Security Scan Report: site-687df74a8257475c930865f28e87a9bd.s3.us-east-2.amazonaws.com

Redirected to:
https://site-687df74a8257475c930865f28e87a9bd.s3.us-east-2.amazonaws.c...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 1 country across 3 domains to perform 16 HTTP transactions. The main domain is amazonaws.com and was registered 21 years ago.

Submitted URL: https://site-687df74a8257475c930865f28e87a9bd.s3.us-east-2.amazonaws.com/index.html

Effective URL:
https://site-687df74a8257475c930865f28e87a9bd.s3.us-east-2.amazonaws.c...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Confirmed tech-support browser-locker: a fake Windows Defender alert disguised as a Japanese digital library page, identified by an analyst-vetted kit roster entry and a CRITICAL hunting rule; do not interact, never call the number.

Risk Factors (6)
Known browser-locker tech support scam kit identified by hunting rule and the analyst kit roster
Impersonates Microsoft / Windows Defender security alerts on a non-Microsoft host
Randomised S3 bucket filename with no relation to the site's claimed content
Encoded/obfuscated inline JavaScript and base64 payload text
Deceptive mismatch between benign Japanese 'digital library' meta content and the fake security-alert display
Cross-origin script fetch to unranked host lucavogila.website
Domain age information unavailable

Details

Page Title

メールマガジン登録

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'site-687df74a8257475c930865f28e87a9bd.s3.us-east-2.amazonaws.com' is registered, featuring subdomain 'site-687df74a8257475c930865f28e87a9bd.s3.us-east-2'. The second-level label 'amazonaws' is 9 characters long containing four vowels alongside five consonants. Tokenizing the label suggests three words: amazon, aw, s. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://site-687df74a8257475c930865f28e87a9bd.s3.us-east-2.amazonaws.com/index.html

Page Load Overview

2.79s
Total Load Time
774 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:43%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:ko
Text Length:91,492 chars
Detector Agreement:67%
Language mismatch: Declared as ko but detected as en

Website Classification

Primary Category

healthcare medical65% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

healthcare medical
65%
news media journalism
63%
documentation technical
47%
cryptocurrency blockchain
42%
technology software
40%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
53.5.131.184Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
13.5.88.150Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13.5.89.25Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
13.5.90.116Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13.5.133.223Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
13.5.103.145Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
1612--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F8E3AE1C9B9C3839092392376C569689863ECE3BE5500A85B07E845D3FDCB9CEF1E674

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:2VttbFEHfRTHPBYkNvht/b9kVbuczzklRnSMR7xVdvt4+i1fJ:25bFARvtPzz3R7xVdvt4+C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:157245:yxYFSNCH0BFEEiCsEHIM1CMCAlYEJ4koJAIwBVwR0gD8GShHMACqC+ZBgm6gOgIJ1gqTAnACGNYhAhgwTpEgCCYGUCmkHCgH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:383c3c3c3c3c0101
Perceptual Hash:cbd734c77428552c
Difference Hash:c9c9e9e9e1e9f3bb
Wavelet Hash:3c3c7c3c7c7c3901
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data