Not content with sending fake Amazon confirmation emails, the outfit sending out the Canadian pharmacy spam is now sending out fake Amazon.com order cancellation emails, too, claiming that your Amazon order has been cancelled. “Amazon.com – Your Cancellation (0046-68878-96071)” says the email’s subject (although the “order number” may change) – but of course the link to check “ORDER INFORMATION” really takes you to a Canadian pharmacy spam site, hawking Viagra, Cialis and the like. In the example below, the fake cancellation contains links to dinnerinperu[dot]com/quadratical, which redirects to https://web.archive.org/web/20110421034707/http://weightbreezy.com:80/, which is a Canadian pharmacy spam site.
The spam, in full, reads:
Subject: Amazon.com – Your Cancellation (0046-68878-96071)
Date: March 7, 2010 10:17:22 PM MST
Your order has been successfully canceled. For your reference, here`s a summary
of your order:
You just canceled order #427-36356-9898759
Sold by: Amazon.com, LLC
Because you only pay for items when we ship them to you, you won`t be charged
for any items that you cancel.
Thank you for visiting Amazon.com!(Article continues below)
Get notified of new Internet Patrol articles for free!
Or Read Internet Patrol Articles Right in Your Inbox!
as Soon as They are Published! Only $1 a Month!
Imagine being able to read full articles right in your email, or on your phone, without ever having to click through to the website unless you want to! Just $1 a month and you can cancel at any time!
Earth`s Biggest Selection
As we mentioned in our article last week about the fake Amazon.com confirmation emails, this round of spam also uses masked links that make you think that the link will take you to Amazon so you can figure out just what the heck order they are talking about. But in reality, these cloaked links take you to one of the Canadian pharmacy spam sites that are behind this spam effort.
If you are careful, you can hover over the link with your cursor, and any current browser should reveal the actual site link. As you can see in this image below, we hovered over the link, and found that the link in this Amazon.com cancellation phishing spam really goes to a page called “DinnerInPeru.com/quadratical.html” and that page, in turn, goes to the Canadian pharmacy spam site, called “weightbreezy.com/” (Spammers register hundreds of nonsense-named sites on which to host their wares, knowing that their sites will get taken down as soon as they are discovered by either the ISP or the authorities.)
As always, if you get an email that claims to be from Amazon, Paypal, eBay, or one of the other big sites, instead of clicking on the links in the email, just log into the site and go to your account. If they really are trying to reach you, there will be a notice in your account.
No Paywall Here!
The Internet Patrol is and always has been free. We don't hide our articles behind a paywall, or restrict the number of articles you can read in a month if you don't give us money. That said, it does cost us money to run the site, so if something you read here was helpful or useful, won't you consider donating something to help keep the Internet Patrol free? Thank you!
|Get notified of new Internet Patrol articles!