In spite of the atrocious spelling and grammar mistakes in the email, the link takes victims to a high-quality spoof of the Amazon.co.uk login page that asks users to submit their email address, Amazon account password, then redirects them to a spoofed Amazon.com page asking for their name, address, date of birth and credit card information.
Avira's Sorin Mustaca points out a few interesting details about this phishing attempt: the jumping from one to the other Amazon domains, the fact that some of the spoofed pages' source code was lifted from the legitimate ones, and that the spoofed page actually returns an error if the victim enters an email address that is too long.
Despite the aforementioned jumping, it's highly likely that most users who follow the link won't notice the difference. If they believed that poorly written email came from Amazon, they are probably not the most perceptive of users.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.