Do my NZ friends know who runs "newzealand.govt.nz"? Today's phish was:
From: service@paypal.com<Paypal.Email_ID.PP1589-e110d396a8c63dU@newzealand.govt.nz>
ISTM that I should not have seen that if appropriate limitations on email sender address were in DNS...