Security Scan Report: borderplains.s3.us-east-2.amazonaws.com

Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 4 domains to perform 6 HTTP transactions. The main domain is amazonaws.com and was registered 21 years ago.

Submitted URL: https://borderplains.s3.us-east-2.amazonaws.com/borderplains/borderplains.html

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Fake Docusign document-access page hosted on an S3 bucket, harvesting work email addresses. Impersonates Docusign's brand on a non-official domain; avoid entering any information.

Risk Factors (4)
Brand impersonation of Docusign on a non-official S3 bucket domain
Email/username capture form on shared cloud storage with brand mismatch
Unranked domain claiming to be a major brand
Unknown-age shared-hosting tenant (subdomain creation date not attributable to platform age)
Domain age information unavailable

Details

Page Title

Docusign - Document Access

Scan Type

public

Domain Name Analysis

You're looking at domain 'borderplains.s3.us-east-2.amazonaws.com' on the commercial generic top-level domain (.com) with subdomain 'borderplains.s3.us-east-2'. Count 9 characters in 'amazonaws' split between 4 vowels and five consonants. Word splitting yields three words: amazon, aw, s. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://borderplains.s3.us-east-2.amazonaws.com/borderplains/borderplains.html

Page Load Overview

0.80s
Total Load Time
227 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:252 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service63% confidence
Type: static
Method: ml+structural

All Detected Categories

government public service
63%
technology software
50%
news media journalism
50%
documentation technical
46%
healthcare medical
46%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
63.5.89.89Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
0104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.13.95Google · CDNUnited States
AS15169Google LLC
03.5.133.207Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
0104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.14.95Google · CDNUnited States
AS15169Google LLC
03.5.93.74Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
69--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E4B1655666B30156BC03A42C27AAAB5636A5D153D10BCD3D7FEC6318CF44ED8DAE238C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TBR51tA98t4peletLY+PpZc93aNBDMPfqMCcSa54QC21j8ObqPj:VRLtA98t4peletLpPpZc9KNBDMPfqMCj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5094:YTgsBEAIAAQkAECJACBAVDlAQQAABAiIhAIAhCKOEhBEACgAgBQQAAApIABiAvgwRyAwpQhCAcIgSEAiAAAoSAGDEgEBgKh2

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7efe7e7ffff
Perceptual Hash:b398cc6633996666
Difference Hash:001028084d4c3008
Wavelet Hash:e0f8e0e0c0c0e0f0
Color Hash:#2d8681

Other Hashes

Crop Resistant:001028084d4c3008

Scan History

Scan history not available

Unable to load historical scan data