Amazon S3
Amazon S3 is AWS’s object-storage service, frequently used to host static websites and assets directly. ScanMalware detects it from the AmazonS3 server header and characteristic bucket URL patterns.
Static S3 hosting is cheap and disposable, making it a recurring home for phishing pages and malware payloads. A site served straight from an S3 bucket warrants a closer look at its content and the bucket’s exposure.
Commonly deployed alongside Amazon S3
Of the 8,802 public scans where Amazon S3 was detected, these are the technologies most often present on the same site. The share is the percentage of Amazon S3 sites that also ran each one.
| Technology | Category | Share of Amazon S3 sites |
|---|---|---|
| Amazon Web Services | wappalyzer | 100% |
| Amazon CloudFront | wappalyzer | 55.81% |
| HSTS | wappalyzer | 37.85% |
| Google Analytics | wappalyzer | 24.25% |
| Open-Graph-Protocol | miscellaneous | 22% |
| Google Tag Manager | wappalyzer | 19.95% |
| jQuery | wappalyzer | 17.91% |
| HTTP/3 | wappalyzer | 16.57% |
| Cloudflare | wappalyzer | 15.51% |
| X-UA-Compatible | miscellaneous | 14.83% |
| PoweredBy | miscellaneous | 13.79% |
| JQuery | miscellaneous | 12.79% |
| Google-Analytics | miscellaneous | 12.26% |
| Cloudflare Bot Management | wappalyzer | 10.95% |
How ScanMalware detects Amazon S3
Amazon S3 is detected by analysing the response headers, HTML markup, JavaScript runtime and asset URLs captured when ScanMalware loads the site in a real headless browser.
From any scan you can pivot into related signals — JARM TLS fingerprints, ASN ownership and BGP routing, certificate history, JavaScript analysis and the overall security verdict — to understand not just that Amazon S3 is present, but how it is being used. Open the full search interface for Amazon S3 →
Recent public scans featuring Amazon S3
A rolling sample of recent public scans where Amazon S3 was detected. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| What is Hugging Face? The 2026 Guide to the AI Hub | metacto https://www.metacto.com/blogs/what-is-hugging-face-a-guide-to-the-ai-community-and-its-too… | 2026-07-22 |
| https://rb1.alkami.tech | 2026-07-22 |
| Valor USA https://valorusa.com | 2026-07-22 |
| https://analytics.goldcast.io | 2026-07-21 |
| https://cdn8.classpass.com | 2026-07-21 |
| Match Report: Walsall 1-0 Aston Villa Official website of Walsall Football Club https://www.saddlers.co.uk/news/2025/july/16/match-report--walsall-1-0-aston-villa-/ | 2026-07-21 |
| FDA Recalls and Warnings: Potentially Contaminated Cough Drops and Eye Drops, Subpotent Thyroid Medications & More - MedShadow Foundation https://medshadow.org/drug-updates-recalls/fda-recalls-and-warnings/contaminated-cough-dro… | 2026-07-21 |
| https://cdn-grantstreet-com.s3.amazonaws.com | 2026-07-21 |
Frequently asked questions about Amazon S3
- Does using Amazon S3 mean a website is unsafe?
- No. Amazon S3 is a stack component, not a verdict. ScanMalware scores the whole page — its scripts, redirects, certificates, threat-intelligence matches and behaviour — so a site using Amazon S3 can be perfectly safe or actively malicious.
- How many sites using Amazon S3 has ScanMalware scanned?
- Amazon S3 has been detected in 8,802 public scans on ScanMalware.com. Each scan is a real headless-browser visit, and the figure updates as new URLs are submitted.
- What technologies are commonly used with Amazon S3?
- Across scanned sites, Amazon S3 is most often seen alongside Amazon Web Services, Amazon CloudFront and HSTS. The full co-occurrence breakdown is listed on this page.
Browse all profiled technologies on the technology index, or scan a URL to see its full stack.