amazonaws[.]com

Posts referencing this indicator

• “Legitimate” phishing: how attackers weaponize Amazon SES to bypass email security

  Root domain for AWS services, frequently used to host phishing forms via S3 buckets.

  2026-05-13