Amazon “Join Research Panel” email has an external URL in one of the parameters

2 points by konceptz ↗ HN
[Link to discussion] https://www.amazon.com/gp/help/customer/forums/ref=cs_hc_g_pg_pg1?ie=UTF8&forumID=Fx1SKFFP8U1B6N5&cdThread=Tx2O04NGTNUZOEQ&cdPage=1&cdSort

Hi all,

I've been having a discussion at the above URL today about an email sent to some people.

Here is a sample from the Amazon forum of the URL:

https://www.amazon.com/gp/r.html?C=GMJCWLUIE1WX&R=1D16EZXH1WRXZ&T=C&U=&A=1UGJHCWOURKRTE8GT4FAASSXYGCA&H=NIYAXLWJZ0ZGZDAFR0JQPFMHOJYA%20https://marketresearch.au1.qualtrics.com/SE?Q_DL=57lAxmzkxiIjCzH_3eq12un7iYcJL3n_CGC_2mKC2fo4n6e4jqd

Discussion ensues about the validity of the link within the email and I've made a few posts there.

Would love to get your feedback about some conversation and analysis of security concerns with this email. You'll have to assume both secure trusted SMTP headers and untrusted SMTP headers since I'll not post my personal headers received publicly.

2 comments

[ 0.32 ms ] story [ 12.8 ms ] thread
I suggest leading the title with "Ask HN:"