Small sample of an email message that has passed through Gmail's phishing and spam filter. A confirmation email from both cashapp,costco, AceHardware,Walmart, Dicks Sporting Goods, with links hosted on Amazonaws. A common theme between all messages is that the contain a link to an amazon AWS. Redirecting to the launchstore[.]quest before reaching its final destination. Clearly marked phishing by VT, but not specific malware threat based on scans on Hybrid Analysis. (UPDATE) The latest entry is now classifed as malicious. Update Milwaukee power drill via Acehardware. Same MO. Amazon AWS link > Thelaunchstore[.]quest>jongberreta[.]com > positionspot.info Update 21/13:20 Added Walmart, Acehardware, Dicks sporting goods into the description above.