18.220.67.161 Anyway to determine what domain this IP is resolving?

Hello.

To map an IP address to a domain, you use reverse nslookup. If there's an existing PTR record for that domain, then it will return the domain name. nslookup is a command-line utility that you can run on your machine terminal. To use the utility, run `nslookup <the_ip_address>. Note that not all IP addresses have the record mentioned earlier. In that case, you may not get the response you want. Also, a single IP address may have several domain names mapped to it.

I hope this helps!

Understood, I was able to perform a NSlookup and the domain does point to ec2-18-220-67-161.us-east-2.compute.amazonaws.com I was hoping to find the actual domain to determine if the site might be spoofing a legitimate address.

Further investigation possibly points to a 3rd party VPN service