Why do I get a US IP address on this?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Wed Apr 14, 2010 8:21 pm

Flag this message
Please update your account
Wednesday, April 14, 2010 3:15 PM
From PayPal Wed Apr 14 08:15:39 2010
X-Apparently-To: 98.136.167.160; Wed, 14 Apr 2010 08:16:49 -0700
Return-Path: <[email protected]>
X-YMailISG:
X-Originating-IP: [216.70.116.3]
Authentication-Results: mta1084.mail.mud.yahoo.com from=aodfcu.com; domainkeys=neutral (no sig); from=aodfcu.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ss90.shared.server-system.net) (216.70.116.3) by mta1084.mail.mud.yahoo.com with SMTP; Wed, 14 Apr 2010 08:16:40 -0700
Received: from User (dpost-042.dominionpost.com [69.43.42.42]) (authenticated bits=0) by ss90.shared.server-system.net (8.12.11.20060308/8.12.11) with ESMTP id o3EFFTwd022360; Wed, 14 Apr 2010 08:15:30 -0700
Message-Id: <[email protected]>
From:
"PayPal"<[email protected]>
Add sender to Contacts
Subject: Please update your account
Date: Wed, 14 Apr 2010 11:15:39 -0400
MIME-Version: 1.0
Content-Type: text/html; charset="_iso-2022-jp$ESC"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Length: 1939
Compact Headers

Dear valued PayPal member:

Identity protection matters. And PayPal works day and night to help keep your identity safe. That's why it has come to our attention that your PayPal account information needs to be updated as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website. If you could take 5-10 minutes out of your online experience and update your personal records you will not run into any future problems with the online service.

However, failure to update your records will result in account suspension.

Once you have updated your account records, your PayPal session will not be interrupted and will continue as normal.

To login to your PayPal account and update your records click on the following link:

https://www.paypal.com/cgi-bin/webscr?cmd=_login-run

Thank You for using PayPal!

The PayPal Team

Posted: Wed Apr 14, 2010 9:25 pm

Probably actually has bad header info &/or came from somewhere in the US

If you mouse over the

Quote:

https://www.paypal.com/cgi-bin/webscr?cmd=_login-run

in the email itself does status bar show something different?

The domain aodfcu.com in the Return-Path: is a legit domain of the AOD Federal Credit Union in Bynum, AL in the US

Report the email headers and all to https://www.aodfcu.com/home/contact/secure
If you can, report/copy/paste the underlying text version as it may contain more info.

Posted: Thu Apr 15, 2010 4:32 am

Yep. Shows this

Quote:

Reported Web Forgery!

This web page at 75-138-125-204.dhcp.ahvl.nc.charter.com has been reported as a web forgery and has been blocked based on your security preferences.

Web forgeries are designed to trick you into revealing personal or financial information by imitating sources you may trust.

Entering any information on this web page may result in identity theft or other fraud.

Why do I get a US IP address on this?	View next topic View previous topic