Amazon scammer: (833) 352-1275

Phishing
1

Phishing link: http://amz-payment-verifications3.duckdns.org/ap/signin?session=681f4843d9d28050f74826dae789e4be16b70c92

A WhoIs lookup reveals that the site is operated out of Paris, France.

Contents of message:
"Amazon: Your account is currently locked for security reasons. Please update your payment information here:

http://amz-payment-verifications3.duckdns.org/ap/signin?session=681f4843d9d28050f74826dae789e4be16b70c92

CASE ID: SJIC9W68D"

2

[[3,15,37,41,69,72],[3,41,69,72]]

3

@OfclyGoodenough#185138 The website is now flagged as fraudulent by Google Safe Browsing, and the domain has been removed from operation.