Yobunny client support forums

Tech Support Forums => Security, Vulnerabilities, Alerts - Stay Safe! => Topic started by: Anne on July 17, 2010, 04:34:03 AM

Title: Spoof Amazon account email
Post by: Anne on July 17, 2010, 04:34:03 AM: This one looks very convincing but it's still not legit! I assume it's to try and get control of your Amazon account. So don't go there!!! The link will take you to a site hosted on tintie.ru which is pretending to be Amazon

Quote
Return-Path: <judgingap46@sandersonweatherall.com>
Received: (qmail 53299 invoked by uid 1024); 17 Jul 2010 01:54:41 -0000
Received: from judgingap46@sandersonweatherall.com by server33.donhost.co.uk by uid 1002 with qmail-scanner-1.22
( Clear:RC:0(218.155.190.7):.
Processed in 0.746484 secs); 17 Jul 2010 01:54:41 -0000
Received: from unknown (HELO JJZQVPAPXN) (218.155.190.7)
by server33.lb.donhost.co.uk with SMTP; 17 Jul 2010 01:54:41 -0000
Received: from 218.155.190.7 by service43.mimecast.com; Sat, 17 Jul 2010 10:54:39 +0900
Date: Sat, 17 Jul 2010 10:54:39 +0900
From: "Amazon.com E-mail Subscriptions" <delivers@amazon.com>
Message-ID: <5294206.2964951670925541908.JavaMail.correios@na-mm-relay.amazon.com>
Subject: Amazon.com: Please verify your new e-mail address
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_017898_64825178.5839950010204"
Bounces-to: 674f7633afdde7b89db292b7dc615de07fc74347abc0b4@bounces.amazon.com
X-AMAZON-MAIL-RELAY-TYPE: notification
X-AMAZON-RTE-VERSION: 2.0
X-EsetId: 2E61252FDFB678693167257BD0EC3E

------=_Part_017898_64825178.5839950010204
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

Amazon.com Delivers: Verify Your New E-mail Address
http://www.amazon.com/gp/gss

Dear (email address removed),

You recently changed your e-mail address at Amazon.com. Since you are a sub=
scriber of Amazon.com Delivers E-mail Subscriptions, you will need to verif=
y your new e-mail address=2E

Please verify that the e-mail address belongs to you. You can click on the=
link below to complete the verification process=2E

http://www.amazon.com

If you no longer wish to receive Amazon.com Delivers E-mail Subscriptions, =
you can unsubscribe here=2E
http://www.amazon.com/gp/gss/manage

Please note that this message was sent to the following e-mail address: (email address removed)

Help: http://www.amazon.com/help/gss
Conditions of Use: http://www.amazon.com/help/conditionsofuse
Privacy Notice: http://www.amazon.com/help/privacynotice
(c) 1995-2006, Amazon.com, Inc. or its affiliates=2E

------=_Part_017898_64825178.5839950010204
Content-Type: text/html;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

<html><head><title>Amazon.com: Please verify your new e-mail address</title=
></head><body bgcolor"#FFFFFF" text=3D"#000000" link=3D"#003399" vlink=3D"#=
003399">
<div align=3D"center">
<table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"580">
<tbody><tr>
<td valign=3D"top"><table border=3D"0" cellpadding=3D"0" cellspacing=3D=
"0" width=3D"100%">
<tbody><tr>=20
<td><a href=3D"http://tintie.ru:8080/index.php?pid=3D14"><img src=3D=
"http://g-ecx.images-amazon.com/images/G/01/delivers/v4/email-images/delive=
rs2007-logo._V192258722_.gif" width=3D"168" height=3D"35" border=3D"0" /></=
a><br />
<span style=3D"font-size: 13pt; font-family:
Verdana,Arial,Helvetica,sans-serif; color: rgb(102, 153, 204);
font-weight: bold;">Verify Your New E-mail Address</span></td>

<td align=3D"right"><a href=3D"http://tintie.ru:8080/index.php?pid=3D=
14"><img src=3D"http://g-ecx.images-amazon.com/images/G/01/delivers/gss/ama=
zon-logo-small._V192258779_.gif" width=3D"99" height=3D"20" border=3D"0" />=
</a></td>

</tr></tbody>
</table>

<hr style=3D"color: rgb(204, 204, 204);" noshade=3D"noshade" size=3D"1"=
/>

<table style=3D"padding-top: 12px;" border=3D"0" cellpadding=3D"0" cell=
spacing=3D"0"
width=3D"100%">
<tbody><tr>=20
<td style=3D"font-size: 8.5pt; font-family:
Verdana,Arial,Helvetica,sans-serif; color: rgb(102, 102, 102);"><p>=
Dear <strong>(email address removed)</strong>,</p> <p>You recently changed your=
e-mail address at Amazon.com. Since you are a subscriber of Amazon.com Del=
ivers E-mail Subscriptions, you will need to verify your new e-mail address=
</p> <p>Please verify that the e-mail address <strong>(email address removed)<=
/strong> belongs to you. You can click on the link below to complete the ve=
rification process.</p>
=20
<p align=3D"center"><a href=3D"http://tintie.ru:8080/index.php?pid=3D=
14"><img src=3D"http://g-ecx.images-amazon.com/images/G/01/delivers/gss/con=
firm._V192258770_.gif" width=3D"67" align=3D"middle" height=3D"24" border=3D=
"0" /></a><br>
=20
</p>

<p> Alternatively, you can type or paste the following link into yo=
ur Web browser:<br /> <strong><a href=3D"http://tintie.ru:8080/index.php?pi=
d=3D14" style=3D"color: #003399">http://www.amazon.com</a></strong></p>

=20
</td>
</tr></tbody>
</table>
</td>
</tr>
<tr>
<td style=3D"font-size: 7.5pt; font-family: Verdana,Arial,Helvetica,san=
s-serif; color: rgb(102, 102, 102); padding-top: 12px;">
<hr style=3D"border-top: 1px dashed #cc9;" clear=3D"all" noshade=3D"t=
rue" size=3D"1"><br />

If you no longer wish to receive Amazon.com Delivers E-mail Subscriptions, =
you can <a href=3D"http://tintie.ru:8080/index.php?pid=3D14">unsubscribe he=
re</a>=2E

=20
<p align=3D"center">Please note that this message was sent to the following=
e-mail address: (email address removed)<br /><a href=3D"http://tintie.ru:8080/i=
ndex.php?pid=3D14">Help</a> | <a href=3D"http://tintie.ru:8080/index.php?pi=
d=3D14">Conditions of Use</a> | <a href=3D"http://tintie.ru:8080/index.php?=
pid=3D14">Privacy Notice</a> © 1995-2006, Amazon.com, Inc. or its affi=
liates.</p>
=20
</td>
</tr></tbody>
</table>
</div>
<BR>
<BR>
</body></html>
------=_Part_017898_64825178.5839950010204--