2 Likes
This is the real domain of PayPal , Can you send us the link here and the sender iP also please and if you can track the smtp provider put it here so we can contact the email service provider to suspend the sender ?
2 Likes
The sender email is obviously not PayPal.
1 Like
The link , they can spoof a mail sender easily using an email not even exist, he should put the sender iP and the smtp provider this time .
1 Like
I hovered over the “Secure Your Account” and hit right click then “copy link address” - Gave me the proposed link! It’s a rebrand.ly LINK! Must be disguised in some way. https : // rebrand . ly / xk8zsjl - The link in pure form without it automatically changing, and coming up as PayPal Header in the Original Post if you get what I mean. I don’t use PayPal.
Hovering over the link and hitting inspect element shows the same link!
Message source info per request:
It’s a VPN though, typical - Idiot!
2 Likes
Nah It’s not a VPN , it’s vps from Hetzner , usually they use Hetzner Port 25 to send Junk emails .
I’m gonna report the IP to Hetzner .
1 Like