Security Scan Report: site-5e64ddddca2d4edebd235fff479698a9.s3.us-east-2.amazonaws.com

Redirected to:
https://site-5e64ddddca2d4edebd235fff479698a9.s3.us-east-2.amazonaws.c...
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 1 country across 3 domains to perform 17 HTTP transactions. The main domain is amazonaws.com and was registered 21 years ago.

Submitted URL: https://site-5e64ddddca2d4edebd235fff479698a9.s3.us-east-2.amazonaws.com/index.html

Effective URL:
https://site-5e64ddddca2d4edebd235fff479698a9.s3.us-east-2.amazonaws.c...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Confirmed tech-support browser locker: a fake Microsoft Windows Defender infection alert impersonating Microsoft, flagged by an analyst-vetted kit roster and a CRITICAL hunting rule. Do not call the displayed number or interact.

Risk Factors (8)
Known malicious tech-support browser-locker kit identified by analyst-vetted roster
CRITICAL hunting-rule hit: TechSupportScam_BrowserLocker
Fake Microsoft / Windows Defender security alert impersonating Microsoft branding
JavaScript blocks the context menu and uses encoding/decoding routines (anti-analysis)
Support phone number placeholder ('edit_phone_number') ready for per-visitor customization
Deceptive dual content: benign Japanese 'free digital library' text masking the fake alert
Unranked, anonymous cloud-storage (amazonaws.com) subdomain with unknown creation date
Page scripts contact the unranked external host lucavogila.website via fetch
Domain age information unavailable

Details

Page Title

アカウント設定

Scan Type

public

Domain Name Analysis

The domain name 'site-5e64ddddca2d4edebd235fff479698a9.s3.us-east-2.amazonaws.com' uses the commercial generic top-level domain (.com), featuring subdomain 'site-5e64ddddca2d4edebd235fff479698a9.s3.us-east-2'. The core label 'amazonaws' covers 9 characters holding four vowels versus 5 consonants. Tokenizing the label suggests three words: amazon, aw, s. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://site-5e64ddddca2d4edebd235fff479698a9.s3.us-east-2.amazonaws.com/index.html

Page Load Overview

2.77s
Total Load Time
774 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:39%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-TW
Text Length:110,501 chars
Detector Agreement:67%
Language mismatch: Declared as zh-TW but detected as en

Website Classification

Primary Category

healthcare medical68% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

healthcare medical
68%
cryptocurrency blockchain
63%
finance banking
63%
technology software
61%
news media journalism
53%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23.5.89.44Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
13.5.133.73Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13.5.133.249Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
13.5.131.129Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13.5.106.100Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
13.5.90.58Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
1716--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19304AE1C9B8C3839092352372D8A6AC9563DCE37E1540E95713E885E7FC8BACEE1D674

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:mWJD1Nn1mtTYWh99xYNRee7R1H6bMBPvK8rPuWfZlGxZdvtMOW:F51LmtphCReerabMA8rPqxZdvtM5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:190298:GYgDDEikRIUEjAABpZsUVkDSkdIAIHQ0EAcAIKAttQQygozgvEkoQOD4CAMjAGIBIdkoFWu4oBMQExAQMJsKDRDBAwofKaiR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:383c3c3c3c3c0101
Perceptual Hash:cbd734ce7428552c
Difference Hash:c9c9e9e9e1e9f3bb
Wavelet Hash:3c3c7c3c7c7c3901
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data