The source code shows that the message was handled by a server at amazsecudb.com, which is owned and/or administered by Tommy Johnson of Lake Zurich, IL 60047. Messages of this sort are intended to take the unsuspecting to a website that will collect personal information to later be used by others.
Amazon.com takes Internet fraud very seriously and has pages of information on how to report email scams involving Amazon.com. They also have a dedicated form for reporting the emails at https://www.amazon.com/gp/help/contact-us/report-phishing.html?. In their October 17 automated reply to a report of this phishing scam, Amazon provided several tips on how to spot fake emails.
1. Amazon.com will *not* ask you for the following information in an e-mail message:If you suspect that you have received a phishing email involving your Amazon.com account, report the incident to Amazon immediately. You can also find information about identity theft and Internet fraud on the FBI and Internet Crime Complaint Center (IC3) websites.
* Your Amazon.com password
* Your bank account information
* Your credit card information or PIN
* Your social security number
* Your mother's maiden name or other information to identify you
2. Amazon.com will *not* ask you to verify or confirm your Amazon.com account information by clicking on a link from an e-mail.
Beware the new fake Amazon email scam - National Crime & Courts | Examiner.com