Security Scan Report: signaturedocs.s3.us-east-2.amazonaws.com

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 1 domain to perform 1 HTTP transaction. The main domain is amazonaws.com and was registered 21 years ago.

Submitted URL: https://signaturedocs.s3.us-east-2.amazonaws.com/signaturedocs.html

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Fake DocuSign 'review document' page hosted on an S3 bucket, not DocuSign's domain; references ScreenConnect remote-access tooling. Classic brand-impersonation lure — do not click or install anything.

Risk Factors (3)
Impersonation of DocuSign's brand on a non-DocuSign domain (S3 bucket)
Deceptive 'validating your access / session validation failed' messaging
External reference to ScreenConnect remote-access infrastructure associated with support-scam lures
Domain age information unavailable

Details

Page Title

DocuSign - Review Documentother network

Scan Type

public

Domain Name Analysis

The domain 'signaturedocs.s3.us-east-2.amazonaws.com' uses the commercial generic top-level domain (.com) and includes subdomain 'signaturedocs.s3.us-east-2'. The core label 'amazonaws' covers 9 characters split between 4 vowels and five consonants. Splitting it apart reveals 3 words: amazon, aw, s. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://signaturedocs.s3.us-east-2.amazonaws.com/signaturedocs.html

Page Load Overview

1.10s
Total Load Time
4 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:203 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service37% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service
37%
news media journalism
36%
healthcare medical
32%
real estate property
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13.5.89.103Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
0148.113.190.172Canada
AS16276OVH SAS
03.5.128.83Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
13--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E191B6B63096103B762BC46E38B1839E74D5B856F906725488ED72998FCFCD362316F8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Tw57mmwkbNbnXVEbbqkHLjwfs0i0SThbR0qHpXUbii2uLUu5fSSBRn8Ec2VcrxSt:Tw5TwkbNbGGu0SThl/t42Q/5fS9Ec9ZS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4245:QIBIQjQACCEQCBFZARAAgjIAAAQEAEASAQCCABKAIAEAAEGAEYABACAAhAgIC1QgAJZQBIACQgIIkYFgABDAIAACoAIgIAQg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:f77c5c7672584822
Difference Hash:4000302808300800
Wavelet Hash:0000c3db071f0f0f
Color Hash:#e08b6c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data