If you've landed on calsaws-c10-instance-connect-prod.my.connect.aws, you're likely looking at a session timeout page for Amazon Connect, Amazon's cloud contact center service. This isn't a standalone business or a storefront — it's a backend URL that Amazon uses to handle authentication. The domain is a subdomain of connect.aws, the certificate is issued by Amazon, and the security contact points to amazon.com. That's a clear chain of ownership. Because the site is just a technical endpoint, you won't find an about page, contact info, or privacy policy. That's normal for this kind of service. The question "is calsaws-c10-instance-connect-prod.my.connect.aws a scam" doesn't really apply here — it's a tiny part of Amazon's infrastructure, not a fly-by-night operation. The security setup is first-rate: HTTPS enforced, modern TLS, and strong browser protections. If you're worried about safety, look at the evidence: it's Amazon. There's no reason to treat this URL with suspicion.
Yes — calsaws-c10-instance-connect-prod.my.connect.aws looks safe
In plain English
This is a legitimate Amazon Connect session endpoint, not a standalone website. Everything about it points to Amazon's infrastructure: the domain, the certificate, the security contact, and the hosting. If you ended up here, your session simply expired. There's no reason to doubt its safety.
Where the score comes from
Strong configuration: valid SSL certificate, enforced HTTPS, modern TLS, and multiple browser protections are in place. This is exactly what you'd expect from a service run by a major cloud provider.
The domain is a subdomain of connect.aws, which is owned by Amazon. The security.txt file lists an amazon.com contact. While WHOIS is unavailable for the .aws TLD, the ownership is clearly tied to a well-known company.
No blacklists or Google Web Risk flags. The lack of Wayback Machine history is normal for an ephemeral session endpoint. The domain isn't widely visited, but that's irrelevant for a technical service.
No contact info, about page, or social media links. That's standard for a backend service endpoint that isn't meant to be a standalone website. Users won't need to reach out to it.
Missing privacy policy and terms of service. This is not a commercial site collecting data — it's an authentication session page. Legal pages aren't expected here.
Hosted on Amazon's own network with solid DNS redundancy. DNSSEC isn't enabled, but that's a minor gap for a service that communicates over a secure HTTPS connection.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →