Actual e-mail supposedly in service to PayPal (with headers included, along with spelling and grammatical errors from original):X-Apparently-To: [email protected]; Mon, 04 Mar 2019 13:30:31 +0000Return-Path:Received-SPF: none (domain of setting86bd42ce72258f363ba0e8ad16536ef8.inbox.com does not designate permitted sender hosts)X-YMailISG: p1jszJ4WLDsUxkMa5_QLqqZXkrqILhXjeYoZPIPP7bKQ0W2zMAnBrpyufbq4KFJImWHxHFJjq_SsZYbyRpNa6kqcXH5ZX1KsSuib7I41N_ZHx7fkFcSPLnCwGXBSSxPjJQ99ePLWTRSdUZ_bJnXid5f6ZEEZpIgxnDUAMfYhQNha35W51gbPuznjCzgXS07h0tI0LDwpKljl_6LFB84YjjFQ_vkc8j5XgPbPNXnGegDg2Y0yTl_VXVoPorpnUmrk9lnPTP_SsJCD4CGxqp6JlbFtnKvpbIPRa_cKtOaco9DpoYFQaA8j_RWg4wyTcqmxQv3nKkgPdfahBARtD0X.MUhlHJLfu6OEMgY59WyVwjUCm_Np6.FLYGA7CrflS4v10QRRXugKoHJPcLhCNsaPjb33IYO_H0hmGqCWDqySZgtrnsX0D2jh_ucoKYtAFzjW4Vfv64E_feflPjQx5IhcL1LjnY1grMGn_yhS1fAPZj2s3qwZeOqMgGvXE_ZJQXE0CejvlKHzzwxnJCp1LfbhWLbQMZ6vxm8aQEWIzQV0u1qPptQZncpZHYaHk9JlUNYUZlclTxHC72fvpnO6HWncQQYGuiGoNq3iC0_gyzucW.07dpZfeTyBEpKFUjQ23OoT5zC_odnGshtenefJhZUunnDPKPrKLZamrqUunVx_KVQYjknUfwK9EVFgA52M7WrshzdI_iLsEsJNk4OdLohWD77Qt7u6bYaYbLDEN_RkPrMPjrHmBRgh18HjirFSdpUjoFahhV1zynoGSX4RrdoNvWx7vZj7SAdJrjDy9dnad93fgYnHT6mWSUMTVn49EGDuFkTpHiBPje8yxRxQdQIAKK4uPk_N9DOxpAMSdKYKXBxGWUDgkb3HmiHj1iLSNUuZBPQYZtsZyAqb5lbGP4AkQ3B3Z.CDP9KvMhhvZNi64AsuTH4a1cSVzIusEn3xnxbAyEmsRZHFlHwCA.pR9ScnyJu9muu6VgSsdyFM_lLFU5IhOY7I.nE6GnkI02qeLUiYoYNBqJmEJDxGLR6wYaGzoxCQWCUjPzyIzmt_H_ruCjps6n_J_LzIwJFUUMCFedj_lE5KKjBM93dE2xcNWGXisqOBKrdyI2tTf7amXfOxjpHMTvLY5ewnKs22dmjtW8nX6qf3IlHI7tnrmljssgYinx_FUljna0aghgvuYxxigqid7diP0A–X-Originating-IP: [212.227.126.135]Authentication-Results: mta4011.mail.gq1.yahoo.com from=setting86bd42ce72258f363ba0e8ad16536ef8.inbox.com; dkim=neutral (no sig)Received: from 127.0.0.1 (EHLO mout.kundenserver.de) (212.227.126.135)by mta4011.mail.gq1.yahoo.com with SMTPS; Mon, 04 Mar 2019 13:30:30 +0000Received: from infong-es3.kundenserver.de ([82.165.83.82]) bymrelayeu.kundenserver.de (mreue009 [172.19.35.7]) with ESMTPA (Nemesis) id1MyK9U-1hAv2815O0-00yin3 for ; Mon, 04 Mar 201914:30:28 +0100Received: from 160.178.235.198 (IP may be forged by CGI script)by infong-es3.kundenserver.de with HTTPid zRZqJ2-1h4ZV61VZ9-0166Q7; Mon, 04 Mar 2019 14:30:27 +0100X-Sender-Info:Precedence: bulkTo: [email protected]Subject: RE: [ SERVICE ] : Important from TeamSupport : Account virefication statut : [ ALERT ] Multiple Password Was Attempted With Your Account. [Online banking] Recibo : #391295288970272430.! Recibo cuentaDate: Mon, 4 Mar 2019 14:30:27 +0100From: PayPalMessage-ID:X-Mailer: Leaf PHPMailer 2.7 (leafmailer.pw)MIME-Version: 1.0Content-Type: text/html; charset=Content-Transfer-Encoding: 8bitX-Provags-ID: V03:K1:hO4FE/fJCAwu+JTaqHo/Smy9xpTLTd5KhxuM8v+Ld2eHoOmPqE4uID0zoFFpql4ezjGFO8L2tPyaDbpx2U5hAyz+6Tzl6eC/gY4gaAkLyWIkyMv5nrSobsZt+tHgrnv0Iez3CW1kMRKLYLPqq0cuCTgD9J5CLZNkqxwz+bOra/LZZY9NH90G7QbJat2ncpreXlbFfEQnjuHawWzoIzbgYdoJYFKtYpaTehw3s0kiiR4=X-Spam-Flag: NOX-UI-Out-Filterresults: notjunk:1;V03:K0:LpKcagqlfPU=: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Content-Length: 25427Your Account Will Be Limited.Dear customer,Your Account Will Be Limited , Until We Here From You . To Update Your Info . Simply click on the web address below (or copy and paste the link into your browser):