# Amazon Registrar: phishing domains and abuse response PhishDestroy reported 116 phishing domains registered with Amazon Registrar between 2026-01-02 and 2026-06-18, sending 118 abuse reports. Median time from the first report until a domain stopped resolving: 30.2 days (n = 35). 27 of 62 domains were still active 90 days after the first report. The database holds 529 Amazon Registrar domains in total. 116Domains reported (window) 118Abuse reports sent 30.2 daysMedian time to unavailable 529In the database now ## Abuse-report outcome Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Live 81 (70%); Offline 33 (28%); Suspended 2 (2%). 90th percentile time to unavailable: 50.0 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action. ## What is registered there ### Impersonated brands - [Ledger](https://phishdestroy.io/brand/ledger/)41 - [Binance](https://phishdestroy.io/brand/binance/)21 - [OKX](https://phishdestroy.io/brand/okx/)16 - [Bybit](https://phishdestroy.io/brand/bybit/)15 - [Google](https://phishdestroy.io/brand/google/)14 - [Ethereum](https://phishdestroy.io/brand/ethereum/)12 - [Microsoft](https://phishdestroy.io/brand/microsoft/)10 - [Microsoft](https://phishdestroy.io/brand/microsoft/)9 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)355 - [.net](https://phishdestroy.io/tld/net/)27 - [.org](https://phishdestroy.io/tld/org/)22 - [.run](https://phishdestroy.io/tld/run/)17 - [.io](https://phishdestroy.io/tld/io/)10 - [.link](https://phishdestroy.io/tld/link/)7 - [.xyz](https://phishdestroy.io/tld/xyz/)7 - [.invalid](https://phishdestroy.io/tld/invalid/)6 ### Most reported domains - [autoincentive.memelist.net](https://phishdestroy.io/domain/autoincentive.memelist.net/) - [joe.memelist.net](https://phishdestroy.io/domain/joe.memelist.net/) - [437snji2jhnulguiwmbhnx6xjnwoivdsnwas5fz32yemuilifpga.turbo-gateway.com](https://phishdestroy.io/domain/437snji2jhnulguiwmbhnx6xjnwoivdsnwas5fz32yemuilifpga.turbo-gateway.com/) - [4f3ce4ix422juab7zzdvfw53vxlt7qgh7o4s4x3z4i6lrrrxsbmq.turbo-gateway.com](https://phishdestroy.io/domain/4f3ce4ix422juab7zzdvfw53vxlt7qgh7o4s4x3z4i6lrrrxsbmq.turbo-gateway.com/) - [73ddyknsbbcxpyzn2pgwg5vnlrav4cegs22bpubkocrukfsiqupa.turbo-gateway.com](https://phishdestroy.io/domain/73ddyknsbbcxpyzn2pgwg5vnlrav4cegs22bpubkocrukfsiqupa.turbo-gateway.com/) ## Latest Amazon Registrar phishing domains The 30 most recently detected domains at Amazon Registrar Domain | First detected | Status at last check | Registrar | [login.secure-crossriver.com](https://phishdestroy.io/domain/login.secure-crossriver.com/) | 2026-10-22 | Unknown | Amazon Registrar | [leodapps.com](https://phishdestroy.io/domain/leodapps.com/) | 2026-10-14 | Online | Amazon Registrar | [securepaypalcard.com](https://phishdestroy.io/domain/securepaypalcard.com/) | 2026-10-13 | Online | Amazon Registrar | [au-tiktok-vs.com](https://phishdestroy.io/domain/au-tiktok-vs.com/) | 2026-10-11 | Offline | Amazon Registrar | [kpodata.com](https://phishdestroy.io/domain/kpodata.com/) | 2026-10-11 | Online | Amazon Registrar | [eaziit.com](https://phishdestroy.io/domain/eaziit.com/) | 2026-10-11 | Online | Amazon Registrar | [joshtest.com](https://phishdestroy.io/domain/joshtest.com/) | 2026-10-08 | Offline | Amazon Registrar | [casinos-hub.com](https://phishdestroy.io/domain/casinos-hub.com/) | 2026-10-07 | Online | Amazon Registrar | [wayfind.click](https://phishdestroy.io/domain/wayfind.click/) | 2026-10-01 | Online | Amazon Registrar | [nestsss.com](https://phishdestroy.io/domain/nestsss.com/) | 2026-09-29 | Online | Amazon Registrar | [bitnest.finance](https://phishdestroy.io/domain/bitnest.finance/) | 2026-09-29 | Online | Amazon Registrar | [ebuy-service.com](https://phishdestroy.io/domain/ebuy-service.com/) | 2026-09-25 | Online | Amazon Registrar | [virtual.labdigbdbstgpb.com](https://phishdestroy.io/domain/virtual.labdigbdbstgpb.com/) | 2026-09-23 | Online | Amazon Registrar | [bitget.cafe](https://phishdestroy.io/domain/bitget.cafe/) | 2026-09-22 | Online | Amazon Registrar | [authsecure.tech](https://phishdestroy.io/domain/authsecure.tech/) | 2026-09-22 | Online | Amazon Registrar | [cabanedeloiseau.com](https://phishdestroy.io/domain/cabanedeloiseau.com/) | 2026-09-21 | Online | Amazon Registrar | [walmart.ipn-cashout.com](https://phishdestroy.io/domain/walmart.ipn-cashout.com/) | 2026-09-21 | Online | Amazon Registrar | [virtual.labdigbdbqapb.com](https://phishdestroy.io/domain/virtual.labdigbdbqapb.com/) | 2026-09-21 | Online | Amazon Registrar | [merax.app](https://phishdestroy.io/domain/merax.app/) | 2026-09-20 | Online | Amazon Registrar | [tronmine-kbok.onrender.com](https://phishdestroy.io/domain/tronmine-kbok.onrender.com/) | 2026-09-17 | Online | Amazon Registrar | [landing.email](https://phishdestroy.io/domain/landing.email/) | 2026-09-13 | Online | Amazon Registrar | [muebler-aadfinanciera.onrender.com](https://phishdestroy.io/domain/muebler-aadfinanciera.onrender.com/) | 2026-09-13 | Online | Amazon Registrar | [wlfi-forms.onrender.com](https://phishdestroy.io/domain/wlfi-forms.onrender.com/) | 2026-09-13 | Online | Amazon Registrar | [dynamicsvg.plasmic.run](https://phishdestroy.io/domain/dynamicsvg.plasmic.run/) | 2026-09-13 | Online | Amazon Registrar | [fancy-ship-8630-moxm8f78.puter.site](https://phishdestroy.io/domain/fancy-ship-8630-moxm8f78.puter.site/) | 2026-09-12 | Online | Amazon Registrar | [alto-norte-comercial.onrender.com](https://phishdestroy.io/domain/alto-norte-comercial.onrender.com/) | 2026-09-12 | Online | Amazon Registrar | [wlive.plasmic.run](https://phishdestroy.io/domain/wlive.plasmic.run/) | 2026-09-12 | Online | Amazon Registrar | [livecdn.plasmic.run](https://phishdestroy.io/domain/livecdn.plasmic.run/) | 2026-09-12 | Online | Amazon Registrar | [cieldxrecovery.plasmic.run](https://phishdestroy.io/domain/cieldxrecovery.plasmic.run/) | 2026-09-12 | Online | Amazon Registrar | [livedesktop.plasmic.run](https://phishdestroy.io/domain/livedesktop.plasmic.run/) | 2026-09-12 | Online | Amazon Registrar | ## Related - [Registrar Scoreboard](https://phishdestroy.io/registrar-accountability/) - [Registrar risk statistics](https://phishdestroy.io/registrar-stats/) - [EPP status codes](https://phishdestroy.io/glossary/epp-status/) - [Bulletproof hosting](https://phishdestroy.io/glossary/bulletproof-hosting/) - [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [All registrars](https://phishdestroy.io/registrar/) Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis. Canonical: https://phishdestroy.io/registrar/amazon-registrar/