OKPAY is scam (probably not)

[flower1024]

EDIT: it seems someone just want to discredit okpay

hi,

i just got a very interesting mail

i used opkay once but stopped it as they dont really offer any benefit for me. but i think its funny that this mail is sent from okpay support (ok its probably faked)

EDIT: i forgot to obfuscate my email

Code:

Return-path: <support@okpay.com>
Envelope-to: XXXXXXXX@k1024.de
Delivery-date: Wed, 11 Apr 2012 15:38:08 +0200
Received: from [69.194.161.228] (helo=okpay.com)
	by www158.your-server.de with smtp (Exim 4.74)
	(envelope-from <support@okpay.com>)
	id 1SHxkE-0006qy-Cd
	for XXXXXXXX@k1024.de; Wed, 11 Apr 2012 15:38:08 +0200
Message-ID: <8670EBBC.3527E3CC@okpay.com>
Date: Wed, 11 Apr 2012 20:17:56 +0700
Reply-To: "OKPAY" <support@okpay.com>
From: "OKPAY" <support@okpay.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.8.1.14) Gecko/20080421 Thunderbird/2.0.0.14
MIME-Version: 1.0
To: "AOL Users" <XXXXXX@k1024.de>
Subject: OKPAY is SCAM!
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: Clear (ClamAV 0.97.3/14770/Wed Apr 11 00:28:18 2012)
X-Spam-Score: 1.3 (+)
Delivered-To: XXXXXXXX@k1024.de

Hello,

I want to warn you that OKPay is scam payment processor.

They were fine while I was making small transfers, but as soon as my
balance reached 11000 USD, they blocked it.

And it's blocked since August last year.

Stay away from OKPAY!

[nimnul]

I got it too

[rjk]

So some unsolicited user sending you an email causes you to believe everything contained therein? BRB, need to send some more 419 emails

[flower1024]

So some unsolicited user sending you an email causes you to believe everything contained therein? BRB, need to send some more 419 emails

lol

the question is: where did they got my email from (ok thats not that hard): but how did they know i have a login there?

maybe its just a pissed employee

[gamer4156]

I got this as well. I am curious as to the "To: AOL users" part.

[rjk]

So some unsolicited user sending you an email causes you to believe everything contained therein? BRB, need to send some more 419 emails

lol

the question is: where did they got my email from (ok thats not that hard): but how did they know i have a login there?

maybe its just a pissed employee

Nope, 69.194.161.228 is a SolarVPS set up to look like an okpay mail server. Probably your email got guessed by the usual spamming programs, did you see that it was addresses to "AOL User"?

[flower1024]

So some unsolicited user sending you an email causes you to believe everything contained therein? BRB, need to send some more 419 emails

lol

the question is: where did they got my email from (ok thats not that hard): but how did they know i have a login there?

maybe its just a pissed employee

Nope, 69.194.161.228 is a SolarVPS set up to look like an okpay mail server. Probably your email got guessed by the usual spamming programs, did you see that it was addresses to "AOL User"?

ok thanks
i would be interested if someone got that mail and does not have an okpay account. this would prove it.

[gamer4156]

So some unsolicited user sending you an email causes you to believe everything contained therein? BRB, need to send some more 419 emails

lol

the question is: where did they got my email from (ok thats not that hard): but how did they know i have a login there?

maybe its just a pissed employee

Nope, 69.194.161.228 is a SolarVPS set up to look like an okpay mail server. Probably your email got guessed by the usual spamming programs, did you see that it was addresses to "AOL User"?

ok thanks
i would be interested if someone got that mail and does not have an okpay account. this would prove it.

I dont have one, I had never heard of it before this email.

[BITLISH]

This mail came to my mtgox email (okpay email is different).
It is possibly on mtgox leaked list.

[rjk]

Also it is possibly on mtgox leaked list.

Probably this. OKPAY deals in Bitcoins these days too.

[kangasbros]

I think the emails are from the mtgox leak - I got the email as well, and have never used OKPay and rarely any other services associated with bitcoin.

Someone must be very pissed because he goes through this kind of effort...

[barbarousrelic]

Has anyone received this email who was NOT on the mtgox leaked emails list?

[CrownCloud]

Has anyone received this email who was NOT on the mtgox leaked emails list?

ME ! I was not a user of MtGox (In other words, I was not signed up on MtGox) when the leak happened and still got the OKPay Is a Scam email :/ maby OkPay got leaked

[jwzguy]

I got it; my email was on the MtGox list; I've never used OKPAY.

Every time I get another scam/phishing email to this address it's just another reminder of why it's perfectly reasonable to not trust Mt.Gox with sensitive information like, say, a scan of your passport.

[Herodes]

Got it too. Never used OKPay, but my e-mail was on the compromized gox list.

Besides, if they're trying to discredit OKPay, there should've been some more details to back up their claims.

[mc_lovin]

got it too.. oh joy all we're on the bitcoin scam spam list :/

[phorensic]

Got it also.  I love the occasional spam from my leaked e-mail.  I never get anything as interesting from anything else.

[evoorhees]

Got it also, from support@okpay.com.

The email wording made it sound like someone who was pissed about the account being frozen, but it's very possible it was frozen for legitimate reasons. And definitely hacking their email server is not cool... so I'd reserve judgement either way in this case.

[rjk]

Got it also, from support@okpay.com.

The email wording made it sound like someone who was pissed about the account being frozen, but it's very possible it was frozen for legitimate reasons. And definitely hacking their email server is not cool... so I'd reserve judgement either way in this case.

Not hacked, just impersonating. If they have a good SPF record, most filters will catch it and delete it.

Code:

> okpay.com
Server:  google-public-dns-a.google.com
Address:  8.8.8.8

Non-authoritative answer:
okpay.com       text =

        "v=spf1 a:mail.regall.net mx:mail.regall.net +all"
>

^That tells mail server to ignore email purporting to be from okpay.com, UNLESS it comes from "mail.regall.net". However, many servers ignore this option, since it was tacked on to the protocol after SMTP was initially created.

[DeathAndTaxes]

The weal thing is the email comes off as just trollish.

Sending something which looked like it came from a govt agency regarding freezing accounts owned by OKPAY and money laundering charges would have done more damage.

Lucky for OKPAY the idiot who wrote it comes off as less legit than a nigerian scammer.