This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include amex-auth.com, bicanex.com, ramawex.com. This campaign was identified through automated analysis of threat intelligence feeds and entity relationship mapping.
amex-auth.com
First seen May 28, 2026
- Domain registered 30 days ago
- No SSL certificate
- 1 community report from users
Campaign Intelligence
Details
Related Domains
Community Reports
Amex phishing scam in Germany **Warning: A highly professional AMEX phishing scam is currently circulating.** I recently received an SMS that appeared to come from the same number normally used for official AMEX one-time passwords. The message claimed that a crypto payment of €8,000 had been made and instructed me to call a provided phone number if I had not authorized the transaction. When you call the number, a man answers who speaks perfect German. He first asks for your first and last name and then transfers you to what he claims is the “insurance department.” The next person also speaks perfect German and sends an SMS with a link to: amex-auth.com (SCAM WEBSITE!!) There, you are asked to enter your bank account details. They also ask which banks you use and even request your account balances. I have seen many scam attempts before, but this one was extremely professional and convincing. If anyone knows how to get the site taken down or reported, or how to help identify the perpetrators, please share. Hopefully this post also helps others avoid falling for it.
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.