public company · US

Amazon

AMAZON COM INC

Retail and cloud services.

Primary official domain
amazon.com
Reviewed official domains
4 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
35
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
46
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC quarantine
SPF -all · 4/10 lookups · Mail: Not checked · checked 2026-10-18 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
amazon
Label aliases
Amazon · Amazon.com
Official domains
amazon.com · amazon.co.uk · amazon.de · amazonaws.com (all)
Generated spellings
371 tracked · 1 observed somewhere · 370 not observed (all)

Matching domains with source reports or listings

Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.

Domain / hostnameSource claimCompany match (DomainSpoof)Date (mixed basis)Latest DNSSources / recordsFinding details
authorize[.]ahomeintheamazon[.]comMail: MX · via ahomeintheamazon.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive109.238.86.5checked 2026-10-19 04:47 UTC
1 source · 1 recordDetails
amazon-book-business-course[.]comMail: MXSPF · via mx.services · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive5.181.161.44checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazon789[.]inkMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.27.43172.67.168.2292606:4700:3033::ac43:a8e52606:4700:3036::6815:1b2bchecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazonaspe[.]comMail: MXSPFDMARC · via amazonaspe.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive23.83.135.201checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazonattention[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.57.117172.67.190.892606:4700:3030::ac43:be592606:4700:3034::6815:3975checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazonbookawards[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive159.65.47.61checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazoncapitalsinvests[.]comMail: MXSPFDMARC · via amazoncapitalsinvests.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive198.251.84.200checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazonepublishinghub[.]comMail: MXSPFDMARC · via zoho.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.48.12172.67.175.1812606:4700:3030::6815:300c2606:4700:3037::ac43:afb5checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazonepublishingpro[.]comMail: MXDMARC · via amazonepublishingpro.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive185.66.91.177checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazonglobal1[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive141.11.84.163checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazoninkpublishing[.]comMail: MXSPF · via zoho.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive107.180.116.255checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazonitelian[.]inkMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.24.96172.67.218.392606:4700:3034::ac43:da272606:4700:3035::6815:1860checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazonprime-support[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive158.94.208.174checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazonshopping6[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 22:00 UTC
1 source · 1 recordDetails
amazonstocksgo[.]orgMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive158.94.210.119checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazontoken[.]coMail: MXSPFDMARC · via secureserver.net · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive192.124.249.40checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazonuvip[.]vipMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive172.65.211.209checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazon[.]biowikiweb[.]comMail: MX · via biowikiweb.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive103.195.103.203checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
cipamazonas[.]org[.]peMail: MXSPFDMARC · via opalstack.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive23.108.108.200checked 2026-10-19 04:48 UTC
1 source · 1 recordDetails
amazon500[.]dealsclick123[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 22:00 UTC
1 source · 1 recordDetails
amazon[.]discoveryloft[.]comMail: MXSPFDMARC · via google.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive172.253.122.1212607:f8b0:4004:c09::79checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
dosselamazonia[.]org[.]brMail: MX · via google.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive199.36.158.100checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
hezha-amazon[.]irMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive185.53.143.214checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
iniciamazon[.]com[.]brMail: MXSPFDMARC · via api-mail.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.63.146172.67.146.2202606:4700:3030::6815:3f922606:4700:3037::ac43:92dcchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
institutoamazonico[.]edu[.]peMail: MXSPF · via google.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive170.249.206.98checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails

A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.