***Caution***: Paypal Users

Originally Posted by Damien

I wonder they is a link between the paypal donate feature and the spam

I haven't got it...
__________________

...nor have I ever registered for e-mail notifications on any threads???

[Eradic8r@Work]

I have two accounts on here at home and at work and received e-mails to both e-mail addresses (one for each account).

I've checked with various other people at work with NTL broadband and on the company domain and nobody else has got this e-mail.

Also got other e-mail address on various domains some with associated paypal accounts and some without - none of these got this message.

Header Included

Return-Path: <nobody@vps.seeitout.com>
Received: from aamta01-winn.mailhost.ntl.com ([212.250.162.8])
		 by mta13-winn.mailhost.ntl.com with ESMTP
		 id <20050207045754.YONI11211.mta13-winn....ilhost.ntl.com>
		 for [E-MAIL REMOVED]Mon, 7 Feb 2005 04:57:54 +0000
Received: from vps.seeitout.com ([207.58.136.198])
		 by aamta01-winn.mailhost.ntl.com with ESMTP
		 id <20050207045754.OQLS15415.aamta01-win...s.seeitout.com>
		 for >; Mon, 7 Feb 2005 04:57:54 +0000
Received: from nobody by vps.seeitout.com with local (Exim 4.43)
id 1Cy0y7-000680-Ou
for [E-MAIL REMOVED]
Subject: User agreement has been changed [781380]
From: service@paypal.com
Reply-To: service@paypal.com
Errors-To: service@paypal.com
Date: 2005-02-06 23:57:51
Content-type: text/html; charset=iso-8859-1
Message-Id: <E1Cy0y7-000680-Ou@vps.seeitout.com>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vps.seeitout.com
X-AntiAbuse: Original Domain - ntlworld.com
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - vps.seeitout.com
X-Source: 
X-Source-Args: 
X-Source-Dir:

Edit : [EMAIL REMOVED] for my peace of mind and to stay away from more spam

Originally Posted by Damien

I wonder they is a link between the paypal donate feature and the spam

None whatsoever.

[AndrewJ]

This has just put me off from ever ordering through Ebay or ever using paypal in my life ever again, while that may be overreacting it is keeping my finances sorted and my mind calm, with things like this happening it could soon shove me into trouble financially.

Originally Posted by Eradic8r@Work

I have two accounts on here at home and at work and received e-mails to both e-mail addresses (one for each account).

I've checked with various other people at work with NTL broadband and on the company domain and nobody else has got this e-mail.

Also got other e-mail address on various domains some with associated paypal accounts and some without - none of these got this message.

Header Included

Return-Path: <nobody@vps.seeitout.com>
Received: from aamta01-winn.mailhost.ntl.com ([212.250.162.8])
		 by mta13-winn.mailhost.ntl.com with ESMTP
		 id <20050207045754.YONI11211.mta13-winn....ilhost.ntl.com>
		 for [E-MAIL REMOVED]Mon, 7 Feb 2005 04:57:54 +0000
Received: from vps.seeitout.com ([207.58.136.198])
		 by aamta01-winn.mailhost.ntl.com with ESMTP
		 id <20050207045754.OQLS15415.aamta01-win...s.seeitout.com>
		 for <[E-MAIL REMOVED]>; Mon, 7 Feb 2005 04:57:54 +0000
Received: from nobody by vps.seeitout.com with local (Exim 4.43)
id 1Cy0y7-000680-Ou
for [E-MAIL REMOVED]
Subject: User agreement has been changed [781380]
From: service@paypal.com
Reply-To: service@paypal.com
Errors-To: service@paypal.com
Date: 2005-02-06 23:57:51
Content-type: text/html; charset=iso-8859-1
Message-Id: <E1Cy0y7-000680-Ou@vps.seeitout.com>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vps.seeitout.com
X-AntiAbuse: Original Domain - ntlworld.com
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - vps.seeitout.com
X-Source: 
X-Source-Args: 
X-Source-Dir:

Edit : [EMAIL REMOVED] for my peace of mind and to stay away from more spam

I don't think you edited out your email addy properly

[Eradic8r@Work]

Think you must have just caught me in the second round of edits

Better now?

This is a mystery. Why target this forum?

[nostra]

got one here too first thing this morning

1. looked dodgy anyway
2. and as stated before the date was botched to 1970

me clamav on my mailserver spotted it as a phising attempt too

[Richard M]

Originally Posted by Damien

This is a mystery. Why target this forum?

Because we are a fairly high profile site with a large user base made up of the general population, not just techy people etc - people from all over the UK.

Originally Posted by Eradic8r@Work

Think you must have just caught me in the second round of edits

Better now?

yes

[AndrewJ]

I seriously feel for those who aint has lucky to have sites like us and get scammed this way, I mean some perhaps who have registered here ages back ask a question get a answer an leave, who perhaps gets this mail the people who do this should be made to give the victims there money back it sucks they get away with this.

[Richard M]

Originally Posted by AndrewJames

I seriously feel for those who aint has lucky to have sites like us and get scammed this way, I mean some perhaps who have registered here ages back ask a question get a answer an leave, who perhaps gets this mail the people who do this should be made to give the victims there money back it sucks they get away with this.

Oh don't you worry, as I explained to the guys earlier; whoever has done this will be hit with the full extent of the law or failing that, a large stick with a nail in it.

[Matth]

Me too, and I don't remember ever getting a paypal account... sent it to them, and spamcop.

The addresses seem to vary, but I bet it's all direct-route spam from zombie PC's

I've had a reply from spoof@paypal.com to confirm that is is not from them.I should imagine everyone has told them by now.

[Chimaera]

Well I've never had a Paypal account either and got an email too - in case anyone wants to know!