More American Express phishing. Clicking the link takes you to a fake login screen hosted on hxxp://www[dot]pilates-fitness-luzern[dot]ch/images/amex/amex/index.php
you know, because I would totally enter my AmEx creds into a site hosted on a fitness site.
Get the public report of the malicious site here: https://any.run/report/1eb6d4c7c5f9ed8da91c01ed8bf4d3effba79eef1fb9d2926266e6cc0cb195fd/7ed944ae-bbe1-422a-b8b0-a59bb4280db2
——– Original Message ——–
Subject: We have a Security on your Card
Date: 2020-05-05 09:03 From: “American Express” <firstname.lastname@example.org>
To: Customers <email@example.com>
Dear CARD MEMBER,
You have a Security Notification on your Card
Our records shows that your Card might have been compromised by an unauthorized third party. An attempt to use your card was blocked today therefore as a security measure we have placed your Card on hold until this concern is resolved.
Follow the secure link to complete our security check below.
Verify Your Recent Activity  Thank you for your Card Membership,
American Express Customer Care
PRIVACY STATEMENT  | UPDATE YOUR EMAIL  Your account information is included above to help you recognize this as a customer care e-mail from American Express. To learn more about e-mail security or report a suspicious e-mail, please visit us at americanexpress.com/phishing . We kindly ask you not to reply to this e-mail but instead contact us via Customer Care .
© 2020 American Express. All rights reserved.
Links: ——  REDACTED