#AWS tip: client had a wildcard DNS A-record pointing to the S3 website endpoint (*.yourdomain.com aliasing to s3-website.eu-central-1.amazonaws.com), causing a major security threat. Anyone could set up a bucket within that region named as a subdomain of yours and host stuff as if you authored it.