From: American Express [AmericanExpress@welcome.aexp.com]
Date: 24 July 2014 10:35
Subject: Security concern on your AmericanExpress Account
We are writing to you because we need to speak with you regarding a security concern on your account. Our records indicate that you recently used your American Express card on August 8, 2014.
For your security, new charges on the accounts listed above may be declined. If applicable, you should advise any Additional Card Member(s) on your account that their new charges may also be declined.
To secure your account , please click log on to : http://americanexpress.com
Your prompt response regarding this matter is appreciated.
American Express Identity Protection Team
Please do not reply to this e-mail. This customer service e-mail was sent to you by American Express. You may receive customer service e-mails even if you have unsubscribed from marketing e-mails from American Express.
Contact Customer Service | View our Privacy Statement | Opt Out
This email was sent to [redacted].
American Express Customer Service Department
P.O. Box 297817 | Ft. Lauderdale, FL 33329-7817
2014 American Express Company. All rights reserved.
In this case the link goes to a phishing site at anerican-fortress.com/americanexpress/ but there seem to be a bunch of them at the moment:
IPs in use are:
220.127.116.11 (FLP Kochenov Aleksej Vladislavovich, Ukraine)
18.104.22.168 (SC CH-NET SRL, Romania)
I recommend blocking these IPs (