Domain > 576657849781.portal.nebula.aws.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-11	3.167.183.23 (ClassC)
2026-01-03	3.163.24.116 (ClassC)

HTTP/1.1 301 Moved PermanentlyServer: CloudFrontDate: Sat, 03 Jan 2026 21:36:38 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://576657849781.portal.nebula.aws.dev/X-Cache: Redirect from cloudfrontVia: 1.1 2e87eef03ab555daefa684d946e111b4.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2X-Amz-Cf-Id: lWVTnZ1s5cgWSG63Uri_A9KZbpYpFciU_6Rb9kT2HPCXOdtJTNjWeAX-Frame-Options: DENYReferrer-Policy: same-originContent-Security-Policy: base-uri self; upgrade-insecure-requests ; default-src none; style-src self unsafe-inline; frame-ancestors self https://576657849781.portal.nebula.aws.dev; object-src none; frame-src self; img-src * data: blob:; font-src self data:; worker-src self blob:; script-src self unsafe-inline blob: https://prod.log.shortbread.aws.dev https://prod.tools.shortbread.aws.dev https://prod.log.shortbread.analytics.console.aws.a2z.com https://prod.tools.shortbread.analytics.console.aws.a2z.com; media-src self https://berryessadev2.s3.amazonaws.com; connect-src self blob: https: https://576657849781.portal.nebula.aws.dev https://*.auth.us-west-2.amazoncognito.com https://cognito-idp.us-west-2.amazonaws.com https://cognito-identity.us-west-2.amazonaws.com https://maps.geo.us-west-2.amazonaws.com https://*.lambda-url.us-west-2.on.aws https://berryessadev2.s3.amazonaws.com https://places.geo.us-west-2.amazonaws.com https://services.arcgisonline.com https://prod.log.shortbread.aws.dev https://prod.tools.shortbread.aws.dev https://prod.log.shortbread.analytics.console.aws.a2z.com https://prod.tools.shortbread.analytics.console.aws.a2z.comX-Content-Type-Options: nosniff

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 950Connection: keep-aliveDate: Sat, 03 Jan 2026 21:36:39 GMTLast-Modified: Thu, 21 Aug 2025 18:58:10 GMTETag: 8b6072f8ffda7541425a26b06f4defcdx-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3X-Cache: Miss from cloudfrontVia: 1.1 8bf233dd8a97bd754666b427b6d19d34.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2X-Amz-Cf-Id: Y7AHrWG3-F8WgVUlYLZXkblWBYd-8316XVs-t5BLKZ0nGkDfxRH4bQX-Frame-Options: DENYReferrer-Policy: same-originContent-Security-Policy: base-uri self; upgrade-insecure-requests ; default-src none; style-src self unsafe-inline; frame-ancestors self https://576657849781.portal.nebula.aws.dev; object-src none; frame-src self; img-src * data: blob:; font-src self data:; worker-src self blob:; script-src self unsafe-inline blob: https://prod.log.shortbread.aws.dev https://prod.tools.shortbread.aws.dev https://prod.log.shortbread.analytics.console.aws.a2z.com https://prod.tools.shortbread.analytics.console.aws.a2z.com; media-src self https://berryessadev2.s3.amazonaws.com; connect-src self blob: https: https://576657849781.portal.nebula.aws.dev https://*.auth.us-west-2.amazoncognito.com https://cognito-idp.us-west-2.amazonaws.com https://cognito-identity.us-west-2.amazonaws.com https://maps.geo.us-west-2.amazonaws.com https://*.lambda-url.us-west-2.on.aws https://berryessadev2.s3.amazonaws.com https://places.geo.us-west-2.amazonaws.com https://services.arcgisonline.com https://prod.log.shortbread.aws.dev https://prod.tools.shortbread.aws.dev https://prod.log.shortbread.analytics.console.aws.a2z.com https://prod.tools.shortbread.analytics.console.aws.a2z.comX-Content-Type-Options: nosniffStrict-Transport-Security: max-age63072000; includeSubDomains

!doctype html>html langen-US>head>meta charsetutf-8/>meta namex-env-user-pool-id contentus-west-2_CEXjRC61j/>meta namex-env-user-pool-client-id content6kj0sc610lcfdc7ml33bbo1ok1/>meta namex-env-identity-pool-id contentus-west-2:569f89e8-0203-45f5-9ea0-25e12c77aacc/>meta namex-env-cognito-domain contenthttps://576657849781-nebula.auth.us-west-2.amazoncognito.com/>meta namex-env-control-plane-endpoint contenthttps://m7ofsiuclcigqmkfpb7zushsdm0yhkai.lambda-url.us-west-2.on.aws/libraries/library-82e0fe938fda477c9070075bc5bae16b/>meta namex-env-location-api-key contentset me manually/>title>AWS Nebula/title>base href//>link relicon href/favicon.ico>script deferdefer src/vendors.9abf5a11e140eff3cce9.bundle.js>/script>script deferdefer src/main.9abf5a11e140eff3cce9.bundle.js>/script>/head>body stylebackground-color: #000000>div idroot>/div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 576657849781.portal.nebula.aws.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443