WEBSITE ANALYSIS REPORT

https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html

20 Oct 2026 · 21:29:39.000 UTCpublic

Report tags: adobe phishing suspicious
Submit tags: openphish

Request review

Phishing detected

7 detections · review the detection signals

Review evidence →

JavaScript

Recorded scripts and browser console observations

URL / source

Introduced by

Size

First seen

scriptElement

770 B

22 Jul 202617:35 UTC

scriptElement

314 B

22 Jul 202617:35 UTC

scriptElement

23.2 KB

15 Oct 202601:41 UTC

Script #03

Recorded metadata

URL

Inline https

https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html

IP / ASN

3.5.90.108

Unknown

Resource information

Introduced by: scriptElement
Inline: true
First seen (UTC): 15 Oct 2026 · 01:41:09.487 UTC
Last seen (UTC): 20 Oct 2026 · 21:29:42.647 UTC
Times seen: 3

Size: 23.2 KB (23789 bytes)
MD5: fde76cbf6c07913be84f46f1f29eb08d
SHA1: b4e2daed3e0a97e04296a8e30182db245278629a
SHA256: 7b1951b8c9e27c450b08a17708dfdbcb830d768d705f59afe771164df02cd1ac

Detections

Detections attached to this script.
Detection	Severity	Verdict
YARAhub by abuse.ch Detects file containing Telegram Bot API	medium	malware

Source

Loading captured source…

scriptElement

733.9 KB

22 Jul 202617:35 UTC

Console observations

Browser messages in recorded order

22 messages


DOM Content Loaded - Initializing button handlers
Found buttons:1
🚀 Initializing application...
Raw User Agent:mozilla/5.0 (windows nt 10.0; win64; x64; rv:134.0) gecko/20100101 firefox/134.0
✅ Detected Browser: Mozilla Firefox (Class: browser-firefox)
🌐 Applied browser class:browser-firefox
🎨 Detected Color Scheme: Light Mode (Class: light-theme)
🎨 Applied theme class:light-theme
📋 Browser window classes:modal-content browser-chrome light-theme browser-firefox
✅ Theme change listeners activated
✅ Application initialized successfully
✅ PDF viewer elements found, initializing...
📄 Initializing PDF viewer with3base64 images...
📋 Creating3thumbnails...
📑 Sidebar populated
⏳ Preloading images...
✅ PDF viewer initialized with3images
🔄 Started automatic slideshow (4s interval)
✅ Thumbnail1loaded successfully
✅ Thumbnail2loaded successfully
✅ Thumbnail3loaded successfully
✅ Loading screen hidden

Browser console observations in recorded order.
#	Level	Message	Recorded source
1	LOG	`DOM Content Loaded - Initializing button handlers`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 3810 · Column 19
2	LOG	`Found buttons:1`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 3814 · Column 19
3	LOG	`🚀 Initializing application...`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 3735 · Column 17
4	LOG	`Raw User Agent:mozilla/5.0 (windows nt 10.0; win64; x64; rv:134.0) gecko/20100101 firefox/134.0`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 3298 · Column 17
5	LOG	`✅ Detected Browser: Mozilla Firefox (Class: browser-firefox)`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 3434 · Column 17
6	LOG	`🌐 Applied browser class:browser-firefox`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 3788 · Column 19
7	LOG	`🎨 Detected Color Scheme: Light Mode (Class: light-theme)`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 3480 · Column 17
8	LOG	`🎨 Applied theme class:light-theme`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 3793 · Column 19
9	LOG	`📋 Browser window classes:modal-content browser-chrome light-theme browser-firefox`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 3796 · Column 19
10	LOG	`✅ Theme change listeners activated`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 3512 · Column 21
11	LOG	`✅ Application initialized successfully`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 3801 · Column 19
12	LOG	`✅ PDF viewer elements found, initializing...`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 4218 · Column 19
13	LOG	`📄 Initializing PDF viewer with3base64 images...`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 4236 · Column 21
14	LOG	`📋 Creating3thumbnails...`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 4267 · Column 21
15	LOG	`📑 Sidebar populated`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 4245 · Column 21
16	LOG	`⏳ Preloading images...`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 4249 · Column 21
17	LOG	`✅ PDF viewer initialized with3images`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 4254 · Column 23
18	LOG	`🔄 Started automatic slideshow (4s interval)`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 4257 · Column 25
19	LOG	`✅ Thumbnail1loaded successfully`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 4292 · Column 25
20	LOG	`✅ Thumbnail2loaded successfully`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 4292 · Column 25
21	LOG	`✅ Thumbnail3loaded successfully`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 4292 · Column 25
22	LOG	`✅ Loading screen hidden`	https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html Line 3744 · Column 21

https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html

JavaScript

Script #03

URL

IP / ASN

Resource information

Detections

Source

Console observations

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html

[JavaScript]

Script #03

URL

IP / ASN

Resource information

Detections

Source

Console observations

https://contract-quotation89573.s3.us-east-2.amazonaws.com/index.html

JavaScript