ScanMalware.com

Security Scan Report: webdaviononutzerappmail.s3.eu-north-1.amazonaws.com

Submitted: Nov 10, 2025, 7:44:36 AMCompleted: Nov 10, 2025, 7:44:54 AMpubliccompleted
Loading additional data...

Summary

This website contacted 20 IPs in 0 countries across 6 domains to perform 41 HTTP transactions. The main domain is webdaviononutzerappmail.s3.eu-north-1.amazonaws.com.

Submitted URL: https://webdaviononutzerappmail.s3.eu-north-1.amazonaws.com/new+new/index.html

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Phishing site impersonating IONOS, hosted on S3 with a login form – confirmed scam.

Risk Factors
Credential collection form on cloud storage (S3) domain
Brand impersonation of IONOS on a non‑official domain
Newly registered / unranked domain
Absence of legitimate IONOS domain in final URL
Domain age information unavailable

Details

Page Title

Anmeldung - IONOS

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

documentation technical

(90%)

Domain Information

The domain 'webdaviononutzerappmail.s3.eu-north-1.amazonaws.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'webdaviononutzerappmail.s3.eu-north-1'. Its registrable label 'amazonaws' stretches across 9 characters split between four vowels and five consonants. Splitting it apart reveals three words: amazon, aw, s. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://webdaviononutzerappmail.s3.eu-north-1.amazonaws.com/new+new/index.html

Page Load Overview

2.76s
Total Load Time
41
HTTP Requests
6
Domains
786 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:1,516 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical90% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
90%
technology software
39%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
33.5.217.120UnknownUnknown
2108.138.7.16UnknownUnknown
2108.138.7.61UnknownUnknown
2213.165.66.58UnknownUnknown
2217.160.86.59UnknownUnknown
216.12.11.6UnknownUnknown
23.5.217.21UnknownUnknown
2108.138.7.72UnknownUnknown
216.12.9.58UnknownUnknown
2217.160.86.61UnknownUnknown
4120--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11AB2E96244E18A6FA66356D9B3B2FB15F8E1C00BCC589980F6FC45918FDADD0481F63E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:BvDpG6Oy9HX0j5KNiZPyJ04IMPmiGVvvVvQUpAYmymXV3Ree4P:K6hly27V3Re7P

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24259:GTMEjIIgGBVpINEtCRUKEYSBNWIowTNaBCsISRDYZpKgrp1rRCSEoBFqJ0ImMgIIKwgBsAS8YDaEiEgGcCBqUACgWxAgHAAM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000000000ffff
Perceptual Hash:b373894ba6a64e8c
Difference Hash:c818300c100ce8b8
Wavelet Hash:6f0c1c001c24ffff
Color Hash:#3a7678

Other Hashes

Crop Resistant:c818300c100ce8b8,45554d7171514d41

Scan History

Scan history not available

Unable to load historical scan data