Is kcg40vh.r.us-west-2.awstrack.me a scam?

Our automated security review marked kcg40vh.r.us-west-2.awstrack.me as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.

Is kcg40vh.r.us-west-2.awstrack.me safe to use?

kcg40vh.r.us-west-2.awstrack.me currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.

Does kcg40vh.r.us-west-2.awstrack.me have a valid SSL certificate?

Yes. kcg40vh.r.us-west-2.awstrack.me presents a valid TLSv1.3 certificate issued by Amazon · Amazon RSA 2048 M02, expiring in 93 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

Has kcg40vh.r.us-west-2.awstrack.me been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report kcg40vh.r.us-west-2.awstrack.me as clean.

Is kcg40vh.r.us-west-2.awstrack.me on any phishing or malware blacklists?

No. kcg40vh.r.us-west-2.awstrack.me is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is kcg40vh.r.us-west-2.awstrack.me hosted?

kcg40vh.r.us-west-2.awstrack.me resolves to an IP operated by Amazon.com, Inc. in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the kcg40vh.r.us-west-2.awstrack.me report updated?

This is a permanent record of the scan run on July 5, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around kcg40vh.r.us-west-2.awstrack.me have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is kcg40vh.r.us-west-2.awstrack.me legit or a scam?

Our verdict:Suspicious· 55/100

SafeSuspiciousDangerous

Official AWS email tracking domain frequently exploited by attackers to mask phishing and credential-theft links.

Top reasons

Known redirector used to mask the final destination of phishing links.Documented history of abuse by attackers for credential theft campaigns.Multiple complaints in spam databases regarding unsolicited or fraudulent emails.

kcg40vh.r.us-west-2.awstrack.meScanned 1h ago

Post Facebook

Trust score

SUSPICIOUS

Score breakdown

Heuristics 90·MT 45

Screenshot of kcg40vh.r.us-west-2.awstrack.me

See the live page ↓

Category tags

phishing#phishing85% MT confidence

Positive signals (4)

Antivirus clear Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

—

Registration date unknown

MT Intelligence

Suspicious

Moderate likelihood · 85% confidence

SUSPICIOUS

Warning signs detected

Official AWS email tracking domain frequently exploited by attackers to mask phishing and credential-theft links. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

LIVE RENDER

kcg40vh.r.us-west-2.awstrack.me

1Screenshot incomplete — site may be slow to render

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

High visual risk

Visual red flags detected in the screenshot

We could not capture a fully-rendered screenshot of this page; visual analysis is inconclusive.

Visual risk50/100

What our vision model saw

1 signal

Screenshot incomplete — site may be slow to render

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Moderate scam likelihoodengineMT · Guardiantrust45/100

MT AgentLive web researchVisual inspection

Confidence

The domain belongs to a legitimate Amazon service used for tracking email clicks and opens. However, our research confirms that bad actors frequently abuse this exact infrastructure to bypass security filters and monitor victim engagement. Because this is a redirect service, the final destination is hidden until the link is clicked. Multiple security reports highlight its use in large-scale phishing campaigns. Without a clear destination, the risk of landing on a credential-harvesting page is high.

Full dossier

Analysis complete

Page Content

The URL serves as a redirect endpoint and does not host a traditional website. Our crawler was unable to render a visual page because the link is designed to instantly forward the user to another destination or log a tracking event.

Infrastructure

The site is hosted on Amazon Web Services (AWS) using their Simple Email Service (SES) tracking system. It uses a valid Amazon-issued SSL certificate and is part of the official 'awstrack.me' network. While the server itself is secure, it is a 'blind' redirector.

Domain History

The parent domain has been registered to Amazon Europe Core since 2017. It is a high-traffic infrastructure component, but it lacks a traditional web reputation because it is used exclusively for backend email logistics.

Web Reputation

Independent security researchers and spam databases have flagged this domain due to its role in 'phishing at cloud scale.' While not inherently malicious, its reputation is tarnished by constant abuse from third-party attackers using AWS services.

Risk Factors

Known redirector used to mask the final destination of phishing links.
Documented history of abuse by attackers for credential theft campaigns.
Multiple complaints in spam databases regarding unsolicited or fraudulent emails.
Low trust ratings from independent security aggregators due to high abuse volume.
The specific subdomain lacks a public reputation or business context.

Positive Signals

Domain is officially owned and operated by Amazon.
Uses a valid, high-assurance SSL certificate.
Infrastructure has been active and stable since 2017.

AI Recommendation

Avoid clicking this link if it arrived in an unexpected or suspicious email. If you have already clicked it, do not enter any login credentials or personal information on the resulting page.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for kcg40vh.r.us-west-2.awstrack.me, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

Active · LU

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

3 scam reports

Key findings

7 headline facts from open-web research

Domain awstrack.me registered to Amazon Europe Core S.à r.l. (Luxembourg) since July 2017.
Subdomains like *.r.us-west-2.awstrack.me are official AWS SES email open/click tracking endpoints per AWS documentation.
Multiple spam.org registry/DNS complaints filed against awstrack.me citing phishing emails (auto-resolved).
Cofense report notes attackers abuse AWS SES (and thus awstrack.me redirects) for phishing campaigns.
Reddit threads (r/techsupport, r/aws) discuss awstrack.me links appearing in legitimate verification and marketing emails.
No direct references found to the exact subdomain kcg40vh.r.us-west-2.awstrack.me.
WOT scorecard for awstrack.me shows low trust score (24%); some security tools block the domain.

Scam reports (3)

Direct quotes from public scam databases, forums, and news.

spam.orgopen
"Complaint: C-AWSTRACK-ME-JB0XTREUPT ... Report Reason: Phishing Email ... Offending Domain: awstrack.me"
spam.orgopen
"Complaint: C-AWSTRACK-ME-BUVP8MYDD2 ... Report Reason: Not Subscribed ... Offending Domain: awstrack.me"
Cofenseopen
"Amazon SES uses the awstrack[.]me domain to track user interactions with emails, such as clicked links, enabling attackers to monitor victim engagement in their phishing campaigns."

Business registration

Status: active · LU

Registered 2017-07-18 to Amazon Europe Core S.à r.l., expires 2026-07-18; registrar Com Laude / Nom-iq Ltd.

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Our research found several reports on security blogs and spam databases indicating that this domain is a primary tool for attackers abusing Amazon SES. While the domain is a legitimate part of the AWS ecosystem, it is frequently cited in phishing complaints on platforms like Reddit and specialized threat intelligence sites. No positive consumer reviews exist because the domain is a technical redirector, not a consumer-facing business.

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious57Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Technical checksdomain · encryption · redirects · server reputation

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerAmazon · Amazon RSA 2048 M02

ExpiresOct 6, 2026 (93d)

Self-signedNo

Hosting & Technology

HostingAmazon.com, Inc.

Server locationUS

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPAmazon.com, Inc.

Usage typeData Center/Web Hosting/Transit

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

Treat kcg40vh.r.us-west-2.awstrack.me as unverified
Do not enter credentials or send money until you have independently verified the business.
Verify the business through independent channels
Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.
Never use irreversible payment methods
Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.
Share your experience
If you have additional context, drop a comment below or post on the MalwareTips forum.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review marked kcg40vh.r.us-west-2.awstrack.me as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
kcg40vh.r.us-west-2.awstrack.me currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
Yes. kcg40vh.r.us-west-2.awstrack.me presents a valid TLSv1.3 certificate issued by Amazon · Amazon RSA 2048 M02, expiring in 93 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
No. All 92 antivirus engines in our malware network report kcg40vh.r.us-west-2.awstrack.me as clean.
No. kcg40vh.r.us-west-2.awstrack.me is not currently listed on the major browser blocklist feeds that modern browsers use.
kcg40vh.r.us-west-2.awstrack.me resolves to an IP operated by Amazon.com, Inc. in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on July 5, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around kcg40vh.r.us-west-2.awstrack.me have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·kcg40vh.r.us-west-2.awstrack.me

SUSPICIOUS

This is an official Amazon Web Services (AWS) tracking link that is frequently abused by attackers to hide phishing destinations. While the infrastructure is legitimate, the specific link may lead to a malicious site. Do not click unless you were expecting an email from a trusted sender.

Avoid clicking this link if it arrived in an unexpected or suspicious email. If you have already clicked it, do not enter any login credentials or personal information on the resulting page.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Suspicious reports

file769309.up5yev.cyou

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.