hf-mobile-app.s3.eu-west-1.amazonaws.com in a checkout page script inventory
hf-mobile-app.s3.eu-west-1.amazonaws.com appeared on 2 of the 187 United States store cart pages we read on 30 August 2026, which is 1% of them, always as a reference rather than as an executing tag.
What it is
AWS S3 bucket hosting mobile application static assets.
Source: the title and description published at amazonaws.com, read on 30 August 2026. Quoted there as “Cloud Computing Services - Amazon Web Services (AWS)”.
What to write in the justification column
Confirm ownership and ensure no executable scripts or sensitive data are stored in this bucket.
This is a starting sentence, not an assessment. Requirement 6.4.3 wants your reason, written by someone at your company who can defend it.
Stores where we saw it
2 of 2
Up to ten examples from our scan. These are public storefronts and the observation is only that the host appeared in the HTML of their cart page on 30 August 2026.
Where to look next
Other hosts on amazonaws.com
Other merchant-owned hosts
All 448 hosts in the directory · Scan your own checkout page
Categories in this directory: Payment, Tag manager, Fraud and security, Consent, Analytics, Advertising, Email and SMS, Personalisation, Reviews, Chat and support, Loyalty, Subscriptions, Shipping and returns, Media and social, Fonts and CDN, Merchant-owned, Unclassified.