Phishing sites impersonating Amazon

PhishDestroy has recorded 1,551 phishing domains impersonating Amazon since 2024-03-20, 58 of them in the last 30 days. The most used registrars are GitHub and Vercel; the most common TLDs are .io and .com. The official Amazon domain is amazon.com: any other site asking for your login or wallet is not Amazon.

1,551
Domains, all time
58
Last 30 days
492
Online at last check
190
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 22026-07-26: 52026-07-27: 282026-07-28: 42026-07-29: 72026-07-30: 52026-07-31: 82026-08-01: 72026-08-02: 112026-08-03: 62026-08-04: 82026-08-05: 12026-08-06: 42026-08-07: 42026-08-08: 62026-08-09: 112026-08-10: 172026-08-11: 52026-08-12: 142026-08-13: 42026-08-14: 32026-08-15: 102026-08-16: 92026-08-17: 72026-08-18: 62026-08-19: 12026-08-20: 92026-08-21: 52026-08-22: 62026-08-23: 52026-08-24: 82026-08-25: 02026-08-26: 62026-08-27: 02026-08-28: 72026-08-29: 02026-08-30: 22026-08-31: 272026-09-01: 12026-09-02: 12026-09-03: 72026-09-04: 82026-09-05: 112026-09-06: 102026-09-07: 92026-09-08: 102026-09-09: 122026-09-10: 02026-09-11: 72026-09-12: 22026-09-13: 22026-09-14: 22026-09-15: 22026-09-16: 12026-09-17: 12026-09-18: 02026-09-19: 22026-09-20: 12026-09-21: 32026-09-22: 32026-09-23: 12026-09-24: 02026-09-25: 52026-09-26: 12026-09-27: 12026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 12026-10-02: 12026-10-03: 02026-10-04: 22026-10-05: 02026-10-06: 12026-10-07: 72026-10-08: 32026-10-09: 32026-10-10: 12026-10-11: 32026-10-12: 12026-10-13: 62026-10-14: 32026-10-15: 02026-10-16: 82026-10-17: 32026-10-18: 02026-10-19: 12026-10-20: 12026-10-21: 42026-10-22: 0
Amazon phishing domains detected per day: 420 from 2026-07-25 to 2026-10-22; peak 28.

How to tell a fake Amazon site

Official domain: amazon.com.

Words most often added to the brand in reported domains: clone, amazonaws, eight, ten, project, east, verizon, nine, three, seven.

  • Type the address yourself or use a bookmark; phishing links for Amazon arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Amazon does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Amazon phishing domains

The 50 most recently detected domains impersonating Amazon
DomainFirst detectedStatus at last checkRegistrar
jiegoamazon.com2026-10-21OnlineName.com
dev.gbmapsaws.co.uk2026-10-21OnlineGandi
amazoncointrade.com2026-10-21OnlineDynadot
amazoncapitaltrade.com2026-10-21OnlineDynadot
amazonklantenservicenederland.com2026-10-20OnlineWeb Commerce Communications dba WebNic.c
amazon-ai.org2026-10-19OnlineDYNADOT
blisdeco.shop2026-10-17OnlineDynadot
bloodrecordsclub.shop2026-10-17OnlineDynadot
rolex5.com2026-10-17OnlineNameSilo
birkenstocklife.com2026-10-16OnlineDynadot
biodanceshop.shop2026-10-16OnlineSpaceship
biodanceessentials.shop2026-10-16OnlineDYNADOT
exmarket-vietnam.com2026-10-16OnlineGransy, s.r.o
ecomtalenthk.com2026-10-16OnlineGransy, s.r.o
pikashowtvs.org.in2026-10-16OnlineName.com
pikashowapk.video2026-10-16OnlineSpaceship
heybubududu.com2026-10-16OnlineCloudflare
oakwaver.cc2026-10-14OnlineDominet (HK)
oakwaver.co2026-10-14Online—
svenskiptv.store2026-10-14OnlineNameCheap
bestkoreanskincareco.shop2026-10-13OnlineDynadot
bestdiamineinks.shop2026-10-13OnlineDynadot
bentgoshop.shop2026-10-13OnlineDynadot
belltechonline.shop2026-10-13OnlineDynadot
bill.you-track.cloud2026-10-13OnlineTucows Domains
amazon.discoveryloft.com2026-10-13OnlineGoDaddy.com
mrrking10057.com2026-10-12OnlineCNOBIN INFORMATION TECHNOLOGY
bearpawshop.shop2026-10-11OnlineDynadot
desileaked.com2026-10-11OfflineCloudflare
inadmin.convshop.com2026-10-11OnlineGoDaddy.com
aix3700.com2026-10-10OfflineTUCOWS.COM
win.apps-play.store2026-10-09OnlineNameCheap
voting-theindexfinance.cfd2026-10-09OnlineSpaceship
aznzsport.shop2026-10-09OnlineDynadot
ticketmarketplace.fr2026-10-08OnlineOVH
autostyleukdirect.shop2026-10-08OnlineDynadot
amazonslots.ag2026-10-08OnlineTrustname.com
giftcardscheck.online2026-10-07OnlineGlobal Domain
allocation-theindexfinance.cfd2026-10-07OnlineSpaceship
authorize.ahomeintheamazon.com2026-10-07OfflineENOM
anipaws.shop2026-10-07OnlineDynadot
athleticogearonline.shop2026-10-07OnlineDynadot
ozexchange.com.ng2026-10-07OnlineKeySystems
amzcouture.shop2026-10-07OnlineDynadot
annulation-amazon.com2026-10-06OnlineRegistrar.eu
ashleystewartco.shop2026-10-04OnlineDynadot
arcticfoxen.shop2026-10-04OnlineDynadot
amazongroceryhq.shop2026-10-02OnlineDynadot
amazoncommercialstore.shop2026-10-01UnknownDynadot
carding-genie.cm2026-09-27OnlineNetcom.cm Sarl

All 1,551 Amazon reports

Where they are registered and hosted

Registrars

  1. GitHub564
  2. Vercel118
  3. Tucows Domains58
  4. Dynadot51
  5. NameSilo46
  6. NameCheap41
  7. Cloudflare41
  8. Gname.com40

Top-level domains

  1. .io584
  2. .com312
  3. .app226
  4. .shop45
  5. .top34
  6. .net33
  7. .dev33
  8. .org23

Hosting networks

  1. Fastly, Inc.345
  2. FASTLY - Fastly, Inc., US199
  3. Amazon.com, Inc.161
  4. Cloudflare, Inc.140
  5. CLOUDFLARENET, US94
  6. AMAZON-02, US61
  7. CLOUDFLARENET - Cloudflare, Inc., US51
  8. AMAZON-02 - Amazon.com, Inc., US51

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Amazon; share of all PhishDestroy reports: 0.69%.