Amazon Registrar: phishing domains and abuse response

PhishDestroy reported 116 phishing domains registered with Amazon Registrar between 2026-01-02 and 2026-06-18, sending 118 abuse reports. Median time from the first report until a domain stopped resolving: 30.2 days (n = 35). 27 of 62 domains were still active 90 days after the first report. The database holds 529 Amazon Registrar domains in total.

116
Domains reported (window)
118
Abuse reports sent
30.2 days
Median time to unavailable
529
In the database now

Abuse-report outcome

Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Live 81 (70%); Offline 33 (28%); Suspended 2 (2%).

90th percentile time to unavailable: 50.0 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action.

What is registered there

Impersonated brands

  1. Ledger41
  2. Binance21
  3. OKX16
  4. Bybit15
  5. Google14
  6. Ethereum12
  7. Microsoft10
  8. Microsoft9

Top-level domains

  1. .com355
  2. .net27
  3. .org22
  4. .run17
  5. .io10
  6. .link7
  7. .xyz7
  8. .invalid6

Most reported domains

  1. autoincentive.memelist.net
  2. joe.memelist.net
  3. 437snji2jhnulguiwmbhnx6xjnwoivdsnwas5fz32yemuilifpga.turbo-gateway.com
  4. 4f3ce4ix422juab7zzdvfw53vxlt7qgh7o4s4x3z4i6lrrrxsbmq.turbo-gateway.com
  5. 73ddyknsbbcxpyzn2pgwg5vnlrav4cegs22bpubkocrukfsiqupa.turbo-gateway.com

Latest Amazon Registrar phishing domains

The 30 most recently detected domains at Amazon Registrar
DomainFirst detectedStatus at last checkRegistrar
login.secure-crossriver.com2026-10-22UnknownAmazon Registrar
leodapps.com2026-10-14OnlineAmazon Registrar
securepaypalcard.com2026-10-13OnlineAmazon Registrar
au-tiktok-vs.com2026-10-11OfflineAmazon Registrar
kpodata.com2026-10-11OnlineAmazon Registrar
eaziit.com2026-10-11OnlineAmazon Registrar
joshtest.com2026-10-08OfflineAmazon Registrar
casinos-hub.com2026-10-07OnlineAmazon Registrar
wayfind.click2026-10-01OnlineAmazon Registrar
nestsss.com2026-09-29OnlineAmazon Registrar
bitnest.finance2026-09-29OnlineAmazon Registrar
ebuy-service.com2026-09-25OnlineAmazon Registrar
virtual.labdigbdbstgpb.com2026-09-23OnlineAmazon Registrar
bitget.cafe2026-09-22OnlineAmazon Registrar
authsecure.tech2026-09-22OnlineAmazon Registrar
cabanedeloiseau.com2026-09-21OnlineAmazon Registrar
walmart.ipn-cashout.com2026-09-21OnlineAmazon Registrar
virtual.labdigbdbqapb.com2026-09-21OnlineAmazon Registrar
merax.app2026-09-20OnlineAmazon Registrar
tronmine-kbok.onrender.com2026-09-17OnlineAmazon Registrar
landing.email2026-09-13OnlineAmazon Registrar
muebler-aadfinanciera.onrender.com2026-09-13OnlineAmazon Registrar
wlfi-forms.onrender.com2026-09-13OnlineAmazon Registrar
dynamicsvg.plasmic.run2026-09-13OnlineAmazon Registrar
fancy-ship-8630-moxm8f78.puter.site2026-09-12OnlineAmazon Registrar
alto-norte-comercial.onrender.com2026-09-12OnlineAmazon Registrar
wlive.plasmic.run2026-09-12OnlineAmazon Registrar
livecdn.plasmic.run2026-09-12OnlineAmazon Registrar
cieldxrecovery.plasmic.run2026-09-12OnlineAmazon Registrar
livedesktop.plasmic.run2026-09-12OnlineAmazon Registrar

Related

Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis.