public company · US

Amazon

AMAZON COM INC

Retail and cloud services.

Primary official domain
amazon.com
Reviewed official domains
4 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
35
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
46
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC quarantine
SPF -all · 4/10 lookups · Mail: Not checked · checked 2026-10-18 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
amazon
Label aliases
Amazon · Amazon.com
Official domains
amazon.com · amazon.co.uk · amazon.de · amazonaws.com (all)
Generated spellings
371 tracked · 1 observed somewhere · 370 not observed (all)

Matching domains with source reports or listings

Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.

Domain / hostnameSource claimCompany match (DomainSpoof)Date (mixed basis)Latest DNSSources / recordsFinding details
amazon-v2[.]isha-dev[.]comMail: Not checked
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Resolveschecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazon-s[.]kkj22[.]shopMail: Not checked
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 22:00 UTC
1 source · 1 recordDetails
amazon[.]luckygifthk[.]comMail: Not checked
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Resolveschecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
amazon-clone-f73c[.]panda[.]newMail: Not checked
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Resolveschecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
preemix-amazon-platform[.]comMail: Not checked
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Resolveschecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
amazon-ae-relay[.]apps[.]prov[.]cxMail: Not checked
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 22:00 UTC
1 source · 1 recordDetails
quiz-amazon[.]shopMail: Not checked
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
amazon[.]sevendaygroup[.]comMail: Not checked
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 22:00 UTC
1 source · 1 recordDetails
theamazon[.]vipMail: Not checked
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Resolveschecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
winamazonslots[.]comMail: Not checked
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Resolveschecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails

A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.