Security Scan Report: web.archive.org

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 5 domains to perform 22 HTTP transactions. The main domain is archive.org and was registered 30 years ago.

Submitted URL: https://web.archive.org/web/20260414174030/https://mail-owaexchnange-autodisciover-mailbox.s3.us-east-1.amazonaws.com/index.html#[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Archived Outlook Web App phishing landing hosted on a typosquatted S3 bucket: fake OWA sign-in pad with a victim email pre-seeded in the URL and a HIGH IDS phishing alert. Do not enter credentials.

Risk Factors (6)
Impersonation of the Outlook Web App / Microsoft brand on a cloud-storage bucket that is not a Microsoft-owned domain
Credential-collection interface (user name + password + sign-in) presented as an email login for a different organisation's domain
Typosquatted S3 bucket name mimicking Exchange/autodiscover hostnames
Victim email pre-loaded via URL fragment for targeted phishing
Network IDS HIGH-severity phishing alert for an OWA mail phishing landing page
Served from Amazon S3 object storage rather than any legitimate mail provider infrastructure
Domain age information unavailable

Details

Page Title

Outlook Web Appother network

Scan Type

public

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'web.archive.org' is registered and includes subdomain 'web'. The second-level label 'archive' is 7 characters long split between 3 vowels and 4 consonants. It segments into 1 word: archive. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://web.archive.org/web/20260414174030/https://mail-owaexchnange-autodisciover-mailbox.s3.us-east-1.amazonaws.com/index.html#example@example.com

Page Load Overview

N/A
Total Load Time
33 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,591 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software34% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
34%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6207.241.237.3United States
AS7941Internet Archive
4207.241.237.2United States
AS7941Internet Archive
4207.241.224.2United States
AS7941Internet Archive
4207.241.237.8United States
AS7941Internet Archive
4207.241.225.195United States
AS7941Internet Archive
05--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F2933B7E59E364536E1F4565B7F926063D32C0138B49FD073B5C7A888F86EB2CE812A4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:aXeJ6aw+9W3EGr09Vo5fN6Jh9MMjyuclSeoVeNd3SKUkF5u4nFuqZsf+c3cUuFyn:aXeJ6awUWMeNgI0/LM7ypN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:92591:0AIGFIEGJOQsxIgTAAURY8R4U8EBQCkVBlwAIYAgAqd+sAYACIPSTUlJSwW4ACGAIOokYQUywAAFRCaCTQhIATgBrVYOMvKA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3f3f3f3f3f3f
Perceptual Hash:83f66e010999d9fc
Difference Hash:d0ccccd8d0d0d0d0
Wavelet Hash:3f333f3f3f0f0000
Color Hash:#c3c587

Scan History

Scan history not available

Unable to load historical scan data