Security Scan Report: ph2-cc-pages.s3.ap-southeast-2.amazonaws.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is amazonaws.com and was registered 21 years ago.

Submitted URL: https://ph2-cc-pages.s3.ap-southeast-2.amazonaws.com/microsoft-include-password-field/index.html

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed Microsoft credential-phishing page: fake sign-in form with Microsoft branding on an S3 bucket, flagged by Safe Browsing (Social Engineering x2) and an ET PHISHING IDS alert. Do not enter credentials.

Risk Factors (5)
Brand impersonation of Microsoft on a non-Microsoft S3 host
Credential (email + password) harvesting form on cloud storage
Google Safe Browsing Social Engineering detection (2 instances)
IDS HIGH phishing alert for Microsoft Account phishing landing
Bucket naming indicates a purpose-built phishing kit ('microsoft-include-password-field')
Domain age information unavailable

Details

Page Title

Sign in to your Microsoft account

Scan Type

public

Domain Name Analysis

You're looking at domain 'ph2-cc-pages.s3.ap-southeast-2.amazonaws.com' on the commercial generic top-level domain (.com) with subdomain 'ph2-cc-pages.s3.ap-southeast-2'. Its registrable label 'amazonaws' stretches across 9 characters with 4 vowels and five consonants. Segmentation suggests 3 words: amazon, aw, s. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ph2-cc-pages.s3.ap-southeast-2.amazonaws.com/microsoft-include-password-field/index.html

Page Load Overview

11.52s
Total Load Time
142 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:EN-US
Text Length:339 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software68% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
68%
social media network
61%
news media journalism
44%
documentation technical
32%
government public service
29%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23.5.165.58Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
13.5.167.252Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
13.5.169.103Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
13.5.165.255Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
13.5.167.102Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
152.95.131.6Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
13.5.165.68Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
87--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T119220E2161F009274282C1D87BBAAE5B3F90EA07CA4B9A1476AC0FD54FE3ED6CC5711C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:jsZO1oaLPehOO9PJo97G6I6AkeakPTmvJafY2EuGqNTuf8fh86l1:dWclpTv+0aZBfh8G1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10099:QBl0yjNVpRQoB5QAAJh0wGBEYFoIlACtQEAkAgz5EHhgREIAwgQAMCpBEGESEIPwDuCIgdzGLYAz6ZQlikhhCAkoUCCwiwjA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00001818191f0f9f
Perceptual Hash:9c497326cc99d9e4
Difference Hash:7171333331327c79
Wavelet Hash:191818181f1f1fff
Color Hash:#e06c7f

Other Hashes

Crop Resistant:7171333331327c79

Scan History

Scan history not available

Unable to load historical scan data