This kind of thing scares me.
I always knew to buy hardware from the source... but honestly I didn't think buying from Amazon could lead to this
( guy bought Ledger off Amazon... his device prompted him to go to a phishing website, his coins got stolen )

video   https://www.youtube.com/watch?v=iebFLfKC2Ao