How to notify PayPal about phishing email from <removed> ?

ipegasus
Contributor
Contributor

Hi I got the email below in Spanish, and I would like to confirm if it really comes from paypal? 

 

The headers contain:  spf=fail (google.com: domain of does not designate 104.47.66.45 as permitted sender)

 

Is it possible to let PayPal know about the issue?

 

Thank you

 

Email Data

<removed>

 

https://epl.paypal-communication.com/T/v60000017c0de2296d9ea[Removed. Phone #s not permitted]d-c3cd4231138b?__dU__=v0oQlZ2XmHtXgxjjiWvqAt6oUbloqyA_uK

 

Screen Shot 2021-09-22 at 11.56.12 PM.png

Original

 

Delivered-To: ...
Received: by 2002:a0[Removed. Phone #s not permitted]0:0 with SMTP id y20csp419626iod;
        Wed, 22 Sep 2021 15:03:47 -0700 (PDT)
X-Google-Smtp-Source: ABdhPJx6BdNeIvP1ZNdwvU2vrF0Z1zuuU80CUvVTT+IrjcuuqOJjfJxM/TBVRU57qnJkieWMrRlr
X-Received: by 2002:a17:902:d2c9:[Removed. Phone #s not permitted]1.1632348224864;
        Wed, 22 Sep 2021 15:03:44 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1632348224; cv=none;
        d=google.com; s=arc-20160816;
        b=ptH8uLsrD3yvAPTd5Y5NzvE8Prl2tghDMA/ZyL6PXpDStY6QuwP7gL0/WLi1ztlUe5
         xA1bqMrz1bV/VOe93axq2/tSRjgnEKCLgyeVyv3Frpk2/Ypdp29kQAPW5EVYLxk40E3p
         qlU[Removed. Phone #s not permitted]Bk
         MgkkNgaiYD316wb7ovaXR5Fax/lezAQKyIC+vMwmI+sYq+G0+F9teNwBjl84pHzWPCfa
         LvjuDd6h0DKcvUWZVe6mDKQq5c4cwqeU/Rii7hnPaJHMzgxQ80j7N0/Jxona4xCCp/qY
         oH/A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=date:to:from:subject:reply-to:feedback-id:mime-version:message-id
         :list-unsubscribe:dkim-signature:resent-from;
        bh=HEscFtuKze9JXHBnnkCwVTkH2vwgEKNpJ8AUXeKZX1c=;
        b=siUNtvAZEqy4MUEv1SLTQOwCY4oj9C/31CcngBjpW5X+8TYf4onCwU5dhCCHmvGPuE
         rHRK+NyK2IfIMo++k6oH+K+MKF+fUyFCwpHRvI46dznnCfmEkaV9PgC7/DYk07qGVM4F
         k0SwPtBxWT0GOEvKW5P3UbV8eLvTNdHIAG2N877puspd6JoIpRQ8twCIxpkZPH9Hf+mD
         5zM3qtQX/OQfNDBCUBq3tBnJ8L6fkEyvkQmaVTSSvIVE+fn5zt+y/a4bbdvN2luLRXUt
         UuLb6G1dfmf02M4AzJYrn44yyIbEqHRNm9WS8Jc7Mskru2t8tlfZsKQs7N017Tzyq2iA
         e1xg==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@ header.s=pp-epsilon1 header.b=ZHLCQoDh;
       spf=fail (google.com: domain of  does not designate 104.47.66.45 as permitted sender) smtp.mailfrom=;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=paypal.com
Return-Path: <>
Received: from NAM12-MW2-obe.outbound.protection.outlook.com (mail-mw2nam12lp2045.outbound.protection.outlook.com. [104.47.66.45])
        by mx.google.com with ESMTPS id a65si2570747pfb.280.2021.09.22.15.03.39
        for <...>
        (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
        Wed, 22 Sep 2021 15:03:44 -0700 (PDT)
Received-SPF: fail (google.com: domain of  does not designate 104.47.66.45 as permitted sender) client-ip=104.47.66.45;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@ header.s=pp-epsilon1 header.b=ZHLCQoDh;
       spf=fail (google.com: domain of  does not designate 104.47.66.45 as permitted sender) smtp.mailfrom=;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=paypal.com
Received: from BLAPR19MB4497.namprd19.prod.outlook.co[Removed. Phone #s not permitted]287::13) by BLAPR19MB4418.namprd19.prod.outlook.co[Removed. Phone #s not permitted]299::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AE[Removed. Phone #s not permitted]4544.14; Wed, 22 Sep 20[Removed. Phone #s not permitted]
Resent-From: <...@>
Received: from BLAPR19MB4497.namprd19.prod.outlook.com ([::1]) by BLAPR19MB4497.namprd19.prod.outlook.com ([fe[Removed. Phone #s not permitted]erver id 15.20.4544.013; Wed, 22 Sep 20[Removed. Phone #s not permitted]
Authentication-Results: spf=pass (sender IP is 142.54.244.124) smtp.mailfrom=; hotmail.com; dkim=pass (signature was verified) header.d=;hotmail.com; dmarc=pass action=none header.from=;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of  designates 142.54.244.124 as permitted sender) receiver=protection.outlook.com; client-ip=142.54.244.124; helo=mta124b.pmx1.epsl1.com;
X-IncomingTopHeaderMarker: OriginalChecksum:77F1[Removed. Phone #s not permitted]1487FF23A7;UpperCasedChecksum:D761E0B377CE5295EF12A00B7CBD845BC34A91B6AA4A69CF35371BD35800A3E7;SizeAsReceived:1566;Count:14
Return-Path: 
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=; s=pp-epsilon1; t=1632320498; bh=HEscFtuKze9JXHBnnkCwVTkH2vwgEKNpJ8AUXeKZX1c=; h=MIME-Version:Subject:From:To:Date:Content-Type; b=ZHLCQoDhY+yJogt43vSaC2sEHEHSa625sFxEAi8KfnqCMS6LB0JP2xp33Xppz/OrR
	 vKLt62ErTj+KZwSka6Zh6NJ5YSdat0aTpkTaY7bUo3xFTG1aup61QfOppaVnQET5xh
	 VJpWOhkFUbjKplIFT8OjZroMCh7/I6pmzfQt0QxSZ/xUMJrANDxVkFLbfqvITY+feY
	 xFjkHEjTU8RzKmMmqka02sbjWyBMD3ZVek34IwTd8DYXCskzM30z48Pv+HuWPjGFNC
	 KGyFnYdLNQmLdS3YGBzEalMvLQ3AGv0oukWwmUXCFkAGKfbxFuiFTi1048oZttWVx1
	 67lhfyjHmU+oQ==
List-Unsubscribe: <mailto:paypal-HP2v60000017c0de2296d9ea[Removed. Phone #s not permitted]cribe>
Message-ID: <HP2v60000017c0de2296d9ea8f6f4bbe5c7c0029@>
MIME-Version: 1.0
Feedback-ID: 17ca90b0-98c9-4ba8-9a7d-c3cd4231138b:10d3d6c7-e3a8-42c5-ab0b-0bb604ed7b0b:email:epslh1
X-NSS: 17ca90b0-98c9-4ba8-9a7d-c3cd4231138b
Reply-To: "noreply@" <noreply-HP2v60000017c0de2296d9ea8f6f4bbe5c7c0029@>
Subject: Reclama tu premio de US$5 hoy
From: PayPal 
To: ...
Date: Wed, 22 Sep 2021 14:21:38 +0000
Content-Type: multipart/alternative; boundary="-=Part.429164.2dd57538b26cd091.17c0de22a20.292158b71778a782=-"
X-IncomingHeaderCount: 14
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime[Removed. Phone #s not permitted]38 PM
X-MS-Office365-Filtering-Correlation-Id: 35e63efe-d9ce-4f46-7e67-08d97e14d3d1
X-MS-TrafficTypeDiagnostic: MN2PR19MB3613:|BLAPR19MB4418:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 142.54.244.124
X-SID-PRA: 
X-SID-Result: PASS
X-Microsoft-Antispam: BCL:1;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Sep 20[Removed. Phone #s not permitted](UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 35e63efe-d9ce-4f46-7e67-08d97e14d3d1
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM04FT044.eop-NAM04.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR19MB3613
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.7025627
X-MS-Exchange-Processed-By-BccFoldering: 15.20.4544.013
X-MS-Exchange-Transport-Forked: True
X-MS-Exchange-Inbox-Rules-Loop: ...@
X-OriginatorOrg: sct-15-20-3174-20-msonline-outlook-8efcd.templateTenant

 

Login to Me Too
0 REPLIES 0

Haven't Found your Answer?

It happens. Hit the "Login to Ask the community" button to create a question for the PayPal community.