Seller-Performance Phishing Scam?
I received this email in my normal email account (not through Amazon messaging):
I am suspicious because they want me to respond to the message via standard email - upon which they will send me a LINK to"re-confirm" my account information. This could easily be a phishing email.
Sender: seller-performance@amazon.com <seller-performance@aws2-amazon.com>
Anyone else know if this is legitimate or not? I have had zero account problems in 7 years and I find it hard to believe Amazon has suddenly found an “issue” with it. Is aws2-amazon.com a real amazon domain or just made to look like one? A WHOIS search does not identify it’s owner.
My listings are fine, not suppressed.
26 replies
Seller_Xpktjspu2oF5C
Post the entire header if that is permissible by forum policy.
Seller_atnk8fSvVuoeY
This is not a real Amazon domain. If it was, you would see Amazon as the domain owner when doing a WHOIS.
Seller_dqVIaIi6xarNS
Spoofed email to a TLD (aws2-amazon) does not resolve to an Amazon redirect.
You can always take the TLD and paste it into a browser to see where it resolves.
The TLD in this case is the entire domain “aws2-amazon” which is false. If it was “aws2.amazon” with a “dot” preceding amazon, it might work but in this case there is no sub-domain “aws2” that is recognized by amazon DNS.
So yes, a phishing scam.
Seller_gfbv5nMCATo1d
How did they even get your email in the first place?
Seller_oEw5wUNHgJxxP
Going around, came up yesterday.
Nice work guys showing the and reviewing details for those not so knowledgeable on these intrusions.
Seller_BkdLpb4k6dcdt
The wording in this message is terrible, made me cringe. Even for a not-native-English speaker like me it sounds scammy
Seller_7psPA6KtrSUom
It’s a better than average phishing email. The best proof is the fake email domain, as others have said, but it’s close enough to look valid at a glance. The first thing that popped out to me is the centered text, I doubt you will ever see that in any business communication.
Seller_dPx3vs4ojoIMW
With the number of sellers reporting they’ve gotten this email, I’m more curious about how the spoofers are getting lists of sellers direct email addresses without working for Amazon. Oh, wait a minute…
Seller_6g1jy4F2XEEYX
Just confirm the information they need and you should be fine.
Seller-Performance Phishing Scam?
I received this email in my normal email account (not through Amazon messaging):
I am suspicious because they want me to respond to the message via standard email - upon which they will send me a LINK to"re-confirm" my account information. This could easily be a phishing email.
Sender: seller-performance@amazon.com <seller-performance@aws2-amazon.com>
Anyone else know if this is legitimate or not? I have had zero account problems in 7 years and I find it hard to believe Amazon has suddenly found an “issue” with it. Is aws2-amazon.com a real amazon domain or just made to look like one? A WHOIS search does not identify it’s owner.
My listings are fine, not suppressed.
Seller-Performance Phishing Scam?
I received this email in my normal email account (not through Amazon messaging):
I am suspicious because they want me to respond to the message via standard email - upon which they will send me a LINK to"re-confirm" my account information. This could easily be a phishing email.
Sender: seller-performance@amazon.com <seller-performance@aws2-amazon.com>
Anyone else know if this is legitimate or not? I have had zero account problems in 7 years and I find it hard to believe Amazon has suddenly found an “issue” with it. Is aws2-amazon.com a real amazon domain or just made to look like one? A WHOIS search does not identify it’s owner.
My listings are fine, not suppressed.
26 replies
26 replies
Seller_Xpktjspu2oF5C
Post the entire header if that is permissible by forum policy.
Seller_atnk8fSvVuoeY
This is not a real Amazon domain. If it was, you would see Amazon as the domain owner when doing a WHOIS.
Seller_dqVIaIi6xarNS
Spoofed email to a TLD (aws2-amazon) does not resolve to an Amazon redirect.
You can always take the TLD and paste it into a browser to see where it resolves.
The TLD in this case is the entire domain “aws2-amazon” which is false. If it was “aws2.amazon” with a “dot” preceding amazon, it might work but in this case there is no sub-domain “aws2” that is recognized by amazon DNS.
So yes, a phishing scam.
Seller_gfbv5nMCATo1d
How did they even get your email in the first place?
Seller_oEw5wUNHgJxxP
Going around, came up yesterday.
Nice work guys showing the and reviewing details for those not so knowledgeable on these intrusions.
Seller_BkdLpb4k6dcdt
The wording in this message is terrible, made me cringe. Even for a not-native-English speaker like me it sounds scammy
Seller_7psPA6KtrSUom
It’s a better than average phishing email. The best proof is the fake email domain, as others have said, but it’s close enough to look valid at a glance. The first thing that popped out to me is the centered text, I doubt you will ever see that in any business communication.
Seller_dPx3vs4ojoIMW
With the number of sellers reporting they’ve gotten this email, I’m more curious about how the spoofers are getting lists of sellers direct email addresses without working for Amazon. Oh, wait a minute…
Seller_6g1jy4F2XEEYX
Just confirm the information they need and you should be fine.
Seller_Xpktjspu2oF5C
Post the entire header if that is permissible by forum policy.
Seller_Xpktjspu2oF5C
Post the entire header if that is permissible by forum policy.
Seller_atnk8fSvVuoeY
This is not a real Amazon domain. If it was, you would see Amazon as the domain owner when doing a WHOIS.
Seller_atnk8fSvVuoeY
This is not a real Amazon domain. If it was, you would see Amazon as the domain owner when doing a WHOIS.
Seller_dqVIaIi6xarNS
Spoofed email to a TLD (aws2-amazon) does not resolve to an Amazon redirect.
You can always take the TLD and paste it into a browser to see where it resolves.
The TLD in this case is the entire domain “aws2-amazon” which is false. If it was “aws2.amazon” with a “dot” preceding amazon, it might work but in this case there is no sub-domain “aws2” that is recognized by amazon DNS.
So yes, a phishing scam.
Seller_dqVIaIi6xarNS
Spoofed email to a TLD (aws2-amazon) does not resolve to an Amazon redirect.
You can always take the TLD and paste it into a browser to see where it resolves.
The TLD in this case is the entire domain “aws2-amazon” which is false. If it was “aws2.amazon” with a “dot” preceding amazon, it might work but in this case there is no sub-domain “aws2” that is recognized by amazon DNS.
So yes, a phishing scam.
Seller_gfbv5nMCATo1d
How did they even get your email in the first place?
Seller_gfbv5nMCATo1d
How did they even get your email in the first place?
Seller_oEw5wUNHgJxxP
Going around, came up yesterday.
Nice work guys showing the and reviewing details for those not so knowledgeable on these intrusions.
Seller_oEw5wUNHgJxxP
Going around, came up yesterday.
Nice work guys showing the and reviewing details for those not so knowledgeable on these intrusions.
Seller_BkdLpb4k6dcdt
The wording in this message is terrible, made me cringe. Even for a not-native-English speaker like me it sounds scammy
Seller_BkdLpb4k6dcdt
The wording in this message is terrible, made me cringe. Even for a not-native-English speaker like me it sounds scammy
Seller_7psPA6KtrSUom
It’s a better than average phishing email. The best proof is the fake email domain, as others have said, but it’s close enough to look valid at a glance. The first thing that popped out to me is the centered text, I doubt you will ever see that in any business communication.
Seller_7psPA6KtrSUom
It’s a better than average phishing email. The best proof is the fake email domain, as others have said, but it’s close enough to look valid at a glance. The first thing that popped out to me is the centered text, I doubt you will ever see that in any business communication.
Seller_dPx3vs4ojoIMW
With the number of sellers reporting they’ve gotten this email, I’m more curious about how the spoofers are getting lists of sellers direct email addresses without working for Amazon. Oh, wait a minute…
Seller_dPx3vs4ojoIMW
With the number of sellers reporting they’ve gotten this email, I’m more curious about how the spoofers are getting lists of sellers direct email addresses without working for Amazon. Oh, wait a minute…
Seller_6g1jy4F2XEEYX
Just confirm the information they need and you should be fine.
Seller_6g1jy4F2XEEYX
Just confirm the information they need and you should be fine.
