Security Scan Report: web.archive.org

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 4 domains to perform 18 HTTP transactions. The main domain is archive.org and was registered 30 years ago.

Submitted URL: https://web.archive.org/web/20260414174030/https://mail-owaexchnange-autodisciover-mailbox.s3.us-east-1.amazonaws.com/index.html#[email protected]

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Archived capture of an Outlook Web App phishing kit on an AWS S3 bucket with a typosquatted Exchange/Autodiscover name, a victim email in the URL fragment, and a HIGH IDS OWA phishing alert. Do not enter credentials.

Risk Factors (5)
Brand impersonation: page presents itself as Microsoft Outlook Web App on an unrelated AWS S3 bucket
Typosquatted/squatted hostname spelling mimicking Exchange Autodiscover mail services
Victim email address embedded in URL fragment (phishing-kit victim tracking token) with a domain unrelated to the host
HIGH severity IDS phishing alert (ET PHISHING OWA Mail Phishing Landing) tied to the page content
Captured kit content is hosted on cloud storage (S3), a common phishing delivery vector
Domain age information unavailable

Details

Page Title

Outlook Web Appother network

Scan Type

public

Domain Name Analysis

Domain 'web.archive.org' uses the non-profit oriented generic top-level domain (.org) with subdomain 'web'. Count 7 characters in 'archive' split between three vowels and 4 consonants. Splitting it apart reveals 1 word: archive. Median word length is 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://web.archive.org/web/20260414174030/https://mail-owaexchnange-autodisciover-mailbox.s3.us-east-1.amazonaws.com/index.html#example@example.com

Page Load Overview

N/A
Total Load Time
4 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,591 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software34% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
34%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6207.241.237.3United States
AS7941Internet Archive
4207.241.237.2United States
AS7941Internet Archive
4207.241.224.2United States
AS7941Internet Archive
4207.241.225.195United States
AS7941Internet Archive
04--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T102933B7E4AE364536E1F4565B7F916063D32C0138B49FD077B5C7A888F86EB2CE812A4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:eseJ6aw+9W3EGr09Vo5fN6Jh9MMjyuclSLoVeNd3SKUkF5u4nFuJf+c3cUuFyLTC:eseJ6awUWJeNgI0xLM7ypk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:92239:IZAEICVBEDyIAWEOqoUQBguxYJPiSEIMKNsiAJkpEIjCSJEf0wskQwIo0L8ZZUIiIMSZQHQiWAIgCFRaQiAwAAPCHBwDAQzS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3f3f3f3f3f3f
Perceptual Hash:83f66e010999d9fc
Difference Hash:d0ccccd8d0d0d0d0
Wavelet Hash:3f333f3f3f0f0000
Color Hash:#c287c5

Scan History

Scan history not available

Unable to load historical scan data