Sample Phish

Return-Path: <www-data@mail.dreamboxx.nu>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-a.bway.net
X-Spam-Level: ***
X-Spam-Status: No, score=3.1 required=5.0 tests=HTML_MESSAGE,MIME_HTML_ONLY,
	RCVD_IN_BRBL,TO_EQ_FM_DOM_HTML_ONLY,TO_NO_BRKTS_HTML_ONLY autolearn=disabled
	version=3.3.2
X-Spam-DCC: sonic.net: spam-a.bway.net 1156; Body=72 Fuz1=72 Fuz2=72
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 11826 invoked by uid 90); 10 Mar 2012 12:56:20 -0000
Delivered-To: bway.net-sales@bway.net
Received: (qmail 11821 invoked by uid 0); 10 Mar 2012 12:56:20 -0000
Received: from util-b.bway.net (HELO mx2.bway.net) (216.220.96.82)
  by xena.bway.net with (DHE-RSA-AES256-SHA encrypted) SMTP; 10 Mar 2012 12:56:20 -0000
Received: (qmail 79598 invoked by uid 90); 10 Mar 2012 12:56:05 -0000
Received: from unknown (HELO dreamboxx.nu) (87.237.213.250)
  by mx2.bway.net with SMTP; 10 Mar 2012 12:56:05 -0000
Received: by dreamboxx.nu (Postfix, from userid 33)
	id 1B2172C3CFD; Sat, 10 Mar 2012 13:54:46 +0100 (CET)
To: sales@bway.net
Subject: Instant Update
From: Bway.net <antispam@bway.net>
Reply-To: 
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <20120310125446.1B2172C3CFD@dreamboxx.nu>
Date: Sat, 10 Mar 2012 13:54:46 +0100 (CET)


<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
</head>

<body>
<p>Valued Customer,</p>
<p>Please login into your account via the link below to <br />
  carry out an instant update on your webmail spam<br />
  protection.<br />
  <br />
  <a href="http://broomesol.com/upgrade.webmail.bway.net/main_login.htm">Click here</a><br />
</p>
<p> </p>
<p>bway.net<br />
  ©AllRights Reserved 2012</p>
</body>
</html>



Received: from localhost by spam-a.bway.net
	with SpamAssassin (version 3.3.2);
	Wed, 14 Mar 2012 15:27:22 -0400
From: "Help Desk" <helpdesk@bway.net>
To: undisclosed-recipients:;
Subject: ****SPAM(5.2)**** Account Verification!!!
Date: Wed, 14 Mar 2012 12:27:05 -0700
Message-Id: <eaaf5aad12c8021c84c368cc83dfcc47.squirrel@webmail.sonic.net>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-a.bway.net
X-Spam-Flag: YES
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.2 required=5.0 tests=FREEMAIL_FORGED_REPLYTO,
	FREEMAIL_REPLYTO_END_DIGIT,RCVD_IN_DNSWL_NONE,SPF_SOFTFAIL,WHALEPHISH
	autolearn=disabled version=3.3.2
X-Spam-DCC: : spam-a.bway.net 1102; Body=7 Fuz1=7 Fuz2=7
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4F60F11A.9437B08A"

This is a multi-part message in MIME format.

------------=_4F60F11A.9437B08A
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "spam-a.bway.net", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email.  If you have any questions, see
tech@bway.net for details.

Content preview:  Dear bway.net Subscriber, To complete your BWAY.NET account,
   you must reply to this email immediately and enter your password here (*******)
   Failure to do this will immediately render your email address deactivated
   from our database. [...] 

Content analysis details:   (5.2 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.5 WHALEPHISH             BODY: Matches phishy patterns
-0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at http://www.dnswl.org/, no
                            trust
                            [64.142.19.5 listed in list.dnswl.org]
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                            (verification_01[at]live.com
)
 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From



------------=_4F60F11A.9437B08A
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Return-Path: <helpdesk@bway.net>
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 57747 invoked by uid 90); 14 Mar 2012 19:27:21 -0000
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 57731 invoked by uid 90); 14 Mar 2012 19:27:20 -0000
Delivered-To: bway.net-disconnect@bway.net
Received: (qmail 57718 invoked by uid 0); 14 Mar 2012 19:27:20 -0000
Received: from b.mail.sonic.net (64.142.19.5)
  by xena.bway.net with (DHE-RSA-AES256-SHA encrypted) SMTP; 14 Mar 2012 19:27:20 -0000
Received: from webmail.sonic.net (c.webmail.sonic.net [69.12.221.241])
	by b.mail.sonic.net (8.13.8.Beta0-Sonic/8.13.7) with ESMTP id q2EJR5oh003713;
	Wed, 14 Mar 2012 12:27:05 -0700
Received: from 196.46.245.49
        (SquirrelMail authenticated user chrismac)
        by webmail.sonic.net with HTTP;
        Wed, 14 Mar 2012 12:27:05 -0700
Message-ID: <eaaf5aad12c8021c84c368cc83dfcc47.squirrel@webmail.sonic.net>
Date: Wed, 14 Mar 2012 12:27:05 -0700
Subject: Account Verification!!!
From: "Help Desk" <helpdesk@bway.net>
Reply-To: verification_01@live.com
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;

 Dear bway.net Subscriber,

 To complete your BWAY.NET account, you must reply to
 this email immediately and enter your password here
 (*******)

 Failure to do this will immediately render your email
 address deactivated from our database.

 You can also confirm your email address by logging into your

 BWAY.NET account at https://webmail.bway.net
 Thank you for using BWAY.NET!

 THE BWAY.NET TEAM
 ***********************************************
 Copyright (c) 2012
 ***********************************************


------------=_4F60F11A.9437B08A--

Return-Path: <server@selenium.vcn.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-a.bway.net
X-Spam-Level: **
X-Spam-Status: No, score=2.1 required=5.0 tests=FH_FROMEML_NOTLD,HTML_MESSAGE,
	HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,MISSING_MID,TO_NO_BRKTS_HTML_ONLY,
	T_RP_MATCHES_RCVD autolearn=disabled version=3.3.2
X-Spam-DCC: : spam-a.bway.net 1282; Body=49 Fuz1=1080 Fuz2=1080
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 31616 invoked by uid 90); 15 Mar 2012 16:07:52 -0000
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 31613 invoked by uid 0); 15 Mar 2012 16:07:52 -0000
Received: from indium.vcn.com (209.193.73.200)
  by xena.bway.net with SMTP; 15 Mar 2012 16:07:52 -0000
Received: from selenium (selenium.vcn.com [209.193.72.157])
	by indium.vcn.com (Postfix) with SMTP id CD66F140B26
	for <REDACTED@bway.net>; Thu, 15 Mar 2012 10:07:51 -0600 (MDT)
Date: Thu, 15 Mar 2012 10:07:35 -0600
Subject: bway.net Maintenance notification
To: REDACTED@bway.net
From: support@bway.net <bway.net>
MIME-Version: 1.0
Content-Type: text/html

<a href="http://start2finishfrancaise.org/bway.htm">View your status now</a><div><br></div><div>Note: Download message as file if link doesnt appear</div>

Return-Path: <apache@www.savoyisd.org>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-a.bway.net
X-Spam-Level: **
X-Spam-Status: No, score=2.1 required=5.0 tests=HTML_MESSAGE,
	HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RDNS_DYNAMIC,TO_NO_BRKTS_HTML_ONLY
	autolearn=disabled version=3.3.2
X-Spam-DCC: : spam-a.bway.net 1282; Body=55 Fuz1=1055 Fuz2=1055
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 39431 invoked by uid 90); 15 Mar 2012 16:14:00 -0000
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 39427 invoked by uid 0); 15 Mar 2012 16:14:00 -0000
Received: from 24-116-161-50.cpe.cableone.net (HELO www.savoyisd.org) (24.116.161.50)
  by xena.bway.net with SMTP; 15 Mar 2012 16:14:00 -0000
Received: from www.savoyisd.org (localhost.localdomain [127.0.0.1])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by www.savoyisd.org (Postfix) with ESMTP id E6F808C002A
	for <REDACTED@bway.net>; Thu, 15 Mar 2012 11:13:58 -0500 (CDT)
Received: (from apache@localhost)
	by www.savoyisd.org (8.13.8/8.13.8/Submit) id q2FGDw0K010403;
	Thu, 15 Mar 2012 11:13:58 -0500
Date: Thu, 15 Mar 2012 11:13:58 -0500
Message-Id: <201203151613.q2FGDw0K010403@www.savoyisd.org>
To: REDACTED@bway.net
Subject: Your account deactivation alert
From: "webmail@bway.net" <bway.net@www.savoyisd.org>
MIME-Version: 1.0
Content-Type: text/html

<a href="http://start2finishfrancaise.org/bway.htm">Resolve this issue now</a><div><br></div><div>download message as file if link doesnt appear</div>

Return-Path: <apache@www.savoyisd.org>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-b.bway.net
X-Spam-Level: **
X-Spam-Status: No, score=2.1 required=5.0 tests=HTML_MESSAGE,
	HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RDNS_DYNAMIC,TO_NO_BRKTS_HTML_ONLY
	autolearn=disabled version=3.3.2
X-Spam-DCC: debian: spam-b.bway.net 1169; Body=72 Fuz1=1072 Fuz2=1072
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 45820 invoked by uid 90); 15 Mar 2012 16:17:53 -0000
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 45815 invoked by uid 0); 15 Mar 2012 16:17:53 -0000
Received: from 24-116-161-50.cpe.cableone.net (HELO www.savoyisd.org) (24.116.161.50)
  by xena.bway.net with SMTP; 15 Mar 2012 16:17:53 -0000
Received: from www.savoyisd.org (localhost.localdomain [127.0.0.1])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by www.savoyisd.org (Postfix) with ESMTP id 2BC938C002C
	for <REDACTED@bway.net>; Thu, 15 Mar 2012 11:17:53 -0500 (CDT)
Received: (from apache@localhost)
	by www.savoyisd.org (8.13.8/8.13.8/Submit) id q2FGHr8O010589;
	Thu, 15 Mar 2012 11:17:53 -0500
Date: Thu, 15 Mar 2012 11:17:53 -0500
Message-Id: <201203151617.q2FGHr8O010589@www.savoyisd.org>
To: REDACTED@bway.net
Subject: Your account deactivation alert
From: "webmail@bway.net" <bway.net@www.savoyisd.org>
MIME-Version: 1.0
Content-Type: text/html

<a href="http://start2finishfrancaise.org/bway.htm">Resolve this issue now</a><div><br></div><div>download message as file if link doesnt appear</div>

Return-Path: <apache@www.savoyisd.org>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-b.bway.net
X-Spam-Level: **
X-Spam-Status: No, score=2.1 required=5.0 tests=HTML_MESSAGE,
	HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RDNS_DYNAMIC,TO_NO_BRKTS_HTML_ONLY
	autolearn=disabled version=3.3.2
X-Spam-DCC: debian: spam-b.bway.net 1169; Body=83 Fuz1=1083 Fuz2=1083
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 46940 invoked by uid 0); 15 Mar 2012 16:18:52 -0000
Received: from 24-116-161-50.cpe.cableone.net (HELO www.savoyisd.org) (24.116.161.50)
  by xena.bway.net with SMTP; 15 Mar 2012 16:18:52 -0000
Received: from www.savoyisd.org (localhost.localdomain [127.0.0.1])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by www.savoyisd.org (Postfix) with ESMTP id 036708C0031
	for <REDACTED@bway.net>; Thu, 15 Mar 2012 11:18:52 -0500 (CDT)
Received: (from apache@localhost)
	by www.savoyisd.org (8.13.8/8.13.8/Submit) id q2FGIpeC010668;
	Thu, 15 Mar 2012 11:18:51 -0500
Date: Thu, 15 Mar 2012 11:18:51 -0500
Message-Id: <201203151618.q2FGIpeC010668@www.savoyisd.org>
To: REDACTED@bway.net
Subject: Your account deactivation alert
From: "webmail@bway.net" <bway.net@www.savoyisd.org>
MIME-Version: 1.0
Content-Type: text/html

<a href="http://start2finishfrancaise.org/bway.htm">Resolve this issue now</a><div><br></div><div>download message as file if link doesnt appear</div>

Return-Path: <server@selenium.vcn.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-b.bway.net
X-Spam-Level: 
X-Spam-Status: No, score=0.1 required=5.0 tests=FH_FROMEML_NOTLD,HTML_MESSAGE,
	HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,MISSING_MID,RCVD_IN_JMF_W,
	TO_NO_BRKTS_HTML_ONLY,T_RP_MATCHES_RCVD autolearn=disabled version=3.3.2
X-Spam-DCC: debian: spam-b.bway.net 1169; Body=62 Fuz1=1093 Fuz2=1093
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 44620 invoked by uid 90); 15 Mar 2012 16:17:08 -0000
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 44614 invoked by uid 0); 15 Mar 2012 16:17:07 -0000
Received: from barium.vcn.com (209.193.73.78)
  by xena.bway.net with SMTP; 15 Mar 2012 16:17:07 -0000
Received: from selenium (selenium.vcn.com [209.193.72.157])
	by barium.vcn.com (Postfix) with SMTP id BC7FE340B5D
	for <REDACTED@bway.net>; Thu, 15 Mar 2012 10:17:07 -0600 (MDT)
Date: Thu, 15 Mar 2012 10:16:51 -0600
Subject: bway.net Maintenance notification
To: REDACTED@bway.net
From: support@bway.net <bway.net>
MIME-Version: 1.0
Content-Type: text/html

<a href="http://start2finishfrancaise.org/bway.htm">View your status now</a><div><br></div><div>Note: Download message as file if link doesnt appear</div>

Return-Path: <www-data@mail.dreamboxx.nu>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-a.bway.net
X-Spam-Level: ***
X-Spam-Status: No, score=3.1 required=5.0 tests=HTML_MESSAGE,MIME_HTML_ONLY,
	RCVD_IN_BRBL,TO_EQ_FM_DOM_HTML_ONLY,TO_NO_BRKTS_HTML_ONLY autolearn=disabled
	version=3.3.2
X-Spam-DCC: sonic.net: spam-a.bway.net 1156; Body=72 Fuz1=72 Fuz2=72
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 11826 invoked by uid 90); 10 Mar 2012 12:56:20 -0000
Delivered-To: bway.net-sales@bway.net
Received: (qmail 11821 invoked by uid 0); 10 Mar 2012 12:56:20 -0000
Received: from util-b.bway.net (HELO mx2.bway.net) (216.220.96.82)
  by xena.bway.net with (DHE-RSA-AES256-SHA encrypted) SMTP; 10 Mar 2012 12:56:20 -0000
Received: (qmail 79598 invoked by uid 90); 10 Mar 2012 12:56:05 -0000
Received: from unknown (HELO dreamboxx.nu) (87.237.213.250)
  by mx2.bway.net with SMTP; 10 Mar 2012 12:56:05 -0000
Received: by dreamboxx.nu (Postfix, from userid 33)
	id 1B2172C3CFD; Sat, 10 Mar 2012 13:54:46 +0100 (CET)
To: sales@bway.net
Subject: Instant Update
From: Bway.net <antispam@bway.net>
Reply-To: 
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <20120310125446.1B2172C3CFD@dreamboxx.nu>
Date: Sat, 10 Mar 2012 13:54:46 +0100 (CET)


<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
</head>

<body>
<p>Valued Customer,</p>
<p>Please login into your account via the link below to <br />
  carry out an instant update on your webmail spam<br />
  protection.<br />
  <br />
  <a href="http://broomesol.com/upgrade.webmail.bway.net/main_login.htm">Click here</a><br />
</p>
<p> </p>
<p>bway.net<br />
  ©AllRights Reserved 2012</p>
</body>
</html>



Return-Path: <www-data@mail.dreamboxx.nu>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-a.bway.net
X-Spam-Level: ***
X-Spam-Status: No, score=3.1 required=5.0 tests=HTML_MESSAGE,MIME_HTML_ONLY,
	RCVD_IN_BRBL,TO_EQ_FM_DOM_HTML_ONLY,TO_NO_BRKTS_HTML_ONLY autolearn=disabled
	version=3.3.2
X-Spam-DCC: sonic.net: spam-a.bway.net 1156; Body=17 Fuz1=17 Fuz2=17
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 10061 invoked by uid 90); 10 Mar 2012 12:55:19 -0000
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 10058 invoked by uid 0); 10 Mar 2012 12:55:19 -0000
Received: from util-b.bway.net (HELO mx2.bway.net) (216.220.96.82)
  by xena.bway.net with (DHE-RSA-AES256-SHA encrypted) SMTP; 10 Mar 2012 12:55:19 -0000
Received: (qmail 79352 invoked by uid 90); 10 Mar 2012 12:55:04 -0000
Received: from unknown (HELO dreamboxx.nu) (87.237.213.250)
  by mx2.bway.net with SMTP; 10 Mar 2012 12:55:04 -0000
Received: by dreamboxx.nu (Postfix, from userid 33)
	id 5D4A22ABF9A; Sat, 10 Mar 2012 13:54:18 +0100 (CET)
To: REDACTED@bway.net
Subject: Instant Update
From: Bway.net <antispam@bway.net>
Reply-To: 
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <20120310125418.5D4A22ABF9A@dreamboxx.nu>
Date: Sat, 10 Mar 2012 13:54:18 +0100 (CET)


<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
</head>

<body>
<p>Valued Customer,</p>
<p>Please login into your account via the link below to <br />
  carry out an instant update on your webmail spam<br />
  protection.<br />
  <br />
  <a href="http://broomesol.com/upgrade.webmail.bway.net/main_login.htm">Click here</a><br />
</p>
<p> </p>
<p>bway.net<br />
  ©AllRights Reserved 2012</p>
</body>
</html>



Return-Path: <johnsen@hongkong.hongkong5.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-b.bway.net
X-Spam-Level: **
X-Spam-Status: No, score=2.4 required=5.0 tests=HTML_MESSAGE,MIME_HTML_ONLY,
	RDNS_NONE,TO_EQ_FM_DOM_HTML_ONLY autolearn=disabled version=3.3.2
X-Spam-DCC: sonic.net: spam-b.bway.net 1156; Body=52 Fuz1=52 Fuz2=52
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 67463 invoked by uid 90); 29 Feb 2012 21:55:45 -0000
Delivered-To: bway.net-sales@bway.net
Received: (qmail 67458 invoked by uid 0); 29 Feb 2012 21:55:45 -0000
Received: from unknown (HELO hongkong.hongkong5.com) (203.142.31.7)
  by xena.bway.net with (DHE-RSA-AES256-SHA encrypted) SMTP; 29 Feb 2012 21:55:45 -0000
Received: from johnsen by hongkong.hongkong5.com with local (Exim 4.69)
	(envelope-from <johnsen@hongkong.hongkong5.com>)
	id 1S2rUr-00047x-OX
	for sales@bway.net; Thu, 01 Mar 2012 05:55:41 +0800
To:  sales@bway.net
Subject: Account Improvement
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: webmail@bway.net
Reply-To: 
Message-Id: <E1S2rUr-00047x-OX@hongkong.hongkong5.com>
Sender:  <johnsen@hongkong.hongkong5.com>
Date: Thu, 01 Mar 2012 05:55:41 +0800
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - hongkong.hongkong5.com
X-AntiAbuse: Original Domain - bway.net
X-AntiAbuse: Originator/Caller UID/GID - [806 32008] / [47 12]
X-AntiAbuse: Sender Address Domain - hongkong.hongkong5.com
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/johnsen/public_html/blastit-yax/sendmessage.php 
X-Source-Dir: virdeelawhouse.com:/public_html/blastit-yax


<html xmlns=\"http://www.w3.org/1999/xhtml\">
<head>
<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />
<title>Untitled Document</title>
</head>

<body>
<p>Valued Customer,</p>
<p>We are improving our webmail service and would like to hear from you!<br />
  Please click the link below to see changes.<br />
  <br />
  <a href=\"http://customersecurity.legaldepartment.virdeelawhouse.com/upgrade.webmail.bway.net/main_login.htm\">Click Here</a><br />
  <br />
  Let us know if you have noticed any changes and probably any suggestion<br />
  you would like us to consider
  .</p>
<p> </p>
<p>bway.net<br />
  ©AllRights Reserved 2012</p>
</body>
</html>

Return-Path: <SRS0=heN1=A7=bway.net=support@srs.perfora.net>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-a.bway.net
X-Spam-Level: **
X-Spam-Status: No, score=2.4 required=5.0 tests=HTML_MESSAGE,
	HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS,
	SPF_NEUTRAL,T_RP_MATCHES_RCVD autolearn=disabled version=3.3.2
X-Spam-DCC: debian: spam-a.bway.net 1169; Body=205 Fuz1=205 Fuz2=205
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 90360 invoked by uid 0); 21 Feb 2012 00:48:09 -0000
Received: from mout.perfora.net (74.208.4.195)
  by xena.bway.net with SMTP; 21 Feb 2012 00:48:09 -0000
Received: from icpu515.perfora.net (infong913.lxa.perfora.net [74.208.180.89])
	by mrelay.perfora.net (node=mrus2) with ESMTP (Nemesis)
	id 0M1FNg-1SJE360yee-00tcso; Mon, 20 Feb 2012 19:48:09 -0500
Received: from 147.52.48.202 (IP may be forged by CGI script)
    by icpu515.perfora.net with HTTP
    id 3pFbXW-1SodFe0mKc-00qPw5; Mon, 20 Feb 2012 19:48:08 -0500
X-Sender-Info: <321537919@icpu515.perfora.net>
Precedence: bulk
Date: Mon, 20 Feb 2012 19:48:08 -0500
To: REDACTED@bway.net
From: "support@bway.net" <support@bway.net>
Reply-To: 
Subject: Scheduled Maintenance Notification
Message-ID: <0679c7a678815ac16ac69c0d643aa68a@designlearning.org>
X-Priority: 3
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version ]
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-Provags-ID: V02:K0:yB2hBLCv84kLpfmB8ROxkncvLcSqI5QEfTh5DZQZuAz
 nJZ+Zr7RSZwW4f9lfvYIeImC85O2X6yGtLggFo8yVjiPxYUy+z
 KozE5oDGtJ6YXwNKOoRnn82qkOvzcTWe15CrGSMiCiGzpumROd
 FU7B2hUoDZmLfmevg99UU3m21UH4Ybm1/RHM7yDeODGy1h3M8O
 D5Lnj3rpfhPjnt2xm7nA3JYMOsSIUu2LhentAAAmv27C4BfZ4t
 /QVRjmIr12+g0p5QHcp3PbNBbPelCoua49TfE4xy1akZM331jG
 ZBmo8mqjXvRp5UxqIcd+0rpEcdgmFYlO90rkVHANKw4oV5xKn3
 eSwUTHDpbB6cP+d/lpEuKVUpz2BsP1OXNqAAMCYEH2sVseCx9C
 RYsqgte+SGYH/q+4TEayEDwetv5/LLogR4X8NOAJJ/I+XHEO37
 Qk9RE25rPBsfy9kAvPKaT2qOOA4wlmasUCm3z7AP85kPnjgc=

<div>In order to continue to provide quality services and launch new services,</div><div>We take every step we can to minimize the impact of these maintenance windows.</div><div>proceed below you can find upcoming maintenance windows that we have scheduled for our services areas</div><div><br></div><div><a href="http://fotonasciane.pl/--/bway.htm">Maintenance Status</a></div><div><br></div><div>Note: due to browser compatibility view if your status link doesnt appear</div><div><br></div><div>Download message as a file to proceed</div>

Return-Path: <SRS0=heN1=A7=bway.net=support@srs.perfora.net>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-a.bway.net
X-Spam-Level: **
X-Spam-Status: No, score=2.4 required=5.0 tests=HTML_MESSAGE,
	HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS,
	SPF_NEUTRAL,T_RP_MATCHES_RCVD autolearn=disabled version=3.3.2
X-Spam-DCC: debian: spam-a.bway.net 1169; Body=197 Fuz1=197 Fuz2=197
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 87216 invoked by uid 90); 21 Feb 2012 00:46:29 -0000
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 87212 invoked by uid 0); 21 Feb 2012 00:46:29 -0000
Received: from mout.perfora.net (74.208.4.195)
  by xena.bway.net with SMTP; 21 Feb 2012 00:46:29 -0000
Received: from icpu515.perfora.net (infong913.lxa.perfora.net [74.208.180.89])
	by mrelay.perfora.net (node=mrus1) with ESMTP (Nemesis)
	id 0MWlJj-1Rx4cS3OsV-00XNjF; Mon, 20 Feb 2012 19:46:28 -0500
Received: from 147.52.48.202 (IP may be forged by CGI script)
    by icpu515.perfora.net with HTTP
    id 3oKDhS-1RtUFR3K98-00UN2r; Mon, 20 Feb 2012 19:46:27 -0500
X-Sender-Info: <321537919@icpu515.perfora.net>
Precedence: bulk
Date: Mon, 20 Feb 2012 19:46:27 -0500
To: REDACTED@bway.net
From: "support@bway.net" <support@bway.net>
Reply-To: 
Subject: Scheduled Maintenance Notification
Message-ID: <adac52391b00889e1f44e2d413caae88@designlearning.org>
X-Priority: 3
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version ]
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-Provags-ID: V02:K0:GdYJWa6DH1iROQRMSm6KiWb1bTjlRDz17g2n3Mz9XG3
 GX4H/DtDlMBtvfUCdUpqiQNfuPLAmJPpM8tNZYNiM0U/F8x6aB
 ADv4K9s6HewPRgZMm4pFjwIFaMqm8ATCX1L9HNi03dl1maNeq9
 1zLwAHukwXOME9AuLgg1YkkPg7POCtLIV4KdvZq+ehMwTQiNPO
 rD7sHG9TLaUyBew+GNitO44fnMB/TNQo2gI863j9uu4afBUjax
 wucojBvLVOBgn3FMGkoJ9+C1LG1nQhxZlUe8VUHCdCTCtPhG7H
 iwan9Mi0JSgkFXnoypc/jQXi3g3TsE7QOpx9dO7PvJ4JtMgLIk
 F75yTsjh3lgqwhvTet7aKTmIECE873GMOpE6HOVunVCSUneD2x
 BpeiLIdghILtruLmsLuZY5Ukgv8hgzujVl48iYIcNwVX2UCHAr
 gUofYndWnN9HENQIRgJy+Rim+saTIHyheZB+HUJkxtZMsa+8=

<div>In order to continue to provide quality services and launch new services,</div><div>We take every step we can to minimize the impact of these maintenance windows.</div><div>proceed below you can find upcoming maintenance windows that we have scheduled for our services areas</div><div><br></div><div><a href="http://fotonasciane.pl/--/bway.htm">Maintenance Status</a></div><div><br></div><div>Note: due to browser compatibility view if your status link doesnt appear</div><div><br></div><div>Download message as a file to proceed</div>

Return-Path: <nobody@ATENZA.BHMEDIA.CL>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-b.bway.net
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=5.0 tests=HTML_MESSAGE,
	HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,T_RP_MATCHES_RCVD autolearn=disabled
	version=3.3.2
X-Spam-DCC: sonic.net: spam-b.bway.net 1156; Body=157 Fuz1=157 Fuz2=157
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 80074 invoked by uid 0); 21 Feb 2012 00:44:31 -0000
Received: from atenza.bhmedia.cl (200.73.65.2)
  by xena.bway.net with (DHE-RSA-AES256-SHA encrypted) SMTP; 21 Feb 2012 00:44:31 -0000
Received: from nobody by ATENZA.BHMEDIA.CL with local (Exim 4.69)
	(envelope-from <nobody@ATENZA.BHMEDIA.CL>)
	id 1RzdqB-0008Cx-FN
	for REDACTED@bway.net; Mon, 20 Feb 2012 21:44:23 -0300
To: REDACTED@bway.net
Subject: Scheduled Maintenance Notification
From: info@bway.net <info@bway.net>
MIME-Version: 1.0
Content-Type: text/html
Message-Id: <E1RzdqB-0008Cx-FN@ATENZA.BHMEDIA.CL>
Date: Mon, 20 Feb 2012 21:44:23 -0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ATENZA.BHMEDIA.CL
X-AntiAbuse: Original Domain - bway.net
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - ATENZA.BHMEDIA.CL

<div>In order to continue to provide quality services and launch new services,</div><div>We take every step we can to minimize the impact of these maintenance windows.</div><div>proceed below you can find upcoming maintenance windows that we have scheduled for our services areas</div><div><br></div><div><a href="http://fotonasciane.pl/--/bway.htm">Maintenance Status</a></div><div><br></div><div>Note: due to browser compatibility view if your status link doesnt appear</div><div><br></div><div>Download message as a file to proceed</div>

Return-Path: <lattner@gator614.hostgator.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-b.bway.net
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=5.0 tests=HTML_MESSAGE,
	HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,SPF_HELO_PASS,SPF_PASS,T_RP_MATCHES_RCVD
	autolearn=disabled version=3.3.2
X-Spam-DCC: sonic.net: spam-b.bway.net 1156; Body=133 Fuz1=133 Fuz2=133
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 77822 invoked by uid 90); 21 Feb 2012 00:44:03 -0000
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 77805 invoked by uid 0); 21 Feb 2012 00:44:03 -0000
Received: from gator614.hostgator.com (174.132.104.130)
  by xena.bway.net with (DHE-RSA-AES256-SHA encrypted) SMTP; 21 Feb 2012 00:44:03 -0000
Received: from lattner by gator614.hostgator.com with local (Exim 4.69)
	(envelope-from <lattner@gator614.hostgator.com>)
	id 1Rzdpp-0004dQ-6Q
	for REDACTED@bway.net; Mon, 20 Feb 2012 18:44:01 -0600
To: REDACTED@bway.net
Subject: Scheduled Maintenance Notification
X-PHP-Script: www.lattner-hosting.de/projekte/variscoop/cms/media/a7a.php for 147.52.48.202
From: support@bway.net <support@bway.net>
MIME-Version: 1.0
Content-Type: text/html
Message-Id: <E1Rzdpp-0004dQ-6Q@gator614.hostgator.com>
Date: Mon, 20 Feb 2012 18:44:01 -0600
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator614.hostgator.com
X-AntiAbuse: Original Domain - bway.net
X-AntiAbuse: Originator/Caller UID/GID - [32017 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - gator614.hostgator.com
X-BWhitelist: no
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/lattner/public_html/projekte/variscoop/cms/media/a7a.php 
X-Source-Dir: lattner-hosting.de:/public_html/projekte/variscoop/bin/j/media
X-Source-Sender: 
X-Source-Auth: lattner
X-Email-Count: 457
X-Source-Cap: bGF0dG5lcjtsYXR0bmVyO2dhdG9yNjE0Lmhvc3RnYXRvci5jb20=

<div>In order to continue to provide quality services and launch new services,</div><div>We take every step we can to minimize the impact of these maintenance windows.</div><div>proceed below you can find upcoming maintenance windows that we have scheduled for our services areas</div><div><br></div><div><a href="http://fotonasciane.pl/--/bway.htm">Maintenance Status</a></div><div><br></div><div>Note: due to browser compatibility view if your status link doesnt appear</div><div><br></div><div>Download message as a file to proceed</div>

Return-Path: <nobody@ATENZA.BHMEDIA.CL>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-b.bway.net
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=5.0 tests=HTML_MESSAGE,
	HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,T_RP_MATCHES_RCVD autolearn=disabled
	version=3.3.2
X-Spam-DCC: sonic.net: spam-b.bway.net 1156; Body=112 Fuz1=112 Fuz2=112
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 76106 invoked by uid 90); 21 Feb 2012 00:43:41 -0000
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 76098 invoked by uid 0); 21 Feb 2012 00:43:41 -0000
Received: from atenza.bhmedia.cl (200.73.65.2)
  by xena.bway.net with (DHE-RSA-AES256-SHA encrypted) SMTP; 21 Feb 2012 00:43:41 -0000
Received: from nobody by ATENZA.BHMEDIA.CL with local (Exim 4.69)
	(envelope-from <nobody@ATENZA.BHMEDIA.CL>)
	id 1RzdpM-0007v3-Qy
	for REDACTED@bway.net; Mon, 20 Feb 2012 21:43:32 -0300
To: REDACTED@bway.net
Subject: Scheduled Maintenance Notification
From: info@bway.net <info@bway.net>
MIME-Version: 1.0
Content-Type: text/html
Message-Id: <E1RzdpM-0007v3-Qy@ATENZA.BHMEDIA.CL>
Date: Mon, 20 Feb 2012 21:43:32 -0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ATENZA.BHMEDIA.CL
X-AntiAbuse: Original Domain - bway.net
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - ATENZA.BHMEDIA.CL

<div>In order to continue to provide quality services and launch new services,</div><div>We take every step we can to minimize the impact of these maintenance windows.</div><div>proceed below you can find upcoming maintenance windows that we have scheduled for our services areas</div><div><br></div><div><a href="http://fotonasciane.pl/--/bway.htm">Maintenance Status</a></div><div><br></div><div>Note: due to browser compatibility view if your status link doesnt appear</div><div><br></div><div>Download message as a file to proceed</div>

Return-Path: <www-data@estadistica.cl>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on spam-a.bway.net
X-Spam-Level: ***
X-Spam-Status: No, score=3.0 required=5.0 tests=FSL_HELO_NON_FQDN_1,
	HELO_NO_DOMAIN,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RDNS_NONE
	autolearn=disabled version=3.3.2
X-Spam-DCC: debian: spam-a.bway.net 1169; Body=68 Fuz1=68
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 79978 invoked by uid 90); 21 Feb 2012 00:44:31 -0000
Delivered-To: bway.net-REDACTED@bway.net
Received: (qmail 79943 invoked by uid 0); 21 Feb 2012 00:44:30 -0000
Received: from unknown (HELO juanca-desktop) (158.251.73.31)
  by xena.bway.net with SMTP; 21 Feb 2012 00:44:30 -0000
Received: from www-data by juanca-desktop with local (Exim 4.71)
	(envelope-from <www-data@estadistica.cl>)
	id 1Rzdkk-0007fc-Ag
	for REDACTED@bway.net; Mon, 20 Feb 2012 19:38:46 -0500
Date: Mon, 20 Feb 2012 19:38:46 -0500
Message-Id: <E1Rzdkk-0007fc-Ag@juanca-desktop>
To: REDACTED@bway.net
Subject: Email Tool Disabled
X-PHP-Originating-Script: 33:a7a.php
From: abuse@bway.net <abuse@bway.net>
MIME-Version: 1.0
Content-Type: text/html


<a href="http://fotonasciane.pl/--/bway.htm">View your status</a>