Security Scan Report: z02rjq9yyen54cjw1b13x3hleimkkia2v034vh1.s3.us-west-1.amazonaws.com

Response type:Image (PNG)image/pngHTTP 200The address points to an image rather than a web page.
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is amazonaws.com and was registered 21 years ago.

Submitted URL: https://z02rjq9yyen54cjw1b13x3hleimkkia2v034vh1.s3.us-west-1.amazonaws.com/Vv6eaQk7v1b2QIRv8E5Qnl5OBeXP2yrw8fCkCpUf9.png

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

Static image used as a fake celebrity health ad: it claims Elon Musk endorsed a 'Vicks trick' curing dementia and outperforming $26,500 drugs. No malware or forms, but deceptive medical marketing hosted on an anonymous S3 bucket — treat as an untrustworthy scam funnel.

Risk Factors (4)
Fabricated endorsement attributed to a public figure (Elon Musk) for a medical remedy
Unsubstantiated dementia/memory-loss cure claims ('outperforming $26,500 prescription drugs')
Opaque random-named S3 bucket and filename used to host ad creative, consistent with disposable scam infrastructure
Clickbait health-ad format designed to funnel users to an unverified offer page
Safety Factors (5)
No forms, no password, payment or email fields (verified form facts: 0 forms)
No Indicators of Compromise matched against the resource
No JavaScript malware patterns, no high-precision hunting-rule hits, no IDS alerts
Response is a static image with no scripts or cross-origin network activity
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Vv6eaQk7v1b2QIRv8E5Qnl5OBeXP2yrw8fCkCpUf9.png (546×1650)

Scan Type

public

Domain Name Analysis

The domain name 'z02rjq9yyen54cjw1b13x3hleimkkia2v034vh1.s3.us-west-1.amazonaws.com' uses the commercial generic top-level domain (.com), featuring subdomain 'z02rjq9yyen54cjw1b13x3hleimkkia2v034vh1.s3.us-west-1'. The core label 'amazonaws' covers 9 characters split between 4 vowels and five consonants. Segmentation suggests three words: amazon, aw, s. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

HEALTH vraenomumne Elon Musk Reveals The 15-Second Vicks Trick For Memory Loss and Dementia — ‘Outperforming $26,500 Prescription Drugs {ethan thew an ml sol pe radon el ne memmplde tee ete ce Neds e...

Page Load Overview

1.09s
Total Load Time
294 KB
Total Size

Language Analysis

Primary Language

🇳🇴Norwegian
Code: no
Confidence:43%
Script:Latin
Direction:ltr

Detection Details

Text Length:56 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical53% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
53%
news media journalism
48%
real estate property
39%
documentation technical
39%
finance banking
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
252.219.112.209Aws · CLOUDSan Jose, California, United States
AS16509Amazon.com, Inc.
016.15.4.56Aws · CLOUDSan Jose, California, United States
AS16509Amazon.com, Inc.
016.15.0.150Aws · CLOUDSan Jose, California, United States
AS16509Amazon.com, Inc.
23--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T155F0ACA9C2823424B10BD2ED4CD1E73E65B7C0488B940B386A7BB596F14A5A554B30CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:3uAYU8VRkvEZ//B1fqMW1ur1laQJjzMku+Vpb:3uAYUuROcBPraGdpb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:578:YAAAAAAAAAAAAAAAAAAAAAAAgAAAAQABAQAAAAAAAAAAAAAAAAAAAAAgAAAAAAIAgAQAAAAAAIAAAAAAAAAIAAAAAAAAABAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818181818181818
Perceptual Hash:9933cccc663399cc
Difference Hash:b2b2b2b2b2b2b2b2
Wavelet Hash:1818181818183838
Color Hash:31401088000

Scan History

Scan history not available

Unable to load historical scan data