Security Scan Report: the-mentor.s3.amazonaws.com

Response type:XML documentapplication/xmlHTTP 200The server returned structured data (XML), typically from an API, a configuration endpoint or a storage listing, not a web page.
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is amazonaws.com and was registered 21 years ago.

Submitted URL: https://the-mentor.s3.amazonaws.com

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Open S3 bucket tied to a multi-source malware (APT UNC5221) threat-intel match, exposing .jsp and random-named payload files — treat as malicious staging infrastructure and avoid interaction.

Risk Factors (3)
Multi-source corroborated threat-intel match naming an APT (UNC5221) malware association for the page's primary domain
Open S3 bucket exposing .jsp and large random-named binary objects (malware staging pattern)
Cloud-storage hosted subdomain with unknown creation date and no reputation ranking
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'the-mentor.s3.amazonaws.com' uses the commercial generic top-level domain (.com) and includes subdomain 'the-mentor.s3'. The core label 'amazonaws' covers 9 characters split between 4 vowels and 5 consonants. Tokenizing the label suggests three words: amazon, aw, s. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://the-mentor.s3.amazonaws.com

Page Load Overview

2.33s
Total Load Time
326 KB
Total Size

Language Analysis

Primary Language

🇪🇸CA
Code: ca
Confidence:43%
Script:Unknown
Direction:ltr

Detection Details

Text Length:226,185 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain61% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
61%
adult content
42%
technology software
38%
news media journalism
31%
documentation technical
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23.5.130.156Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
03.5.89.70Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
016.12.64.178Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
23--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15F85BB64DEA302F311BBE5E221FE5BAB24F7813BE856516197BC439C87CDD40BD2190A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:i186LRaeSgQWxNrf3kKaf0UL78gZtpwlD3uuD65aMv8fh2LngHTWVsUeeNEqy4AR:i186LRaeSgQWxNSpuKfDoIrFTMZk4l9t

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1841986:AchogzGA6AImuAY8iCzgiQxDFRoiaGcEi0IgINyQAaUQDAxEEqoNnAMMkCAIhCAMA4EAIuPEoAGUcQpnAkEERTAPeRDJwCcZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f3f3f3f3f3f3f3f
Perceptual Hash:87787878383c1d1f
Difference Hash:f0c0e0c0c0e0c0c0
Wavelet Hash:003e3e3e32323232
Color Hash:#61862d

Other Hashes

Crop Resistant:f0c0e0c0c0e0c0c0

Scan History

Scan history not available

Unable to load historical scan data