Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/amazon.com
Generated: Fri, 13 Nov 2026 12:03:29 GMT
Target Website: amazon.com
Overall Trust Score: 92/100 (Trusted)
Is amazon.com safe?
Very Likely Safe
No major red flags found. This looks like a legitimate, established website.
Popular site · #28 worldwideChecked Nov 13, 2026
92
Trust score
Why: Main reasons: domain registered 32+ years ago; amazon is the real brand's registered domain; popular website — ranked #28 worldwide. Minor issues: missing HSTS; missing Content Security Policy.
Identity & Age100/100
Impersonation Risk100/100
Red Flags100/100
Transparency70/100
Security75/100
Email100/100
Positive highlights
- Domain registered 32+ years agoLong-established domains are far less likely to be disposable scams.
- HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
- amazon is the real brand's registered domainThe root label matches the brand exactly — this IS the brand's own domain.
- Popular website — ranked #28 worldwideListed in the Tranco top 1 million websites. Scam sites are almost never this popular.
- Site responded with 202Final URL: https://www.amazon.com/. Response time 129ms.
- HTTPS works with a valid certificateA secure connection was made on port 443. Certificate log details were unavailable at scan time.
- No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
- Not listed on URLhaus malware blocklist
- Fast response (129ms)
- Not present in PhishStats phishing feed
Negative highlights
- Missing HSTSTells browsers to only use HTTPS for this domain.
- Missing Content Security PolicyRestricts which scripts and resources the page can load.
Note: Registered via MarkMonitor Inc..
Note: 1 technologies detected. Cloudflare
Note: Policy pages could not be checked. The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Key facts about amazon.com
- Website
- amazon.com
- Popularity
- #28 worldwide (Tranco top 1M)
- Domain created
- Nov 1, 1994 (32.0 years old)
- Domain expires
- Oct 31, 2027
- Registrar
- MarkMonitor Inc.
- Owner details
- Public in WHOIS
- IP address
- 98.82.161.185
- Hosting / CDN
- Cloudflare
- SSL certificate
- HTTPS works (certificate details unavailable)
- Email security
- SPF ✓ · DMARC ✓ (quarantine)
- Threat blocklists
- Not listed (clean)
- Technology
- Cloudflare
Summary
92/100 — trusted. Long-established domain (32.0 years old), clean threat reputation, no impersonation patterns.
No malware/phishing on feedsGood reputationHTTPS enabled
Full technical report
Domain Information
Registration timeline, age calculation, registrar details, and ICANN status.
Verified
- Registrar Name
- MarkMonitor Inc.
- Creation Date
- November 1, 1994 (32.0 years ago)
- Last Updated
- July 31, 2026
- Registry Expiry Date
- October 31, 2027
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
ICANN Status Badges
client delete prohibitedclient transfer prohibitedclient update prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Domain registered 32+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
HTTP Headers & Security
Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.
Warning
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-OptionsMissing
X-Content-Type-OptionsMissing
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: HSTSmissing: Content Security Policymissing: X-Frame-Optionsmissing: X-Content-Type-Optionsmissing: Referrer Policymissing: Permissions Policy
All Response Headers (18)
access-control-allow-methods: OPTIONS,GET,POST access-control-allow-origin: * access-control-expose-headers: x-amzn-waf-action access-control-max-age: 86400 alt-svc: h3=":443"; ma=86400 cache-control: no-store, max-age=0 cf-cache-status: DYNAMIC cf-ray: a59da22ecb507fff-IAD connection: close content-length: 2007 content-type: text/html; charset=UTF-8 date: Fri, 13 Nov 2026 12:03:29 GMT server: cloudflare via: 1.1 64d4305f6a0418824e90908ac490184e.cloudfront.net (CloudFront) x-amz-cf-id: Bu5x2-wsKKhd45Gcw0aRC78N_HR9tX6BF6sw-3C2LfGWEdjiUKAqDQ== x-amz-cf-pop: IAD61-P10 x-amzn-waf-action: challenge x-cache: Error from cloudfront
Missing HSTS
Tells browsers to only use HTTPS for this domain.
-4
Missing Content Security Policy
Restricts which scripts and resources the page can load.
-4
Missing X-Frame-Options
Prevents clickjacking by disallowing framing.
-3
Missing X-Content-Type-Options
Blocks MIME-sniffing browser attacks.
-2
Missing Referrer Policy
Controls what referrer information is sent with requests.
-2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
DNS Records
Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.
Resolved
- IPv4 Addresses (A)
- 98.82.161.185, 98.87.170.74, 98.87.170.71
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- amazon-smtp.amazon.com (Priority: 5)
- Authoritative Nameservers (NS)
- ns-1447.awsdns-52.org, ns-1707.awsdns-21.co.uk, ns-264.awsdns-33.com, ns-521.awsdns-01.net
- TXT Records Found
- 66 TXT verification records
A Records (IPv4)
98.82.161.18598.87.170.7498.87.170.71
TXT Verification Records
00DcX000002xu6h=1TBcX00000000Xt
DomainVerification=6BSORJ4NP9YO8U8EZFZDKIJVIL6TCYG69G7CXADQ8QOV3K8883K86XT2J9EX5R0J
MS=4B600B22799EB2CAC0D8FF0A3A3CAECA5EE2BF3A
TS1760027
ZOOM_verify_6OUC1znUonKMCoyMMGyFfX
ZOOM_verify_ARI4AiKALCcjulAUZNwR8S
apple-domain-verification=4wbNaeWvAH0pU1yi
apple-domain-verification=_j3fIZD8uuYetbG64YKTEpz-8mwyvYrLRqM5CoVZVTk
apple-domain-verification=dVkKZnu17XS0EN2X
atlassian-domain-verification=ZT4AapXgobCpXIWoNcd7gtMjZyOUdr4EDFMnFUWrqqqgdaQVbDvoGpRaIwj/tgPH
autodesk-domain-verification=dmryiygGOGBJFJFVo5Bl
bluebeam-verification=042eaxvbk65qgh5qom1ajtm4eyuo1k
box-domain-verification=ffea95cd0e0d61c302198367155b07e74fd534fa1d867662dc9bf9969b6f535d
brevo-code:9be7f7c39958d253a31de6593fa831bc
canva-site-verification=Hksh9WEUPWP13_SEU1mPMA
canva-site-verification=WhUvTbfe6tUQWmIXnQifGA
cisco-ci-domain-verification=1b256bd11daa486ba2fa405d2d5de70f75feb6757dd8993ca8de685a7dfea1df
dell-technologies-domain-verification=amazon.com_2dc4b285-482d-4948-bf92-16e698f2cab9_1738858526
docker-verification=1779f74e-699a-4d8b-acdc-ce242d73559f
facebook-domain-verification=d9u57u52gylohx845ogo1axzpywpmq
google-site-verification=14WGW2MdNMxchG8PlinF7LgqqE0OwwHqOq0HKhb7rDQ
google-site-verification=D0RwRb_QApkpApKTFaFlRwbm_yrkey0uokKw0wQUIdk
google-site-verification=G_-mXb0ZYjjGkQVGjpOOB2deSOaVdxVj4i4vozJTREs
google-site-verification=NV91qEfNgqDZOPzwlhXE-KtDUfCBSNgAsdxaFebyh80
heygen-verification=yn27jhxlnvzhf9s77oog93ykvh61e2cb
kahoot-domain-verification=0a79e1c18457eed9572b28cd75792e4bbd220bc69b62d707c1f88e53956348d6
liveramp-site-verification=jZJKgMEQ_1mdjMhKj02iqNACZ-NJHRWhCEQdQ_OuCMo
lucidlink-verification=QG752KJ3CMZAZTZ3ERMX1AXMCG
neat-pulse-domain-verification-QgvLWLN=f37f2998-0bb3-493b-a3aa-c4ff8f3dce08
pardot326621=b26a7b44d7c73d119ef9dfd1a24d93c77d583ac50ba4ecedd899a9134734403b
pendo-domain-verification=ecbe1a51-954d-4202-ab86-d15e04b96769
pstk-verification-a938892542ffacd51af9339e4755dc1a
sending_domain1003771=199bc63a54ace5d8d5c5d08286af86d7049b4afacb5ef7decd6b22cf9e8d5efb
sending_domain1003771=f1303d8ee3b86e39db2703b11feb83e1e8b712a9ffc64c3d56505192e5b3bf4f
sending_domain1014172=003846595520e80ec84e8cc47c07e3a71afb855fc743bb92cdec93f88c7a4029
sending_domain197572=555e96ed2e576ced81c89f7001740cb72f9c66aeb136d0d05734aad625766bc1
sending_domain229492=341509a116ea4311fcb2e489303bf09a139b10ce9b90e5029d2677055cb4dc89
sending_domain229492=7cde83fbc5246557c64d9d9ba79f0d11f7ba9eb6127f60451a9aa6f8dead4381
sending_domain608861=81b0d52095dae60d604e7cbea5e58e1d842f7d950d6673a43feae339b664ca31
sending_domain608861=d33a88e8540c33a1217138cf8a25879734bd35673bb7cfbd639f95c550b33ec4
sending_domain949422=1fa3e2bc8017cffb9de6a77aa0daa0ccb4e756a5851fb421d72482abf6d4216c
sending_domain949422=43d714838567583460e7720e6049505edb8e25c1ef4321419d41bc5255db7ba5
sending_domain949422=99a7b44052aefc4dec2abf56189160824664d2fdac00ca962f4455be62b51d56
sinch-domain-verification=5f56dade-0a7e-40c4-9158-91cac2686de2
spf2.0/pra include:spf1.amazon.com include:spf2.amazon.com include:amazonses.com -all
stripe-verification=1D421397AAEC571CCBD9F25DDC90F00EDEBC3E74F4047270EC9A13B784579E34
stripe-verification=26EFABF97D624D7F4F3C062366A04C4B1399841F23F275DD81E58D00A981979C
stripe-verification=35A865E5A20C09CD0288F87ACA29DE73FF8A704D21F7310A5AAFF4CB63062E81
stripe-verification=45f746e3b195198f419af3f685fdf217532ce552b4b47070b3caefe325559a67
stripe-verification=65883709F0B36AB2B73FFC870338AE9F817315DDBB1CAB28910F074F4A8DE1EC
stripe-verification=6a5d107aa37465eac2101bb1c725b02072689a4fa7bd38b455970baac4979a17
stripe-verification=76924B623B7105057C67D4F5EAE19F65EE8BD92635581BCACA2CCACA4D38FE1B
stripe-verification=79C640ED20153B836A623F16A3DCF65E2072948FB80C42D19300514DADF94EC5
stripe-verification=8E217BE0FF12B50596BD78EEA3F81E62C6C7A2AC78FBD46DAD95B7D21BA2F8BF
stripe-verification=B0AD8DC1918B8A717E5B6A29C2E04594A9872AB05F8DA24CB762BBA0A0487BC6
stripe-verification=C7ABA7B41F5AC26E3C397015A34CD46ACD2130DC8DAAFA7F59AAEFEDBC3FA517
stripe-verification=a27edc0da55836ea6bb7eac592bf2ca8e246eb652608d54493119df7df005afc
stripe-verification=a5c01aa4d732f4b93154d67983d77982ef1a2db73fecfd4bcd64e224d3ab4075
uber-domain-verification=01e9f567-7b84-45dd-9326-53992a028b40
uber-domain-verification=0ddb4c64-175c-4e7a-8a7a-f552034222e8
uber-domain-verification=5f5cc242-4dbe-4871-b726-bbbe085ff053
uber-domain-verification=72ffdffb-d431-452c-932e-cd1030d1eb46
uber-domain-verification=7a35217f-6956-41a0-be5c-a28ea2646964
v=spf1 include:spf1.amazon.com include:spf2.amazon.com include:amazonses.com -all
vizcom-domain-verification-Otrns5=NtkDXOBddZZnm9ETuwyrltTdl
wrike-verification=MzI3NzM2ODo2NDk5MjE4NjQ2MWJmOTEwMGMxM2MzNzJmNWJlY2U5ZDU4MmVlNzQ2NWU4MTY5OWJjMjlmYjQ4Mjc5M2JiMzky
3 address record(s) resolved
+4
4 authoritative nameservers
+2
WHOIS & Identity Lookup
Domain ownership status, registry lifecycle, nameservers, and privacy redaction.
Found
- Registrable Domain
- amazon.com
- Registrar Organization
- MarkMonitor Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- ns-1447.awsdns-52.org, ns-1707.awsdns-21.co.uk, ns-264.awsdns-33.com, ns-521.awsdns-01.net
- Registration Lifecycle
- Registered: 1994 → Expires: 2027
Nameservers (NS)
ns-1447.awsdns-52.orgns-1707.awsdns-21.co.ukns-264.awsdns-33.comns-521.awsdns-01.net
Domain registered 32+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Email Security & Deliverability
SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.
Protected
- SPF Record
- v=spf1 include:spf1.amazon.com include:spf2.amazon.com include:amazonses.com -all
- DMARC Policy Mode
- Policy: QUARANTINE
- DMARC Raw Record
- v=DMARC1;" "p=quarantine;" "pct=100;" "rua=mailto:report@dmarc.amazon.com;" "ruf=mailto:report@dmarc.amazon.com
- DKIM Selectors Detected
- None detected
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (quarantine)
+4
Threat Intelligence & Blocklists
Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.
Clean
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- amazon
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- Official Domain (amazon)
- Typosquatting Risk
- Clean
amazon is the real brand's registered domain
The root label matches the brand exactly — this IS the brand's own domain.
+10
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Technology Stack & Metadata
Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.
Detected
Detected Technologies by Category
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- Meta Description
- —
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width, initial-scale=1
- Generator Software
- —
1 technologies detected
Cloudflare
Mobile viewport configured
+2
Page Performance & Compression
Server response time, content payload size, Brotli/Gzip compression, and caching rules.
129ms
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/3
QUIC-based, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
QUIC/H3
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 129 ms
- Payload Body Size
- 2 KB
- Compression Status
- Uncompressed
- Cache Directives
- no-store, max-age=0
No findings.
AI Content Safety & Red Flags
High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.
Safe
AI Content Evaluation
92/100 — trusted. Long-established domain (32.0 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 32+ years ago; amazon is the real brand's registered domain; popular website — ranked #28 worldwide. Minor issues: missing HSTS; missing Content Security Policy.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 159 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
Server & Hosting Infrastructure
Primary IP address, web server software, CDN edge network, and redirect hop chain.
cloudflare
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 98.82.161.185
- HTTP Status Code
- 202 OK
- Final Landing Destination
- https://www.amazon.com/
- Redirect Hop Count
- 1 hop
Redirect Hop Chain
- 1.https://amazon.com/ → https://www.amazon.com/
Site responded with 202
Final URL: https://www.amazon.com/. Response time 129ms.
+8
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (129ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
SSL / TLS Certificate
Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.
Secure
- Certificate Authority (Issuer)
- Not available (certificate logs did not respond)
- Subject Common Name (CN)
- —
- Validity Period
- Not available
- Subject Alternative Names (SANs)
- 1 domain protected
- Certificates Logged (CT)
- Verified in live TLS
Subject Alternative Names (Sample)
amazon.com
HTTPS works with a valid certificate
A secure connection was made on port 443. Certificate log details were unavailable at scan time.
+8
Content & Transparency Policies
Linked privacy policy, terms of service, about page, social channels, and published contacts.
Warning
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
Policy pages could not be checked
The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Robots.txt & Sitemap Discoverability
Search engine crawler directives, indexability, and declared XML sitemaps.
Missing
robots timed out after 5000ms
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
29
This scan
Sources Checked
19
Live security feeds
Scan Duration
7.56s
Full live scan
Last Scan
11/13/2026
Live timestamp
Overall Risk
Low Risk
User reviews of amazon.com
No reviews yet. Be the first to share your experience.