Security Scan Report: drive-shared-bucketfiles-drive.s3.us-east-1.amazonaws.com

Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 4 domains to perform 6 HTTP transactions. The main domain is amazonaws.com and was registered 21 years ago.

Submitted URL: https://drive-shared-bucketfiles-drive.s3.us-east-1.amazonaws.com/db83bjs.html

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Docusign-branded document-access lure hosted on an unknown-age S3 bucket whose name mimics a Google Drive share, prompting for an email address. Brand impersonation of a different entity drives HIGH_RISK despite no form fields being captured.

Risk Factors (5)
Brand impersonation of Docusign on a non-Docusign domain
Deceptive bucket name mimicking a Google Drive share link
Email-collection pretext for 'secure document access'
Unknown-age subdomain on public cloud storage
Unranked / no reputation
Domain age information unavailable

Details

Page Title

Docusign - Accès au Document

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'drive-shared-bucketfiles-drive.s3.us-east-1.amazonaws.com' is registered, featuring subdomain 'drive-shared-bucketfiles-drive.s3.us-east-1'. Its registrable label 'amazonaws' stretches across 9 characters holding 4 vowels versus 5 consonants. Splitting it apart reveals 3 words: amazon, aw, s. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

oe w- Common tes wows punt actednt as deoe yonerg Ch sez votre langue Select your tanguage / Choisissez votre langue ag Ln English Frangais amet fat SL sgemirtie pecan

Page Load Overview

1.97s
Total Load Time
226 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:445 chars
Detector Agreement:67%

Website Classification

Primary Category

download file sharing96% confidence
Type: static
Method: ml+structural

All Detected Categories

download file sharing
96%
government public service
91%
healthcare medical
88%
news media journalism
87%
cryptocurrency blockchain
87%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
616.182.72.34Aws · CLOUDAshburn, Virginia, United States
AS16509Amazon.com, Inc.
052.217.173.130Aws · CLOUDAshburn, Virginia, United States
AS16509Amazon.com, Inc.
0104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.14.95Google · CDNUnited States
AS15169Google LLC
016.182.32.74Aws · CLOUDAshburn, Virginia, United States
AS16509Amazon.com, Inc.
0104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
016.15.162.28Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
69--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1652274AA3BB305556947947837FB9B463AB09003C54BE83D3FAC52488F45DD8ADB278C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:8R8A98fIZjDWfq6Ayrf1RhVJ2pw+DG2+ubyVjo7Znf7E6N:8R8A9c+UVUdN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10334:DjgIxLAUQGRDMhDUVAgQOEGJWDHDR6YmMBBnioAkIgDboJEEANCDEoAGVWAIksUwDsSGDPTxUj4wEMDhKcDJBjYgqLkAwDGG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818000000
Perceptual Hash:cc993366cc9933cc
Difference Hash:100c32b2b20c0800
Wavelet Hash:18181c1c1c041810
Color Hash:N/A

Other Hashes

Crop Resistant:100c32b2b20c0800

Scan History

Scan history not available

Unable to load historical scan data