Security Scan Report: tnegadge.s3.amazonaws.com

Response type:XML documentapplication/xmlHTTP 200The server returned structured data (XML), typically from an API, a configuration endpoint or a storage listing, not a web page.
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is amazonaws.com and was registered 21 years ago.

Submitted URL: https://tnegadge.s3.amazonaws.com

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Open S3 bucket listing (not a website) whose primary domain is flagged by two independent feeds as APT UNC5221 malware infrastructure. Do not download or execute any listed files.

Risk Factors (3)
Malware/APT content threat-intelligence hit against the scanned domain from multiple feeds
Open S3 bucket indexing bulk files with no owner identification or access restriction
Shared-hosting subdomain on .s3.amazonaws.com with unknown true creation date
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'tnegadge.s3.amazonaws.com' on the commercial generic top-level domain (.com), featuring subdomain 'tnegadge.s3'. The core label 'amazonaws' covers 9 characters with four vowels and 5 consonants. Tokenizing the label suggests three words: amazon, aw, s. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tnegadge.s3.amazonaws.com

Page Load Overview

1.80s
Total Load Time
235 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:36%
Script:Latin
Direction:ltr

Detection Details

Text Length:367,887 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain44% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
44%
documentation technical
37%
healthcare medical
33%
technology software
32%
news media journalism
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23.5.212.108Aws · CLOUDMumbai, Maharashtra, India
AS16509Amazon.com, Inc.
052.219.62.120Aws · CLOUDMumbai, Maharashtra, India
AS16509Amazon.com, Inc.
03.5.213.96Aws · CLOUDMumbai, Maharashtra, India
AS16509Amazon.com, Inc.
03.5.211.3Aws · CLOUDMumbai, Maharashtra, India
AS16509Amazon.com, Inc.
24--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T127557C64DDA303F211BBD5E611FD6BEB24F6813BE816616197AC839C87CDE007E2194B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:jZAv8G8u//XHuuNGwMn8fh2LngHiW2sseK2NW/HOW2sMe92NWaHpW2sPCe92NWhL:jZcz8g/3upNfyfR2qbIUq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1281437:ZpEEopkEcIgiTWAAwDAABHmRKSBGEXEEgWRIIIjwkiwBWxgEKIgCIYoQwJBrQixImoTISoxAhEWiKUwzCWAQRZpIAIRhAGjy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f3f3f3f3f3f3f3f
Perceptual Hash:87787838783c781f
Difference Hash:f0c0e0e0e0e0e0e0
Wavelet Hash:003e3e3e32323232
Color Hash:#d279cc

Other Hashes

Crop Resistant:f0c0e0e0e0e0e0e0

Scan History

Scan history not available

Unable to load historical scan data