jdow wrote: > Well, you sort of got it. But the from IS paypal.com, it claims. And > there is no appropriate paypal received from. >
The Spoof rules look specifically for paypaL.com in the from line, this guy used paypaI notice I not L, I'll include this mis-spelling in the next update of the spoof set.