amazon.com Security Audit on CyberFurl

Preparing the security report

Privacy controls

CyberFurl can load analytics only after you opt in. Core product features work without analytics consent.

amazon.com Security Audit — DNS, Email & SSL Report

Security report

Completed

CyberFurl completed the core public checks, but the combined audit score is still calculating while the remaining weighted evidence is validated.

Unified external risk score across DNS, email, web, malware, breach exposure, and technical readiness signals. Final scoring will publish once the remaining evidence settles.

Monitor DomainCheck another

Latest report

Ready to share

8/23/2026, 4:06:39 PM UTC

Coverage

7/7 stages

100% collected

Leading signal

Still evaluating

Waiting for scored data

Priority area

Still evaluating

DNS settings need attention

Immediate priority

DNS settings need attention

DNSSEC is not enabled.

Email the full report to get the DNS fix checklist.

Score status

Latest saved external posture

8/23/2026, 4:06:39 PM UTC

—Combined scoreCalculating7/7 stages

Coverage7/7 stages

Signals5 surfaced

StatusScore will publish as the remaining evidence settles

Email security

CyberFurl checks the public email authentication records for amazon.com including SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), and DMARC (Domain-based Message Authentication, Reporting, and Conformance). These protocols determine whether emails from amazon.com can be trusted by receiving mail servers and whether they are likely to reach the inbox or be flagged as spam.

Email score

—/N/A

Risk level

Pending

Key finding

Email protection needs attention

Get the full email deliverability breakdown in the PDF report

Public findings

Issues at a glance

A public summary of the checks that surfaced the strongest visible signals in this report.

Check

Status

Severity

Explanation

DNS settings need attention

Review

warning

Business Impact: DNS hijacking risk and potential downtime. DNSSEC is not enabled.

Email protection needs attention

Review

warning

Business Impact: Attackers may impersonate your domain in phishing campaigns. Missing controls: SPF, DKIM, DMARC…

Web security needs attention

Review

warning

Business Impact: Increased exposure to browser-based attacks. Present: none. Missing: HSTS, CSP, X-Frame-Options…

4 issues found that need attention

Get the full remediation workbook with step-by-step fixes delivered to your inbox.

View Complete Findings

Executive summary

CyberFurl is still gathering trustworthy public posture evidence for amazon.com. Keep this tab open while the combined audit stages finish collecting evidence.

Email the full report for the business summary, supporting context, and prioritized actions.

Control and exposure map

One primary exposure, one strongest control, and the remaining stages arranged as report rows instead of equal-weight dashboard tiles.

Primary exposure

DNS posture

Failed

DNS settings need attention

—

Scan failed · partial data

DNSSEC

Not enabled

Resolver and record checks were included in this audit.

DNSSEC

Off

Resolver health

Unknown

Strongest control

Email authenticity

SPF, DKIM, DMARC, and MX coverage were included.

—

Scan failed · partial data

Audit frame

Coverage

100% collected

7/7 stages

Signals

4 issues to review

Freshness

Ready to share externally

Checked today

Web security

Failed

Web security needs attention

—

Scan failed · partial data

HSTSMissing

CSPMissing

Present: none. Missing: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy,…

Malware intelligence

Limited detail

Threat telemetry is still being validated

—

Scan failed · partial data

Signals0

VerdictUnknown

Threat-feed telemetry and blacklist reputation were reviewed without an active hit.

Supporting evidence

Domain, infrastructure, and incident proof

Saved signals that support the scored audit without introducing another score layer.

Email Authentication (SPF, DKIM, DMARC)

Public section

Email security deep dive

Status

completed

Saved SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT, DANE, and MX evidence was included from the latest shared email scan.

Included in the current public preview

SPF recordMissing

DKIM selectorsMissing

DMARC pMissing

DMARC spNot set

DMARC pct100

DMARC ruaNot set

DMARC rufNot set

MX routes0

BIMIUnknown

MTA-STSUnknown

TLS-RPTUnknown

DANEUnknown

DMARC policyp= pct=100 rua= ruf=

DNS Configuration

Public section

DNS Records snapshot

Saved DNS records were included from the latest shared DNS scan.

Included in the current public preview

completed

SSL/TLS Certificate

Public section

SSL/TLS certificate panel

Saved certificate validity, protocol support, negotiated cipher, and transport-hardening evidence was included from the latest TLS scan.

Included in the current public preview

completed

IssuerCN=GeoTrust TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US

Valid fromMay 05, 2026

Valid toNovember 18, 2026

Days remaining121 days · Healthy

TLS versionsTLSv1.3, TLSv1.2, TLSv1.1

Cipher suite gradeB

Negotiated cipherTLS_AES_128_GCM_SHA256

HSTSMissing

OCSP staplingUnknown

CT logsUnknown

Accepted cipherTLS_AES_128_GCM_SHA256

Certificate

SubjectCN=*.peg.a2z.com

IssuerCN=GeoTrust TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US

TLS Protocols

TLSv1.3Supported

TLSv1.2Supported

TLSv1.1Supported

TLSv1.0Not supported

Cipher Suites

Cipher

Protocol

Strength

TLS_AES_128_GCM_SHA256TLSv1.3strong

ECDHE-RSA-AES128-GCM-SHA256TLSv1.2strong

Subject Alternative Names (47)

amazon.co.ukuedata.amazon.co.ukwww.amazon.co.ukorigin-www.amazon.co.uk*.peg.a2z.comamazon.comamzn.comuedata.amazon.comus.amazon.comwww.amazon.comwww.amzn.comcorporate.amazon.combuybox.amazon.comiphone.amazon.comyp.amazon.comhome.amazon.comorigin-www.amazon.comorigin2-www.amazon.combuckeye-retail-website.amazon.comhuddles.amazon.comamazon.dewww.amazon.deorigin-www.amazon.deamazon.co.jpamazon.jpwww.amazon.jpwww.amazon.co.jporigin-www.amazon.co.jp*.aa.peg.a2z.com*.ab.peg.a2z.com*.ac.peg.a2z.comorigin-www.amazon.com.auwww.amazon.com.au*.bz.peg.a2z.comamazon.com.auorigin2-www.amazon.co.jpedgeflow.aero.4d5ad1d2b-frontier.amazon.co.jpedgeflow.aero.04f01a85e-frontier.amazon.com.auedgeflow.aero.47cf2c8c9-frontier.amazon.comedgeflow.aero.abe2c2f23-frontier.amazon.deedgeflow.aero.bfbdc3ca1-frontier.amazon.co.ukedgeflow-dp.aero.4d5ad1d2b-frontier.amazon.co.jpedgeflow-dp.aero.04f01a85e-frontier.amazon.com.auedgeflow-dp.aero.47cf2c8c9-frontier.amazon.comedgeflow-dp.aero.bfbdc3ca1-frontier.amazon.co.ukedgeflow-dp.aero.abe2c2f23-frontier.amazon.deshop.business.amazon.com

Web Security Headers

Security Headers

Cache-Control

PRESENT

no-cache, no-store, must-revalidate

Server

PRESENT

AkamaiGHost

Strict-Transport-Security

MISSING ESSENTIAL

Content-Security-Policy

MISSING ESSENTIAL

X-Frame-Options

MISSING ESSENTIAL

X-Content-Type-Options

MISSING ESSENTIAL

Referrer-Policy

MISSING ESSENTIAL

Permissions-Policy

MISSING ESSENTIAL

All Response Headers18 headers

Cache-Control

PRESENT

no-cache, no-store, must-revalidate

Server

PRESENT

AkamaiGHost

Akamai-Request-BC

PRESENT

[a=23.48.200.165,b=436646771,c=g,n=US_VA_ASHBURN,o=20940]

Alt-Svc

PRESENT

h3=":443"; ma=93600

Connection

PRESENT

keep-alive

Content-Encoding

PRESENT

gzip

Content-Length

PRESENT

1256

Content-Type

PRESENT

text/html

Date

PRESENT

Mon, 20 Jul 2026 20:35:48 GMT

Expires

PRESENT

Location

PRESENT

https://www.amazon.com/

Mime-Version

PRESENT

1.0

Set-Cookie

PRESENT

empty value

Transfer-Encoding

PRESENT

chunked

Vary

PRESENT

Accept-Encoding

x-amz-rid

PRESENT

707RSBA5S1BPAMAGJ92R

X-Amzn-Cdn-Id

PRESENT

ak-18.a5c83017.1784579748.1a06b373

X-Cache

PRESENT

NotCacheable from child

Infrastructure & Other Headers16 headers

Akamai-Request-BC

PRESENT

[a=23.48.200.165,b=436646771,c=g,n=US_VA_ASHBURN,o=20940]

Alt-Svc

PRESENT

h3=":443"; ma=93600

Connection

PRESENT

keep-alive

Content-Encoding

PRESENT

gzip

Content-Length

PRESENT

1256

Content-Type

PRESENT

text/html

Date

PRESENT

Mon, 20 Jul 2026 20:35:48 GMT

Expires

PRESENT

Location

PRESENT

https://www.amazon.com/

Mime-Version

PRESENT

1.0

Set-Cookie

PRESENT

empty value

Transfer-Encoding

PRESENT

chunked

Vary

PRESENT

Accept-Encoding

x-amz-rid

PRESENT

707RSBA5S1BPAMAGJ92R

X-Amzn-Cdn-Id

PRESENT

ak-18.a5c83017.1784579748.1a06b373

X-Cache

PRESENT

NotCacheable from child

Subdomains & Infrastructure

Public section

IP intelligence

Saved resolved IP, ASN, provider, and location evidence was included from the latest shared infrastructure snapshot.

Included in the current public preview

completed

Resolved IPs (13)

3.170.24.177

15.197.140.28

3.33.147.88

72.21.206.30

44.215.128.178

98.82.161.185

207.171.166.103

13.35.82.221

3.171.61.95

52.85.194.143

18.165.93.17

207.171.181.17

98.82.158.24

Hosting Provider

Unknown

Organization

Unknown

ASN

Unknown

Country

Unknown

Infrastructure

Unknown

Reverse DNS

www.amazon.com

SubdomainDiscovery

Subdomain footprint

21 public hostnames were included in the latest saved enumeration snapshot.

Saved 7/20/2026, 8:35:35 PM UTC

Completed

Discovered21

Subdomain inventory (21)

Subdomain

IP Address

Status

www.amazon.com3.170.24.177Live

video.amazon.com15.197.140.28Live

support.amazon.com3.33.147.88Live

storefront.amazon.com72.21.206.30Live

store.amazon.com3.33.147.88Live

shop.amazon.com3.33.147.88Live

services.amazon.com44.215.128.178Live

amazon.com98.82.161.185Live

ns-521.awsdns-01.net—Live

ns-1447.awsdns-52.org—Live

ns-264.awsdns-33.com—Live

secure.amazon.com207.171.166.103Live

m.amazon.com15.197.140.28Live

images.amazon.com13.35.82.221Live

help.amazon.com15.197.140.28Live

docs.amazon.com3.171.61.95Live

data.amazon.com52.85.194.143Live

cloud.amazon.com3.33.147.88Live

chat.amazon.com18.165.93.17Live

beta.amazon.com207.171.181.17Live

api.amazon.com98.82.158.24Live

PortScan

Network exposure

2 open port(s) and 0 closed port(s) found in the latest saved port scan.

Saved 7/15/2026, 5:31:19 PM UTC

Completed

Total Open Ports

Total Closed Ports

Filtered / Blocked

Open Ports (2)

Unknown

open

80/TCP

Unknown

open

443/TCP

All Scanned Ports7 total ports

Port

Protocol

Service

State

21tcp—filtered

22tcp—filtered

25tcp—filtered

8080tcp—filtered

8443tcp—filtered

TracerouteAPI

Network route telemetry

Traceroute collected 0 hop(s) but did not confirm destination.

Saved 6/26/2026, 9:19:14 AM UTC

Completed

Hop Count

Route Reached

Avg RTT

0.0 ms

Min RTT

0.0 ms

Max RTT

0.0 ms

First Hop

Unknown

Final Hop

Unknown

WHOIS & Registration

Public section

WHOIS panel

Saved registrar, lifecycle, and nameserver evidence was included from the latest WHOIS lookup.

Included in the current public preview

completed

Registrar

MarkMonitor, Inc.

Privacy Protection

Expiry Health

68 days · Caution

Created

Nov 1, 1994

Updated

Apr 22, 2026

Expires

Oct 31, 2026

Nameservers (4)

ns-1447.awsdns-52.org

205.251.197.167, 2600:9000:5305:a700::1

ns-1707.awsdns-21.co.uk

205.251.198.171, 2600:9000:5306:ab00::1

ns-264.awsdns-33.com

205.251.193.8, 2600:9000:5301:800::1

ns-521.awsdns-01.net

205.251.194.9, 2600:9000:5302:900::1

EPP Status Codes

serverTransferProhibitedserverDeleteProhibitedclientUpdateProhibitedserverUpdateProhibitedclientDeleteProhibitedclientTransferProhibited

Immediate priorities

DNS settings need attention

Business Impact: DNS hijacking risk and potential downtime.
DNSSEC is not enabled.

Warning

Next step

Email the full report to get the DNS fix checklist.

Email protection needs attention

Business Impact: Attackers may impersonate your domain in phishing campaigns.
Missing controls: SPF, DKIM, DMARC.

Warning

Next step

Email the full report to get the email authentication checklist.

Web security needs attention

Business Impact: Increased exposure to browser-based attacks.
Present: none. Missing: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy.

Warning

Next step

Email the full report to get the web hardening checklist.

Report context

Frequently Asked Questions

Is amazon.com safe?

CyberFurl has collected publicly observable security signals for amazon.com but a final composite score has not yet been computed. The report covers DNS, email authentication, web security headers, and SSL/TLS evidence gathered on August 23, 2026 at 4:06 PM UTC.

Is DNSSEC enabled on amazon.com?

No. CyberFurl found that DNSSEC is not enabled on amazon.com (status: unsigned). Without DNSSEC, DNS responses cannot be cryptographically verified, leaving the domain potentially vulnerable to cache-poisoning and man-in-the-middle attacks on DNS resolution.

Does amazon.com use HTTP security headers?

CyberFurl scanned the HTTP response headers served by amazon.com. 0/6. Properly configured security headers protect visitors from clickjacking, cross-site scripting, and information disclosure.

Does amazon.com use a valid SSL/TLS certificate?

CyberFurl verified the TLS configuration for amazon.com: certificate issued by CN=GeoTrust TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US. A trusted TLS certificate ensures that traffic between visitors and amazon.com is encrypted and that the server identity is verified.

Who is the registrar for amazon.com?

amazon.com is registered with MarkMonitor, Inc.. The registration is scheduled to expire on Expires within 90 days. CyberFurl monitors WHOIS records to detect registrar changes, upcoming expirations, and domain status flags that could affect security.

When does amazon.com's domain registration expire?

According to CyberFurl's WHOIS lookup, the amazon.com registration expires on Expires within 90 days. Expired domains can be snatched by attackers for phishing or malware distribution. CyberFurl can alert you as the expiration date approaches.

How many subdomains were discovered for amazon.com?

CyberFurl's passive enumeration discovered 21 subdomains associated with amazon.com. Examples include: www.amazon.com, video.amazon.com, support.amazon.com. The full inventory appears in the infrastructure evidence section. Unmonitored subdomains are a common blind spot — expired certificates or misconfigured services on forgotten subdomains can become silent entry points for attackers.

What ports are exposed on amazon.com?

CyberFurl's network scan found 2 open ports on amazon.com. Exposed services: 80/tcp (unknown), 443/tcp (unknown). Open ports represent potential entry points for attackers. Unused services should be closed and exposed services kept patched and monitored continuously.

When was amazon.com last scanned by CyberFurl?

The current public report for amazon.com reflects security data collected on August 23, 2026 at 4:06 PM UTC. CyberFurl continuously refreshes public reports as new evidence is gathered. Enable continuous monitoring to receive real-time alerts the moment security-relevant changes are detected.

How does CyberFurl collect security information about amazon.com?

CyberFurl relies exclusively on publicly observable signals — no intrusive probing or credentials are required. Data sources include: DNS record queries (A, AAAA, MX, TXT, NS, CAA, PTR), SSL/TLS certificate inspection via standard TLS handshake, HTTP response header analysis, WHOIS registry lookups, passive subdomain enumeration, non-intrusive port reconnaissance, network route telemetry (traceroute), and public threat intelligence feeds.

Why can security findings change between scans for amazon.com?

Security posture is dynamic. Findings for amazon.com can change when: SSL/TLS certificates are renewed or expire, DNS records are updated (MX, SPF, DMARC, NS changes), new subdomains are provisioned or decommissioned, HTTP security headers are added or removed from server configuration, hosting or CDN infrastructure changes, or threat intelligence databases are updated with new indicators of compromise.

Can I monitor amazon.com for security changes?

Yes. CyberFurl's continuous monitoring tracks DNS record changes, SSL/TLS certificate expiry and reissuance, email authentication policy updates (SPF, DKIM, DMARC), WHOIS registration changes, new subdomain discoveries, open port changes, and threat intelligence hits for amazon.com. Enable continuous monitoring to receive alerts the moment security-relevant changes occur.

Learn More

DMARC DKIM DNSSEC CVE Database OWASP Top 10 DDoS Mitigation TLS/SSL Security

amazon.com External Security Audit & Risk Exposure Report

amazon.com Email Deliverability & DMARC Authentication

Issues at a glance

amazon.com Executive Summary & Key Threat Intelligence

amazon.com Attack Surface: DNS, Web & Exposure Analysis

DNS posture

Email Authentication (SPF, DKIM, DMARC)

DNS Configuration

SSL/TLS Certificate

Web Security Headers

Security Headers

Subdomains & Infrastructure

Open Ports (2)

WHOIS & Registration

amazon.com Vulnerability Fixes & Recommended Actions

Frequently Asked Questions

Related Reports

Learn More