@killyourfm "ready to get coding at the bottom" at the bottom is extremely interesting.
They are probably exploiting some invite developer system. The same way scammers were using Google calendar invites and google drive file share to send spam and scam messages.
And that's why it would come from a paypal official mail server.