Seller-Performance Phishing Scam?

#5

definitely fishing scam

#6

I agree. Also, the email header seems to identify the email as originating from a gmail account.

It’s a very good phishing attempt.

#7

Spoofed email to a TLD (aws2-amazon) does not resolve to an Amazon redirect.

You can always take the TLD and paste it into a browser to see where it resolves.

The TLD in this case is the entire domain “aws2-amazon” which is false. If it was “aws2.amazon” with a “dot” preceding amazon, it might work but in this case there is no sub-domain “aws2” that is recognized by amazon DNS.

So yes, a phishing scam.

#8

How did they even get your email in the first place?

#9

Forward to: stop-spoofing@amazon.com
https://www.amazon.com/gp/help/customer/display.html?nodeId=201127830

Amazon does not REDACT FOR PRIVACY.

Updated Date: 2019-05-04 <<<<
Created Date: 2019-05-04 <<<<

ICANN WHOIS:

Screenshot_2019-05-14 ICANN WHOIS
Screenshot_2019-05-14 ICANN WHOIS.png1735×3069 259 KB

#10

Going around, came up yesterday.

Nice work guys showing the and reviewing details for those not so knowledgeable on these intrusions.

#11

The wording in this message is terrible, made me cringe. Even for a not-native-English speaker like me it sounds scammy

#12

It’s a better than average phishing email. The best proof is the fake email domain, as others have said, but it’s close enough to look valid at a glance. The first thing that popped out to me is the centered text, I doubt you will ever see that in any business communication.

#13

I thought it sounded pretty good.

#14

I agree – the dash gives it away.

#15

I agree. The wording is very unprofessional!

#16

SCAM!. I got one too.

#17

All you need to do is look up the domain name on ICANN WHOIS, as shown in my post here, which clearly shows the domain was created and updated on May 4, 2019.

#18

With the number of sellers reporting they’ve gotten this email, I’m more curious about how the spoofers are getting lists of sellers direct email addresses without working for Amazon. Oh, wait a minute…

#19

That is a VERY good question.

#20

Just confirm the information they need and you should be fine.

#21

2SV linkage?

#22

Lol, are you on the same planet?:slightly_smiling_face:

#23

I have had worse from actual amazon employees LOL. But as far as a scam goes, I think it is a pretty good try especially if you are a newbie, I think some sellers will be fooled by this.

#24

Doesn’t that indicate right there that it’s not genuine…or have things changed again and Amazon is now contacting sellers for such issues directly through our email client only?

I can’t keep up.