If you've come across the URL avpk-a23za7lvspbw39-1.na-f.api.amazonvideo.com, you're looking at an internal API endpoint for Amazon Video. It's not a consumer-facing website, so there's no storefront, login page, or content to interact with. The domain is owned by Amazon and hosted on Fastly's CDN with a valid SSL certificate. The 404 error you get is normal for a path that's either deprecated or not meant for public access. There's no evidence of phishing or malware — the subdomain is clean on blacklists and Google's threat database. For an API endpoint, the lack of a privacy policy or contact info is expected. The only minor concern is that the server still accepts deprecated TLS 1.0/1.1, but that doesn't affect users who aren't initiating connections. If you're checking whether this URL is safe to visit or trust, the answer is yes: it's a legitimate part of Amazon's infrastructure. Just don't expect to see a web page there.
Yes — avpk-a23za7lvspbw39-1.na-f.api.amazonvideo.com looks safe
In plain English
This is a legitimate Amazon API endpoint, not a consumer website. The domain is owned by Amazon, and the security setup is solid despite a minor legacy TLS issue. The 404 error means the specific path isn't active, but the URL itself is safe to encounter — it's not a scam or phishing site.
Where the score comes from
The connection uses modern TLS 1.3 and the certificate is valid, but the server still accepts outdated TLS 1.0 and 1.1, which is a minor vulnerability. No security headers are set, but that's common for API endpoints.
This is a subdomain of amazonvideo.com, a domain owned by Amazon. The WHOIS for the subdomain doesn't resolve, but the parent domain is a well-known, legitimate business. No question about who runs this.
Clean on all blacklists and Google Web Risk. The Wayback Machine has no archive of this specific subdomain, which is expected for a non-public API endpoint. No negative history.
No contact info, about page, or social media presence, but that's normal for an infrastructure subdomain. Amazon's parent site provides full transparency elsewhere.
No privacy policy or terms of service on this subdomain, which is standard for an API endpoint that doesn't collect user data directly. The parent Amazon site handles legal compliance.
Hosted on Fastly's CDN with a valid certificate and fast page load. No email handling, DNSSEC not enabled, but these are typical for a static or API endpoint. Solid setup.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →