Since someone figured out a PayPal spam a few months back, I see it is still showing up in my email and I'm sure a few others.
It reads similar to:
Dear PayPal,
We recently noticed one or more attempts to log in to your PayPal account
from a foreign IP address.
If you recently accessed your account while traveling, the unusual log in
attempts may have been initiated by you. However, if you did not initiate
the log ins, please visit PayPal as soon as possible to verify your
identity:
https://www.paypal.com/us/cgi-bin/webscr? cmd=_login-run
Verify your identity is a security measure that will ensure that you are
the only person with access to the account.
Thanks for your patience as we work together to protect your account.
Sincerely,
PayPal
------------------------------------------------ ----------------
PROTECT YOUR PASSWORD
NEVER give your password to anyone and ONLY log in at
https://www.paypal.com/. Protect yourself against fraudulent websites by
opening a new web browser (e.g. Internet Explorer or Netscape) and typing
in the PayPal URL every time you log in to your account.
----------------------------------------------------------------
Please do not reply to this e-mail. Mail sent to this address cannot be
answered. For assistance, log in to your PayPal account and choose the
"Help" link in the header of any page.
PayPal Email ID PP321
It reads similar to:
Dear PayPal,
We recently noticed one or more attempts to log in to your PayPal account
from a foreign IP address.
If you recently accessed your account while traveling, the unusual log in
attempts may have been initiated by you. However, if you did not initiate
the log ins, please visit PayPal as soon as possible to verify your
identity:
https://www.paypal.com/us/cgi-bin/webscr? cmd=_login-run
Verify your identity is a security measure that will ensure that you are
the only person with access to the account.
Thanks for your patience as we work together to protect your account.
Sincerely,
PayPal
------------------------------------------------ ----------------
PROTECT YOUR PASSWORD
NEVER give your password to anyone and ONLY log in at
https://www.paypal.com/. Protect yourself against fraudulent websites by
opening a new web browser (e.g. Internet Explorer or Netscape) and typing
in the PayPal URL every time you log in to your account.
----------------------------------------------------------------
Please do not reply to this e-mail. Mail sent to this address cannot be
answered. For assistance, log in to your PayPal account and choose the
"Help" link in the header of any page.
PayPal Email ID PP321
**********
If you click through on the link, you will find it goes to a page which looks like Paypal, but only uses an IP address. While the spam is operating, your browser window will show an address similar to:
http://86.106.75.1/.cgi-bin/cgi-bin/webscrcmd_login.php
Note that it no longer says:
https://www.paypal.com/us/cgi-bin/webscr? cmd=_login-run
http://86.106.75.1/.cgi-bin/cgi-bin/webscrcmd_login.php
Note that it no longer says:
https://www.paypal.com/us/cgi-bin/webscr? cmd=_login-run