ScanMalware.com

Security Scan Report: s3.us-east-2.amazonaws.com

Redirected to: https://s3.us-east-2.amazonaws.com/bb-east-4.console.aws.amazon.com004/Blue-index.html?err=8ACGG5HWi3kCfFYGw5b6zuUdVxZf5YZdvydZaBOWv1EEfSbPdbbXoGrj7rA6St8qdLIJ2IMEpZZnZmJ21utJ7VBYcJ4wwBTDTAfaFjBPTFETk77awPWNX6xbJoY&dispatch=baa0313a5a3c37BbBCAAbbAB77A38cB37&id=45b8333A850721aBB49b6bCBB7802C#[email protected]

Submitted: Jan 21, 2026, 2:11:26 AMCompleted: Jan 21, 2026, 2:12:34 AMpubliccompleted
Loading additional data...

Summary

This website contacted 8 IPs in 1 country across 4 domains to perform 21 HTTP transactions. The main domain is s3.us-east-2.amazonaws.com and was registered NaN years ago.

Submitted URL: https://s3.us-east-2.amazonaws.com/bb-east-4.console.aws.amazon.com004/Blue-index.html#[email protected]

Effective URL: https://s3.us-east-2.amazonaws.com/bb-east-4.console.aws.amazon.com004/Blue-index.html?err=8ACGG5HWi3kCfFYGw5b6zuUdVxZf5YZdvydZaBOWv1EEfSbPdbbXoGrj7rA6St8qdLIJ2IMEpZZnZmJ21utJ7VBYcJ4wwBTDTAfaFjBPTFETk77awPWNX6xbJoY&dispatch=baa0313a5a3c37BbBCAAbbAB77A38cB37&id=45b8333A850721aBB49b6bCBB7802C#[email protected]Redirected

The Cisco Umbrella rank of the primary domain is #21 of the top 1 million websitesTop 100 Site

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Phishing login page hosted on S3; confirmed scam.

Risk Factors
Credential harvesting form on a cloud storage (S3) URL
Email address in URL fragment used as phishing lure
Use of a generic S3 bucket path to present a login page
Domain age information unavailable

Details

Page Title

HEH - Mail

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain 's3.us-east-2.amazonaws.com' uses the commercial generic top-level domain (.com) with subdomain 's3.us-east-2'. The core label 'amazonaws' covers 9 characters holding four vowels versus 5 consonants. Breaking it apart gives three words: amazon, aw, s. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://s3.us-east-2.amazonaws.com/bb-east-4.console.aws.amazon.com004/Blue-index.html#alqpthgt@heh.se

Page Load Overview

0.79s
Total Load Time
21
HTTP Requests
4
Domains
722 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:25 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7104.16.174.226United States
AS13335CLOUDFLARENET
2104.16.175.226United States
AS13335CLOUDFLARENET
252.219.228.49Columbus, Ohio, United States
AS16509AMAZON-02
23.5.128.151Columbus, Ohio, United States
AS16509AMAZON-02
23.5.128.36Columbus, Ohio, United States
AS16509AMAZON-02
2104.17.25.14United States
AS13335CLOUDFLARENET
2104.17.24.14United States
AS13335CLOUDFLARENET
252.219.111.17Columbus, Ohio, United States
AS16509AMAZON-02
218--

Detected Technologies7

PasswordField
100%
JQueryv3.6.0
100%
Cloudflare
50%
Amazon Web Services
40%
Amazon S3
40%
jsDelivr
20%
cdnjs
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10404FEDB1EB311085E8BB0B5A7FE6660B278D443C19DDD927C8CA059CF856E08CDAB1D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:CUbKebThmaXok/umarb+nWdXXjJb3lsCP6IxMMs5Y:C98TIjf36ncDxpP6IeMs5Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:174670:kgVBAIAJkNQlygVGQGzgILHJ+hlAAgQiABAUNRDrUgWgCoAAGzhQFhIKGKhIJYSUEgoJBIoC1TSfgAgChTiLQqYiiILYYAMn

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7ffe7e7ffff
Perceptual Hash:b399cc2699996666
Difference Hash:000808100c0c0008
Wavelet Hash:3f2727270707070f
Color Hash:#80bf40

Other Hashes

Crop Resistant:000808100c0c0008

Scan History

Scan history not available

Unable to load historical scan data