Security Scan Report: amzn-recocheck.s3.us-east-1.amazonaws.com

Page Did Not Load

This site did not respond consistently during our scan — it may be intermittently unreachable, or refusing automated visitors. The screenshot and page details below show the page as it was captured.

Submitted: Completed: publiccompleted
This website contacted 16 IPs in 1 country across 3 domains to perform 17 HTTP transactions. The main domain is amzn-recocheck.s3.us-east-1.amazonaws.com.

Submitted URL: https://amzn-recocheck.s3.us-east-1.amazonaws.com/restore.htm

AI Security Verdict

High Risk

Confidence: 92%

10
Risk Score

High‑risk phishing site using URL manipulation and brand impersonation.

Risk Factors (4)
URL manipulation (high‑risk phishing technique)
Brand impersonation on a low‑reputation, unranked domain
Mismatch between displayed URL and actual content source
Use of cloud storage subdomain (s3.amazonaws.com) without legitimate branding
Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Domain Name Analysis

Domain 'amzn-recocheck.s3.us-east-1.amazonaws.com' uses the commercial generic top-level domain (.com) and includes subdomain 'amzn-recocheck.s3.us-east-1'. The core label 'amazonaws' covers 9 characters containing four vowels alongside five consonants. Word splitting yields three words: amazon, aw, s. Median word length is 2 characters. 'amazonky' is most common in Czech usage. You will also see it in Slovak and Croatian contexts. Overall, 'amzn-recocheck.s3.us-east-1.amazonaws.com' reads as Czech.

Screenshot

secure-ledger-restore.com verifying you are human. This may take a few seconds. “75 verifying... crounteane secure-ledger-restore.com needs to review the security of your connection before proceedi...

Page Load Overview

18.65s
Total Load Time
370 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:489 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software26% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
252.217.99.184Ashburn, Virginia, United States
AS16509AMAZON-02
1104.18.95.41United States
AS13335CLOUDFLARENET
152.217.197.106Ashburn, Virginia, United States
AS16509AMAZON-02
1104.18.94.41United States
AS13335CLOUDFLARENET
1104.21.65.218United States
AS13335CLOUDFLARENET
1172.67.193.105United States
AS13335CLOUDFLARENET
152.216.213.114Ashburn, Virginia, United States
AS16509AMAZON-02
12606:4700::6812:5f29United States
AS13335CLOUDFLARENET
154.231.161.114Ashburn, Virginia, United States
AS16509AMAZON-02
116.15.195.7Ashburn, Virginia, United States
AS14618AMAZON-AES
1716--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19E822A374906101F62774EA77079F7588120F288E70197BEF0A79F989BC9D1B26627EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Va+e9yIPl2boVmJkEqE5B7yVoCkZnEWRbAZopcgXtcHyVXJ:U+ecq4brJkxrVobpRbAupxtc2Z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18597:EhrAGKBMU2IcBCKOEQGpGiEQwQSWKvgi3gCH4MyNRCUghGhsCMEIVvNA4JIQBQkLAwAepRFNdjA0gyFCOSZMCghEHCMCU1HS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c7c3ffffffe7
Perceptual Hash:b03086cec3c9cfcd
Difference Hash:081c161e0000000c
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data