Phishing sites impersonating American express

PhishDestroy has recorded 180 phishing domains impersonating American express since 2025-08-05, 34 of them in the last 30 days. The most used registrars are Dynadot and Trustname.com; the most common TLDs are .com and .shop. Open American express only from its official app or a saved bookmark.

180
Domains, all time
34
Last 30 days
118
Online at last check
13
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 12026-07-31: 12026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 12026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 22026-08-11: 02026-08-12: 12026-08-13: 12026-08-14: 12026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 12026-08-19: 02026-08-20: 12026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 12026-08-31: 02026-09-01: 02026-09-02: 12026-09-03: 02026-09-04: 02026-09-05: 12026-09-06: 12026-09-07: 02026-09-08: 02026-09-09: 62026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 12026-09-17: 12026-09-18: 02026-09-19: 22026-09-20: 12026-09-21: 02026-09-22: 12026-09-23: 02026-09-24: 02026-09-25: 12026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 12026-10-03: 32026-10-04: 02026-10-05: 42026-10-06: 12026-10-07: 42026-10-08: 22026-10-09: 02026-10-10: 12026-10-11: 42026-10-12: 32026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 52026-10-17: 12026-10-18: 02026-10-19: 22026-10-20: 22026-10-21: 02026-10-22: 0
American express phishing domains detected per day: 60 from 2026-07-25 to 2026-10-22; peak 6.

How to tell a fake American express site

Words most often added to the brand in reported domains: bank, order, buy, creditlake, elysiumtrust, horizontrust, santander, demo, finasteride, check.

  • Type the address yourself or use a bookmark; phishing links for American express arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • American express does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest American express phishing domains

The 50 most recently detected domains impersonating American express
DomainFirst detectedStatus at last checkRegistrar
boeingstoremerch.shop2026-10-20OfflineDynadot
thermalrobin.xyz2026-10-20UnknownNICENIC
directproductcenter.com2026-10-19OnlineNAMECHEAP
novaformaplus.com2026-10-19OnlineNAMECHEAP
blindbarbershop.shop2026-10-17OnlineDynadot
bizouboutique.shop2026-10-16OnlineDynadot
bixbychocolateboutique.shop2026-10-16OnlineDynadot
bitdogear.shop2026-10-16OnlineDynadot
bioandmeco.shop2026-10-16OnlineDynadot
billysbakeryhq.shop2026-10-16OnlineDynadot
luacoffee.com2026-10-12OnlineGoDaddy.com
vibeourplus.com2026-10-12OnlineHiChina (www.net.cn)
beehivewoolofficial.shop2026-10-12OnlineDYNADOT
baseathletics.shop2026-10-11OnlineDynadot
envi1.com2026-10-11OnlineGoDaddy.com
encut.us2026-10-11OnlineGoDaddy.com
barnetthomedecorhome.shop2026-10-11OnlineDynadot
backstreetboysofficial.shop2026-10-10OnlineDynadot
swiftedge.shop2026-10-08OnlineTucows Domains
safecapitaltrust.com2026-10-08OnlineDynadot
bingod.pro2026-10-07OnlineNICENIC
check-cardview.com2026-10-07OnlineNICENIC
ccuonlinebk.com2026-10-07OnlineNameSilo
aquadirect.shop2026-10-07OnlineDynadot
atlantbnk.cc2026-10-06OnlineNameSilo
sura-soatseguros.top2026-10-05UnknownNICENIC
segurosoat-sura.top2026-10-05UnknownNICENIC
suras-soatseguros.top2026-10-05OfflineNICENIC
hughescrestinternational.com2026-10-05OnlineNameSilo
arcagearstoreonline.shop2026-10-03OnlineDynadot
antoneshq.shop2026-10-03OnlineDynadot
ardenshop.shop2026-10-03OnlineDynadot
anvilbranddirect.shop2026-10-02OnlineDynadot
afrigrowpanel.live2026-09-25OfflineNameCheap
boundkapita.com2026-09-22OnlineDynadot
hyweimetroglobal.com2026-09-20OnlineRegistrar.eu
newinternationalinc.com2026-09-19OnlineGransy, s.r.o
grandlinenational.com2026-09-19OnlineCosmotown
universalsavefinance.com2026-09-17OnlineRegistrar.eu
skyinvestify.com2026-09-16OnlineRegistrar.eu
aeraofficial.shop2026-09-09OfflineDynadot
aegoods.shop2026-09-09OnlineDynadot
acurebeauty.shop2026-09-09OnlineDynadot
creditunion-gp.live2026-09-09OnlineGoDaddy.com
accakappashop.shop2026-09-09OnlineDynadot
aarkeshop.shop2026-09-09OnlineDynadot
mcstaging.americanexpresspop.com2026-09-06OnlineCSC Corporate Domains
celebfy.app2026-09-05OnlineTrustname.com
diamondreels.ar2026-09-02Online—
finectrust.com2026-08-30OnlineRegistrar.eu

All 180 American express reports

Where they are registered and hosted

Registrars

  1. Dynadot20
  2. Trustname.com16
  3. NICENIC13
  4. GoDaddy.com12
  5. Tucows Domains10
  6. Dynadot9
  7. Ultahost7
  8. Global Domain6

Top-level domains

  1. .com86
  2. .shop26
  3. .online8
  4. .net7
  5. .org6
  6. .live6
  7. .top4
  8. .co3

Hosting networks

  1. CLOUDFLARENET, US27
  2. Cloudflare, Inc.24
  3. AS-COLOCROSSING, US14
  4. CLOUDFLARENET - Cloudflare, Inc., US13
  5. malakmadze Malakmadze Web LLC, GE12
  6. Amazon.com, Inc.8
  7. Malakmadze Web LLC8
  8. NEWDHAKAHARDWARE-AS-AP NEW DHAKA HARDWARE, BD6

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is American express; share of all PhishDestroy reports: 0.08%.