***Caution***: Paypal Users - Page 2

Gareth · 07-02-2005, 10:23

Nanook, have you used that email account for any other purpose too?

Nanook · 07-02-2005, 10:35

Loads

Bifta · 07-02-2005, 11:07

It came to an email address of mine I've only used to register here, which also never had a paypal account registered to it.

KingPhoenix · 07-02-2005, 11:09

Can someone get the headers from this e-mail and post them here

Bifta · 07-02-2005, 11:12

Return-path: <nobody@vulcan.cybexhost.com>
Envelope-to: XXXX@XXXX.CO.UK
Delivery-date: Mon, 07 Feb 2005 05:02:47 +0000
Received: from sean by kestrel.i-webserver.co.uk with local-bsmtp (Exim 4.44)
id 1Cy12s-0008UE-Ik
for XXXX@XXXX.CO.UK; Mon, 07 Feb 2005 05:02:46 +0000
Received: from [67.18.153.146] (helo=vulcan.cybexhost.com)
by kestrel.i-webserver.co.uk with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.44)
id 1Cy12s-0008UA-EV
for XXXX@XXXX.CO.UK; Mon, 07 Feb 2005 05:02:46 +0000
Received: from nobody by vulcan.cybexhost.com with local (Exim 4.43)
id 1Cy12p-0002kO-PQ
for XXXX@XXXX.CO.UK; Sun, 06 Feb 2005 23:02:43 -0600
To: XXXX@XXXX.CO.UK
Subject: User agreement has been changed [418757]
From: service@paypal.com
Reply-To: service@paypal.com
Errors-To: service@paypal.com
Date: 2005-02-06 23:02:43
Content-type: text/html; charset=iso-8859-1
Message-Id: <E1Cy12p-0002kO-PQ@vulcan.cybexhost.com>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vulcan.cybexhost.com
X-AntiAbuse: Original Domain - XXXX.CO.UK
X-AntiAbuse: Originator/Caller UID/GID - [99 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - vulcan.cybexhost.com
X-Source:
X-Source-Args: /usr/local/apache/bin/httpd -DSSL
X-Source-Dir: chuppasito.org:/public_html
X-Spam-Status: No, score=2.9 required=5.0 tests=FORGED_RCVD_HELO,HTML_30_40,
HTML_MESSAGE,INVALID_DATE,MIME_HEADER_CTYPE_ONLY,M IME_HTML_ONLY,
NORMAL_HTTP_TO_IP,NO_REAL_NAME,URIBL_SBL autolearn=no version=3.0.2
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on
kestrel.i-webserver.co.uk
X-Spam-Level: **

Nemesis · 07-02-2005, 11:20

Quote:

Return-path: <nobody@vulcan.cybexhost.com>
Envelope-to: nemesis@cableforum.co.uk
Delivery-date: Mon, 07 Feb 2005 05:01:15 +0000
Received: from cf by phoenix.cableforum.co.uk with local-bsmtp (Exim 4.44)
id 1Cy11M-0001os-Q3
for nemesis@cableforum.co.uk; Mon, 07 Feb 2005 05:01:15 +0000
Received: from [67.18.153.146] (helo=vulcan.cybexhost.com)
by phoenix.cableforum.co.uk with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.44)
id 1Cy11M-0001oo-Jn
for nemesis@cableforum.co.uk; Mon, 07 Feb 2005 05:01:12 +0000
Received: from nobody by vulcan.cybexhost.com with local (Exim 4.43)
id 1Cy11I-0001Jw-O8
for nemesis@cableforum.co.uk; Sun, 06 Feb 2005 23:01:08 -0600
To: nemesis@cableforum.co.uk
Subject: User agreement has been changed [807861]
From: service@paypal.com
Reply-To: service@paypal.com
Errors-To: service@paypal.com
Date: 2005-02-06 23:01:08
Content-type: text/html; charset=iso-8859-1
Message-Id: <E1Cy11I-0001Jw-O8@vulcan.cybexhost.com>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vulcan.cybexhost.com
X-AntiAbuse: Original Domain - cableforum.co.uk
X-AntiAbuse: Originator/Caller UID/GID - [99 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - vulcan.cybexhost.com
X-Source:
X-Source-Args: /usr/local/apache/bin/httpd -DSSL
X-Source-Dir: chuppasito.org:/public_html

__________________

Quote:

vulcan.cybexhost.com
67.18.153.146

Quote:

cybexhost.com

All shared servers are located in the esteemed ThePlanet Datacenter in Dallas, Texas. They are connected to a 10/100MBPS Switched VLAN that provides great connectivity and premium bandwidth.

Bandwidth is provided by UUNet, Sprint, Level3, Global Crossing, Verio, Time Warner, Allegiance Telecom, and AboveNET.

r1ch · 07-02-2005, 11:26

I also got the Paypal email this morning and it came via a SpamGourmet email address that I only ever used to register on this board as well. I don't think that anyone could have got the email address from anywhere other than the NTHW user database - the email address has never been published online and isn't public in my profile. I emailed the NTHW administrators this morning but I haven't heard anything yet.

Church Mouse · 07-02-2005, 11:27

I have also received one today and I do not have a PayPal account.

Church Mouse

Nemesis · 07-02-2005, 11:31

Quote:

Originally Posted by r1ch

I also got the Paypal email this morning and it came via a SpamGourmet email address that I only ever used to register on this board as well. I don't think that anyone could have got the email address from anywhere other than the NTHW user database - the email address has never been published online and isn't public in my profile. I emailed the NTHW administrators this morning but I haven't heard anything yet.

It's been received. We are looking into it ..

Barnicle · 07-02-2005, 11:34

Quote:

Originally Posted by Bifta

It came to an email address of mine I've only used to register here, which also never had a paypal account registered to it.

Ditto .. I,ve never had a paypal acct and havent logged on here for months. I looks like a phishing scam from somone who has got the ntlhellworld e-mail liost. Could it be the .COM list? of the .co.uk one ?

Barnicle

SMHarman · 07-02-2005, 11:35

Quote:

PayPal has recently made several important changes to our User Agreement and Privacy Policy. Please read the new User Agreement and Privacy Policy, because they contain important information about your PayPal account, your rights as a PayPal user, and the ways in which PayPal will use your personal information.

After you have reviewed the User Agreement and Privacy Policy below, please choose the "Yes" radio buttons and click Continue.

If you fail to read and agree to the new User Agreement within 120 days, PayPal will assume you do not accept PayPal's User Agreement and prefer not to do business with PayPal. In such circumstances, after providing additional notice, PayPal will limit your access to your PayPal account and will payout any remaining account balance under the terms of the old User Agreement.

Note: The User Agreement below will take immediate effect for all PayPal accounts signing up on or after February 7, 2003. PayPal accounts who signed up prior to February 7, 2003, will have 120 days after the date they next log in to their PayPal account to decide whether they agree to the new User Agreement. These accounts will continue to be governed by the old User Agreement until they agree to the new User Agreement, or until January 31, 2005, whichever comes first.

Thank you for your prompt attention to this matter.

Sincerely,
PayPal Account Review Team
------------------------------------------------------------------

Please do not reply to this e-mail. Mail sent to this address cannot be answered. All of the information necessary to restore your account access is available on the PayPal website. For assistance, log in to your PayPal account and choose the "Help" link in the header of any page.

------------------------------------------------------------------

PayPal Email ID PP18794

This mail...

r1ch · 07-02-2005, 11:38

Thanks Nemesis.

Bifta · 07-02-2005, 11:41

Quote:

Originally Posted by Barnicle

Ditto .. I,ve never had a paypal acct and havent logged on here for months. I looks like a phishing scam from somone who has got the ntlhellworld e-mail liost. Could it be the .COM list? of the .co.uk one ?

Barnicle

No idea, not a question I can answer for sure, I (and I'm sure others) want to find out though.

ian@huth · 07-02-2005, 11:41

I got this too this morning.

Noticed that the PayPal Email ID at the bottom of my email is different to that of SMH.

Gareth · 07-02-2005, 11:42

No Paypal account here either and it's sent a mail to my work account, although a few million people worldwide also know it.

I've kept a copy in case anybody needs anything from it.