amazonaws.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of amazonaws.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 185.253.47.93 | AS204957 | AS14618 | 95% | cert 073e98a6… served by 185.253.47.93 (AS204957) carries SAN ec2.amazonaws.com which currently resolves through Amazon (AS14618) at 13.220.37.131, 52.94.233.135, 209.54.180.155 |
| 96.114.222.63 | AS7922 | AS16509 | 95% | cert 4cd2a96e… served by 96.114.222.63 (AS7922) carries SAN 7pc.control-kinesis.us-east-1.amazonaws.com which currently resolves through Amazon (AS16509) at 3.91.171.132, 3.227.250.154, 3.91.171.154, 3.227.250.162 |
| 72.13.122.5 | AS53334 | AS16509 | 95% | cert 4cd2a96e… served by 72.13.122.5 (AS53334) carries SAN 7pc.control-kinesis.us-east-1.amazonaws.com which currently resolves through Amazon (AS16509) at 3.227.250.154, 3.91.171.154, 3.227.250.162 |
| 185.76.78.16 | AS9009 | AS16509 | 95% | cert 7ebf4263… served by 185.76.78.16 (AS9009) carries SAN s3-external-1.amazonaws.com which currently resolves through Amazon (AS16509) at 52.216.38.3, 54.231.199.139, 52.217.121.203, 16.182.43.3 |
| 185.76.78.16 | AS9009 | AS14618 | 95% | cert 7ebf4263… served by 185.76.78.16 (AS9009) carries SAN s3-deprecated.us-east-1.amazonaws.com which currently resolves through Amazon (AS14618) at 16.15.246.185, 16.15.221.126, 16.15.238.40, 52.216.205.71 |
| 51.255.171.37 | AS16276 | AS16509 | 95% | cert c50eb83f… served by 51.255.171.37 (AS16276) carries SAN s3-eu-west-1.amazonaws.com which currently resolves through Amazon (AS16509) at 3.5.71.106, 3.5.75.82, 3.5.66.34, 52.92.1.144 |
| 51.255.171.37 | AS16276 | AS14618 | 95% | cert c50eb83f… served by 51.255.171.37 (AS16276) carries SAN s3.amazonaws.com which currently resolves through Amazon (AS14618) at 16.15.236.66, 52.216.220.136, 54.231.230.176, 52.216.53.8 |
| 149.202.79.11 | AS16276 | AS14618 | 95% | cert ec927561… served by 149.202.79.11 (AS16276) carries SAN s3.us-east-1.amazonaws.com which currently resolves through Amazon (AS14618) at 16.15.191.209, 52.217.137.8, 16.15.199.162, 52.216.208.64 |
| 149.202.79.11 | AS16276 | AS16509 | 95% | cert ec927561… served by 149.202.79.11 (AS16276) carries SAN s3.amazonaws.com which currently resolves through Amazon (AS16509) at 52.216.9.165, 16.15.191.23, 52.217.163.48, 52.216.32.48 |
| 96.99.165.57 | AS7922 | AS16509 | 95% | cert aa50fd8e… served by 96.99.165.57 (AS7922) carries SAN 7pc.control-kinesis.us-east-1.amazonaws.com which currently resolves through Amazon (AS16509) at 3.91.171.154, 3.227.250.162 |
| 46.32.115.205 | AS48832 | AS16509 | 95% | cert c38f7461… served by 46.32.115.205 (AS48832) carries SAN ec2-13-58-112-231.us-east-2.compute.amazonaws.com which currently resolves through Amazon (AS16509) at 13.58.112.231 |
| 23.254.221.122 | AS54290 | AS16509 | 95% | cert 7ebf4263… served by 23.254.221.122 (AS54290) carries SAN s3-deprecated.us-east-1.amazonaws.com which currently resolves through Amazon (AS16509) at 52.217.193.63, 16.15.193.109, 16.15.180.121, 16.15.187.115 |
| 23.254.221.122 | AS54290 | AS14618 | 95% | cert 7ebf4263… served by 23.254.221.122 (AS54290) carries SAN s3.amazonaws.com which currently resolves through Amazon (AS14618) at 16.15.191.121, 54.231.169.64, 52.216.59.72, 52.217.162.80 |
| 37.27.246.232 | AS24940 | AS16509 | 95% | cert 336ecae4… served by 37.27.246.232 (AS24940) carries SAN amazonaws.com which currently resolves through Amazon (AS16509) at 166.117.149.112, 15.197.250.250 |
| 46.32.112.232 | AS48832 | AS16509 | 95% | cert c38f7461… served by 46.32.112.232 (AS48832) carries SAN ec2-13-58-112-231.us-east-2.compute.amazonaws.com which currently resolves through Amazon (AS16509) at 13.58.112.231 |
| 184.120.33.26 | AS212465 | AS16509 | 95% | cert 251b9e7a… served by 184.120.33.26 (AS212465) carries SAN ssmmessages.eu-west-1.amazonaws.com which currently resolves through Amazon (AS16509) at 3.253.228.208, 3.253.225.174, 3.253.214.50, 3.253.227.233 |
| 96.194.7.214 | AS7922 | AS16509 | 95% | cert 07e8f351… served by 96.194.7.214 (AS7922) carries SAN legacy.ssm.us-east-2.amazonaws.com which currently resolves through Amazon (AS16509) at 99.78.178.179, 52.95.18.169, 99.78.180.133, 52.95.20.173 |
| 96.104.23.18 | AS7922 | AS14618 | 95% | cert ee99a181… served by 96.104.23.18 (AS7922) carries SAN ssm.us-east-1.amazonaws.com which currently resolves through Amazon (AS14618) at 13.220.36.112, 13.217.79.129, 44.216.200.77, 44.216.184.189 |
| 77.42.90.249 | AS24940 | AS16509 | 95% | cert 336ecae4… served by 77.42.90.249 (AS24940) carries SAN amazonaws.com which currently resolves through Amazon (AS16509) at 166.117.149.112, 15.197.250.250 |
| 96.103.137.246 | AS7922 | AS14618 | 95% | cert ee99a181… served by 96.103.137.246 (AS7922) carries SAN ssm.us-east-1.amazonaws.com which currently resolves through Amazon (AS14618) at 13.220.36.112, 13.217.79.129, 44.216.200.77, 44.216.184.189 |
| 77.42.66.42 | AS24940 | AS16509 | 95% | cert 336ecae4… served by 77.42.66.42 (AS24940) carries SAN amazonaws.com which currently resolves through Amazon (AS16509) at 166.117.149.112, 15.197.250.250 |
| 46.32.114.142 | AS48832 | AS16509 | 95% | cert c38f7461… served by 46.32.114.142 (AS48832) carries SAN ec2-13-58-112-231.us-east-2.compute.amazonaws.com which currently resolves through Amazon (AS16509) at 13.58.112.231 |
| 46.225.99.188 | AS24940 | AS16509 | 95% | cert 336ecae4… served by 46.225.99.188 (AS24940) carries SAN amazonaws.com which currently resolves through Amazon (AS16509) at 166.117.149.112, 15.197.250.250 |
| 77.245.7.216 | AS48832 | AS16509 | 95% | cert c38f7461… served by 77.245.7.216 (AS48832) carries SAN ec2-13-58-112-231.us-east-2.compute.amazonaws.com which currently resolves through Amazon (AS16509) at 13.58.112.231 |
| 96.104.23.18 | AS7922 | AS16509 | 95% | cert ee99a181… served by 96.104.23.18 (AS7922) carries SAN ssm.us-east-1.amazonaws.com which currently resolves through Amazon (AS16509) at 44.216.200.77, 44.216.184.189, 13.220.37.186, 13.217.78.122 |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 166.117.149.112 | 2026-05-25 21:32:03.363 | 2026-07-23 00:54:41.997 |
| A | 15.197.250.250 | 2026-05-25 21:32:03.363 | 2026-07-23 00:54:41.997 |
| NS | ns-1670.awsdns-16.co.uk | 2026-05-26 00:03:35.658 | 2026-07-23 00:54:41.997 |
| NS | ns-27.awsdns-03.com | 2026-05-26 00:03:35.658 | 2026-07-23 00:54:41.997 |
| TXT | google-site-verification=EEVHeL7fVZb5ix5bR0draHWtJ5MfS0538OwXAfY8HCY | 2026-05-26 00:03:35.658 | 2026-07-23 00:54:41.997 |
| MX | 10 amazon-smtp.amazon.com | 2026-05-26 00:03:35.658 | 2026-07-23 00:54:41.997 |
| TXT | spf2.0/pra include:amazon.com ~all | 2026-05-26 00:03:35.658 | 2026-07-23 00:54:41.997 |
| NS | ns-1321.awsdns-37.org | 2026-05-26 00:03:35.658 | 2026-07-23 00:54:41.997 |
| TXT | v=spf1 include:amazon.com ~all | 2026-05-26 00:03:35.658 | 2026-07-23 00:54:41.997 |
| NS | ns-967.awsdns-56.net | 2026-05-26 00:03:35.658 | 2026-07-23 00:54:41.997 |
| TXT | pf2vv39dfkf9tszsg5lggfs6tp6bkjn4 | 2026-05-26 00:03:35.658 | 2026-07-23 00:54:41.997 |
| TXT | atlassian-domain-verification=ZT4AapXgobCpXIWoNcd7gtMjZyOUdr4EDFMnFUWrqqqgdaQVbDvoGpRaIwj/tgPH | 2026-05-26 00:03:35.658 | 2026-07-23 00:54:41.997 |