Amazon's Phishing Emails

Amazon's hackers are not aware that they disclose their own conspiracies sometimes. They automate their system to send Phishing emails using encrypted technologies to hide sources and other identifications. However, some phrases and encrypted links on those Phishing emails could identify them.

I have received at one moment two emails spam of this kind some days ago. The two links on those Phishing emails that supposed to log me in at Amazon were significantly Phishing addresses. One of them appears like this: http :// www .flirt-undercover. de/wgcc/filebase/gp/index.php and the second appears like this: http :// www .topcomedysecrets. com/dlg/admin/ Both of them will never be Amazon’s URLs.

I hope by using some sources to disclose those scammers, steps will be taken to shut them down and suit them.

First Phishing email:

amazon.co.uk: Restore Your Account.
Return-Path: < nobody @ server. abyahost. com >
Received: from server.abyahost.com ([72.10.164.194]) by my isp (InterMail vG.3.00.03.01 201-2196-126-102-20080315) with ESMTP id < 20080516084841.RVRP18527.my isp@ server. abyahost. com > for < my email >; Fri, 16 May 2008 10:48:41 +0200
Received: from nobody by server.abyahost.com with local (Exim 4.68) (envelope-from < nobody @server. abyahost. com >) id 1JwvcG-0001ah-3U for my email ; Fri, 16 May 2008 08:48:40 +0000
To: my email
Subject: amazon.co.uk: Restore Your Account.
From: "account @ amazon . co . uk" < account@amazon .co. uk >
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: < E1JwvcG-0001ah-3U @server. abyahost. com >
Date: Fri, 16 May 2008 08:48:40 +0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.abyahost.com
X-AntiAbuse: Original Domain - mail.dk
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - serve


r.abyahost. com

Reinstate Your Account

Reinstate Your Account

------------------------

To all our valued customers:

Our business changes constantly and our Security Procedures and the Conditions of Use will change also. We are constantly developing new techniques to protect the security of your information during transmission by using Secure Sockets Layer (SSL) software, which encrypts information you input.

We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personally identifiable customer information. These security procedures mean that we may occasionally request updates to ensure the integrity of our system.

None of our customers has reported fraudulent use of a credit or debit card as a result of purchases made with us. We are so confident about the transaction security we offer on our site that we back every purchase with a security guarantee. Please continue the process by clicking on the Confirm button below.

Thank you for choosing Amazon.

__________________________

Second Phishing email:

The second email spam redirects to http :// www .topcomedysecrets. com/dlg/admin/

amazon.co.uk: Reinstate Your Account.
Return-Path: < nobody @server. abyahost. com >
Received: from server. abyahost. com ([72.10.164.194])
Received: from nobody by server. abyahost. com with local (Exim 4.68) (envelope-from < nobody @ server.abyahost. com >) id 1JwZwG-0006gT-HU ; Thu, 15 May 2008 09:39:52 +0000
To:
Subject: amazon.co.uk: Reinstate Your Account.
From: "account @ amazon . co . uk" < account@ amazon .co. uk >
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: < E1JwZwG-0006gT-HU@ server.abyahost. com >
Date: Thu, 15 May 2008 09:39:52 +0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server. abyahost. com
X-AntiAbuse: Original Domain - mail.dk
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - server. abyahost. com