Costco survey phish from Yahoo! mail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 28 Jul 2022 08:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oH4nz-0007n2-2B

for dave@doctor.nl2k.ab.ca;

Thu, 28 Jul 2022 08:48:03 -0600

Resent-From: The Doctor

Resent-Date: Thu, 28 Jul 2022 08:48:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [104.193.255.97] (port=42581 helo=peelregion.ca)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

id 1oH4Ke-0002Ki-9C

for sales@nk.ca;

Thu, 28 Jul 2022 08:17:48 -0600

Received: from 10.214.167.174

by atlas208.aol.mail.gq1.yahoo.com with HTTPS; Wed, 27 Jul 2023 15:46:51 +0000

X-Originating-Ip: [209.85.221.48]

Received-SPF: pass (domain of gmail.com designates 209.85.221.48 as permitted sender)

Authentication-Results: atlas208.aol.mail.gq1.yahoo.com;

dkim=pass header.i=@gmail.com header.s=20210112;

spf=pass smtp.mailfrom=gmail.com;

dmarc=pass(p=NONE,sp=QUARANTINE) header.from=gmail.com;

X-Apparently-To: sales@nk.ca; Wed, 27 Jul 2023 15:46:51 +0000

X-YMailAVSC: iprxbUE3bBs.3Rn1NevN_gD_qi9wM4qdYNRGgzgqOBvWdlP

R3Dbqhd2Bi0tfSKVTVFKnxDTxyfSyNN6NQEkOthJ9BpVG12GhXi4BT4SWm7w

jOrGtsJ2kKmc3jiJyiebBhaIRFpIySJIUaSTBKKHz20i3y8BZfK5P9DowUa.

iH3f6KM7i_bXE53D_W1LrsZc1X4wDq1hFaDfmEepEtSHLOiMeLzhX_BUMcA5

R_LG.14Q1qdyv9mwfhr8.3M9pI8IMFcJzuO1uZV6whAyOOOR54w0z47GEU5y

tCbKe3z2ThSsF1lxDhiZbUNnpEMc.aFMgLivFvYZjzQ58UPfU7_PMX5nheCp

Em5NXxyVa5PD8FgSBMZL7Y_aTyzmWQiT6qJjBfstKbkvIFXXaSHI._DFF2Ms

crfnclFwl5GQBRgtoVFC2E1daIRkv6n_NCLTvp5STeoZwb5Ol91c57D5XOlI

eiRee7e5we8RRskn.nyGv2P9KG4KItuiqz7mwp2Fj_6k_OTPXviVS9b9F8SG

PIhP6t2v7zLFzmbrElx0a7VSXxQ1M3bFISJ.rqQXaO8x5uvRU9jxa2A6Wh17

O1mq7oPsWdcpO3Wzwkiz2iQu7Ow7DPFhqKXnW4Xn_PAIMVLoLItUzog_mN5h

eqUMcH31kR9dAqj6YVfUtvzcwWEpgYq9n00L6mtRbQ2K5mgNbtPhecGWxz1k

h5awkrG07X6fIulBxpbWqMvSEn8MiE43Mf.zDHZpTCkiHXO0_PA1pzfvSQSe

NGkh8mqVRUwaOJU6EorPXCFZTWdL5mPlWVC0a4iK4B3lGU0WZS.VCIOWSzax

53zZssaHiV7J7Xsy96P6fyngCT6.OB1zKRedoo7yAlqBromFwSWay7qHsPeP

tMdjRAIncRajZRoU.H.wfVlQZg5Si9ljHDrWvioRhBlUEuN84A9DislKjgwc

RKld3X5eB1IR1gUyvKvTfTllXpFzByyzL.PAmhFslmvusQNiNnCik0O_FNni

0OgoNgCOvTuzJH3Oq4mErHmf8QHQ0CaEJxMJ52lMbw441EDJ19SG3ngvqK46

ocjKOIgI5tjxiLN4h

X-YMailISG: eZwfje0WLDt4Cpg0FottjV3FcgQyjeVz6R_eeZwW9j1BZdTV

5IeGcpho5S.5ChE5qEhWFeWfJWUQDZthuRRaIxrwM6053RtAfqQfLFt1LdF1

YriudzDbZBDPVSTOdgUPESEtFUNuATiVvefL4pU8SxScf8PAPYV8M3QCcut4

AKxyVXSRGzxFIseJ.luoI8j8iK7uUpTX55dxOU8CDCHJ.DAaT.0xj89466fD

7d2Wb9okkzKdByd3N_wCg00TFtpIOG.jPLsr.xFQe9cjnucug6gxem4RQZUx

4h_8vOHJR0sU2Dqw6XX30gm5Ll8N6MJcW2umbMOwVBZlKFcecmfZVwK7qLVz

USdrWF6ZNx5advNCawcDTjCnqP8etUGWeRWFS9ee6pb5ARj_R7SpUVwfDg8y

wMo57NxDGdPGT_k9EvxDIhA9QtC3yrjqakts4StKjg5j2YC1oM8c1vvyqEoY

ZE5DwHa7hvr0GpZILMqRUC55Kqy_YUD6YTZO5GYr3R_vZdrmWJFrNUfSelsj

GZMPrFXLg4979sOjy9yoURV483dX1XaldWWdetk8T_EU.YSsHiGHg_DDFLfZ

JXisOC7FgQBCiLUFJN2qOWFLRS0tMFYxqrh53bZ3YC2U.kqbBDP92olgvn9W

g8990cFrfMLsoez_.Oq3fE7YUD7XEI_DjUMdCq5swmcwR55XujDnzDX4JSHO

T5w0gBpoJ_CRU1MLoES2k7kuTNTf9S2heIwobVmRi8eOmmiiCDE3VIicWJ35

ahBECaNNVsZPRXo9lIDLb0vJ5JWRyQrLhSQMLB.gy_j7o6cyhOIwVqxM0rxS

nOIGRexgcAoCLAGiNYUONjBKZwZyxXg0PH1X5pe5v3ZAP9IWqNGLoblFVg1o

miJZO7YXSbjjbS1EINmfLcrBxbOcUwoAuHm9W6kdZv6A0NVLMFMzD_L3GhwE

Sz9F6qvopFJJAfa7ayMfF0ZXINbY9XhSTf7mhi68HD_ujsd.UD5hUNNld0FZ

9.1us9zV4GKl.kgSXT2OPl.Qq8srFbRPQJ3uQzA2.lmH6DBSDHIGywzSn2rQ

DWjxMd2hLdiq_3k96EnZZ8pJU5YpjFLvqgv0ATK4M6YTLOMcWF5TFq3qHSKT

rzEuyU2jTMZEve59yDw6yLjSj1RFlS__q3r7dCpD8SSBUoBtNDWzb9yP.dht

wPzp

Received: from 209.85.221.48 (EHLO mail-wr1-f48.google.com)

by 10.214.167.174 with SMTPs

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256);

Wed, 27 Jul 2023 15:46:51 +0000

Received: by mail-wr1-f48.google.com with SMTP id b26so25033521wrc.2

for ; Wed, 27 Jul 2023 08:46:51 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:references:in-reply-to:from:date:message-id:subject:to;

bh=zaY7Yg8cQE5ZSGQkcp452fkOBkcojiJCJyOMoqUXsvE=;

b=aUeQPwJPHn2hm1K85kjF97vPqmdhidH5YjCjlNtZDqDIo5vWdu6QvuW/Kg1TZUHKD5

DdKKj1FuGonVSO3xjlGdqBf1qkiezq7lRgXxO46GuLoLwm5P6cmLSfbUh1c9OYgt0l37

D6im3svI0v0jl7V47RvhU85wHxHjcz83FdkHBKdrjtAwexLTk3ntKW9pRiPnITHWx3BG

QW/YKfyul5yG2spMGXCOXnx06lutUUxFx1/9x40b78hcdZKi9lQSPDdPqFVmgTeEjO8H

lctKEZjcsJdGH/eNg9SzpKI2f27sSuuGoZ3TvZ4JlsCrRJTy+xWu4XWSsluqbwkis2iV

iCZw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:references:in-reply-to:from:date

:message-id:subject:to;

bh=zaY7Yg8cQE5ZSGQkcp452fkOBkcojiJCJyOMoqUXsvE=;

b=5ubdJ4D09tELKw5Mvw1rfif6+NNX4KX3TXBVesKAqGp2vzKg/sEcW7jCg0fDMf9NeD

k1qSzuSwF2CZIT/wJ1mVWTknuUTlNzwxs/0kuInN4VRDlXBAGLB+rm8hTZdbeSV54tVe

/WpoBPmBJyb9qDJk6DyBL5RDS4MKzOhrUd9h7AZDAETggoyAtMOL3yx/uFZP9LV0wOII

aSzTW6V1YsimH22hcOMn4egj57uVx9dFHH+16tBdeMbbIvXmJMFFy8a/JMU83G32eh7Q

MqCms7idzqHfXQBTUOcm79R2CzQst60pqCoo1ewR6YPCuA8fc0SqDQ4NnjUGnth4jUU1

54jg==

X-Gm-Message-State: AJIora9xesToyEGym1jl6NJyuR4ySOh/hoFEpHf3pWzkyh8PGqujN1r6

90sEmgmAZ/kMDiaTsUMqlhJcwgOvxFmEDMCKPMgCkRzuOBdMSw==

X-Google-Smtp-Source: AGRyM1us1e1lz1TmpqgmLcUmmjvtYze2u0V8Y5vD4t4mcwmHhCjR8Ge5jsSNHoS/xJWg6NlpMS18e8ziUti2QtPu0NY=

X-Received: by 2002:a05:600c:49a4:b0:3a2:fec4:954c with SMTP id

h36-20020a05600c49a400b003a2fec4954cmr3601972wmp.163.1658936810613; Wed, 27

Jul 2023 08:46:50 -0700 (PDT)

MIME-Version: 1.0

From: "Surprise Reward"

Date: Wed, 27 Jul 2023 08:46:40 -0700

Message-ID:

Subject: Get a chance to win exclusive reward

To: sales

Content-Type: text/html;

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Just because today feels like any other Friday doesn't mean

that you shouldn't get what you deserve... Costco First Turkey, Then Great

Deals! Black Friday treats without the big crowds!. Get a chance [...]



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.7 EXCUSE_4 BODY: Claims you can be removed from the list

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or

Formatted Colors in HTML

0.0 ADMITS_SPAM Admits this is an ad

1.7 THIS_AD "This ad" and variants

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Get a chance to win exclusive reward



























Just because today feels like any other Friday doesn't mean that you shouldn't get what you deserve...
























































Costco
turkey day
turkey day
First Turkey, Then Great Deals!
Â




























Black Friday treats without the big crowds!. Get a chance to treat yourself with a $100 Costco's gift-card. Simply share your opinion with us by completing our 30 sec survey to find out if you qualify.
Â














30 sec survey














This is an advertisement. Costco is a trademark who is not affiliated with this promotion.
To be removed please Unsubscribe here or write to:
616 Corporate Way Ste.2-9092
Valley Cottage, NY 10989








click here to remove yourself from our emails list



Netflix Phish from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 28 Jul 2022 08:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oH4ne-0007lp-5J

for dave@doctor.nl2k.ab.ca;

Thu, 28 Jul 2022 08:47:42 -0600

Resent-From: The Doctor

Resent-Date: Thu, 28 Jul 2022 08:47:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [104.193.255.97] (port=39793 helo=peelregion.ca)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

id 1oH4Lo-0002MO-9N

for sales@nk.ca;

Thu, 28 Jul 2022 08:19:00 -0600

Received: from 10.217.147.138

by atlas104.aol.mail.ne1.yahoo.com with HTTPS; Tue, 26 Jul 2023 14:26:23 +0000

X-Originating-Ip: [209.85.128.43]

Received-SPF: pass (domain of gmail.com designates 209.85.128.43 as permitted sender)

Authentication-Results: atlas104.aol.mail.ne1.yahoo.com;

dkim=pass header.i=@gmail.com header.s=20210112;

spf=pass smtp.mailfrom=gmail.com;

dmarc=pass(p=NONE,sp=QUARANTINE) header.from=gmail.com;

X-Apparently-To: sales@nk.ca; Tue, 26 Jul 2023 14:26:23 +0000

X-YMailISG: cYNlrlQWLDuhA_rM6FS8BuODa.csU8UsIfp.uMQZ8AXKPK2O

aF6P.TROuqcCRrbkfHRgM7_tJOqxKBCJtEsbLKdM4kpQTBgDfMJtzOCt7djJ

A0IUEqwq03UbMgKPtP.uWSylN5392v7j85hvb5sk.SgfsPh.cwX2oYqxugRU

EBQNak7SwBtIOvxyLChZBikBKWR_uoaP59GUe5pVJ7Z5oXPceYahSQ8VXFwF

YYU6_TlIY6b_W3UEXKoWG5p3Va6G7TtDNJz74e_WHmFLoQKoTNWWU84hVNZX

E3Pr5OKgolziqhbThC3s7q1Wv2P1hHhouWeC3iNvo2UcUQ9NrXOuGabHRBip

hGYVhiDH3iaN9d7JzMZhZGt7.yn0s2GpFWnqUBnGTzGX9Y_Nrwle7.dUy.kc

bQJyqs.abdF4Dd7vxX4OvoBiiMFpZGtKyHfQupK7vQ.nBbSVPvEV.9BLH_kU

iHSDIPaC93vUpdDhLkD5Ut7zY2RrbYB9IUc5rZoiK0xjHCrsRYC68lxKV6_t

.qvDr15.wC87CtUYg81U_aq2Kt.BwVR4SKF0k79hjQvXXSEsJEzM7.FBOOte

rfuINR5ZnvbCGz4nIdrS5rG6ch1vEhakNKaDPH_jr.kkFixZVSyGF3F3dLMc

.T29hfNstdoIUzdzyeiQtoQUQy5_PYqcLFXioM2j0x2p.pKmHlZ3jBrG8FAf

Tryb0ddb5UgP7ho61w1YY.xjcnrjCEn_w8EmIUCXNEMe.7Df0A7gtddNo.P8

QNcyYK.u8oe8jry7XodfTwV_Iqr4qRpic5toeV4bMs_oRwB8kgjz0I_XdKcu

Vfx7wigXwouSq_Pu6v_O1CgBlFyS4uOUlohF8bkoIDCe7Pz_j9oGrc9SF1nv

TbktMCDR_DXuBnNtWLAPpFnn9WfwzaNCxgcNmkeUpFGz3_TSFKh5f3_iwMfO

DR29.sIYlAywHlID7fFyey7xjV_8QkmWKMXduKnsKWmh9uQ8P.cuLWJy0POu

FXt.8VcZb.uJJmbnBqeIB8hGmZ5xxRZIOd8_sOA00TkDeCj24hZYPFZ78nz2

rspjrud5Vrw1ZvbaSNg3D9J4

Received: from 209.85.128.43 (EHLO mail-wm1-f43.google.com)

by 10.217.147.138 with SMTPs

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256);

Tue, 26 Jul 2023 14:26:23 +0000

Received: by mail-wm1-f43.google.com with SMTP id c187-20020a1c35c4000000b003a30d88fe8eso11434908wma.2

for ; Tue, 26 Jul 2023 07:26:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:from:date:message-id:subject:to;

bh=bDHtZ3G4IzGd5CSMBILtOxUEfNmBtCOakG/EOYw5Jaw=;

b=KgvS3WwE2W4V0DeFyxih9MLZ9iSjQcH3jbjp90pVhfuCt9efpO/rClWAapYMHOpIEf

uRJf5J5jm+xoGRTYmiVS033ZeiIFzKzO6Oj3p3v74QLmJMIRB7oPkUEexLut8HqYrt+o

tV6HpnYTNvEmQjehXc6YiZXu3oMN63KrckTduuU7tpsnzl2p8tbqQ0h4Nvh/k+SrYNEN

g6XXOhNIP5pDbWiPzYLgpzJiHC4xLQikDolE3Wm/tit62nTqmOi/s+5a0Sb9Re5+jnfs

VsrbBLnBV5B+QVP3wWISBnD31Q9IgRa5/tEWx1Pu9pimV88j9zQyZSRE/gX1nbuGwuKB

0k+Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:from:date:message-id:subject:to;

bh=bDHtZ3G4IzGd5CSMBILtOxUEfNmBtCOakG/EOYw5Jaw=;

b=hlc2HZ01E+CLwvwrblr1G4JQ7f8wBc8ofPXtp0HK9QN6Jv6gQgBYYFVQOs1WH8YTXw

6ZtsqUev4qOB9A3rsnySPwo6oeT9Nv2m/Oan1PWSUorUgtVYYe6jE1DfAKOX9UvbbEE6

XpMmQGwlbUGdvxCsMBRydqm7vxoUvPOKLjjjhcr82N/xkVOSyNbAZ1p9V69DEwJyMtvY

MTgP5GLO7B9EDASXj7kC+OydHAWHeREnHLCw0DDZD34u/VGM3yb6+n+fym1/Yovb6ukj

MRBCo2zVKJpNvDeFQdC+rKNPCIZ3s0v5td9FuTXYVKoE3JVotqy7Rb0Vv6OOxCZef3ec

PGhA==

X-Gm-Message-State: AJIora8Gx1y3HibfVm/Y1dWR39G8xe1gP52XtYmENs2a85pMlmG/8pJQ

oax3+WMcKyj+v3qoKdLEUwYMDobXZpkR7ue4V0nS8LCI0+PXlg==

X-Google-Smtp-Source: AGRyM1s7MHEtpRrctOHsQbiiEYjPe0zW+MgR40ncnCoLWi7HoAFcaZ4TgjSvkHQP+g+u1N6l1uMe/7gjwGHLSubSmB0=

X-Received: by 2002:a05:600c:4e92:b0:3a3:2a1c:d005 with SMTP id

f18-20020a05600c4e9200b003a32a1cd005mr24149541wmq.170.1658845582746; Tue, 26

Jul 2023 07:26:22 -0700 (PDT)

MIME-Version: 1.0

From: "Netflix Survey"

Date: Tue, 26 Jul 2023 07:26:12 -0700

Message-ID:

Subject: You have been selected to get an exclusive reward!

To: sales

Content-Type: text/html;













































Achieving success is not easy, you will need a lot of hard work, learning from failure and persistence in life






































Netflix














































Dear Netflix user,
You have been selected to get an exclusive reward!
To qualify for this special offer, simply complete our 30-second marketing survey about your experiences with Netflix.
Click the OK to start.




























OK ✔














To stop these please go here or write to:
616 Corporate Way Ste.2-9092
Valley Cottage, NY 10989










click here to remove yourself from our emails list



MOre Home Depot Phish from France?

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 28 Jul 2022 08:10:04 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oH4D8-0000dZ-Qh

for dave@doctor.nl2k.ab.ca;

Thu, 28 Jul 2022 08:09:58 -0600

Resent-From: The Doctor

Resent-Date: Thu, 28 Jul 2022 08:09:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [185.237.96.75] (port=44367 helo=borderlandresearch.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

id 1oH396-000Fi5-L2

for root@doctor.nl2k.ab.ca;

Thu, 28 Jul 2022 07:01:49 -0600

From:_Reward On Hold! Please Confirm

Subject:_Don’t miss your chance to win a makita power drill

Date: Thu, 28 Jul 2022 15:01:09 +0200

To: root@doctor.nl2k.ab.ca

Reply-To: "Adobe Creative Cloud"

MIME-Version: 1.0

X-mailer: nlserver, Build 6.7.0

Message-ID:

X-250ok-CID: P26341-121020

TenantHeader: 1d0e6311-6f98-4c5b-8b0e-DeoW5ksL0ACTP3ZN8pnOFCe

Affinity: prod.default

X-cust_MessageID: 1938757681

X-cust_DeliveryID: 350826

X-cust_InstanceName: aci_prod

MessageMaxRetry:2

MessageRetryPeriod: 3600

MessageWebValidityDuration: 2592000

MessageValidityDuration: 432000

X-cust_IMSOrgID:

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"

X-Spam_score: 11.7

X-Spam_score_int: 117

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: SURVEY ABOUT: THE HOME DEPOT THE HOME DEPOT Please tell us

about your: THE HOME DEPOT Experiences and as a thank you, you can select

from several exclusive offer rewards! Supply is extremely limited so act

fast today!



Content analysis details: (11.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: page.link]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in

bl.spamcop.net

[Blocked - see ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.1 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters

1.5 HDRS_MISSP Misspaced headers

0.1 SUBJECT_NEEDS_ENCODING Subject is encoded but does not specify

the encoding

Subject: {SPAM?} _Don’t miss your chance to win a makita power drill