# Phishing sites impersonating American express PhishDestroy has recorded 180 phishing domains impersonating American express since 2025-08-05, 34 of them in the last 30 days. The most used registrars are Dynadot and Trustname.com; the most common TLDs are .com and .shop. Open American express only from its official app or a saved bookmark. 180Domains, all time 34Last 30 days 118Online at last check 13Confirmed takedowns ## New domains in the last 90 days American express phishing domains detected per day: 60 from 2026-07-25 to 2026-10-22; peak 6. ## How to tell a fake American express site Words most often added to the brand in reported domains: bank, order, buy, creditlake, elysiumtrust, horizontrust, santander, demo, finasteride, check. - Type the address yourself or use a bookmark; phishing links for American express arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - American express does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest American express phishing domains The 50 most recently detected domains impersonating American express Domain | First detected | Status at last check | Registrar | [boeingstoremerch.shop](https://phishdestroy.io/domain/boeingstoremerch.shop/) | 2026-10-20 | Offline | Dynadot | [thermalrobin.xyz](https://phishdestroy.io/domain/thermalrobin.xyz/) | 2026-10-20 | Unknown | NICENIC | [directproductcenter.com](https://phishdestroy.io/domain/directproductcenter.com/) | 2026-10-19 | Online | NAMECHEAP | [novaformaplus.com](https://phishdestroy.io/domain/novaformaplus.com/) | 2026-10-19 | Online | NAMECHEAP | [blindbarbershop.shop](https://phishdestroy.io/domain/blindbarbershop.shop/) | 2026-10-17 | Online | Dynadot | [bizouboutique.shop](https://phishdestroy.io/domain/bizouboutique.shop/) | 2026-10-16 | Online | Dynadot | [bixbychocolateboutique.shop](https://phishdestroy.io/domain/bixbychocolateboutique.shop/) | 2026-10-16 | Online | Dynadot | [bitdogear.shop](https://phishdestroy.io/domain/bitdogear.shop/) | 2026-10-16 | Online | Dynadot | [bioandmeco.shop](https://phishdestroy.io/domain/bioandmeco.shop/) | 2026-10-16 | Online | Dynadot | [billysbakeryhq.shop](https://phishdestroy.io/domain/billysbakeryhq.shop/) | 2026-10-16 | Online | Dynadot | [luacoffee.com](https://phishdestroy.io/domain/luacoffee.com/) | 2026-10-12 | Online | GoDaddy.com | [vibeourplus.com](https://phishdestroy.io/domain/vibeourplus.com/) | 2026-10-12 | Online | HiChina (www.net.cn) | [beehivewoolofficial.shop](https://phishdestroy.io/domain/beehivewoolofficial.shop/) | 2026-10-12 | Online | DYNADOT | [baseathletics.shop](https://phishdestroy.io/domain/baseathletics.shop/) | 2026-10-11 | Online | Dynadot | [envi1.com](https://phishdestroy.io/domain/envi1.com/) | 2026-10-11 | Online | GoDaddy.com | [encut.us](https://phishdestroy.io/domain/encut.us/) | 2026-10-11 | Online | GoDaddy.com | [barnetthomedecorhome.shop](https://phishdestroy.io/domain/barnetthomedecorhome.shop/) | 2026-10-11 | Online | Dynadot | [backstreetboysofficial.shop](https://phishdestroy.io/domain/backstreetboysofficial.shop/) | 2026-10-10 | Online | Dynadot | [swiftedge.shop](https://phishdestroy.io/domain/swiftedge.shop/) | 2026-10-08 | Online | Tucows Domains | [safecapitaltrust.com](https://phishdestroy.io/domain/safecapitaltrust.com/) | 2026-10-08 | Online | Dynadot | [bingod.pro](https://phishdestroy.io/domain/bingod.pro/) | 2026-10-07 | Online | NICENIC | [check-cardview.com](https://phishdestroy.io/domain/check-cardview.com/) | 2026-10-07 | Online | NICENIC | [ccuonlinebk.com](https://phishdestroy.io/domain/ccuonlinebk.com/) | 2026-10-07 | Online | NameSilo | [aquadirect.shop](https://phishdestroy.io/domain/aquadirect.shop/) | 2026-10-07 | Online | Dynadot | [atlantbnk.cc](https://phishdestroy.io/domain/atlantbnk.cc/) | 2026-10-06 | Online | NameSilo | [sura-soatseguros.top](https://phishdestroy.io/domain/sura-soatseguros.top/) | 2026-10-05 | Unknown | NICENIC | [segurosoat-sura.top](https://phishdestroy.io/domain/segurosoat-sura.top/) | 2026-10-05 | Unknown | NICENIC | [suras-soatseguros.top](https://phishdestroy.io/domain/suras-soatseguros.top/) | 2026-10-05 | Offline | NICENIC | [hughescrestinternational.com](https://phishdestroy.io/domain/hughescrestinternational.com/) | 2026-10-05 | Online | NameSilo | [arcagearstoreonline.shop](https://phishdestroy.io/domain/arcagearstoreonline.shop/) | 2026-10-03 | Online | Dynadot | [antoneshq.shop](https://phishdestroy.io/domain/antoneshq.shop/) | 2026-10-03 | Online | Dynadot | [ardenshop.shop](https://phishdestroy.io/domain/ardenshop.shop/) | 2026-10-03 | Online | Dynadot | [anvilbranddirect.shop](https://phishdestroy.io/domain/anvilbranddirect.shop/) | 2026-10-02 | Online | Dynadot | [afrigrowpanel.live](https://phishdestroy.io/domain/afrigrowpanel.live/) | 2026-09-25 | Offline | NameCheap | [boundkapita.com](https://phishdestroy.io/domain/boundkapita.com/) | 2026-09-22 | Online | Dynadot | [hyweimetroglobal.com](https://phishdestroy.io/domain/hyweimetroglobal.com/) | 2026-09-20 | Online | Registrar.eu | [newinternationalinc.com](https://phishdestroy.io/domain/newinternationalinc.com/) | 2026-09-19 | Online | Gransy, s.r.o | [grandlinenational.com](https://phishdestroy.io/domain/grandlinenational.com/) | 2026-09-19 | Online | Cosmotown | [universalsavefinance.com](https://phishdestroy.io/domain/universalsavefinance.com/) | 2026-09-17 | Online | Registrar.eu | [skyinvestify.com](https://phishdestroy.io/domain/skyinvestify.com/) | 2026-09-16 | Online | Registrar.eu | [aeraofficial.shop](https://phishdestroy.io/domain/aeraofficial.shop/) | 2026-09-09 | Offline | Dynadot | [aegoods.shop](https://phishdestroy.io/domain/aegoods.shop/) | 2026-09-09 | Online | Dynadot | [acurebeauty.shop](https://phishdestroy.io/domain/acurebeauty.shop/) | 2026-09-09 | Online | Dynadot | [creditunion-gp.live](https://phishdestroy.io/domain/creditunion-gp.live/) | 2026-09-09 | Online | GoDaddy.com | [accakappashop.shop](https://phishdestroy.io/domain/accakappashop.shop/) | 2026-09-09 | Online | Dynadot | [aarkeshop.shop](https://phishdestroy.io/domain/aarkeshop.shop/) | 2026-09-09 | Online | Dynadot | [mcstaging.americanexpresspop.com](https://phishdestroy.io/domain/mcstaging.americanexpresspop.com/) | 2026-09-06 | Online | CSC Corporate Domains | [celebfy.app](https://phishdestroy.io/domain/celebfy.app/) | 2026-09-05 | Online | Trustname.com | [diamondreels.ar](https://phishdestroy.io/domain/diamondreels.ar/) | 2026-09-02 | Online | — | [finectrust.com](https://phishdestroy.io/domain/finectrust.com/) | 2026-08-30 | Online | Registrar.eu | [All 180 American express reports](https://phishdestroy.io/domain/?brand=American express) ## Where they are registered and hosted ### Registrars - [Dynadot](https://phishdestroy.io/registrar/dynadot/)20 - [Trustname.com](https://phishdestroy.io/registrar/trustname/)16 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)13 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)12 - [Tucows Domains](https://phishdestroy.io/registrar/tucows/)10 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)9 - [Ultahost](https://phishdestroy.io/registrar/ultahost/)7 - [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)6 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)86 - [.shop](https://phishdestroy.io/tld/shop/)26 - [.online](https://phishdestroy.io/tld/online/)8 - [.net](https://phishdestroy.io/tld/net/)7 - [.org](https://phishdestroy.io/tld/org/)6 - [.live](https://phishdestroy.io/tld/live/)6 - [.top](https://phishdestroy.io/tld/top/)4 - [.co](https://phishdestroy.io/tld/co/)3 ### Hosting networks - CLOUDFLARENET, US27 - Cloudflare, Inc.24 - AS-COLOCROSSING, US14 - CLOUDFLARENET - Cloudflare, Inc., US13 - malakmadze Malakmadze Web LLC, GE12 - Amazon.com, Inc.8 - Malakmadze Web LLC8 - NEWDHAKAHARDWARE-AS-AP NEW DHAKA HARDWARE, BD6 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is American express; share of all PhishDestroy reports: 0.08%. Canonical: https://phishdestroy.io/brand/american-express/