Security Scan Report: d3ff8olul1r3ot.cloudfront.net

Response type:XML documentapplication/xmlHTTP 200The server returned structured data (XML), typically from an API, a configuration endpoint or a storage listing, not a web page.
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is cloudfront.net and was registered 18 years ago.

Submitted URL: https://d3ff8olul1r3ot.cloudfront.net/

AI Security Verdict

Moderate Risk

Confidence: 68%

5
Risk Score

Open S3 bucket listing exposes files including AccountCredentials.json and Chrome extension archives. No phishing forms or threat-intel hits, but sensitive data exposure and possible PUP distribution warrant caution.

Risk Factors (3)
Publicly listable cloud storage bucket exposes internal file names and objects.
A file named 'AccountCredentials.json' is exposed in the bucket listing.
Downloadable Chrome extension bundles could be used for adware or PUP distribution.
Safety Factors (5)
No HTML phishing page, login form, payment form, or credential-harvesting UI is present.
No brand impersonation was detected.
No threat-intel Indicators of Compromise, JavaScript malware patterns, or network IDS alerts were found.
The response is a static XML bucket listing with no active scripts or redirects.
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'd3ff8olul1r3ot.cloudfront.net' uses the network infrastructure generic top-level domain (.net) with subdomain 'd3ff8olul1r3ot'. The registrable portion 'cloudfront' spans 10 characters holding 3 vowels versus 7 consonants. Segmentation suggests two words: cloud, front. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

This XML file does not appear to have any style information associated with it. The document tree is shown below. y<ListBucketResult xmlns="http://s3.amazonaws .com/doc/2006-03-01/"> <Name>spigot -e...

Page Load Overview

0.17s
Total Load Time
42 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:62,385 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software55% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
55%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23.174.45.101Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
03.174.45.98Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
03.174.45.198Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
03.174.45.68Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
24--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13C349D69DEA303F211BBD5E211FD6BAB24F6813BE816512197BC439C87CDE01BD2194E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:jJMbQMj8fh2LigHNWKsdel2NW/HlWEs1ef2NWaHnW1sqe52NWhH4WEsweD2NWUH/:jJEtfB

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:239565:4iIUIZxMAlTOVSggmDUDARilgAKbqNFGgmEgBUe02xQJlQJC08RVmop0EBblAM4ABEAoOCDEEAVEKEJ5mQCo3KnSRABJAgJQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f3f3f3f3f3f3f3f
Perceptual Hash:8770783c783c781f
Difference Hash:f0c0e0e0e0e0e0e0
Wavelet Hash:003e3e1e3e1e1e3e
Color Hash:07000180003

Other Hashes

Crop Resistant:f0c0e0e0e0e0e0e0

Scan History

Scan history not available

Unable to load historical scan data