GrizzlyGrizzly
Recent phishing
Phishing

Impersonating American Express

Intent: Credential collection

  • Domain is not operated by American Express
  • TLS certificate has no organization information
  • Domain was registered very recently
  • Domain not registered through American Express's usual registrar

American Express account verification form requesting SSN, birth date, card number, expiration, and CID

Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 38 days ago · Oct 3, 2026, 23:45 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL