Domain > changegroup-prod-lxp.auth.eu-west-2.amazoncognito.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-03-13	18.135.0.128 (ClassC)
2025-12-27	13.41.254.96 (ClassC)
2025-12-30	13.42.70.142 (ClassC)
2026-01-03	51.24.3.72 (ClassC)
2026-01-16	3.11.95.56 (ClassC)

HTTP/1.1 200 OKDate: Sat, 27 Dec 2025 19:24:39 GMTContent-Type: text/html;charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveSet-Cookie: XSRF-TOKEN35699385-b59d-464c-943c-27c01a387cda; Path/;

!DOCTYPE html>html langen>head>head>    link hrefnull/null/css/bootstrap.min.css relstylesheet        mediascreen />    link hrefnull/null/css/cognito-login.css relstylesheet        mediascreen />        title>Signin/title>    script srcnull/null/js/amazon-cognito-advanced-security-data.min.js >/script>    script>    function getAdvancedSecurityData(formReference) {        if (typeof AmazonCognitoAdvancedSecurityData  undefined) {            return true;        }        // UserpoolId is not available on frontend for springboard. We do not use userPoolId        // anyway other than put in context data.         var userPoolId  ;        var clientId  getUrlParameter(client_id);        var username  ;        var usernameInput  document.getElementsByName(username)0;        if (usernameInput && usernameInput.value) {            username  usernameInput.value;        }        var asfData  AmazonCognitoAdvancedSecurityData.getData(username, userPoolId, clientId);        if (typeof asfData  undefined) {            return true;        }        if (formReference && formReference.cognitoAsfData) {            formReference.cognitoAsfData.value  asfData        }        return true;    }    function getUrlParameter(name) {        name  name.replace(//, \).replace(//, \);        var regex  new RegExp(\?& + name + (^&#*));        var results  regex.exec(location.search);        return results  null ?  : decodeURIComponent(results1.replace(/+/g,  ));    }    function onSubmit(evt, formRef) {        formRef.querySelector(buttontypesubmit).disabled  true;        if (!!formRef.submitted) {            evt.preventDefault();            return false;        } else {            formRef.submitted  true;            return getAdvancedSecurityData(formRef);        }    }    function onSubmitLoginForm (formRef) {        formRef.querySelector(inputnamesignInSubmitButton).disabled  true;        getAdvancedSecurityData(formRef)    }/script>    meta nameviewport contentwidthdevice-width, initial-scale1>/head>/head>body spellcheckfalse>    div class

Subdomains

Date	Domain	IP
auth.eu-west-2.amazoncognito.com	2023-08-16	18.168.213.62
yourswitch2.auth.eu-west-2.amazoncognito.com	2026-01-13	3.11.230.217
intranetv3.auth.eu-west-2.amazoncognito.com	2025-10-02	13.41.148.239
oddbox-subs-user-prod.auth.eu-west-2.amazoncognito.com	2025-12-28	18.130.22.25
stobox-prod.auth.eu-west-2.amazoncognito.com	2026-01-13	3.11.230.217
pearson-shared-acc-prd.auth.eu-west-2.amazoncognito.com	2025-10-02	3.11.182.154
prodtriage.auth.eu-west-2.amazoncognito.com	2024-10-07	18.175.89.201
cosmeticcollege.auth.eu-west-2.amazoncognito.com	2026-01-13	3.11.230.217
secure-user-pool-prd-uk-domain.auth.eu-west-2.amazoncognito.com	2025-12-27	13.41.254.96
secure-user-pool-uat-uk-domain.auth.eu-west-2.amazoncognito.com	2025-08-29	3.11.147.11
stb-symbiant-app-login.auth.eu-west-2.amazoncognito.com	2025-10-02	3.10.78.98
cy2-production.auth.eu-west-2.amazoncognito.com	2025-11-18	13.43.157.53
platform-hub-user-pool-production.auth.eu-west-2.amazoncognito.com	2025-08-28	3.11.147.11
johnson.auth.eu-west-2.amazoncognito.com	2025-12-25	35.176.157.236
lenovo.auth.eu-west-2.amazoncognito.com	2025-12-31	35.176.167.189
changegroup-prod-lxp.auth.eu-west-2.amazoncognito.com	2025-12-27	13.41.254.96
lbs-prod-lxp.auth.eu-west-2.amazoncognito.com	2025-12-28	13.41.254.96
nationalhighways-prod-lxp.auth.eu-west-2.amazoncognito.com	2025-10-03	3.11.182.154
commscope-lxp.auth.eu-west-2.amazoncognito.com	2025-10-04	13.42.67.46
sysco-lxp.auth.eu-west-2.amazoncognito.com	2024-01-05	13.43.181.244
eu-west-2rblfmeqbq.auth.eu-west-2.amazoncognito.com	2025-12-24	35.179.19.118
staging-coderings.auth.eu-west-2.amazoncognito.com	2025-12-27	18.130.22.25
ots.auth.eu-west-2.amazoncognito.com	2025-12-24	18.175.107.176
prod-master-ems2-case-management.auth.eu-west-2.amazoncognito.com	2025-12-24	13.134.36.11
dpc-test-management.auth.eu-west-2.amazoncognito.com	2025-10-20	35.179.217.70
cdp-sirsi-development.auth.eu-west-2.amazoncognito.com	2025-11-19	18.135.48.92
invotra-bffc-ext.auth.eu-west-2.amazoncognito.com	2025-09-23	52.56.137.61
invotra-reading-ext.auth.eu-west-2.amazoncognito.com	2025-10-03	35.176.10.76
copilot-next.auth.eu-west-2.amazoncognito.com	2025-10-04	13.42.67.46
6hxkdmhn7y7m-dev.auth.eu-west-2.amazoncognito.com	2025-10-04	13.41.171.10

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > changegroup-prod-lxp.auth.eu-west-2.amazoncognito.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains