This spammer gets an old PayPal email list from somewhere (probably bought on eBay, who knows), and first, adds the victim's email address to their mailing list, even mailing them a "welcome" message.
Then for whatever reason, they try to get you to think you bought something from them from PayPal with a payment email from Paypal.
Sneaky, but not very smart.
Maybe a rogue spammer found beanbagbeads.com ezmlm mailing list software didn't require any verification, so they forged the "paypal payment" email through the ezmlm package, but I doubt it. It looks like beanbagbeads has its name all over it.
Click the jump to see the email…
The Welcome message….
Subject: WELCOME to mailinglist@beanbagbeads.com Hi! This is the ezmlm program. I'm managing themailinglist@beanbagbeads.com mailing list. I'm working for my owner, who can be reachedat mailinglist-owner@beanbagbeads.com. Acknowledgment: I have added the address xxxxx@xxxxxx.xxx to the mailinglist mailing list. Welcome to mailinglist@beanbagbeads.com! Please save this message so that you know the address you aresubscribed under, in case you later want to unsubscribe or change yoursubscription address. To unsubscribe, send a message to: <mailinglist-unsubscribe-payments=bluesgroup.com@beanbagbeads.com>
Here's the fake payment message... Your PayPal Payment [BeanBagBeads/Payments] *** THIS IS AN AUTORESPONDER. PLEASE DO NOT REPLY TO THIS MESSAGE *** Thank you for your PayPal payment. Your order is being processed and should ship shortly. Thank you for your business. DO NOT RESPOND to this email. If you need to contact us about your order, send us an email at: support@beanbagbeads.com. Thank You, BeanBagBeads.com