Security Scan Report: kia-almotores.s3.amazonaws.com

Response type:XML documentapplication/xmlHTTP 200The server returned structured data (XML), typically from an API, a configuration endpoint or a storage listing, not a web page.
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is amazonaws.com and was registered 21 years ago.

Submitted URL: https://kia-almotores.s3.amazonaws.com

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Public S3 bucket index whose primary domain is flagged as APT malware hosting by two corroborated feeds; opaque multi-MB objects are listed alongside Kia imagery. No forms, but do not download files from this bucket.

Risk Factors (4)
Multi-source content-malware threat-intelligence match (named APT family) against the primary scanned domain
Open, unauthenticated bucket listing permitting bulk download of all stored objects, including unidentified multi-megabyte binaries
Random, non-descriptive object names with recent modification dates alongside curated brand imagery — consistent with a staging/drop location
Cloud-storage tenant whose actual creation date is unknown and cannot be inferred from the amazonaws.com apex
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'kia-almotores.s3.amazonaws.com' is registered; it also runs on subdomain 'kia-almotores.s3'. The second-level label 'amazonaws' is 9 characters long split between four vowels and 5 consonants. Tokenizing the label suggests 3 words: amazon, aw, s. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://kia-almotores.s3.amazonaws.com

Page Load Overview

5.08s
Total Load Time
238 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:372,775 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain44% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
44%
documentation technical
29%
technology software
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
216.15.166.180Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
052.217.132.218Aws · CLOUDAshburn, Virginia, United States
AS16509Amazon.com, Inc.
016.15.252.155Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
052.216.200.222Aws · CLOUDAshburn, Virginia, United States
AS16509Amazon.com, Inc.
24--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13B55AC68DEA303F211BBD5E211FD6BEB24F6813BE956512197BC839C87CDD00BD2194A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:jqU7kGLr0hC0TAX4KzzUApYoCM88fh2LngH9WZsxez2NW/HIWZs5e62NWaHsWgsf:jH4GLD0az6wClJCv07Qagvm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1296943:BDSjxEQCMUJQJZAoEDEDgImhgpSCsWYEpkAqQAKRuEQxBchQ4EAqmYkAVARYACJCkxZMwuQEzgFsgoGdBMKMgEpgUShkBgED

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f3f3f3f3f3f3f3f
Perceptual Hash:87783878783c1f3c
Difference Hash:f0c0e0c0e0e0e0e0
Wavelet Hash:003e1e3e32323232
Color Hash:#763a78

Other Hashes

Crop Resistant:f0c0e0c0e0e0e0e0

Scan History

Scan history not available

Unable to load historical scan data