I figured out the scam and wrote it up here: https://www.reddit.com/r/Scams/comments/1j9u5wp/legit_signed_email_from_paypal_but_833_6662587_is/?
Basically, they set up their merchant account with a merchant name that is literally, "If you do not recognize the seller, please contact.." hoping you don't notice all the other wrong details. But this does get them a legit email with a digital signature signed by the real paypal.com, which they forward to you.
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.