To add to this - what they probably did was run an nslookup or dig against the domains themselves. And whatever IP resolved for those domains, they checked who owned that IP space. With a CDN, it won't show AWS, it'll show the CDN.
10 karma · joined February 12, 2016
You can find a quick analysis of registrars and DNS providers here - https://www.gra.pe/?p=77
You can find architecture analysis here - https://www.gra.pe/?p=36
Interesting stuff.