Security Report: invoice-document7847.s3.us-east-2.amazonaws.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b07bf7e1-aef9-4c26-88e6-059077c33724 Domain and IP registration (RDAP)/api/v1/rdap/b07bf7e1-aef9-4c26-88e6-059077c33724How often this domain was scanned/api/v1/domain/stats/invoice-document7847.s3.us-east-2.amazonaws.com Scan history for this domain/api/v1/domain/history/invoice-document7847.s3.us-east-2.amazonaws.com?limit=15

This website contacted 3 IPs in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is amazonaws.com and was registered 21 years ago.

Submitted URL: https://invoice-document7847.s3.us-east-2.amazonaws.com/docusign.html

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Fake DocuSign page hosted on an S3 bucket that fakes a session error and tells visitors to run a downloaded 'plugin' executable — brand-impersonation malware delivery. Do not open the download.

Risk Factors (5)

Brand impersonation of DocuSign on an unrelated cloud-storage bucket

Executable/PE file download served from the page (IDS HIGH and CRITICAL alerts)

Fake 'plugin installation' social engineering prompting the user to run a downloaded binary

Fabricated session/access-denied error used to manufacture urgency and compliance

Unranked hosting-platform subdomain whose actual creation date cannot be verified

Domain age information unavailable

Details

Page Title

DocuSign - Review Document

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'invoice-document7847.s3.us-east-2.amazonaws.com' is registered; it also runs on subdomain 'invoice-document7847.s3.us-east-2'. Count 9 characters in 'amazonaws' split between 4 vowels and five consonants. Tokenizing the label suggests three words: amazon, aw, s. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.49s

Total Load Time

10 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:465 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	3.5.129.36Aws · CLOUD	Columbus, Ohio, United States	AS16509Amazon.com, Inc.
0	3.5.88.97Aws · CLOUD	Columbus, Ohio, United States	AS16509Amazon.com, Inc.
0	52.219.111.2Aws · CLOUD	Columbus, Ohio, United States	AS16509Amazon.com, Inc.
1	3	-	-