Scamazon Phishing - [email protected]

Popup - 32hn2.auth-amz.me/?UserID-LBGEWFLIVZ

Registered in Ontario, Canada via Tucows Domains, Inc. on April 28, 2023 - Whois auth-amz.me

Associated Phone Number - [email protected]

Popup redirects users to https://nobotamzvrfy.com/umbrella.php

Registered in Ohio via SquareSpace on April 7, 2023 - Whois nobotamzvrfy.com

image

Users are then asked to “sign into” their Amazon accounts and “verify” their billing address & payment method by going to Amazon Sign-In (authidentify-amz.com)

Registered in California via SquareSpace on April 30, 2023 - Whois authidentify-amz.com

image

Users must also provide the following details before being transferred to amazon.com:

  • Name
  • Phone Number
  • Home Address
  • Birthday
  • Mother’s Maiden Name
  • SOCIAL SECURITY NUMBER
  • Credit Card Details

Associated IP Address - 162.240.227.200 (Provo, Utah)

my oh my… no no no.