Breaking News

Amazon. com Please Confirm Your Action

Confirm your account



Greetings from Amazon Payments,





Your bank has contacted us regarding some attempts of charges from your credit card via the Amazon system. We have reasons to believe that you changed your registration information or that someone else has unauthorized access to your Amazon account Due to recent activity, including possible unauthorized listings placed on your account, we will require a second confirmation of your identity with us in order to allow us to investigate this matter further.



Your account is not suspended, but if in 48 hours after you receive this message your account is not confirmed we reserve the right to suspend your Amazon registration. If you received this notice and you are not the authorized account holder, please be aware that it is in violation of Amazon policy to represent oneself as another Amazon user.



To confirm your account identity click here:



Best Regards,

Amazon Security Department



The information provided on this website is provided for informational purposes only and should not be considered legal advice.



2002-2008 Law Offices of Thomas Gross. San Jose, California. All Rights Reserved. Copyright Notice.



Amazon. com: Please verify your new e-mail address – Fraud



At least one of the larger spam botnets is hard at work these last few days spreading itself via spoofed Amazon. com emails.



For the most part, these frauds do an excellent job of mimicking legitimate Amazon emails.



The arrive with a Subject line of:



From: “Amazon. com E-mail Subscriptions”

Subject: Amazon. com: Please verify your new e-mail address



And the design, layout and attention to detail within the email is quite good:





Click for Larger Image



The only real clues that these are not legitimate emails comes from:



Inspection of the Internet Delivery Headers which reveals that these emails are sent from previously infected personal computers throughout the world, and revealing a botnet of exceptional size. Reviewing the HTML code which makes it obvious that the “Confirm” button will not take you to an Amazon server but instead to any number of malware hosting servers, also spanning the globe.



Based on analysis of user feedback this campaign is highly convincing, and snaring many willing but unwitting victims.



OnlyMyEmail is an award winning hosted spam filtering service and business email hosting provider. Our enterprise cloud computing anti-spam solution, the MX-Defender, has the highest capture rate of any spam filter ever tested in the VBSpam Challenge, blocking a record setting 99.9993% of all malicious and junk email.



Our Personal spam filtering system is also a Software as a Service (SaaS) solution and has won both the PC World "World Class Award" and also the PC Magazine "Editor's Choice Award."



OME-Kids is a webmail solution that protects children from spam and other harmful emails. OME-Kids offers unique Parental Controls that allow you to choose the level of security and oversight that's right for your child.



This entry was posted on Tuesday, July 20th, 2010 at 7:43 am and is filed under Email Fraud, Spam Tactics. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.



Amazon. com: Please Confirm Your Action



Amazon account verification?



The following e-mail arrived. Appears to be a message from Amazon, but on closer examination it's not what it seems. It had us fooled for at least 20 seconds. This is rare, as usually these things are uncovered much quicker than that!



----- Original Message -----

From: Amazon. com, Inc

To: [address harvested from
Circular Newsletter Sign-Up Page ]

Sent: Tuesday, January 30, 2007 11:04 PM

Subject: Maintaining the trust of our customers.










Dear Customer,



- Due to recent account takeovers and unauthorized listings, Amazon is requesting a new account verification procedure. From time to time, randomly selected accounts (seller and/or buyer)are placed under an advanced updating process based on merchant accounts/bank relationsand on-file credit cards. Amazon may also request in an email message scanned/faxed copies of one or more photo ID's. Your account confirmation may go wrong if your credit card/bank account has expired, or if you have changed/replaced your credit card without letting us know about the change.




    Your account is not suspended, but if in 36 hours after you receive this message your account is not confirmed we reserve the right to terminate your Amazon subscription. If you received this notice and you are not an authorized Amazon account holder, please be aware that it is in violation of Amazon policy to represent oneself as an Amazon user. Such action may also be in violation of local, national, and/or international law.




To confirm your identity with us click HERE



We apologize in advance for any inconvenience this may cause you and we would like to thank you for your cooperation as we review this matter.



Respectfully,

Amazon. com, Inc.







Copyright 2007 Amazon. com, Inc. All rights reserved.



Amazon sent this e-mail to you because your Notification Preferences indicate that you want to receive information about Special Events & Promotions. Amazon will request personal data (password, credit card/bank numbers) only on our home site, wich is securely incrypted with SLL.



It is of course a hoax! Amazon did not send the message. The truth is it's a phishing attack, and if you get fooled by these things you can end up being victim to identity theft. Usually this happens with bank hoax messages, where the senders pretend to be your bank, and then they try to get you to "verify" your identity, thus disclosing it.



Incidentally, you can see the senders' first language is not English. There are some interesting mistakes in the language used in the message, mistakes which the Amazon book company would not make. Nevertheless it is quite convincing, with the stolen logo at the top, and various scary nonsense about security and copyright. I think the hoaxers let themselves down towards the end of the message with ". wich is securely incrypted in SLL"!



The actual Amazon company wouldn't ask you for photo IDs, and they'd also not say "Dear Customer" as they would know your name! If you've been fooled into sending the spoof site any photos of yourself and other security information, you may have to do some chasing about to warn people that your security has been compromised. If people try to pass themselves off as you, they could then get caught!



In the original hoax message on the bit that said "To confirm your identity with us click HERE", the link went to a. nl (Dutch) site. In the carefully stuffed and mounted version on this page I have replaced it with a link to one of my other pages, obviously!



If you'd like to visit the real Amazon company, you are welcome to go via my Amazon page. I'm not the real Amazon company either, but I am on their affiliate program. So at least you can get to the official site from there. Visit Amazon here. Or, if you'd like to see some more hoaxes you can have a look at the Yahoo Screensaver or the Microsoft critical patch update or any number of messages pretending to be from your bank



This type of thing, hoax messages, can be a problem, but not so much if you have some good sense about it.





Sapphire's Strike



Administrator


Received from: 62.149.145.27 - ITALY - Aruba S. p.A.

Return-Path:



Subject: Account Update 19/03/2014

Date: Wed, 19 Mar 2014

From: amazon



Please note that your account will expire in less than 48 hours, it is imperative to conduct an audit of your information is present, otherwise your account will be destroyed.



Just click the link below and log in using your email and password.



Check now Http://www. modelradioworkshop. co. uk/logs/ze. php



For more information, see Questions and answers.



The Customer Assistance





Sapphire's Strike



Administrator


Date: Tue, 25 Mar 2014

From: Amazon



Alerts@notify-amazon. com>

Subject: We have temporarily suspend your account.



Dear Amazon. com Customer,



During our usual security enhancement protocol, we observed multiple login attempt error while login in to your online Amazon account.

We have believed that someone other than you is trying to access your account for security reasons, we have temporarily suspend your account and your access to online Amazon and will be restricted if you fail to update.



Click here:

Http://islamiccelebrants. org. au/includes/domit/Amazon/e06e248c4dc8c31ae1582ea4deeab764/login. phpaction=billing_login=true&_session;68e1419e77d07bfa1381243f4cf7126968e1419e77d07bfa1381243f4cf71269





Garreg Ddu



Gweinyddwr


Received: from [ 212.232.26.71 ] by mail. rivercitysports. com [207.161.102.47] with SmartMax MailMax for blackland@guides. org. uk; Fri, 25 Apr 2014 10:20:29 -0500



Origin IP Address = 212.232.26.71 = Nessus GMBH, Vienna, AUSTRIA.



Return-Path:

Reply-To: bkmrun@amazon. co. uk

From: Amazon

Subject: Notification

Date: Fri, 25 Apr 2014 17:19:45 +0200





Please visit

Https://www. amazon. co. uk and

And confirm that you are the owner of the account.





Tywysoges Gwen



From Amazon Fri May 2 04:20:51 2014

Return-Path:

X-YahooFilteredBulk: 41.84.78.112

X-Originating-IP: [ 41.84.78.112 ]



Received: from 127.0.0.1 (HELO pagesuitepro. com) (EHLO mta1696.mail. gq1.yahoo. com) ( 41.84.78.112 )



Thanks for your order. Well let you know once your item(s) have dispatched. You can check the status of your order or make changes to it by visiting Your Orders on Amazon. com.

Order Details



Order YB3127563 Placed on February 13, 2014



Order details and invoice in Attached file. I cannot download or see the contents of the file, report. zip, as Norton says it is Malware infected.



Need to make changes to your order? Visit our Help page for more information and video guides.



We hope to see you again soon. Amazon. com



Origin IP address = 41.84.78.112

Allocated to customer CYB001

Address: Ground Floor, Bates House, Corner Howick

Address: & Treur Close, Waterfall Office Park

Address: Midrand 1685

Address: South Africa





Order IO4564737 Placed on May 16, 2014



Email Sender: [more info]



IP address: 50.200.148.70

IP address country: United States

IP address state: Illinois

IP address city: Oak Brook

IP postcode: 60523

IP address latitude: 41.8372

IP address longitude: -87.9613

ISP of this IP: Comcast Cable

Organization: Comcast Cable

Local Time of this IP country: 2014-06-11 00:57



National AmazonLocal. com

Hello,



Thanks for your order. We�l let you know once your item(s) have dispatched. You can view the status of your order or make changes to it by visiting Your Orders on Amazon. com.

Order Details



Order IO4564737 Placed on May 16, 2014



Order details and invoice in attached file.



Need to make changes to your order? Visit our Help page for more information and video guides.



We hope to see you again soon. Amazon. com





Administrator


From Amazon

Return-Path:

Received: from (EHLO tcb6065.tcloud. infra) (175.126.103.124) Korea, Seou, l Hanaro Telecom

Date: Mon, 4 Aug 2014

Subject: Account Confirmation

X-PHP-Originating-Script: 1002:x. php

From: Amazon



Your Orders | Your Account | Amazon. com

Account Confirmation

Account #106-0747095-0119402

Hello,

Thank you for shopping with us. We'd like to let you know that We need to confirm your account information, you must confirm your amazon account before we close it. Click the link below to confirm your account information using our secure server



If you want more information or need more assistance, go to Help.



Thank you for shopping with us.



Amazon. com

Unless otherwise noted, items sold by Amazon. com LLC are subject to sales tax in select states in accordance with the applicable laws of that state. If your order contains one or more items from a seller other than Amazon. com LLC, it may be subject to state and local sales tax, depending upon the seller's business policies and the location of their operations. Learn more about tax and seller information.



This email was sent from a notification-only address that cannot accept incoming email. Please do not reply to this message.





The Doctor



Administrator


Coupn@cw. com>

Received: from mout. kundenserver. de (mout. kundenserver. de [212.227.126.187]) German server

Date: Thu, 18 Sep 2014

Subject: Congratulations! You Are The Winner Of a Discount Coupon For 90%

From: Amazon. com



You Are The Winner of a Discount Coupon For 90% !



Coupon ID : 695F6D356FI1



This is a random selection from Amazon. com on the occasion of our 20th birthday we selected more than one million customers in first step then we have chosen just ten thousand other customers also randomly to be winner of discount coupon for 90%.

This coupon is valid for all amazon product check out in the link below.



Get Coupon Code Http://eloquentbeauties. com/libraries/phpmailer/32.php



Note:

- The link of the coupon will expire within 24 hour from now.

- The coupon validity is 30 days.



Amazon, support Team.

Http://www. amazon. com



Ρrivacy Nοtice © Αmazon 1996-2014 Cοrpοration. Αll rights reserved. Αll trademarks are prοperty of their respective οwners in the US and other cοuntries.





Spanish Admin



THE Spanish Administrator


Return-Path:

Received: from pump. kithegrume. com ([190.123.39.69]) Panama, Panamaserver. com

X-RC-FROM:

From: "Harrison M."

Date: Fri, 30 Jan 2015



Delivery for Friday Afternoon



Shipping & Delivery › Where's My Stuff?›



Confirm you will be home to sign here

Http://pump. kithegrume. com/fed=ex+37663702068dis. pla+ay/time.4399921go=low? succ473011632info



Without verification your delivery will be canceled



**Automated Message - Prime - Amazon. com**





The Doctor



Administrator


X-Originating-IP: [217.12.245.28] Russia, Penza, Cjsc Ruscentrosvyaz

Subject: [EDF] Your Account will be Limited and will be Closed!

Message-Id:

Date: Mon, 9 Feb 2015



Your Account | Help

Dear Amazon User,



We need to confirm your account information, you must confirm your amazon account before we close it.



Click the link below to confirm your account information using our secure server:



Confirm Now http://www. bethsaboveandbeyondcatering. com/media/com_joomlaupdate/*index. php



Thanks,

Amazon team





Cold War Kid



From: 27.103.137.154, China, Guangzhou, Guangdong Highway Broadband Network Service Center



If you cannot click the link above, Copy & Paste this link:

Http://linhostingx. com/ueyJjIjogNDAyMywgImYiOiAwLCAibSI6IDQwOTAsICJsIjogNCwgInMiOiAwLCAidSI6IDY1MDE2NjcwLCAidCI6IDEsICJzZCI6IDB9





Administrator


From Amazon

Return-Path:

Received: from smtp1.easily. co. uk (ip-10-229-11-165.us-west-2.compute. internal

Date: Tue, 9 Jun 2015

From: Amazon

Reply-To:

Subject: Amazon Account Update

Message-ID:

X-AuthUser: info@robemo. com



Update Your Personal information

Hello

It has come to our attention that your account information needs to be updated as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website. If you could please take 5-10 minutes out of your online experience and update your personal records you will not run into any future problems with the online service.

However, failure to update your records will result to account limitation. Please update your records before June 12,2015.

Once connected, follow the steps to activate your account Thank you for your understanding as we work to ensure account security..

The procedure is very simple:



Click on the link below to open a secure browser window.

Confirm that you are the account holder and follow the instructions.



Access Your Account http://www. elotrolado. com. pa/weben2/wp-includes/js/tinymce/utils/AD/BC/



Help | Security Center

Please do not reply to this email. The messages received at this address are not read and therefore received no response. For assistance, log in to your amazon account and click the Help link in the upper right corner of any amazon page. To receive email notifications TEX format, not HTML, set your preferences up to date.



Copyright © 1999-2015. All rights reserved.

Information about FDIC pass-through insurance





Administratrix


Ireland, Dublin, Amazon Data Services Ireland Ltd

From "qla@amazon. in"

Return-Path:

Date: Fri, 19 Jun 2015

From: "qla@amazon. in"

Subject: Your Amazon. in account has been closed



We closed this account because our records show that we closed another account of yours for not meeting the terms of our Conditions of Use agreement. When we close your account for violating the terms of an agreement, you cannot open a new account or use another account to place orders with our site.



If you had open orders on this account, those orders were cancelled and refunded when we closed the account.



Any digital content that you purchased with this account is still available to you. To access the content, click the? Manage Your Kindle? link on the Your Account menu on Amazon. in (https://www. amazon. in/youraccount).



If you would like to appeal this decision, please reply to this email to reach an account specialist. Our Customer Service team can only confirm that we sent this message and help you with technical issues. They cannot reverse this decision or share more details on this matter.



Sincerely,

Account Specialist

Amazon. in





Central Scrutinizer



Administrator




Date: 30 June 2015

Subject: [Amazon] : Update Your Information



This is an automated email to let you know that you need to confirm your account information within 48 hours.



Once you have updated your account records, your information will be confirmed and your account will begin to function normally again.



Will help protect the future. The process does not take more than three minutes.



To confirm your account information click the link below and follow the instructions that will be needed!



Click Below

Click Here >>>>> https://www. bobelljewellery. com/shell/us/5079ea748323d324aa6971d75c95c888/login. php? action=billing_login=true&_session;584ea4ffdf69a3b25b6ccbfb1b377ee1584ea4ffdf69a3b25b6ccbfb1b377ee1



Thank you for your trust,

Copyright 1999-2015 Inc. All rights reserved.





Administrator


From: Amazon [confirm@braxypends. com]

Sent: Wednesday, July 22, 2015

Subject: Your Amazon. com Order #58294 has shipped!



Hello, Your Amazon Order needs Urgent Attention.



Expected delivery date:Friday, July 24, 2015



Shipped to:

Total Before Tax:

Shipment Total: $577.16



Depending on the ship speed you chose, it may take 24 hours for tracking information to be available in your account.



We hope to see you again soon.

Amazon



If you wish to no longer receive messages, please click here to let us know. http://aspmx10.braxypends. com/zfotOFIUMgR8wYp2rmPhT56J9McmpOSzWKe0/MFv1nDU+b27Qk8EdaMnF6cEC466Y8 942 OLYMPIA AVE VENTURA CA 93004-2219





Sapphire's Strike



Administrator


Return Path: payment@intl. com

SubjectYour Order Has Been Cancelled.

Date: 11th Aug 2015

From:Amazon payment@intl. com



Dear Amazon Customer:



This email was sent by the Amazon server. your order has been suspended, because we are unable to verify your payment



Details please Verify that you entered your payment information correctly on your order You have successfully used the payment method



On a previous order Part of your order has already charged and shipped successfully You have funds available in your bank or credit



Account to cover the order cost Please Update Your Payment Details in order for us to Proceed with your shipment Today To verify your Payment details,



Click on the link below. and follow the state procedure.



Https://p ayme nts. amazo n. com/ho me



Please fill in the required information.



NOTE: If we didn't Receive Your Payment Update Within 48 Hours Then we will Cancel Your Order Completely.



Thank you

Amazon Payments Management

An amazon Company

Privacy Promise

Terms & Conditions

Copyright © 2015 Amazon. com, Inc. or its Affiliates





Administratrix


Nigeria, Lagos, Spectranet Limited

Return-Path: Ginnygal@fastmail. fm

To: Recipients Ginnygal@fastmail. fm

From: Amazon Ginnygal@fastmail. fm

Date: Tue, 22 Sep 2015



Hello Amazon User, Due to our general Upgrade to our Database, Some information on your account appears to be missing, incorrect or deactivated Please A href=3Dhttp://ow. ly/Sx5el Click here to Log in and update your information NOW. We are Sorry for the inconvinence



Copyright =A9 2015 Amazon Inc. All rights reserved.





Prints Of Darkness



From support

Return-Path:

Received: from (EHLO vps220096.ovh. net) (51.254.134.35)

Subject: additional information on the amazon site.

From: support

Message-Id:

Date: Sat, 12 Dec 2015





Administrator


Germany, Nuremberg, Hetzner Online Gmbh

X-SID-PRA: service@servamazon. co. uk

From: AMAZON UK

Subject: Please resolve an issue with your account.

Date: Wed, 20 Jan 2016

Return-Path: service@servamazon. co. uk



Dear, Client(s)

We need your help resolving an issue with your account. To give us time to work together on this, we've temporarily limited what you can do with your account until the issue is resolved.



We understand it may be frustrating not to have full access to your amazon account. We want to work with you to get your account back to normal as quickly as possible.



What's the problem?



It's been a little while since you used your account. For reasons relating to the safe use of the amazon service we need some more information about your account.



What Can You Do?

1. Download the attached document and open it in a secure browser.

2. Write your correct informations.



Unless otherwise noted, items sold by Amazon EU Sarl are subject to Value Added Tax based on country of delivery in accordance with the EU laws on distance selling. If your order contains one or more items from a seller other than Amazon EU Sarl, it may also be subject to VAT, depending upon the seller's business policies and the location of their operations. Learn more about VAT and seller information.



If your item(s) are purchased from Amazon Marketplace, the seller may request additional information such as the VAT number or your VAT code, in order to issue a valid invoice.



This e-mail is only an acknowledgement of receipt of your order. Your contract to purchase these items is not complete until we send you an e-mail notifying you that the items have been dispatched. Please note: This e-mail was sent from a notification-only address that can't accept incoming e-mail. Please do not reply to this message.

Комментариев нет