Read on Twitter
I wish there was some higher authority that could slap companies like @AskPayPal in the face with a chair, so they could finally fix their absolutely stupid email tracking/linking. It's 2020 and they still don't manage to use their main domain for links & even use fake text links
And the 
on the top is, that @AskPayPal and the rest of the support team do not or can not confirm whether http://epal.paypal-communication.com is an actually PayPal owned domain.
They send out all emails with these links and then can't even confirm whether that's a phishing link or not.
on the top is, that @AskPayPal and the rest of the support team do not or can not confirm whether http://epal.paypal-communication.com is an actually PayPal owned domain. They send out all emails with these links and then can't even confirm whether that's a phishing link or not.
Wait I made a typo in that obvious and not at all easy to misuse for phishing attack domain, it should be http://epl.paypal-communication.com
Their latest communication was about adding a phone number to your account so it's more "secure". They even made a short link, so it's easier to reference, yet the actual link the email, points to whoknowswhere. For a security information email that's just a big no-no!
Also regarding their "add a phone to your account", I would have done so a long time ago, but the process is broken somewhere... https://twitter.com/DarkCisum/status/1267842839821647875
The topic is not new, but it annoys me every time I get a new email with phishing-like infested links... https://twitter.com/DarkCisum/status/1047239504841588737
Just noticed, that one tweet from 2018 is "unavailable", but I did not delete that. It had a link to the PayPal forum, which then makes me wonder if PayPal reported the tweet... 
Like how the replaced the domain with "<removed>" on this forum thread: https://www.paypal-community.com/t5/PayPal-Basics/lt-removed-gt-is-a-scam/td-p/1563748
Like how the replaced the domain with "<removed>" on this forum thread: https://www.paypal-community.com/t5/PayPal-Basics/lt-removed-gt-is-a-scam/td-p/1563748
Looks like their @AskPayPal forum moderators, couldn't be bothered to clean all the mentions in this thread: https://www.paypal-community.com/t5/Access-and-security/xxxxx/td-p/1164823
I guess, if anyone has a LinkedIn account, they could contact the Chief Security Officer of PayPal, but who knows if they understand the problem or have any interest in fixing it. https://www.linkedin.com/in/mick-chandrani-19351b117
