Alert: PayPal phish

Influx of PayPal phishes this morning, 30 so far, since 09:53.

So far, whilst the subjects have been slightly varied, the href have all remained the same, with all leading to;

49paypal.com/73ecc8e60844c7b6e67fa3897b6f134d/01.php

The domain has been registered through Internet.BS, and lives at;

IP: 63.90.228.38
IP PTR: Resolution failed
ASN: 701 63.80.0.0/12 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business

Domains registration records:

Domain 49paypal.com

Date Registered: 2013-2-1
Date Modified: 2013-2-6
Expiry Date: 2014-2-1

DNS1: ns-canada.topdns.com
DNS2: ns-uk.topdns.com
DNS3: ns-usa.topdns.com

Registrant
ppal
Weed Paradise
Email:paradise007@mailtb.ru
8483 court av.
34448 Hannase
United States
Tel: +1.3527955744

Administrative Contact
ppal
Weed Paradise
Email:paradise007@mailtb.ru
8483 court av.
34448 Hannase
United States
Tel: +1.3527955744

Technical Contact
ppal
Weed Paradise
Email:paradise007@mailtb.ru
8483 court av.
34448 Hannase
United States
Tel: +1.3527955744

18 unique subjects seen so far;

Account Review Department
ACCOUNT SUSPENSION
Confirm your personal information
Notification of Limited Account Access
Notification of Restricted Account Access
Online Access Suspended
PayPal UK - Security Center !
Status - Account Limited
This Account Could Be Suspended
Update required for your account
Update Your Billing Records
Urgent Action Required
Verify your Account information
We've temporarily limited your access
We've temporarily limited your account
Your account has been restricted
YOUR ACCOUNT HAS BEEN TEMPORARILY LIMITED!
Your PayPal account is restricted - take action now

Headers for the emails:

Exported by: Outlook Export v0.1.11


Return-Path: <orthodoxiesi3@[REMOVED]>
Delivered-To: hnicdlsupport@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 8.808
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.808 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RDNS_NONE=0.793, SPF_SOFTFAIL=0.665,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from [5.52.179.105] (unknown [5.52.179.105])
    by [REMOVED] (Postfix) with ESMTP id 528F16286D2
    for <hnicdlsupport@[REMOVED]>; Thu, 7 Feb 2013 09:55:00 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 13:25:01 +0330
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 13:25:01 +0330
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 13:25:01 +0330
Message-Id: <2893641263.1165@[REMOVED]>
Subject: [SPAM] Account Review Department
X-MaxCode-Template: email-wax-payment-notification
From: "abuse@65paypal.co.uk" <abuse@65paypal.co.uk>
To: <hnicdlsupport@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__wvjftsn_88_50_93"


Return-Path: <congregationalf410@[REMOVED]>
Delivered-To: tuhq@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 13.333
X-Spam-Level: *************
X-Spam-Status: Yes, score=13.333 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449,
    RCVD_IN_SORBS_WEB=0.77, SPF_SOFTFAIL=0.665,
    TVD_PH_SUBJ_ACCOUNTS_POST=3.099, T_DKIM_INVALID=0.01,
    URIBL_RHS_DOB=1.514] autolearn=spam
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from cbp-ichi.st.wakwak.ne.jp (cbp-ichi.st.wakwak.ne.jp [61.115.75.24])
    by [REMOVED] (Postfix) with ESMTP id D38E83598385
    for <tuhq@[REMOVED]>; Thu, 7 Feb 2013 09:54:07 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 18:54:10 +0900
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 18:54:10 +0900
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 18:54:10 +0900
Message-Id: <8236632891.0265@[REMOVED]>
Subject: [SPAM] Notification of Limited Account Access
X-MaxCode-Template: email-wax-payment-notification
From: "abuse@65paypal.co.uk" <abuse@65paypal.co.uk>
To: <tuhq@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__sjtlugwuf_59_72_53"


Return-Path: <muchb@[REMOVED]>
Delivered-To: ceonn@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 13.356
X-Spam-Level: *************
X-Spam-Status: Yes, score=13.356 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449, RDNS_NONE=0.793,
    SPF_SOFTFAIL=0.665, TVD_PH_SUBJ_ACCOUNTS_POST=3.099,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=spam
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from [80.83.25.60] (unknown [80.83.25.60])
    by [REMOVED] (Postfix) with ESMTP id 510B46286EE
    for <ceonn@[REMOVED]>; Thu, 7 Feb 2013 09:55:02 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 11:54:58 +0200
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 11:54:58 +0200
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 11:54:58 +0200
Message-Id: <3430497850.2975@[REMOVED]>
Subject: [SPAM] Update required for your account
X-MaxCode-Template: email-wax-payment-notification
From: "abuse@limited-paypal.co.uk" <abuse@limited-paypal.co.uk>
To: <ceonn@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__azpxmngbif_21_99_80"


Return-Path: <adrenalinepj7@thy.com>
Delivered-To: aldybrothersfan@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 7.35
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.35 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514]
    autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from giant.trada.co.id (mail.trada.co.id [203.77.248.187])
    by [REMOVED] (Postfix) with ESMTP id 4043B35990CA
    for <aldybrothersfan@[REMOVED]>; Thu, 7 Feb 2013 10:06:08 +0000 (GMT)
Received: (qmail 16723 invoked by uid 89); 7 Feb 2013 09:40:41 -0000
Received: by simscan 1.3.1 ppid: 15069, pid: 16701, t: 0.2991s
scanners:none
Received: from unknown (HELO ln-static-202-137-28-156.link.net.id) (202.137.28.156)
by giant.trada.co.id with SMTP; 7 Feb 2013 09:40:40 -0000
Delivery-date: Thu, 7 Feb 2013 17:54:32 +0800
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 17:54:32 +0800
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 17:54:32 +0800
Message-Id: <2501943548.5187@[REMOVED]>
Subject: [SPAM] Confirm your personal information
X-MaxCode-Template: email-wax-payment-notification
From: "accounts@security82paypal.co.uk" <accounts@security82paypal.co.uk>
To: <aldybrothersfan@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__zjdssvktl_93_23_96"


Return-Path: <radicalsj8@[REMOVED]>
Delivered-To: serices@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 10.659
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.659 tagged_above=-9999 required=1.3
    tests=[BAYES_00=-1.9, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    FSL_HELO_NON_FQDN_1=0.001, HELO_NO_DOMAIN=0.001, HTML_MESSAGE=0.001,
    MIME_HEADER_CTYPE_ONLY=0.717, RAZOR2_CF_RANGE_51_100=0.5,
    RAZOR2_CF_RANGE_E8_51_100=1.886, RAZOR2_CHECK=0.922,
    RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_SORBS_DUL=0.001, RDNS_NONE=0.793,
    SPF_SOFTFAIL=0.665, TVD_PH_SUBJ_ACCOUNTS_POST=3.099,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from alicegate (unknown [151.52.235.228])
    by [REMOVED] (Postfix) with ESMTP id 4879335990F2
    for <serices@[REMOVED]>; Thu, 7 Feb 2013 09:53:44 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 10:53:47 +0100
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 10:53:47 +0100
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 10:53:47 +0100
Message-Id: <6408410900.3490@[REMOVED]>
Subject: [SPAM] Notification of Restricted Account Access
X-MaxCode-Template: email-wax-payment-notification
From: "alert@48-paypal.co.uk" <alert@48-paypal.co.uk>
To: <serices@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__vpid_50_43_99"


Return-Path: <coheres9@[REMOVED]>
Delivered-To: adb@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 11.763
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.763 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449, RDNS_NONE=0.793,
    SPF_SOFTFAIL=0.665, SUBJ_ALL_CAPS=1.506, T_DKIM_INVALID=0.01,
    URIBL_RHS_DOB=1.514] autolearn=spam
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from [80.83.25.60] (unknown [80.83.25.60])
    by [REMOVED] (Postfix) with ESMTP id C49703599023
    for <adb@[REMOVED]>; Thu, 7 Feb 2013 09:55:16 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 11:55:11 +0200
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 11:55:11 +0200
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 11:55:11 +0200
Message-Id: <7503645902.6099@[REMOVED]>
Subject: [SPAM] ACCOUNT SUSPENSION
X-MaxCode-Template: email-wax-payment-notification
From: "alert@center-paypal.com" <alert@center-paypal.com>
To: <adb@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__vduq_20_55_91"


Return-Path: <cumin1@[REMOVED]>
Delivered-To: zqsjpa@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 11.74
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.74 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449,
    RCVD_IN_SORBS_WEB=0.77, SPF_SOFTFAIL=0.665, SUBJ_ALL_CAPS=1.506,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=spam
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from host87-196-static.225-95-b.business.telecomitalia.it (host87-196-static.225-95-b.business.telecomitalia.it [95.225.196.87])
    by [REMOVED] (Postfix) with ESMTP id 4F2883598425
    for <zqsjpa@[REMOVED]>; Thu, 7 Feb 2013 09:54:11 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 10:54:13 +0100
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 10:54:13 +0100
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 10:54:13 +0100
Message-Id: <5328868757.0151@[REMOVED]>
Subject: [SPAM] YOUR ACCOUNT HAS BEEN TEMPORARILY LIMITED!
X-MaxCode-Template: email-wax-payment-notification
From: "alert@id83-paypal.co.uk" <alert@id83-paypal.co.uk>
To: <zqsjpa@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__xhfxqi_73_24_85"


Return-Path: <mycenaet4@[REMOVED]>
Delivered-To: 508xav@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 10.234
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.234 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449,
    RCVD_IN_SORBS_WEB=0.77, SPF_SOFTFAIL=0.665, T_DKIM_INVALID=0.01,
    URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from host87-196-static.225-95-b.business.telecomitalia.it (host87-196-static.225-95-b.business.telecomitalia.it [95.225.196.87])
    by [REMOVED] (Postfix) with ESMTP id 885333598146
    for <508xav@[REMOVED]>; Thu, 7 Feb 2013 09:54:53 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 10:54:56 +0100
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 10:54:56 +0100
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 10:54:56 +0100
Message-Id: <5881723571.6844@[REMOVED]>
Subject: [SPAM] We've temporarily limited your access
X-MaxCode-Template: email-wax-payment-notification
From: "alert@services-paypal.com" <alert@services-paypal.com>
To: <508xav@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__ijmr_03_71_02"


Return-Path: <lab@[REMOVED]>
Delivered-To: es@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 8.166
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.166 tagged_above=-9999 required=1.3
    tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, FSL_HELO_NON_FQDN_1=0.001,
    HELO_NO_DOMAIN=0.001, HTML_MESSAGE=0.001,
    MIME_HEADER_CTYPE_ONLY=0.717, RAZOR2_CF_RANGE_51_100=0.5,
    RAZOR2_CF_RANGE_E8_51_100=1.886, RAZOR2_CHECK=0.922,
    RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_SORBS_DUL=0.001, RDNS_NONE=0.793,
    SPF_SOFTFAIL=0.665, SUBJ_ALL_CAPS=1.506, T_DKIM_INVALID=0.01,
    URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from alicegate (unknown [151.52.235.228])
    by [REMOVED] (Postfix) with ESMTP id BCB233599108
    for <es@[REMOVED]>; Thu, 7 Feb 2013 09:53:27 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 10:53:27 +0100
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 10:53:27 +0100
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 10:53:27 +0100
Message-Id: <5107393477.6716@[REMOVED]>
Subject: [SPAM] ACCOUNT SUSPENSION
X-MaxCode-Template: email-wax-payment-notification
From: "alert@uk-paypal.com" <alert@uk-paypal.com>
To: <es@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__qggttvks_50_57_85"


Return-Path: <websites@thy.com>
Delivered-To: hnicdlsupport@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 9.743
X-Spam-Level: *********
X-Spam-Status: Yes, score=9.743 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, TVD_PH_BODY_ACCOUNTS_PRE=2.393,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from giant.trada.co.id (mail.trada.co.id [203.77.248.187])
    by [REMOVED] (Postfix) with ESMTP id 3E58E6286F6
    for <hnicdlsupport@[REMOVED]>; Thu, 7 Feb 2013 10:36:31 +0000 (GMT)
Received: (qmail 17472 invoked by uid 89); 7 Feb 2013 09:40:53 -0000
Received: by simscan 1.3.1 ppid: 15069, pid: 17465, t: 0.1497s
scanners:none
Received: from unknown (HELO ln-static-202-137-28-156.link.net.id) (202.137.28.156)
by giant.trada.co.id with SMTP; 7 Feb 2013 09:40:53 -0000
Delivery-date: Thu, 7 Feb 2013 17:54:44 +0800
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 17:54:44 +0800
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 17:54:44 +0800
Message-Id: <0800941965.7595@[REMOVED]>
Subject: [SPAM] This Account Could Be Suspended
X-MaxCode-Template: email-wax-payment-notification
From: "info@limited62paypal.co.uk" <info@limited62paypal.co.uk>
To: <hnicdlsupport@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__ufmktu_33_52_56"


Return-Path: <ramiro601@[REMOVED]>
Delivered-To: services@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 9.953
X-Spam-Level: *********
X-Spam-Status: Yes, score=9.953 tagged_above=-9999 required=1.3
    tests=[BAYES_00=-1.9, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    FSL_HELO_NON_FQDN_1=0.001, HELO_NO_DOMAIN=0.001, HTML_MESSAGE=0.001,
    MIME_HEADER_CTYPE_ONLY=0.717, RAZOR2_CF_RANGE_51_100=0.5,
    RAZOR2_CF_RANGE_E8_51_100=1.886, RAZOR2_CHECK=0.922,
    RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_SORBS_DUL=0.001, RDNS_NONE=0.793,
    SPF_SOFTFAIL=0.665, TVD_PH_BODY_ACCOUNTS_PRE=2.393,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from alicegate (unknown [151.52.235.228])
    by [REMOVED] (Postfix) with ESMTP id F20EA35990F9
    for <services@[REMOVED]>; Thu, 7 Feb 2013 09:53:37 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 10:53:39 +0100
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 10:53:39 +0100
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 10:53:39 +0100
Message-Id: <4369869870.5009@[REMOVED]>
Subject: [SPAM] This Account Could Be Suspended
X-MaxCode-Template: email-wax-payment-notification
From: "info@security82-paypal.co.uk" <info@security82-paypal.co.uk>
To: <services@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__snsi_97_13_14"


Return-Path: <symbolicsphcq@[REMOVED]>
Delivered-To: hxg@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 11.948
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.948 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449,
    RCVD_IN_SORBS_WEB=0.77, RDNS_DYNAMIC=0.982, SPF_HELO_SOFTFAIL=0.732,
    SPF_SOFTFAIL=0.665, T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514]
    autolearn=spam
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from vodafone.it (net-188-219-95-50.cust.dsl.vodafone.it [188.219.95.50])
    by [REMOVED] (Postfix) with ESMTP id C68933598146
    for <hxg@[REMOVED]>; Thu, 7 Feb 2013 09:59:28 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 10:59:28 +0100
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 10:59:28 +0100
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 10:59:28 +0100
Message-Id: <2610728011.3395@[REMOVED]>
Subject: [SPAM] Confirm your personal information
X-MaxCode-Template: email-wax-payment-notification
From: "info@security82-paypal.co.uk" <info@security82-paypal.co.uk>
To: <hxg@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__qqvahj_99_06_09"


Return-Path: <premieres9@[REMOVED]>
Delivered-To: jane@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 11.027
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.027 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449,
    RCVD_IN_SORBS_WEB=0.77, RDNS_NONE=0.793, SPF_SOFTFAIL=0.665,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=spam
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from [218.188.145.20] (unknown [218.188.145.20])
    by [REMOVED] (Postfix) with ESMTP id C4D9835990D7
    for <jane@[REMOVED]>; Thu, 7 Feb 2013 09:59:43 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 17:59:44 +0800
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 17:59:44 +0800
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 17:59:44 +0800
Message-Id: <4828749004.5261@[REMOVED]>
Subject: [SPAM] Update Your Billing Records
X-MaxCode-Template: email-wax-payment-notification
From: "limited@3849paypal.co.uk" <limited@3849paypal.co.uk>
To: <jane@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__sctt_52_50_36"


Return-Path: <unmancn9@thy.com>
Delivered-To: o@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 9.649
X-Spam-Level: *********
X-Spam-Status: Yes, score=9.649 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RDNS_NONE=0.793, SUBJ_ALL_CAPS=1.506,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from giant.trada.co.id (unknown [203.77.248.187])
    by [REMOVED] (Postfix) with ESMTP id A07D035990D4
    for <o@[REMOVED]>; Thu, 7 Feb 2013 09:56:53 +0000 (GMT)
Received: (qmail 15883 invoked by uid 89); 7 Feb 2013 09:40:29 -0000
Received: by simscan 1.3.1 ppid: 15069, pid: 15842, t: 0.3892s
scanners:none
Received: from unknown (HELO ln-static-202-137-28-156.link.net.id) (202.137.28.156)
by giant.trada.co.id with SMTP; 7 Feb 2013 09:40:29 -0000
Delivery-date: Thu, 7 Feb 2013 17:54:20 +0800
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 17:54:20 +0800
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 17:54:20 +0800
Message-Id: <0208427548.5565@[REMOVED]>
Subject: [SPAM] YOUR ACCOUNT HAS BEEN TEMPORARILY LIMITED!
X-MaxCode-Template: email-wax-payment-notification
From: "limited@review-paypal.co.uk" <limited@review-paypal.co.uk>
To: <o@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__ojmcrgaoa_28_31_24"


Return-Path: <beautieshi@[REMOVED]>
Delivered-To: ceon@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 13.356
X-Spam-Level: *************
X-Spam-Status: Yes, score=13.356 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449, RDNS_NONE=0.793,
    SPF_SOFTFAIL=0.665, TVD_PH_SUBJ_ACCOUNTS_POST=3.099,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=spam
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from [80.83.25.60] (unknown [80.83.25.60])
    by [REMOVED] (Postfix) with ESMTP id 27D1035990F9
    for <ceon@[REMOVED]>; Thu, 7 Feb 2013 09:54:01 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 11:53:56 +0200
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 11:53:56 +0200
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 11:53:56 +0200
Message-Id: <3668400696.9923@[REMOVED]>
Subject: [SPAM] Update required for your account
X-MaxCode-Template: email-wax-payment-notification
From: "secure32@2013paypal.co.uk" <secure32@2013paypal.co.uk>
To: <ceon@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__alyczwouzy_43_01_83"


Return-Path: <loyallerp2@[REMOVED]>
Delivered-To: ceo@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 12.874
X-Spam-Level: ************
X-Spam-Status: Yes, score=12.874 tagged_above=-9999 required=1.3
    tests=[BAYES_00=-1.9, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    FH_HELO_EQ_D_D_D_D=3.177, HELO_DYNAMIC_IPADDR=1.951,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449, RDNS_DYNAMIC=0.982,
    SPF_SOFTFAIL=0.665, T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514]
    autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from bzq-79-180-6-143.red.bezeqint.net (bzq-79-180-6-143.red.bezeqint.net [79.180.6.143])
    by [REMOVED] (Postfix) with ESMTP id C900B35990E5
    for <ceo@[REMOVED]>; Thu, 7 Feb 2013 09:53:05 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 11:53:03 +0200
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 11:53:03 +0200
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 11:53:03 +0200
Message-Id: <2982770319.1372@[REMOVED]>
Subject: [SPAM] Status - Account Limited
X-MaxCode-Template: email-wax-payment-notification
From: "security@paypaI.co.uk" <security@paypaI.co.uk>
To: <ceo@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__sjcrqezc_01_94_27"


Return-Path: <puttersg5@[REMOVED]>
Delivered-To: o@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 8.808
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.808 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RDNS_NONE=0.793, SPF_SOFTFAIL=0.665,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from [5.52.179.105] (unknown [5.52.179.105])
    by [REMOVED] (Postfix) with ESMTP id E13363598E3D
    for <o@[REMOVED]>; Thu, 7 Feb 2013 09:54:36 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 13:24:37 +0330
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 13:24:37 +0330
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 13:24:37 +0330
Message-Id: <7714129360.7576@[REMOVED]>
Subject: [SPAM] PayPal UK - Security Center !
X-MaxCode-Template: email-wax-payment-notification
From: "service@37-paypal.co.uk" <service@37-paypal.co.uk>
To: <o@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__syxvfineut_33_13_02"


Return-Path: <trumbullsrv2@[REMOVED]>
Delivered-To: bgrmtv@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 8.327
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.327 tagged_above=-9999 required=1.3
    tests=[BAYES_00=-1.9, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449,
    RCVD_IN_SORBS_WEB=0.77, RDNS_NONE=0.793, SPF_SOFTFAIL=0.665,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from [58.61.29.58] (unknown [58.61.29.58])
    by [REMOVED] (Postfix) with ESMTP id B1D2335990E5
    for <bgrmtv@[REMOVED]>; Thu, 7 Feb 2013 09:53:33 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 17:53:34 +0800
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 17:53:34 +0800
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 17:53:34 +0800
Message-Id: <8488922500.0232@[REMOVED]>
Subject: [SPAM] Account Review Department
X-MaxCode-Template: email-wax-payment-notification
From: "service@39paypal.co.uk" <service@39paypal.co.uk>
To: <bgrmtv@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__rqdadjzcaq_40_52_59"


Return-Path: <riddledwb04@[REMOVED]>
Delivered-To: ihost@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 9.608
X-Spam-Level: *********
X-Spam-Status: Yes, score=9.608 tagged_above=-9999 required=1.3
    tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HELO_DYNAMIC_HCC=2.762,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449, RDNS_DYNAMIC=0.982,
    SPF_SOFTFAIL=0.665, T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514]
    autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from cpc1-sgyl25-0-0-cust129.sgyl.cable.virginmedia.com (cpc1-sgyl25-0-0-cust129.sgyl.cable.virginmedia.com [92.236.254.130])
    by [REMOVED] (Postfix) with ESMTP id E592035990F0
    for <ihost@[REMOVED]>; Thu, 7 Feb 2013 09:53:14 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 09:53:15 +0000
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 09:53:15 +0000
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 09:53:15 +0000
Message-Id: <4866540941.9990@[REMOVED]>
Subject: [SPAM] PayPal UK - Security Center !
X-MaxCode-Template: email-wax-payment-notification
From: "service@49paypal.com" <service@49paypal.com>
To: <ihost@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__cnalycqg_02_56_24"


Return-Path: <novocaine2@[REMOVED]>
Delivered-To: fgfemor@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 10.257
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.257 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449, RDNS_NONE=0.793,
    SPF_SOFTFAIL=0.665, T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514]
    autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from [74.7.208.91] (unknown [74.7.208.91])
    by [REMOVED] (Postfix) with ESMTP id 633B135990CA
    for <fgfemor@[REMOVED]>; Thu, 7 Feb 2013 09:58:05 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 01:58:06 -0800
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 01:58:06 -0800
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 01:58:06 -0800
Message-Id: <4860632076.6422@[REMOVED]>
Subject: [SPAM] Account Review Department
X-MaxCode-Template: email-wax-payment-notification
From: "service@55paypal.co.uk" <service@55paypal.co.uk>
To: <fgfemor@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__srsuw_84_24_90"


Return-Path: <vacuityg594@[REMOVED]>
Delivered-To: technicalsupport@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 11.426
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.426 tagged_above=-9999 required=1.3
    tests=[BAYES_00=-1.9, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449,
    RCVD_IN_SORBS_WEB=0.77, RDNS_NONE=0.793, SPF_SOFTFAIL=0.665,
    TVD_PH_SUBJ_ACCOUNTS_POST=3.099, T_DKIM_INVALID=0.01,
    URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from [58.61.29.58] (unknown [58.61.29.58])
    by [REMOVED] (Postfix) with ESMTP id EC95A35990ED
    for <technicalsupport@[REMOVED]>; Thu, 7 Feb 2013 09:53:42 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 17:53:45 +0800
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 17:53:45 +0800
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 17:53:45 +0800
Message-Id: <6979954810.1385@[REMOVED]>
Subject: [SPAM] Notification of Limited Account Access
X-MaxCode-Template: email-wax-payment-notification
From: "service@77paypal.co.uk" <service@77paypal.co.uk>
To: <technicalsupport@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__pokbwi_52_20_60"


Return-Path: <achaeanu958@[REMOVED]>
Delivered-To: yxcvsh@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 10.257
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.257 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449, RDNS_NONE=0.793,
    SPF_SOFTFAIL=0.665, T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514]
    autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from buffalo.setup (unknown [213.186.183.32])
    by [REMOVED] (Postfix) with ESMTP id 1543E35984C5
    for <yxcvsh@[REMOVED]>; Thu, 7 Feb 2013 09:54:12 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 11:54:13 +0200
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 11:54:13 +0200
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 11:54:13 +0200
Message-Id: <8071722906.0871@[REMOVED]>
Subject: [SPAM] Update Your Billing Records
X-MaxCode-Template: email-wax-payment-notification
From: "service@87paypal.co.uk" <service@87paypal.co.uk>
To: <yxcvsh@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__jgjpzbiz_83_17_91"


Return-Path: <blunts9@[REMOVED]>
Delivered-To: technicdlsupport@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 11.426
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.426 tagged_above=-9999 required=1.3
    tests=[BAYES_00=-1.9, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449,
    RCVD_IN_SORBS_WEB=0.77, RDNS_NONE=0.793, SPF_SOFTFAIL=0.665,
    TVD_PH_SUBJ_ACCOUNTS_POST=3.099, T_DKIM_INVALID=0.01,
    URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from [58.61.29.58] (unknown [58.61.29.58])
    by [REMOVED] (Postfix) with ESMTP id 2B2503599102
    for <technicdlsupport@[REMOVED]>; Thu, 7 Feb 2013 09:53:37 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 17:53:39 +0800
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 17:53:39 +0800
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 17:53:39 +0800
Message-Id: <6259590041.4190@[REMOVED]>
Subject: [SPAM] Verify your Account information
X-MaxCode-Template: email-wax-payment-notification
From: "service@94-paypal.co.uk" <service@94-paypal.co.uk>
To: <technicdlsupport@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__pdpun_65_61_37"


Return-Path: <brainstormsts@[REMOVED]>
Delivered-To: uhq@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 9.566
X-Spam-Level: *********
X-Spam-Status: Yes, score=9.566 tagged_above=-9999 required=1.3
    tests=[BAYES_00=-1.9, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    FH_HELO_EQ_D_D_D_D=3.177, HELO_DYNAMIC_IPADDR=1.951,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RCVD_IN_BRBL_LASTEXT=1.449, RDNS_DYNAMIC=0.982, SPF_SOFTFAIL=0.665,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from bzq-79-180-6-143.red.bezeqint.net (bzq-79-180-6-143.red.bezeqint.net [79.180.6.143])
    by [REMOVED] (Postfix) with ESMTP id A54C235990ED
    for <uhq@[REMOVED]>; Thu, 7 Feb 2013 09:52:53 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 11:52:51 +0200
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 11:52:51 +0200
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 11:52:51 +0200
Message-Id: <3477082830.9926@[REMOVED]>
Subject: [SPAM] Urgent Action Required
X-MaxCode-Template: email-wax-payment-notification
From: "service@access-paypal.co.uk" <service@access-paypal.co.uk>
To: <uhq@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__nnlpjyg_09_20_35"


Return-Path: <plumesnuv4@[REMOVED]>
Delivered-To: jrsoftware_org@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 10.508
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.508 tagged_above=-9999 required=1.3
    tests=[BAYES_00=-1.9, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HELO_DYNAMIC_HCC=2.762, HTML_MESSAGE=0.001,
    MIME_HEADER_CTYPE_ONLY=0.717, RAZOR2_CF_RANGE_51_100=0.5,
    RAZOR2_CF_RANGE_E8_51_100=1.886, RAZOR2_CHECK=0.922,
    RCVD_IN_BRBL_LASTEXT=1.449, RDNS_DYNAMIC=0.982, SPF_SOFTFAIL=0.665,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from cpc1-sgyl25-0-0-cust129.sgyl.cable.virginmedia.com (cpc1-sgyl25-0-0-cust129.sgyl.cable.virginmedia.com [92.236.254.130])
    by [REMOVED] (Postfix) with ESMTP id 7A62035990F7
    for <jrsoftware_org@[REMOVED]>; Thu, 7 Feb 2013 09:53:32 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 09:53:34 +0000
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 09:53:34 +0000
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 09:53:34 +0000
Message-Id: <9959225324.4172@[REMOVED]>
Subject: [SPAM] Your PayPal account is restricted - take action now
X-MaxCode-Template: email-wax-payment-notification
From: "service@accounts-paypal.co.uk" <service@accounts-paypal.co.uk>
To: <jrsoftware_org@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__fryclcwvi_74_88_56"


Return-Path: <sherrieh942@[REMOVED]>
Delivered-To: aldybrothersfan@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 8.808
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.808 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RDNS_NONE=0.793, SPF_SOFTFAIL=0.665,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from [5.52.179.105] (unknown [5.52.179.105])
    by [REMOVED] (Postfix) with ESMTP id D33873599052
    for <aldybrothersfan@[REMOVED]>; Thu, 7 Feb 2013 09:54:45 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 13:24:47 +0330
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 13:24:47 +0330
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 13:24:47 +0330
Message-Id: <4816866303.3817@[REMOVED]>
Subject: [SPAM] Your account has been restricted
X-MaxCode-Template: email-wax-payment-notification
From: "service@accpaypal.co.uk" <service@accpaypal.co.uk>
To: <aldybrothersfan@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__dhbjvxzkbq_84_38_71"


Return-Path: <storybooks44@[REMOVED]>
Delivered-To: johnsmithsvt@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 7.534
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.534 tagged_above=-9999 required=1.3
    tests=[BAYES_00=-1.9, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449,
    RCVD_IN_SORBS_WEB=0.77, SPF_SOFTFAIL=0.665, T_DKIM_INVALID=0.01,
    URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from cbp-ichi.st.wakwak.ne.jp (cbp-ichi.st.wakwak.ne.jp [61.115.75.24])
    by [REMOVED] (Postfix) with ESMTP id 0580B35990F7
    for <johnsmithsvt@[REMOVED]>; Thu, 7 Feb 2013 09:54:00 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 18:54:01 +0900
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 18:54:01 +0900
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 18:54:01 +0900
Message-Id: <8641084585.1399@[REMOVED]>
Subject: [SPAM] Account Review Department
X-MaxCode-Template: email-wax-payment-notification
From: "service@id96-paypal.co.uk" <service@id96-paypal.co.uk>
To: <johnsmithsvt@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__yfjtzxsfl_29_11_75"


Return-Path: <lusterh38@[REMOVED]>
Delivered-To: a1aaa1azzzz1zaaaaa@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 11.048
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.048 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001,
    MIME_HEADER_CTYPE_ONLY=0.717, RAZOR2_CF_RANGE_51_100=0.5,
    RAZOR2_CF_RANGE_E8_51_100=1.886, RAZOR2_CHECK=0.922,
    RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_SORBS_WEB=0.77,
    RDNS_DYNAMIC=0.982, SPF_HELO_SOFTFAIL=0.732, SPF_SOFTFAIL=0.665,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from vodafone.it (net-188-219-95-50.cust.dsl.vodafone.it [188.219.95.50])
    by [REMOVED] (Postfix) with ESMTP id CA03435990D7
    for <a1aaa1azzzz1zaaaaa@[REMOVED]>; Thu, 7 Feb 2013 09:59:31 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 10:59:34 +0100
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 10:59:34 +0100
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 10:59:34 +0100
Message-Id: <6508194367.4197@[REMOVED]>
Subject: [SPAM] Online Access Suspended
X-MaxCode-Template: email-wax-payment-notification
From: "service@pp.co.uk" <service@pp.co.uk>
To: <a1aaa1azzzz1zaaaaa@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__zbuziplwni_27_75_34"


Return-Path: <calfsd69@[REMOVED]>
Delivered-To: dlsfa@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 10.234
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.234 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449,
    RCVD_IN_SORBS_WEB=0.77, SPF_SOFTFAIL=0.665, T_DKIM_INVALID=0.01,
    URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from host87-196-static.225-95-b.business.telecomitalia.it (host87-196-static.225-95-b.business.telecomitalia.it [95.225.196.87])
    by [REMOVED] (Postfix) with ESMTP id B71113599077
    for <dlsfa@[REMOVED]>; Thu, 7 Feb 2013 09:54:47 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 10:54:49 +0100
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 10:54:49 +0100
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 10:54:49 +0100
Message-Id: <9569623619.9508@[REMOVED]>
Subject: [SPAM] Your account has been restricted
X-MaxCode-Template: email-wax-payment-notification
From: "service@pp38-paypal.co.uk" <service@pp38-paypal.co.uk>
To: <dlsfa@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__faafwyp_18_13_80"


Return-Path: <sagger9@[REMOVED]>
Delivered-To: od9eeq@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 13.333
X-Spam-Level: *************
X-Spam-Status: Yes, score=13.333 tagged_above=-9999 required=1.3
    tests=[BAYES_50=0.8, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886,
    RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449,
    RCVD_IN_SORBS_WEB=0.77, SPF_SOFTFAIL=0.665,
    TVD_PH_SUBJ_ACCOUNTS_POST=3.099, T_DKIM_INVALID=0.01,
    URIBL_RHS_DOB=1.514] autolearn=spam
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from cbp-ichi.st.wakwak.ne.jp (cbp-ichi.st.wakwak.ne.jp [61.115.75.24])
    by [REMOVED] (Postfix) with ESMTP id BCD4135984CE
    for <od9eeq@[REMOVED]>; Thu, 7 Feb 2013 09:54:14 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 18:54:17 +0900
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 18:54:17 +0900
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 18:54:17 +0900
Message-Id: <6788033611.7959@[REMOVED]>
Subject: [SPAM] We've temporarily limited your account
X-MaxCode-Template: email-wax-payment-notification
From: "service@pplimited.co.uk" <service@pplimited.co.uk>
To: <od9eeq@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__zgyaebxnd_62_50_01"


Return-Path: <prowledpwj8@[REMOVED]>
Delivered-To: l@[REMOVED]
X-Spam-Flag: YES
X-Spam-Score: 9.566
X-Spam-Level: *********
X-Spam-Status: Yes, score=9.566 tagged_above=-9999 required=1.3
    tests=[BAYES_00=-1.9, DKIM_ADSP_NXDOMAIN=0.9, DKIM_SIGNED=0.1,
    FH_HELO_EQ_D_D_D_D=3.177, HELO_DYNAMIC_IPADDR=1.951,
    HTML_MESSAGE=0.001, MIME_HEADER_CTYPE_ONLY=0.717,
    RCVD_IN_BRBL_LASTEXT=1.449, RDNS_DYNAMIC=0.982, SPF_SOFTFAIL=0.665,
    T_DKIM_INVALID=0.01, URIBL_RHS_DOB=1.514] autolearn=no
Authentication-Results: [REMOVED] (amavisd-new);
    domainkeys=softfail (invalid, bad identity)
Authentication-Results: [REMOVED] (amavisd-new); dkim=softfail
    (fail, message has been altered) header.i=@[REMOVED]
Received: from bzq-79-180-6-143.red.bezeqint.net (bzq-79-180-6-143.red.bezeqint.net [79.180.6.143])
    by [REMOVED] (Postfix) with ESMTP id 51DF635990F6
    for <l@[REMOVED]>; Thu, 7 Feb 2013 09:52:58 +0000 (GMT)
Delivery-date: Thu, 7 Feb 2013 11:52:57 +0200
Received: from mx3.slc.paypal.com ([173.0.84.228]:39390 helo=mx0.slc.paypal.com)
by server15.verygoodserver.com with esmtp (Exim 4.77)
(envelope-from <payment@[REMOVED]>)
id 1SyYdz-0003XU-BP; Thu, 7 Feb 2013 11:52:57 +0200
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;
h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=GynGqSh4fPzvKQ2T5bjITNCfkZNZ1GKbcnuI8JZKHjB5s2EaiyumUpu/bgH9fVSN
n/dmS9Lb+Q/4MpRL99BCXn3iHn9c9djNLR/1sc424GAJyD9w0QSnI68AUNop9wbV
cwtz5Id2Z7qLEGq7CQn08c/px2GYc7Uhzo2KRYhQ7ys=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; i=@[REMOVED]; t=1344303087;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=bzdID+5+r4f/a4cQslOlnyUEN5M=;
b=y/eUpnMcLYWmmEWMmRGNMAvG8MUtO4fKEO7rEgLufKVhTXHC3L3Vd0hbym9b8x6q
YUCvQx4/lcU+2YRDcMLkR8wTGagK9j23s3FZRzsOglmZurIwJkg4tLbcJzEy4/Hz
veD/f5lW6kFFDxUFxdSHvll/2TQdwqGQcGSxWficFxk=;
Date: Thu, 7 Feb 2013 11:52:57 +0200
Message-Id: <1643748824.4470@[REMOVED]>
Subject: [SPAM] We've temporarily limited your access
X-MaxCode-Template: email-wax-payment-notification
From: "service@uk43-paypal.co.uk" <service@uk43-paypal.co.uk>
To: <l@[REMOVED]>
X-Priority: 3
Content-Type: multipart/mixed;
boundary="----=a__yuhpreov_89_52_37"

As always folks, keep your eyes peeled, and ALWAYS (for those of you that still have HTML email enabled), HOVER OVER links before clicking them, to see where the links lead you. In the case of emails purporting to be from ebay, PayPal, banks and other sites you're registered for, NEVER click the links in emails, instead, type the sites address into the browsers address bar - saves you alot of risk.