possible new Paypal scam e-mail

Carew29

Here is the internal parts of the e-mail--Anyone know if this is legit?

Received: from larryljasd.com ([198.170.84.131])
by sccrmxc13.comcast.net (sccrmxc13) with ESMTP
id <20060111125330s1300ht2ede>; Wed, 11 Jan 2006 12:53:30 +0000
X-Originating-IP: [198.170.84.131]
Received: (qmail 3035 invoked by uid 21635); 11 Jan 2006 12:53:30 -0000
Date: 11 Jan 2006 12:53:30 -0000
Message-ID: <20060111125330.3034.qmail@larryljasd.com>
To: repoman2000@comcast.net
Subject: E-Mail Id #1910 PayPal Account Security Measures Notification [Wednesday, January 11, 2005 02:35:19 DST -0400 UTC]
Content-Type: text/html; charset=us-ascii

From: PayPal <service@paypal-protect.com>
Reply-to: PayPal <service@paypal-protect.com>
Content-Transfer-Encoding: 7bit

X-Accept-Language: en-us, en




<DIV> <A href="http://hometown.aol.de/benskd/" target=_blank><IMG alt="PayPal Service" src="http://hometown.aol.de/benskd/imagini/imagine.jpg"> </DIV></A>

charliehustle14

Forward it to spoof@paypal.com and see what they say.

Southsider

It's a scam. Unless Paypal has switched to German AOL for their website hosting.

sagard

The "Originating IP" is not a PayPal address. You can check the links if you'd like, but I wouldn't advise logging in.

Southsider

double post

Carew29

received repsonse back from Paypal. They said it did not come from them. I figured as much.

Snowball

Be careful with those paypal (scam) email. I have received 2 same paypal email (TAKE NOTE: It was personally addressed to me with my full name on it -- exactly like the one you get when you paid for an item) that I paid for an ipod sent to an unconfirmed address with a different name. It does really looks like a payment receipt and at the bottom states that if I did not authorized the payment "click here" (sort of like that).


I got suspicious right away when I opened my email because everything is blank except my name (I turned off my html graphics viewer for this email address). It doesn't state Dear Paypal User, it actually stated my name. So when I click to view the html graphics, it acvtually looks like a Paypal payment receipt. So if I had the html viewer on I could have been fooled and panic (I can view paypal payment receipt even if html graphics is off).

Note: I only use this email for paypal. I use adifferent ebay email address. When I setup my email I use fictional name and my nickname is just my last name. Where's the security breach?

I did the right click on the mouse to see the properties of the html the website I got is: http://ourworld.cs.com/payauctionow/mid.gif

This is Paypal's response to the email I forwarded (full headers and scam letter to spoof@paypal.com)

Thank you for contacting PayPal.

For your security, always verify every payment notification by logging
into your PayPal Account at https://www.paypal.com/ and locating the
corresponding transaction. If the transaction is not there, it may be
for a number of reasons:

1. The sender may have sent the payment to an email address that you
use
but have not registered with PayPal

2. Your email address may not yet be confirmed. Until this step has
been
taken, any payments sent to you will remain 'Unclaimed' in the sender's
PayPal account

3. The sender may have entered an incorrect email address. If the email
address they have entered is not an exact match, the funds will not be
posted to your account

4. The sender may be faking a payment notification to you in an attempt
to defraud you for your goods or services. In each case, never send
product until you have confirmed payment has been received by logging
into your PayPal Account at https://www.paypal.com/. If you believe the
payment notification to be suspicious, desist shipment and forward the
email to us at spoof@paypal.com so that we can investigate the matter
further.

Sincerely,
PayPal Account Review Department

pimp

ttt