e5106e47f2f8c57489e5701ef713177cb9cbdaf2f26003d1d66c195bce63f@s123-cdn-static-b.com.whoisproxy.org, 833e5106e47f2f8c57489e5701ef713191d4e901ae9483fad4d5332f1609dbc0@s123-cdn-static-b.com.whoisproxy.org, 833e5106e47f2f8c57489e5701ef713181bc5ff985dd9d5c7653e6067849381e@s123-cdn-static-b.com.whoisproxy.org
- Domain created
- 2021-04-25 06:24:01
- Domain expires
- 2027-04-25 06:24:01
- First indexed
- 2022-11-05 14:11:54
- Last updated
- 2026-10-17 20:38:30