40.124.80.100

IP address · suspicious phishing activity

URLs

Brands targeted

TLS issuers

Country: United States
Hosting: Microsoft Corporation
ASN: AS8075
Network: GitHub actions · rentable hosting · 40.124.0.0/16
also in: Microsoft Azure AzureCloud.southcentralus
Official provider IP range of this IP. Context only, not a verdict.
Investigate: urlscan VirusTotal ipinfo Greynoise

A single IP address can host many unrelated websites at once, especially behind shared hosting or a CDN. Several detections on one address often mean a shared server or reverse proxy is being abused, not that every site behind it is malicious.

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC)	First seen (UTC) ▾	URL	Flags	Details
2026-10-21 17:30	2026-10-21 17:24	https://webmail.amazon-signin-update-payment-secure-verify-billing-ma…	GSB	Details
2026-10-21 17:30	2026-10-21 17:24	https://mail.amazon-signin-update-payment-secure-verify-billing-maina…	GSB	Details
2026-10-21 17:30	2026-10-21 17:24	https://cpanel.amazon-signin-update-payment-secure-verify-billing-mai…	GSB	Details
2026-10-21 17:30	2026-10-21 17:24	https://amazon-signin-update-payment-secure-verify-billing-mainapp.40…	GSB	Details
2026-10-21 17:30	2026-10-21 17:23	https://amazon-signin-update-payment-secure-verify-billing-mainsec.40…	GSB	Details

Info

Country: United States
Hosting provider: Microsoft Corporation
ASN: AS8075

Analyze IP

urlscan.io VirusTotal ipinfo

Greynoise

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL	Screenshot	Details
https://webmail.amazon-signin… GSB		Details
https://mail.amazon-signin-up… GSB		Details
https://cpanel.amazon-signin-… GSB		Details
https://amazon-signin-update-… GSB		Details
https://amazon-signin-update-… GSB		Details