# Phishing sites impersonating Amex PhishDestroy has recorded 81 phishing domains impersonating Amex since 2025-08-07, 11 of them in the last 30 days. The most used registrars are Dynadot and Trustname.com; the most common TLDs are .com and .shop. Open Amex only from its official app or a saved bookmark. 81Domains, all time 11Last 30 days 33Online at last check 9Confirmed takedowns ## New domains in the last 90 days Amex phishing domains detected per day: 22 from 2026-07-25 to 2026-10-22; peak 6. ## How to tell a fake Amex site Words most often added to the brand in reported domains: aramex, txdmv, btc, aramexship, ellipaldesktop, everstakebot, bacb, ebaywallets, gas, slot. - Type the address yourself or use a bookmark; phishing links for Amex arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Amex does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Amex phishing domains The 50 most recently detected domains impersonating Amex Domain | First detected | Status at last check | Registrar | [amex.domaintoworkwith.net](https://phishdestroy.io/domain/amex.domaintoworkwith.net/) | 2026-10-22 | Online | Gname.com | [bokstride.shop](https://phishdestroy.io/domain/bokstride.shop/) | 2026-10-20 | Offline | Dynadot | [boldcircuit.shop](https://phishdestroy.io/domain/boldcircuit.shop/) | 2026-10-20 | Offline | Dynadot | [bloomfold.shop](https://phishdestroy.io/domain/bloomfold.shop/) | 2026-10-17 | Online | Dynadot | [bleulane.shop](https://phishdestroy.io/domain/bleulane.shop/) | 2026-10-17 | Online | Dynadot | [bfhome.shop](https://phishdestroy.io/domain/bfhome.shop/) | 2026-10-16 | Online | Dynadot | [bandscostrapsspot.shop](https://phishdestroy.io/domain/bandscostrapsspot.shop/) | 2026-10-11 | Online | Dynadot | [amazingbdshop.com](https://phishdestroy.io/domain/amazingbdshop.com/) | 2026-10-11 | Online | NAMECHEAP | [pagoalcanos.top](https://phishdestroy.io/domain/pagoalcanos.top/) | 2026-10-05 | Unknown | NICENIC | [apecwaterhome.shop](https://phishdestroy.io/domain/apecwaterhome.shop/) | 2026-10-03 | Online | Dynadot | [apparatusstudiohq.shop](https://phishdestroy.io/domain/apparatusstudiohq.shop/) | 2026-10-02 | Online | Dynadot | [aramex.horroh.ink](https://phishdestroy.io/domain/aramex.horroh.ink/) | 2026-09-09 | Offline | Dominet (HK) | [aramex.glassy.ink](https://phishdestroy.io/domain/aramex.glassy.ink/) | 2026-09-09 | Offline | Dominet (HK) | [aramex.saddle.ink](https://phishdestroy.io/domain/aramex.saddle.ink/) | 2026-09-09 | Offline | Dominet (HK) | [aramex.mqqztr.ink](https://phishdestroy.io/domain/aramex.mqqztr.ink/) | 2026-09-09 | Offline | Dominet (HK) | [aramex.xknttx.ink](https://phishdestroy.io/domain/aramex.xknttx.ink/) | 2026-09-09 | Offline | Dominet (HK) | [aramex.buyerxx.xin](https://phishdestroy.io/domain/aramex.buyerxx.xin/) | 2026-09-09 | Offline | Dominet (HK) | [cvvmarket.net](https://phishdestroy.io/domain/cvvmarket.net/) | 2026-09-05 | Online | Trustname.com | [consultsur.com](https://phishdestroy.io/domain/consultsur.com/) | 2026-09-05 | Offline | PublicDomainRegistry.com | [painel-rastreio-jadlog.online](https://phishdestroy.io/domain/painel-rastreio-jadlog.online/) | 2026-08-31 | Online | Dynadot | [allupromo.online](https://phishdestroy.io/domain/allupromo.online/) | 2026-08-24 | Online | GoDaddy.com | [uffizipass.com](https://phishdestroy.io/domain/uffizipass.com/) | 2026-07-30 | Online | Trustname.com | [americanxpresses.com](https://phishdestroy.io/domain/americanxpresses.com/) | 2026-07-18 | Offline | UnstoppableUS3 | [skinbaronn.at](https://phishdestroy.io/domain/skinbaronn.at/) | 2026-07-06 | Online | — | [glowshiya.com](https://phishdestroy.io/domain/glowshiya.com/) | 2026-06-19 | Online | GoDaddy.com | [exploramexicotours.com](https://phishdestroy.io/domain/exploramexicotours.com/) | 2026-06-15 | Online | Neubox Internet de C.V | [fynextrade.net](https://phishdestroy.io/domain/fynextrade.net/) | 2026-06-07 | Offline | Cosmotown | [skyscannerpromo.com](https://phishdestroy.io/domain/skyscannerpromo.com/) | 2026-04-28 | Online | Trustname.com | [herpesmedsdirect.com](https://phishdestroy.io/domain/herpesmedsdirect.com/) | 2026-04-28 | Online | Trustname.com | [modafinilxl.net](https://phishdestroy.io/domain/modafinilxl.net/) | 2026-04-24 | Online | Trustname.com | [zunrub.com](https://phishdestroy.io/domain/zunrub.com/) | 2026-04-24 | Offline | Trustname.com | [mercadomlseguro.com](https://phishdestroy.io/domain/mercadomlseguro.com/) | 2026-04-21 | Offline | Tucows Domains | [verify.spacearn.com](https://phishdestroy.io/domain/verify.spacearn.com/) | 2026-04-21 | Offline | HOSTINGER operations | [zumubs.com](https://phishdestroy.io/domain/zumubs.com/) | 2026-04-21 | Offline | Trustname.com | [zurnub.com](https://phishdestroy.io/domain/zurnub.com/) | 2026-04-21 | Offline | Trustname.com | [zumibi.com](https://phishdestroy.io/domain/zumibi.com/) | 2026-04-21 | Offline | Trustname.com | [skin-port.at](https://phishdestroy.io/domain/skin-port.at/) | 2026-04-18 | Taken down | Hosting concepts / Registrar.eu ( https: | [vipleaks.xyz](https://phishdestroy.io/domain/vipleaks.xyz/) | 2026-04-18 | Online | OwnRegistrar | [internationalcannabisclub.com](https://phishdestroy.io/domain/internationalcannabisclub.com/) | 2026-04-13 | Offline | GoDaddy.com | [apkcraft.pages.dev](https://phishdestroy.io/domain/apkcraft.pages.dev/) | 2026-04-07 | Online | Cloudflare | [ellipaldesktop.store](https://phishdestroy.io/domain/ellipaldesktop.store/) | 2026-03-18 | Online | NICENIC | [login.wbfinance.us](https://phishdestroy.io/domain/login.wbfinance.us/) | 2026-02-28 | Offline | Registrar.eu | [txdmv.akdyn.cc](https://phishdestroy.io/domain/txdmv.akdyn.cc/) | 2026-02-26 | Offline | — | [txdmv.uylfz.cc](https://phishdestroy.io/domain/txdmv.uylfz.cc/) | 2026-02-26 | Offline | — | [reservationcarbone.com](https://phishdestroy.io/domain/reservationcarbone.com/) | 2026-02-26 | Offline | Dominet (HK) | [dynamexlogistixcargo.com.nuviab.com](https://phishdestroy.io/domain/dynamexlogistixcargo.com.nuviab.com/) | 2026-02-26 | Offline | Dynadot | [txdmv.bcsgh.cc](https://phishdestroy.io/domain/txdmv.bcsgh.cc/) | 2026-02-26 | Offline | — | [nexivolt-al94.com](https://phishdestroy.io/domain/nexivolt-al94.com/) | 2026-02-26 | Offline | — | [txdmv.pvfxm.cc](https://phishdestroy.io/domain/txdmv.pvfxm.cc/) | 2026-02-26 | Offline | — | [txdmv.ptxnm.cc](https://phishdestroy.io/domain/txdmv.ptxnm.cc/) | 2026-02-26 | Offline | — | [All 81 Amex reports](https://phishdestroy.io/domain/?brand=Amex) ## Where they are registered and hosted ### Registrars - [Dynadot](https://phishdestroy.io/registrar/dynadot/)14 - [Trustname.com](https://phishdestroy.io/registrar/trustname/)9 - [Dominet (HK)](https://phishdestroy.io/registrar/dominet/)8 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)8 - Cloudflare3 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)3 - [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)2 - [Registrar.eu](https://phishdestroy.io/registrar/registrar-eu/)2 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)41 - [.shop](https://phishdestroy.io/tld/shop/)8 - [.cc](https://phishdestroy.io/tld/cc/)5 - [.ink](https://phishdestroy.io/tld/ink/)5 - [.net](https://phishdestroy.io/tld/net/)4 - [.fr](https://phishdestroy.io/tld/fr/)2 - [.uk](https://phishdestroy.io/tld/uk/)2 - [.app](https://phishdestroy.io/tld/app/)2 ### Hosting networks - CLOUDFLARENET - Cloudflare, Inc., US23 - CLOUDFLARENET, US10 - Cloudflare, Inc.10 - malakmadze Malakmadze Web LLC, GE6 - AS-COLOCROSSING, US4 - Amazon.com, Inc.3 - Hostinger International Limited3 - Malakmadze Web LLC2 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Amex; share of all PhishDestroy reports: 0.04%. Canonical: https://phishdestroy.io/brand/amex/