[ale] I'm sure it's a phishing attack, but can't see why?

[jc.lightner at comcast.net]

Nobody expects the France exposition!
😊

 

From: Ale <ale-bounces at ale.org> On Behalf Of Neal Rhodes via Ale
Sent: Thursday, March 13, 2025 5:35 PM
To: Atlanta Linux Enthusiasts <ale at ale.org>
Cc: neal at mnopltd.com
Subject: Re: [ale] I'm sure it's a phishing attack, but can't see why?

 

Hmmm. ok: Received: from mail-francecentralazrlh10232023.outbound.protection.outlook.com 

 

Not quite what I'd expect from Paypal.

On 2025-03-13 13:28, dj-Pfulio via Ale wrote

Always check the message header to see where the email originated.

 

On March 13, 2025 12:08:50 PM EDT, Neal Rhodes via Ale <ale at ale.org <mailto:ale at ale.org> > wrote:

I got yet another email about an alleged paypal dispute.    Which I deleted. 

But normally I do just hover over the hyperlinks to confirm they are bogus. 

And the last couple of these, I just can't see where it goes off the rails.   It just looks ok to me. 

https://www.paypal.com/us/resolutioncenter/PP-R-YSJ-566648816?v=1 <https://www.paypal.com/us/resolutioncenter/PP-R-YSJ-566648816?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000299&utm_unptid=93f1518f-001e-11f0-b526-c57aab365dc0&ppid=RT000299&cnac=US&rsta=en_US%28en-US%29&unptid=93f1518f-001e-11f0-b526-c57aab365dc0&calc=f695230a25ca0&unp_tpcid=Disputes-PPC001688&page=main%3Aemail%3ART000299&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.314.0&tenant_name=PAYPAL&xt=145585%2C150948%2C104038&link_ref=resolutioncenter_pp-r-ysj-566648816> &utm_source=unp&utm_medium=email&utm_campaign=RT000299&utm_unptid=93f1518f-001e-11f0-b526-c57aab365dc0&ppid=RT000299&cnac=US&rsta=en_US%28en-US%29&unptid=93f1518f-001e-11f0-b526-c57aab365dc0&calc=f695230a25ca0&unp_tpcid=Disputes-PPC001688&page=main%3Aemail%3ART000299&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.314.0&tenant_name=PAYPAL&xt=145585%2C150948%2C104038&link_ref=resolutioncenter_pp-r-ysj-566648816

What am I missing? 

 

_______________________________________________
Ale mailing list
Ale at ale.org <mailto:Ale at ale.org> 
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.ale.org/pipermail/ale/attachments/20250313/b94518d3/attachment.htm>