Security Scan Report: ph2-cc-pages.s3.ap-southeast-2.amazonaws.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is amazonaws.com and was registered 21 years ago.

Submitted URL: https://ph2-cc-pages.s3.ap-southeast-2.amazonaws.com/microsoft-include-password-field/index.html

AI Security Verdict

Confirmed Scam

Confidence: 96%

9
Risk Score

Confirmed Microsoft credential-phishing landing: Microsoft-branded login with password field on an S3 bucket, flagged by Safe Browsing social engineering and a HIGH Suricata Microsoft phishing signature.

Risk Factors (5)
Microsoft brand impersonation: Microsoft favicon and login branding served from an AWS S3 bucket, not a Microsoft domain
Credential collection form with email/username and password fields
Google Safe Browsing social engineering detection
Suricata HIGH phishing alert matching Microsoft Account phishing landing
Cloud-storage hosted page with unknown creation date and no domain reputation
Domain age information unavailable

Details

Page Title

Sign in to your Microsoft account

Scan Type

public

Domain Name Analysis

You're looking at domain 'ph2-cc-pages.s3.ap-southeast-2.amazonaws.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'ph2-cc-pages.s3.ap-southeast-2'. Count 9 characters in 'amazonaws' containing 4 vowels alongside five consonants. Breaking it apart gives 3 words: amazon, aw, s. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

BE Microsoft Sign in Email, phone, or Skype Password No account? Create onet Sign in witha security key () options

Page Load Overview

4.29s
Total Load Time
142 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:EN-US
Text Length:339 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software68% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
68%
social media network
61%
news media journalism
44%
documentation technical
32%
government public service
29%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13.5.167.207Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
13.5.165.114Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
13.5.164.119Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
152.95.128.14Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
13.5.168.33Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
13.5.164.65Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
13.5.165.150Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
13.5.166.243Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
88--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T119220E2161F009274282C1D87BBAAE5B3F90EA07CA4B9A1476AC0FD54FE3ED6CC5711C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:jsZO1oaLPehOO9PJo97G6I6AkeakPTmvJafY2EuGqNTuf8fh86l1:dWclpTv+0aZBfh8G1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10099:QBl0yjNVpRQoB5QAAJh0wGBEYFoIlACtQEAkAgz5EHhgREIAwgQAMCpBEGESEIPwDuCIgdzGLYAz6ZQlikhhCAkoUCCwiwjA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00001818191f0f9f
Perceptual Hash:9c497326cc99d9e4
Difference Hash:7171333331327c79
Wavelet Hash:191818181f1f1fff
Color Hash:07000000180

Other Hashes

Crop Resistant:7171333331327c79

Scan History

Scan history not available

Unable to load historical scan data