Security Scan Report: web.archive.org

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 5 domains to perform 23 HTTP transactions. The main domain is archive.org and was registered 30 years ago.

Submitted URL: https://web.archive.org/web/20260414174030/https://mail-owaexchnange-autodisciover-mailbox.s3.us-east-1.amazonaws.com/index.html#[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Archived capture of an Outlook Web App phishing landing hosted on a typosquatted S3 bucket, with a victim email token in the URL and a HIGH-severity IDS phishing alert. Do not enter credentials.

Risk Factors (5)
Brand impersonation of Microsoft Outlook Web App on a non-Microsoft cloud-storage host
Deceptive hostname containing misspellings ('owaexchnange', 'autodisciover') engineered to look like an OWA/autodiscover mailbox endpoint
HIGH-severity IDS phishing signature matching the OWA mail phishing template
Victim email embedded in the URL fragment as a targeting/tracking token
Credential-collection sign-in interface presented on an unrelated domain
Domain age information unavailable

Details

Page Title

Outlook Web Appother network

Scan Type

public

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'web.archive.org' is registered; it also runs on subdomain 'web'. The second-level label 'archive' is 7 characters long split between three vowels and 4 consonants. Splitting it apart reveals one word: archive. Median word length is seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://web.archive.org/web/20260414174030/https://mail-owaexchnange-autodisciover-mailbox.s3.us-east-1.amazonaws.com/index.html#example@example.com

Page Load Overview

N/A
Total Load Time
33 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,591 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software34% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
34%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7207.241.237.3United States
AS7941Internet Archive
4207.241.237.2United States
AS7941Internet Archive
4207.241.224.2United States
AS7941Internet Archive
4207.241.237.8United States
AS7941Internet Archive
4207.241.225.195United States
AS7941Internet Archive
05--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T124933B7E59E364536E1F4565B7F926063D32C0138B49FD073B5C7A888F86EB2CE812A4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:aEAJ6aw+9W3EGr09Vo5fN6Jh9MMjyuclSeoVeNd3SKUkF5u4nFuqZsf+c3cUuFya:aEAJ6awUWMeNgI0/LM7ypQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:92598:DEgARrFQ4oIEAkABURLdFiYYDEIBCw5Ig+IACiNTFIgSU8IGDlIUsWbIPKIACKgDCGjzRWAE0AnQAQ0iIEUFCVKAAuIkuj3M

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3f3f3f3f3f3f
Perceptual Hash:83f66e010999d9fc
Difference Hash:d0ccccd8d0d0d0d0
Wavelet Hash:3f333f3f3f0f0000
Color Hash:#2d8665

Scan History

Scan history not available

Unable to load historical scan data