Hacker News Reader

I would assume that's how OP knows the leak came from amazon (assuming the address was more obscure than amazon@whatever.com)

Might not be best idea to use exact word amazon, have gotten this email before -

> use of Amazon trademarked words, images, or reviews which may include variations or misspellings and this is a violation of our Trademark Guidelines

> [...]

> An example of the above violation can be found here: amazon@[mydomain]

I would be surprised if that was enforceable, it sounds more like an effort to ensure they're proactive about their trademark.

Well it's certainly enforceable in that you won't be able to use it for your Amazon account. They are free to reject any email address they like.

I would also not suggest using the exact company name/URL in the email address used to sign up. One time I couldn't log in to my password manager service and after a _lot_ of back and forth it turned out that after some years my email was somehow scraped from their DB for using their domain name in my email... So now I always go with something obscure but still traceable back to the service it was used for.