Is d3cez36w5wymxj.cloudfront.net legit or a scam?
Official UK transport watchdog asset domain with an 18-year history and no security flags.
Analysis Summary
No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →
Visual Screenshot Analysis
We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.
Visual red flags detected in the screenshot
The page displays a raw XML directory listing for an Amazon S3 bucket, which is a technical data view rather than a user-facing website; visual cues for scam activity are neutral.
What our vision model saw
1 signalPage renders raw XML data from an Amazon S3 bucket
MT Intelligence
The domain is a dedicated Amazon CloudFront distribution used by Transport Focus, a statutory consumer body in the United Kingdom. Our analysis confirms the domain has been active for over 18 years, which is a strong indicator of stability and legitimacy. While the root URL displays a technical XML directory listing, the actual content consists of thousands of official PDFs, passenger satisfaction surveys, and annual reports. Our antivirus network shows zero detections across 92 different engines. The infrastructure is properly configured with valid security certificates and is linked directly to a verified UK public organization.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for d3cez36w5wymxj.cloudfront.net, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- Domain is an Amazon CloudFront CDN distribution (d3cez36w5wymxj.cloudfront.net) fronting an S3 bucket named "transportfocus" containing thousands of PDFs, reports, and images.
- All content is official publications, research reports, surveys, and business plans from Transport Focus (transportfocus.org.uk), the independent UK passenger consumer organization formerly known as Passenger Focus.
- Documents cover rail, bus, coach, and tram passenger satisfaction, fare evasion research, smart ticketing, business plans, and annual reports dating back over a decade.
- The root URL returns an XML S3 bucket directory listing (objects under /wp-content/uploads/ and /migrated/), which is public but not a standard web homepage.
- No scam reports, complaints, phishing indicators, or malware associations found specific to this exact CloudFront ID in searches.
- General warnings exist about other cloudfront.net subdomains being abused for malware/phishing by cybercriminals, but this one is verifiably used by a legitimate UK public body.
- Domain age of ~18 years (6634 days) aligns with long-term use by a stable government-affiliated transport research organization.
Used by Transport Focus (operating name of the Passengers' Council), the UK's independent public transport consumer watchdog
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Domain & Encryption
Server Reputation
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on d3cez36w5wymxj.cloudfront.net and not a lookalike like d-3cez36w5wymxj.cloudfront.net.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review found no threat indicators on d3cez36w5wymxj.cloudfront.net. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- d3cez36w5wymxj.cloudfront.net passed our automated security checks with a trust score of 82/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. d3cez36w5wymxj.cloudfront.net presents a valid TLSv1.3 certificate issued by Amazon · Amazon RSA 2048 M01, expiring in 76 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- d3cez36w5wymxj.cloudfront.net is 18.2 years old, registered on 4/25/2008 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 92 antivirus engines in our malware network report d3cez36w5wymxj.cloudfront.net as clean.
- No. d3cez36w5wymxj.cloudfront.net is not currently listed on the major browser blocklist feeds that modern browsers use.
- d3cez36w5wymxj.cloudfront.net resolves to an IP operated by Amazon.com, Inc. in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- Independent trust-rating sites currently show the following for d3cez36w5wymxj.cloudfront.net: ScamAdviser: 3/100. Those scores come from user reviews and their own heuristics, so they are worth comparing against our verdict.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.