Security Scan Report: s3.us-east-2.amazonaws.com

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is amazonaws.com and was registered 21 years ago.

Submitted URL: https://s3.us-east-2.amazonaws.com/landing-uzariways.com/klessway.html

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Phishing kit on S3 posing as a 'Mail' login page; captures email/password and exfiltrates them to a Telegram bot. Do not enter credentials.

Risk Factors (5)
Credential harvesting form on shared cloud storage (S3) with no legitimate brand affiliation
Confirmed credential exfiltration to an external Telegram bot
Brand/identity deception: presents as a 'Mail' login portal
Unranked hosting-platform tenant with unknown creation date
Failure message 'The login is invalid.' used to re-prompt victims for repeated credential entry
Domain age information unavailable

Details

Page Title

Mail

Scan Type

public

Domain Name Analysis

The domain name 's3.us-east-2.amazonaws.com' uses the commercial generic top-level domain (.com) with subdomain 's3.us-east-2'. The registrable portion 'amazonaws' spans 9 characters split between 4 vowels and 5 consonants. Breaking it apart gives 3 words: amazon, aw, s. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Login to Mail Email Address Password Enter your password .OGIN

Page Load Overview

0.70s
Total Load Time
12 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:69 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service46% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service
46%
news media journalism
37%
e-commerce shopping
29%
healthcare medical
28%
finance banking
26%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23.5.89.58Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
052.219.229.145Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
03.5.129.193Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
052.219.233.145Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
24--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T121720A9E32330CDCED6291ABF29AB319E150CD43F98DD010BA5C65985F94C9AE5E238D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:u6MJA/4XEAV+HSGn7WXK3njK3nFlSr6FMEFpFbFiLi3i0UnpiQ6iy9:Jr/AjxqnGnFPFMEFpFb0uy0kwiM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17395:lCcIAdGEQwAEvDO7GDIACNE5H9XYJEjanAkFkIyA4PAEBCEBMIAQ0CQgAOGAnaNOZq6ALAwKBSnKsRKgSYIgUOJjphpAABAi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7c3c7e7ffff
Perceptual Hash:b389cc6633996666
Difference Hash:00000c140c0c0008
Wavelet Hash:f0f0e4e4e0e0f0f0
Color Hash:N/A

Other Hashes

Crop Resistant:00000c140c0c0008

Scan History

Scan history not available

Unable to load historical scan data