Amazon

Discussion in 'Phishing' started by Quark, Aug 29, 2007.

  1. Quark

    Quark Moderator Staff Member

    Geez, they're even going after amazon. The again, from the scammer's point of view, why not?

    From Amazon.com Wed Aug 29 2007
    Received: from User ([82.218.46.199]) [Austria, Wavenet]
    From: "Amazon.com" <service@service.com>
    Subject: Important Message From Security Center!

    Dear Customer,

    In attention of all Amazon customers,

    As the Internet and information technology enable us to expand our services, we are committed to maintaining the trust customers have placed in us for protecting the privacy and security of information we have about you. In order to protect your information against unauthorized access, identity theft and account fraud we earnestly ask you to update your profile.

    If you received this notice and you are not the authorized account holder, please be aware that it is in violation of our policy to represent oneself as another Amazon user. This is a security measure that will ensure that you are the only person who can access your Amazon account.

    Thank you for your patience as we work together to protect your account.

    To get started, please click the link below and login to your account:

    [link removed]

    Best Regards,
    Amazon.com Inc. Security Center
     
  2. Phantom

    Phantom Ninja

    Yeah, they have nothin to lose.
     
  3. Hua Mulan

    Hua Mulan Administrator Staff Member

    Amazon Security Departament

    From Amazon
    Return-Path: ~dtp-feedback@amazon.com>
    Received: from 217.54.158.131, Egypt, Nile Online, abuse report to [abuse@nile-online.com]
    From: "Amazon" ~dtp-feedback@amazon.com>
    Subject: Alert from Amazon cutomer service department.
    Date: Mon, 18 Aug 2008


    Dear Amazon® Member,

    It has come to our attention that your Amazon order Information records are out of date and requires immediate update. If you could please take 5-10 minutes out of your online experience and update your order records, you will not run into any future problems with Amazon online service.

    However, failure to update your records within 10 Business Days will result in account suspension. We appologize for any inconvinience.

    Once you have updated records, your Amazon session will not be interrupted and will continue as normal.

    To update your Amazon order Information click on the following link:

    Best Regards ,
    Amazon Security Departament
     
  4. Spanish Administrator

    Spanish Administrator THE Spanish Administrator Staff Member

    From Amazon Inc.
    Return-Path: <notice@amazon.com>
    Received: from 64.129.70.219, US server, Colorado, tw telecom holdings, inc., abuse report to [abuse@twtelecom.net]
    From: "Amazon Inc."<notice@amazon.com>
    Subject: Important notice : Update your amazon.com account .
    Date: Sun, 26 Oct 2008
    Return-Path: [notice@amazon.com]


    Dear Amazon® member,

    We are contacting you to inform you that our Account Review Team identified some unusual activity in your account. In accordance with Amazon's User Agreement and to ensure that your account has not been compromised, access to your account was limited. Your account access will remain limited until this issue has been resolved. To secure your account and quickly restore full access, we may require some additional information from you for the following reason: We have been notified that a card associated with your account has been reported as lost or stolen, or that there were additional problems with your card. This process is mandatory, and if not completed within the nearest time your account or credit card may be subject for temporary suspension.

    To securely confirm your Amazon information please click on the link bellow:
    http www amazon com gp subs primeclub account homepage html/ref=ya_hp_sub_1/104-4436503-7329515?ie=UTF8&method=GET [Dead link]

    We encourage you to log in and perform the steps necessary to restore your account access as soon as possible. Allowing your account access to remain limited for an extended period of time may result in further limitations on the use of your account and possible account closure.

    For more information about how to protect your account please visit Amazon Security Center. We apologize for any inconvenience this may cause, and we appreciate your assistance in helping us to maintain the integrity of the entire Amazon system.

    Thank you for using Amazon!
    The Amazon Team

    © 1995-2008, Amazon Inc. or its affiliates.
     
  5. Kat

    Kat Administrator Staff Member

    From Amazon
    Return-Path: <amazon@customers.com>
    Received: from 99.70.222.118, AT&T Internet Services
    Reply-To: <amazon@customers.com>
    From: "Amazon"<amazon@customers.com>
    Subject: This email is an official notification from Amazon
    Date: Wed, 4 Nov 2009
    Return-Path: [amazon@customers.com]

    This email is an official notification from Amazon

    We recently noticed one or more attempts to log in to your account from a foreign IP address. If you accessed your account while travelling, the unusual login attempts may have been initiated by you.

    However, if you did not initiate the logins, please sign in to your account and report any suspicious activity.

    To Sign In click the link below:
    https www amazon com/gp/sign-in.html (link to mail. dale-resources com)
     
  6. Annielee

    Annielee Samurai

    Service@Amazon.Fr/You have a problem on your Amazon account

    Posting for xx

    From: "Service@Amazon.Fr"<Service@Amazon.Fr>
    Reply-To: <Service@Amazon.Fr>
    Date: Sun, 20 Sep 2009
    Subject: You have a problem on your Amazon account

    PayPal Logo here

    Dear Members Amazon

    For security reasons, we control activities regularly Amazon.

    We have recently noticed a problem on your account. We determined that someone may be trying to access your Amazon account without your permission.

    For your protection, we have restricted access to your account. Number Reference: PP-644-264-423

    We have temporarily limited access to your account. We retudierons this restriction when you provide the details required.

    Click Here to activate your account

    http 74 220 199 27/~allforus/www amazon fr/sign-in.html/disableCorpSignUp=/accountStatusPolicy=pageAction=yourstore/yourstore/

    Best regards,

    Amazon Email ID: 5138-8872

    Department of examining the accounts of Amazon.
    The Amazon Corp. Copyright 1999-2009. All rights reserved.
     
    Last edited by a moderator: Nov 7, 2009
  7. Annielee

    Annielee Samurai

    Amazon, Request #34092

    from Amazon.com <service@amazon.com>
    reply-to [service@amazon.com]
    date Fri, Feb 19, 2010
    subject Request #34092

    Amazon.com

    Dear Customer,

    - Due to recent account takeovers and unauthorized listings, Amazon is requesting a new account verification procedure. From time to time, randomly selected accounts (seller and/or buyer)are placed under an advanced updating process based on merchant accounts/bank relationsand on-file credit cards. Amazon may also request in an email message scanned/faxed copies of one or more photo ID's. Your account confirmation may go wrong if your credit card/bank account has expired, or if you have changed/replaced your credit card without letting us know about the change.

    *Your account is not suspended, but if in 36 hours after you receive this message your account is not confirmed we reserve the right to terminate your Amazon subscription.

    *If you received this notice and you are not an authorized Amazon account holder, please be aware that it is in violation of Amazon policy to represent oneself as an Amazon user. Such action may also be in violation of local, national, and/or international law.

    *Amazon is committed to assist law enforcement with any inquires related to attempts to misappropriate personal information with the intent to commit fraud or theft.

    *Information will be provided at the request of law enforcement agencies to ensure that perpetrators are prosecuted to the full extent of the law.

    To confirm your identity with us click the link bellow (Remember that Amazon.com will never ask for your real PIN and you have to put a wrong personal identification number):

    # http www amazon com .....

    We apologize in advance for any inconvenience this may cause you and we would like to thank you for your cooperation as we review this matter.

    Respectfully,
    Amazon.com, Inc.

    Copyright 2010 Amazon.com, Inc. All rights reserved.

    Amazon sent this e-mail to you because your Notification Preferences indicate that you want to receive information about Special Events & Promotions. Amazon will request personal data (password, credit card/bank numbers) only on our home site, wich is securely incrypted with SLL. ​
     
  8. Central Scrutinizer

    Central Scrutinizer Administrator Staff Member

    From Amazon.com
    Return-Path: <nobody@webhost2.burstfire.net>
    Received: from 82.136.27.2, U.K., Burstfire Networks Ltd.
    Subject: Account Update: Please Read
    From: Amazon.com <account-update@amazon.com>
    Sender: Unprivileged user <nobody@webhost2.burstfire.net>
    Date: Tue, 07 Sep 2010

    Encryption is Only the Start

    At Amazon, we want to increase your security and comfort level with every transaction. From our Buyer and Seller Protection Policies to our Verification and Reputation systems, we'll help to keep you safe.

    Please take the time to read this message - it contains important information about your Amazon.com account. At Amazon, we routinely perform reviews of orders and customer accounts to protect our customers. After careful review of your account,

    Please update your account.

    For your reference, the credit card in question is your Visa, Master, Amex which.

    Please you are the rightful holder of the account, click on the link below to log into your account within the short period.

    https : // www . amazon . com/gp/sign-in.html?ie=UTF8&email

    If you choose to ignore our request, you leave us no choice but to temporaly suspend your account.

    We ask that you allow at least 1 hours for the case to be investigated and we strongly recommend to verify your account in that time.

    If you received this notice and you are not the authorized account holder, please be aware that it is in violation of Amazon policy to represent oneself as another Amazon user. Such action may also be in violation of local, national, and/or international law. Amazon is committed to assist law enforcement with any inquires related to attempts to misappropriate personal information with the intent to commit fraud or theft. Information will be provided at the request of law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law.

    Thanks for your patience and understanding as we work together to protect your account.

    Sincerely,
    Amazon Account Review Department
    Amazon Company
     
  9. Annielee

    Annielee Samurai

    Amazon, Account Alert, cust-service@amazon.com

    From: Amazon.com <cust-service@amazon.com>
    Date: Thu, 03 Feb 2011
    Subject: Account Alert Please Read

    Encryption is Only the Start​

    At Amazon, we want to increase your security and comfort level with every transaction. From our Buyer and Seller Protection Policies to our Verification and Reputation systems, we'll help to keep you safe.

    Please take the time to read this message - it contains important information about your Amazon.com account.

    At Amazon, we routinely perform reviews of orders and customer accounts to protect our customers. After careful review of your account,

    Please update your account.

    For your reference, the credit card in question is your Visa, Master, Amex which.

    Please you are the rightful holder of the account, click on the link below to log into your account within the short period.

    Account update: Please Read Click here

    If you choose to ignore our request, you leave us no choice but to temporaly suspend your account.

    We ask that you allow at least 1 hours for the case to be investigated and we strongly recommend to verify your account in that time.

    If you received this notice and you are not the authorized account holder, please be aware that it is in violation of Amazon policy to represent oneself as another Amazon user. Such action may also be in violation of local, national, and/or international law. Amazon is committed to assist law enforcement with any inquires related to attempts to misappropriate personal information with the intent to commit fraud or theft.

    Information will be provided at the request of law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law.

    Thanks for your patience and understanding as we work together to protect your account.

    Sincerely,
    Amazon Account Review Department
    Amazon Company
     
    Last edited: Feb 11, 2011
  10. Kat

    Kat Administrator Staff Member

    Amazon, Part 2

    From Amazon
    Return-Path: <info@amazon.fr>
    Received: de 182.18.189.213, l'Indie, Pioneer Elabs Ltd, [abuse@ctrls.in]
    From: Amazon <info@amazon.fr>
    Subject: l'accès non autorisé
    Date: Samedi 20 Août 2011

    Amazon

    En raison de l'accès non autorisé possible, nous avons temporairement désactivé votre compte.

    Pour lever la suspension, s'il vous plaît confirmer que votre carte n'a pas été volés. Pour ce faire, s'il vous plaît télécharger et remplir le formulaire ci-joint html.

    Nous sommes désolés pour la gêne occasionnée, mais votre sécurité
    est notre top priorité.

    Cordialement,
    Service à la clientèle

    Copyright © 2011 Amazon
     
  11. Sphinx

    Sphinx Administrator Staff Member

    I have to buy a printer online? I can't walk into Staples? :confused:

    From Odis Woodward
    Return-Path: <admixturesk@davisandsons.net>
    Received: from 173.220.124.82, United States, Parsippany, Axis Point In
    Date: Wed, 21 Dec 2011
    From: "Odis Woodward" <admixturesk@davisandsons.net>
    Subject: Your Amazon.com order of "Canon Pixma MX882 Wireless Office All-in-One Inkjet Printer" has shipped!

    Hello,

    Shipping Confirmation
    Order # 361-2905764-0276888

    Your estimated delivery date is:
    Tuesday, December 22, 2011

    Track your package Thank you for shopping with us. We thought you'd like to know that we shipped this portion of your order separately to give you quicker service. You won't be charged any extra shipping fees, and the remainder of your order will follow as soon as those items become available. If you need to return an item from this shipment or manage other orders, please visit Your Orders on Amazon.com.

    Shipment Details

    Canon Pixma MX882 Wireless Office All-in-One Inkjet Printer $119.95
    Item Subtotal: $119.95
    Shipping & Handling: $0.00
    Total Before Tax: $119.95
    Shipment Total: $119.95
    Paid by Visa: $119.95

    You have only been charged for the items sent in this shipment. Per our policy, you only pay for items when we ship them to you.

    Returns are easy. Visit our .
    If you need further assistance with your order, please visit Customer Service.
    -----------> http : //glasklart-gallery . kilu . de/welcome11068. html

    We hope to see you again soon!
    Amazon.com
     
  12. Marie

    Marie Administrator Staff Member

    Amazon, 2012

    From Amazon Support
    Return-Path: <suppinf@amazon.co.uk>
    Received: from 207.58.212.194, United States, Euclid, Trace Routes - Eaton
    From: Amazon Support <suppinf@amazon.co.uk>
    Subject: Important Account Information
    Date: 30 Nov 2011
    Return-Path: [suppinf@amazon.co.uk]

    ABOUT THIS MESSAGE
    Please do not reply to this Customer Service e-mail. For account-specific inquiries visit your nearest Amazon.co.uk branch.
    Amazon.co.uk Authentication Process

    Due to your recent account activity, you need to confirm that the last transactions were made by you or another authorized user on the account. You can do this by following the link below and filling the required information.

    amazon.co.uk Sign In
    http : // www . absteam. fr/wp-content/plugins/ada/amazon. html[/url]

    Once you have updated your personal data, your Amazon.co.uk account will be fully protected.

    ABOUT THIS MESSAGE Amazon.co.uk, N.A. Member FDIC.
    © 1996-2011, Amazon.com, Inc. or its affiliates
     
  13. Donjamin

    Donjamin Ninja

    Amazon Order

    Return-Path: <shutteredidc09@buhrmann.com>
    Received: from cdptpa-mxlb.mail.rr.com ([10.127.255.90])
    by cdptpa-imta04.mail.rr.com with ESMTP
    id <20111229144928360.CHP17560@cdptpa-imta04.mail.rr.com>
    for Thu, 29 Dec 2011 14:49:28
    Return-Path: <shutteredidc09@buhrmann.com>

    From: Genaro Michaud [mailto:shutteredidc09@buhrmann.com]
    Sent: Thursday, December 29, 2011 6:49 AM
    To:
    Cc:
    Subject: Your Amazon.com order of "Haier GE9J1G Pulsator 1-Cubic-Foot Portable Washer" has shipped!

    Hello,

    Shipping Confirmation
    Order # 477-9461116-1445378

    Your estimated delivery date is:
    Tuesday, December 30, 2011

    Track your package Thank you for shopping with us. We thought you'd like to know that we shipped this portion of your order separately to give you quicker service. You won't be charged any extra shipping fees, and the remainder of your order will follow as soon as those items become available. If you need to return an item from this shipment or manage other orders, please visit Your Orders on Amazon.com.

    Shipment Details

    Haier GE9J1G Pulsator 1-Cubic-Foot Portable Washer $169.95
    Item Subtotal: $169.95
    Shipping & Handling: $0.00
    Total Before Tax: $169.95
    Shipment Total: $169.95
    Paid by Visa: $169.95

    You have only been charged for the items sent in this shipment. Per our policy, you only pay for items when we ship them to you.

    Returns are easy. Visit our .
    If you need further assistance with your order, please visit Customer Service.

    We hope to see you again soon!
    Amazon.com
     
  14. Spanish Administrator

    Spanish Administrator THE Spanish Administrator Staff Member

    From [order-update@amazon.com]
    Return-Path: <billyemansea@webct.com>
    Received: from 213.130.22.217, Kiev, Ukraine, Private Joint-stock Company Farlep-invest
    Date: Tue, 21 Feb 2012
    From: "order-update@amazon.com" <order-update@amazon.com>
    Reply-To: "order-update@amazon.com" <order-update@amazon.com>
    Subject: Amazon.com - Your Cancellation (197-858412-452385)

    Your order has been successfully canceled. For your reference, here's a summary of your order:

    You just canceled order #197-858412-452385 placed on February 21, 2012.

    (This link is http: //211.239.162.41/ ~lee3337/obedient .html )

    Status: CANCELED

    _____________________________________________________________________

    1 of The Riveter Special Edition
    By: Adam Cook

    Sold by: Amazon. com LLC

    _____________________________________________________________________

    Thank you for visiting Amazon.com!

    ---------------------------------------------------------------------
    Amazon.com
    Earth's Biggest Selection
     
  15. Garreg Ddu

    Garreg Ddu Gweinyddwr Staff Member

    This email has a hidden link to a phishing site: http medika uu ru/void html - run by Russian criminals. They are trying to steal the identity of anyone who clicks on the link and "Logs in" on the fake Amazon page they are given.

    X-SID-PRA: order-update@amazon.com <order-update@amazon.com>

    Received: from ns363995.ovh.net ([91.121.183.49]) by COL0-MC3-F12.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
    Thu, 16 Feb 2012 07:00:03 -0800

    Origin IP Address = 91.121.183.49 = OVH SAS, 2 rue Kellermann, 59100 Roubaix, France

    Date: Thu, 16 Feb 2012 16:10:27 +0000 (UTC)
    From: "order-update@amazon.com" <order-update@amazon.com>
    Reply-To: "order-update@amazon.com" <order-update@amazon.com>
    To: *******
    Return-Path: suryaeuropa@poitou-charentes-vacances.com




    Your order has been successfully canceled. For your reference, here's a summary of your order:

    You just canceled order #129-4736979-984972 placed on February 16, 2012.

    Status: CANCELED

    _____________________________________________________________________

    1 of The Propitious Second Edition
    By: Isla Turner

    Sold by: Amazon.com LLC

    _____________________________________________________________________

    Thank you for visiting Amazon.com!

    ---------------------------------------------------------------------
    Amazon.com
    Earth's Biggest Selection
    http://www.amazon.com
    ---------------------------------------------------------------------
     
  16. Quark

    Quark Moderator Staff Member

    From [order-update@amazon.com]
    Return-Path: <billy@ohada.com>
    Received: from 74.50.95.10, United States, Union City, Hostdepartment.com
    Date: Thu, 3 May 2012 12:12:26 +0000 (UTC)
    From: "order-update@amazon.com" <order-update@amazon.com>
    Reply-To: "order-update@amazon.com" <order-update@amazon.com>
    Subject: Amazon.com - Your Cancellation (152-253-76389)

    Dear Customer,

    Your order has been successfully canceled. For your reference, here's a summary of your order:

    You just canceled order 152-253-76389 placed on May 3, 2012.

    http :// bilisimgrup. com. tr/mew. html or http ://128.241.193.233 /erratum. html

    Status: CANCELED
    _____________________________________________________________________

    1 "Activating"; 2007, Deluxe Edition
    By: Sliona Moore

    Sold by: Amazon.com LLC
    _____________________________________________________________________

    Thank you for visiting Amazon.com!

    ---------------------------------------------------------------------
    Amazon.com
    Earth's Biggest Selection
    http : // bilisimgrup. com. tr/mew. html
    ---------------------------------------------------------------------
     
  17. Gentle Giant

    Gentle Giant Giant Admin for a Day Staff Member

    Some more phishing links. (I got 2 of these today).

    http : // bilisimgrup. com.tr/emma. html

    http : // www. taifgostar. com/meadows .html
     
  18. Sphinx

    Sphinx Administrator Staff Member

    Same idea, email sent from Thailand.

    You just canceled order http :// 61.19.249.89/ ~provision/precipitating. html -placed on May 4, 2012.
     
  19. Naruto

    Naruto Administrator Staff Member

    Return-Path: ~claudia.clemente@mediacatalyst.com>
    74.50.95.10, United States, Union City Hostdepartment.com

    You just canceled order 12-899-8129 placed on May 3, 2012.

    Link: http : //web-solution-group. com/summer. html
     
  20. Miyuki

    Miyuki Administratrix Staff Member

    I have one too. From: "order-update@amazon.com" ~order-update@amazon.com>

    IP: 61.19.97.69, Thailand, Cat-isp-net

    Link: http ://gradeko. com. ba/unaffectedly .html
     

Share This Page