Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/americanexpress
Generated: Tue, 20 Oct 2026 12:47:22 GMT
Target Website: americanexpress.com
Overall Trust Score: 97/100 (Trusted)
americanexpress.com
Trusted
Scanned: Oct 20, 12:47 PMTRUST SCORE
97
CONFIDENT
Low Risk
97/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
100/100
100/100
TRANSPARENCY
95/100
95/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
97/100 — trusted. Long-established domain (31.4 years old), clean threat reputation, no impersonation patterns. Verdict driven by: page has no <title>; large response served uncompressed — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
Standard Trusted CA
Threat Status
CleanClean
No blacklists or malware
Domain Age
31.4 years31.4 years
Registered 6/4/1995
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
23.43.12.11623.43.12.116
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
36 / 10036 / 100
Standard speed
Redirects
3 Hops3 Hops
Redirect chain analyzed
Top Priority RecommendationAction Needed
Page has no <title>
Well-maintained sites always set a page title.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- Site responded with 200
- HTTPS is enforced
- Served through Cloudflare
- 1 address record(s) resolved
- 6 authoritative nameservers
- Domain registered 31+ years ago
- Owner information disclosed
- HTTPS encryption active & verified
Warnings
- Page has no <title>
- Large response served uncompressed
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- CSC Corporate Domains, Inc.
- Creation Date
- June 4, 1995 (31.4 years ago)
- Last Updated
- May 30, 2026
- Registry Expiry Date
- June 3, 2027
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
ICANN Status Badges
client transfer prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Domain registered 31+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via CSC Corporate Domains, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: Permissions Policy
All Response Headers (29)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Content Security Policy is set
Restricts which scripts and resources the page can load.
+5
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Referrer Policy is set
Controls what referrer information is sent with requests.
+2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
- IPv4 Addresses (A)
- 23.43.12.116
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- mx0a-0023b801.pphosted.com (Priority: 10), mx0b-0023b801.pphosted.com (Priority: 10)
- Authoritative Nameservers (NS)
- a8-64.akam.net, a13-65.akam.net, a22-66.akam.net, a1-196.akam.net, a9-65.akam.net, a24-67.akam.net
- TXT Records Found
- 10 TXT verification records
A Records (IPv4)
23.43.12.116
TXT Verification Records
vjkdhsiomklp
facebook-domain-verification=1iv6o6lnefss8petsvgqew0cafqz6p
iI4t08IsaGI0nwiRkjvUTj2bsVpTUbgIg6BNm0aPMzI=
google-site-verification=EQlwnW4GMge07fKpyFPTHu5nWUdHGAJDmrUmB8bhi5g
facebook-domain-verification=5t5jnj7o0bh7cf6h2pxxjwg0ltlw3j
OSSRH-61504
v=spf1 ip4:63.241.217.23 ip4:74.125.149.0/24 ip4:74.125.150.0/24 ip4:66.119.44.14 ip4:66.119.44.13 ip4:66.244.67.0/24 ip4:199.3.18.4 ip4:148.173.88.0/26 ip4:148.173.96.128/26 -all
00d4w000001wvb0uag
00da0000000hlilma4
apple-domain-verification=TX9__9cGbRTolbaJRZ94euAiIGHkz6b6a1_7cy_bGk8
1 address record(s) resolved
+4
6 authoritative nameservers
+2
- Registrable Domain
- americanexpress.com
- Registrar Organization
- CSC Corporate Domains, Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- a1-196.akam.net, a13-65.akam.net, a22-66.akam.net, a24-67.akam.net, a8-64.akam.net, a9-65.akam.net
- Registration Lifecycle
- Registered: 1995 → Expires: 2027
Nameservers (NS)
a1-196.akam.neta13-65.akam.neta22-66.akam.neta24-67.akam.neta8-64.akam.neta9-65.akam.net
Domain registered 31+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via CSC Corporate Domains, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 ip4:63.241.217.23 ip4:74.125.149.0/24 ip4:74.125.150.0/24 ip4:66.119.44.14 ip4:66.119.44.13 ip4:66.244.67.0/24 ip4:199.3.18.4 ip4:148.173.88.0/26 ip4:148.173.96.128/26 -all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1;p=reject;fo=1;rua=mailto:dmarc_agg@auth.returnpath.net;ruf=mailto:dmarc_afrf@auth.returnpath.net
- DKIM Selectors Detected
- None detected
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- americanexpress
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
js
Svelte
css
Tailwind CSS
analytics
Google Analytics
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- —
- Meta Description
- Welcome to American Express United Kingdom, provider of Credit Cards, Charge Cards, Travel & Insurance products. Apply for a Card or login to your Account.
- Document Language
- en-GB
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width, initial-scale=1, user-scalable=yes
- Generator Software
- —
4 technologies detected
Svelte, Tailwind CSS, Google Analytics, Cloudflare
Mobile viewport configured
+2
Page has no <title>
Well-maintained sites always set a page title.
-3
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 452 ms
- Payload Body Size
- 585.9 KB
- Compression Status
- Uncompressed
- Cache Directives
- no-store
Large response served uncompressed
Enable gzip or brotli at the edge to cut transfer size dramatically.
-3
AI Content Evaluation
97/100 — trusted. Long-established domain (31.4 years old), clean threat reputation, no impersonation patterns. Verdict driven by: page has no <title>; large response served uncompressed — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 7,901 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 23.43.12.116
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://www.americanexpress.com/en-gb/?comm_track_id=r_7d7157d6-a5f4-440d-ba14-a0ea28fcebf5_1_x
- Redirect Hop Count
- 3 hops
Redirect Hop Chain
- 1.https://americanexpress.com/ → https://www.americanexpress.com/
- 2.https://www.americanexpress.com/ → https://www.americanexpress.com/uk/
- 3.https://www.americanexpress.com/uk/ → https://www.americanexpress.com/en-gb/?comm_track_id=r_7d7157d6-a5f4-440d-ba14-a0ea28fcebf5_1_x
Site responded with 200
Final URL: https://www.americanexpress.com/en-gb/?comm_track_id=r_7d7157d6-a5f4-440d-ba14-a0ea28fcebf5_1_x. Response time 452ms.
+8
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- Standard Trusted CA
- Subject Common Name (CN)
- americanexpress.com
- Validity Period
- 60 days remaining (Expires: 2026-12-19T12:47:26.307Z)
- Subject Alternative Names (SANs)
- 1 domain protected
- Certificates Logged (CT)
- 1 certs recorded
Subject Alternative Names (Sample)
americanexpress.com
HTTPS encryption active & verified
Live TLS connection established successfully on port 443 with valid cipher suites.
+8
Key Legal & Transparency Pages
- Published Phone Numbers
- 399021772, 0 0 16.6666666667, 16.6666666667, 0 0 41.66666667, 41.66666667, 0 0 32.333333
Privacy policy linked from home page
+6
Terms of service linked from home page
+5
Contact page linked from home page
+5
About page linked from home page
+3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
Cookie policy linked from home page
+2
2 social profile(s) linked
twitter, facebook
+3
Phone number published
+2
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://www.americanexpress.com/index-sitemap.xml
- Disallow Rules Count
- 6 rules
View Raw robots.txt
User-agent: * Disallow: /us/rwd/ Disallow: /*/apply/ Disallow: /en-us/business/tls/partnerships/ Disallow: /*/logout User-agent: AhrefsBot Disallow: /*/travel/discover/ Disallow: /*/travel/the-hotel-collection/ Sitemap: https://www.americanexpress.com/index-sitemap.xml
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
36
This scan
Sources Checked
18
Live security feeds
Scan Duration
4.44s
Ultra-fast
Last Scan
10/20/2026
Live timestamp
Overall Risk
Low Risk