Is de5282c3ca0c.edge.sdk.awswaf.com a scam?

Our automated security review found no threat indicators on de5282c3ca0c.edge.sdk.awswaf.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Is de5282c3ca0c.edge.sdk.awswaf.com safe to use?

de5282c3ca0c.edge.sdk.awswaf.com passed our automated security checks with a trust score of 89/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.

Does de5282c3ca0c.edge.sdk.awswaf.com have a valid SSL certificate?

Yes. de5282c3ca0c.edge.sdk.awswaf.com presents a valid TLSv1.3 certificate issued by Amazon · Amazon RSA 2048 M01, expiring in 181 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the de5282c3ca0c.edge.sdk.awswaf.com domain?

de5282c3ca0c.edge.sdk.awswaf.com is 10.7 years old, registered on 10/5/2015 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has de5282c3ca0c.edge.sdk.awswaf.com been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report de5282c3ca0c.edge.sdk.awswaf.com as clean.

Is de5282c3ca0c.edge.sdk.awswaf.com on any phishing or malware blacklists?

No. de5282c3ca0c.edge.sdk.awswaf.com is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is de5282c3ca0c.edge.sdk.awswaf.com hosted?

de5282c3ca0c.edge.sdk.awswaf.com resolves to an IP operated by Amazon.com, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the de5282c3ca0c.edge.sdk.awswaf.com report updated?

We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.

SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Security Review

Is de5282c3ca0c.edge.sdk.awswaf.com legit or a scam?

Name: Is de5282c3ca0c.edge.sdk.awswaf.com legit or a scam?
Item: de5282c3ca0c.edge.sdk.awswaf.com
Rating: 5
Author: MalwareTips

Our verdict:Safe· 89/100

SafeSuspiciousDangerous

Official Amazon Web Services WAF subdomain for bot-protection challenges with zero malicious detections and long-established history.

Why we trust it

Zero detections across our antivirus network and browser blocklists.Valid long-lived Amazon SSL certificate and clean IP reputation.Confirmed legitimate use in AWS WAF challenge scripts on established websites.

de5282c3ca0c.edge.sdk.awswaf.comScanned 4d ago

Post Facebook

Trust score

SAFE

Heuristics 75·MT 95

Category tags

infrastructure95% MT confidence

Technical red flags (1)

Lookalike domain suspected

Positive signals (5)

Antivirus clear Not on major blacklists Domain is 11 years old Encrypted connection Clean server reputation

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

11 years old

Registered Oct 5, 2015

MT Intelligence

Safe

Low likelihood · 95% confidence

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Low scam likelihoodengineMT · Guardiantrust95/100

MT AgentLive web researchVisual inspection

Confidence

The domain is a known subdomain under awswaf.com, the official AWS WAF service used for captcha and bot challenges on sites like Hugging Face. Our antivirus network and browser blocklists returned zero flags while the hosting IP shows no abuse reports. The domain itself is over ten years old with valid Amazon-issued SSL. No scam reports, complaints, or clone indicators appear in our research. These signals together indicate trusted AWS infrastructure rather than any threat.

Full dossier

Analysis complete

Page Content

Subdomain serves JavaScript challenge scripts for AWS WAF bot protection and is not a standalone website.

Infrastructure

Hosted on Amazon infrastructure with valid SSL certificate issued by Amazon.
IP reputation clean with zero abuse reports.

Domain History

Domain age exceeds 10 years with registration through MarkMonitor; first references date to 2015.

Web Reputation

Listed in official browser protection lists and actively used by major sites for security challenges.

Positive Signals

Zero detections across our antivirus network and browser blocklists.
Valid long-lived Amazon SSL certificate and clean IP reputation.
Confirmed legitimate use in AWS WAF challenge scripts on established websites.

AI Recommendation

No action required. This is legitimate AWS infrastructure and can be safely ignored or allowed by security tools.

Next-gen fraud intelligence

Evidence-backedCross-checked

Website Preview

LIVE RENDER

de5282c3ca0c.edge.sdk.awswaf.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for de5282c3ca0c.edge.sdk.awswaf.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age

10 yrs

Registered Oct 2015

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

No scam reports found

No complaints, no negative coverage turned up in our sweep.

Key findings

6 headline facts from open-web research

Domain de5282c3ca0c.edge.sdk.awswaf.com is a subdomain under edge.sdk.awswaf.com, associated with Amazon Web Services (AWS) WAF (Web Application Firewall).
Listed in GoogleChrome/ip-protection Masked-Domain-List.md as 'de5282c3ca0c.edge.sdk.awswaf.com, Amazon, Not Impacted By Script Blocking'.
Used in challenge.js scripts on sites including Hugging Face (e.g., src='https://de5282c3ca0c.edge.sdk.awswaf.com/de5282c3ca0c/526cf06acb0d/challenge.js').
First seen references date to 2015-10-05 in multiple analysis reports (e.g., urlquery.net).
No scam, complaint, or review mentions found in searches for the exact domain + scam/review/complaint/reddit.
awswaf.com is the official domain for AWS WAF services, including captcha and bot protection challenges.

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We searched scam-report databases, consumer-review sites, and general web sources for de5282c3ca0c.edge.sdk.awswaf.com and didn't find scam reports or complaints. For a new or low-traffic site this is expected and is not by itself a sign of trust.

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious60Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Domain History

Age11 years old

RegistrarMarkMonitor Inc.

RegisteredOct 5, 2015

ExpiresOct 5, 2026

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerAmazon · Amazon RSA 2048 M01

ExpiresNov 29, 2026 (181d)

Self-signedNo

Hosting & Technology

HostingAmazon.com, Inc.

Server locationUS

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPAmazon.com, Inc.

Usage typeContent Delivery Network

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

Double-check the exact URL in your address bar
Confirm you are actually on de5282c3ca0c.edge.sdk.awswaf.com and not a lookalike like d-e5282c3ca0c.edge.sdk.awswaf.com.com or an IDN homoglyph.
Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
Discuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.

Our automated security review found no threat indicators on de5282c3ca0c.edge.sdk.awswaf.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Final Verdict

Trust / 100

Final Verdict·de5282c3ca0c.edge.sdk.awswaf.com

SAFE

This is an official AWS WAF edge subdomain used for security challenges on legitimate sites. Clean scan results, valid Amazon SSL, and over ten years of domain history confirm it is safe infrastructure.

No action required. This is legitimate AWS infrastructure and can be safely ignored or allowed by security tools.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Safe reports

woocommerce-1093796-5896757.cloudwaysapps.com

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.