Canadian Business Review Board phish from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 01 Aug 2022 14:40:11 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oIcCq-00077w-5a

for dave@doctor.nl2k.ab.ca;

Mon, 01 Aug 2022 14:40:04 -0600

Resent-From: The Doctor

Resent-Date: Mon, 1 Aug 2022 14:40:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f197.google.com ([209.85.214.197]:37781)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oIYaW-000Ab5-7i

for sales@nk.ca;

Mon, 01 Aug 2022 10:48:22 -0600

Received: by mail-pl1-f197.google.com with SMTP id u10-20020a170903124a00b0016ec85be3b7so4474496plh.4

for ; Mon, 01 Aug 2022 09:47:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thecbrb-ca.20210112.gappssmtp.com; s=20210112;

h=to:from:subject:date:message-id:mime-version:from:to:cc;

bh=6UHR9Jfj+NcVyx219dd+BeQDVBQsXEveVUfTm+BtMCQ=;

b=CIXKgTEJorMNVkV7uriCsoa3IDNe4jtsRPCv3ZswsIS/45ra5EY6OBYSMW/srsFHu2

2FaGC8Rvgmx8URcAb4oYj6dG28FiGK7czKrgWnuRqKhX+86fcB0dcFjBIdDKkdVydxZY

XIRGq+1Q5pz4Rx8OjNeiVJ3/4rAsN8aAx50eX0GOsUrXDXiEarBZ+D4okO4TRUH3akm5

e4sm+HEtA9SVnDVx+fedtflKqlKCoqRMsWgs0XAc7cwuFUoT2dULc84kV5rzBqNhPOPg

KdogTbWQc9UrfZOPWSodGHU14iRhmmHhlOWOITF5+RvMJe0Eqq7jS+mXaITg1zQQLRdX

eKpA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc;

bh=6UHR9Jfj+NcVyx219dd+BeQDVBQsXEveVUfTm+BtMCQ=;

b=IrDSc5WvwFzskqwly4NDzI6IiNxevALQFKKiIc+pSQRoBre3rpk1JayuzZtPUoFGuU

WkMhMGX3IN3byipE7jlw71ahj5RFGd1+kSecvpwyGnvSl8vhxxvrvkGTzxytc6UBLszy

GacE0q3aLMdg07dVIKnkhCi2F8Q7Ily0lox7OnI0ZO4Z8xrjHeKxd5AfvyiVAamK1wns

rDELfeSlvGhRrNnu3qD8Hb62GQSKwyYlgm6R1UDJ0WT7KZduplQx/DUQGAYtSZlWLHtp

ARBOcvJGc/wy/sbJBK+TJZwPg0ws1edBO1TMYnFcP4qBuFhfpzyx9uY8tqvzHgKxxVWY

h/Gw==

X-Gm-Message-State: ACgBeo0UYd6o0+qRKWDmZfESwk/mdD5yIRr6vm23G3RuGy+j1PrB0uzh

3/y9NbbXnKl30AqBLB0uFUXj2dVWU47o

X-Google-Smtp-Source: AA6agR6YWYeAr02esHc3+6ETEZ8B8TTXS+FSvwsnzEWxTpeM9jk1JdF115WGMUsvHPR8OcOGKGDPnC2afw==

MIME-Version: 1.0

X-Received: by 2002:a17:902:ea0d:b0:16d:80f9:da54 with SMTP id

s13-20020a170902ea0d00b0016d80f9da54mr17118773plg.150.1659372473179; Mon, 01

Aug 2022 09:47:53 -0700 (PDT)

Message-ID: <000000000000d066ef05e530c252@google.com>

Date: Mon, 01 Aug 2022 16:47:53 +0000

Subject: Synergy selected for CBRB Best Businesses In Canada 2022

From: nationalreviewboard@thecbrb.ca

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hello,



Congratulations on being selected and approved for the CBRB Best Businesses

In Canada 2022.



This offer is presented only to businesses that have maintained a 4+ star

Google review rating or equivalent proof of customer satisfaction.



Representing the Best Businesses in Canada, the CBRB Canadian Business

Review Board Inc. has found that your business meets strong consumer

satisfaction standards and we look forward to recommending your services.



Membership in the CBRB Best Businesses In Canada 2022 includes listing in

the exclusive Best Businesses In Canada 2022 Directory, CBRB Best

Businesses Canada 2022 Verification Certificate & Badge, and promotional

content to promote Synergy commitment to upholding:



- Strong Vision

- Customer-centric Approach

- Customer Satisfaction

- Business Leadership



Following registration, you will receive:



-CBRB Best Businesses In Canada 2022 Verification Certificate



-CBRB Best Businesses In Canada 2022 Verification Badge



-CBRB Best Businesses In Canada 2022 Directory Listing & Profile Page



-CBRB Canadian Business Review Board Inc will promote your business

excellence on social media and multiple marketing platforms including ads

targeting specific clients in your city and surrounding areas.



To accept your CBRB Best Businesses In Canada Membership & Verification,

please submit the following form:

https://forms.gle/9yLsYYsX9YigxT1z8



If you have any questions, feel free to let us know!



Taylor Hernandez

CBRB Canadian Business Review Board Inc

Membership Committee

Best Businesses In Canada

1-855-222-5550

www.thecbrb.ca

@thecbrb

@thecbrb_canada











If you would like to unsubscribe from future correspondence, please email

your request to unsubscribe@thecbrb.com

Nigerian Phish from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 01 Aug 2022 08:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oIWIy-000FV8-M3

for dave@doctor.nl2k.ab.ca;

Mon, 01 Aug 2022 08:22:00 -0600

Resent-From: The Doctor

Resent-Date: Mon, 1 Aug 2022 08:22:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f181.google.com ([209.85.210.181]:43851)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oIW7z-000ERI-4I

for doctor@doctor.nl2k.ab.ca;

Mon, 01 Aug 2022 08:10:44 -0600

Received: by mail-pf1-f181.google.com with SMTP id u133so4054137pfc.10

for ; Mon, 01 Aug 2022 07:10:17 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc;

bh=3n9EO+/pxtIFmjix5GV27i0AAZSwDwZoR024TErBNXE=;

b=Wl2vfQPH/0mq5/spK2FTiZIeN60KtnjwoYm6vgIPXXkVO/R6NJgVWkf5XZntjKheqs

JDxQWtkDMhFpBCI48NfSWbGqrLkpCyI2r2FfE2jndqqANh1Cx66VxYzn3NaejFrrWmpo

dOgLOG9IADMVP6ddMPf0Vhaigc9zVIxmiV0/N0IXb6hcvOjlvEAlnnmKIUTnRxmlfKbe

hSpQKDLxO/JS5lVtwMHPDbBxo30p/ldIaROqLNenwSOSEQWfAcdWwhUlYlaWRttinCrH

Qv4w3D6V9Ut6zmZuHpW0IoY262K2gPoLaZbiRdiuJ+K3FoEG4B8rN4tbWZr3KmULd/nG

2KTQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc;

bh=3n9EO+/pxtIFmjix5GV27i0AAZSwDwZoR024TErBNXE=;

b=SoMxUbUEHdAV1F9jvB/NveeOjXd6WDmRHN/LSnrLK8eZo1e/3kffA9snMvFmrRzpSB

htoQCWcgbNVlT/Vu3aw2Kak2kkfWSHISVskY2/aXNOPJl+YlkmpJd5/hc76kQLvR/hIo

6JQQqymVTsPAQAloTXZq2gHhGbBF7qifxRKXyyY6Li7bLLZOf31RN3KfTuOiRX6T4pow

rfKeVAst4oRwS7nyg7By8OiBmmmY62iehcxgAKP8bMbsUlAoifQT3y8ExekAdV4B9w3u

TC3C9h7VXyzYyzJUtPWEcKzt0pRsocybxGEIc/g1Uz6hqg61xjB8fB5Uzu2fs93RDjTe

BbeA==

X-Gm-Message-State: ACgBeo21JuXVFxxJ7GbIPvFIBjowm8n+7vlBHUTuZyyS+Yu8H+juuE2d

LqrlpLToDhdjq5EYzXVi6rFU9AuLEjTQCFwQmxg5oWiplMmXaQ==

X-Google-Smtp-Source: AA6agR75GMO/MR5OcZzXD7Z3YIHlPLFSRf1FxHGFJe/n5228tM1CV+iRLkwaifwXhRBgXzB2l8hnq+9AyOO6hZYiVuA=

X-Received: by 2002:a63:9144:0:b0:41b:bd2e:2261 with SMTP id

l65-20020a639144000000b0041bbd2e2261mr9598625pge.533.1659363011748; Mon, 01

Aug 2022 07:10:11 -0700 (PDT)

MIME-Version: 1.0

From: "Mr. Osman Mohammed"

Date: Mon, 1 Aug 2022 14:03:10 -0700

Message-ID:

Subject: ATTN:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000de68c605e52e8e35"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 11.7

X-Spam_score_int: 117

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ATTN: We (Visa Incorporation Burkina Faso) is now in charge

of your payment has been arranged to be paid to you through ATM VISA CARD.

An ATM Visa Card will be issued in your name and your Three Hundred and [...]





Content analysis details: (11.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.181 listed in wl.mailspike.net]

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[anthonyjake812[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[anthonyjake812[at]gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 MONEY_ATM_CARD Lots of money on an ATM card

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} ATTN:



--000000000000de68c605e52e8e35

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



ATTN:



We (Visa Incorporation Burkina Faso) is now in charge of your payment has

been arranged to be paid to you through ATM VISA CARD. An ATM Visa Card

will be issued in your name and your Three Hundred and Thirty Thousand

United State Dollars ($330,000.00) will be loaded into it, and deliver it

to your postal address with the Pin code Number, as to enable you

withdrawal your funds from any ATM Machine anywhere in the world.



This is so because Visa Card Inc. is a global payments technology company

that enables consumers, businesses, financial institutions and governments

to use digital currency instead of cash and checks, and the Government

choose us to payout all the compensation funds via atm visa card to scammed

beneficiaries.





An ATM card will be issued to you immediately which you can use to withdraw

your funds from any ATM Machine, but the maximum is $20,000 dollars per day

because the Card has been upgrade. So if you like to receive your funds

through this means you=E2=80=99re advised to confirm with the following inf=

ormation

as stated below:



1. Your Full Name:

2. Address Where You Want the Courier Company to Send Your ATM Card To

or (P.O Box):

3. Your Age:

4. Occupation:

5. Cell/Mobile Number:



Please Be Warned, as The United Nations Anti-Crime Commission and the

United State Government does not instruct any other Bank or agent in this

payment except my office. we advise you to stop all the communications you

are having with any other Agent or bank officials in Europe, Asia and

Africa regarding to your payment.



Thanks for your understanding as you follow instructions.



Yours in Services.



Honorable Mr. Osman Mohammed



Director ATM VISA CARD Issuance Department

(Visa Incorporation Burkina Faso).



--000000000000de68c605e52e8e35

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





ATTN:

We (Visa Incorporation Burkina Faso) is now in charge of=20

your payment has been arranged to be paid to you through ATM VISA CARD.=20

An ATM Visa Card will be issued in your name and your Three Hundred and=20

Thirty Thousand United State Dollars ($330,000.00) will be loaded into=20

it, and deliver it to your postal address with the Pin code Number, as=20

to enable you withdrawal your funds from any ATM Machine anywhere in the

world.

This is so because Visa Card Inc. is a global payments=20

technology company that enables consumers, businesses, financial=20

institutions and governments to use digital currency instead of cash and

checks, and the Government choose us to payout all the compensation=20

funds via atm visa card to scammed beneficiaries.


An ATM=20

card will be issued to you immediately which you can use to withdraw=20

your funds from any ATM Machine, but the maximum is $20,000 dollars per=20

day because the Card has been upgrade. So if you like to receive your=20

funds through this means you=E2=80=99re advised to confirm with the followi=

ng=20

information as stated below:

1. Your Full Name:
2. Address Where =

You Want the Courier Company to Send Your ATM Card To
or (P.O Box):
3=

. Your Age:
4. Occupation:
5. Cell/Mobile Number:

Please

Be Warned, as The United Nations Anti-Crime Commission and the United=20

State Government does not instruct any other Bank or agent in this=20

payment except my office. we advise you to stop all the communications=20

you are having with any other Agent or bank officials in Europe, Asia=20

and Africa regarding to your payment.

Thanks for your understanding =

as you follow instructions.

Yours in Services.

Honorable Mr. =

Osman Mohammed

Director ATM VISA CARD Issuance Department
(Visa I=

ncorporation Burkina Faso).







--000000000000de68c605e52e8e35--

Pain Fix Phish from Russia

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 01 Aug 2022 08:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oIWI8-000FNQ-Ie

for dave@doctor.nl2k.ab.ca;

Mon, 01 Aug 2022 08:21:08 -0600

Resent-From: The Doctor

Resent-Date: Mon, 1 Aug 2022 08:21:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [193.108.114.128] (port=39094 helo=borderlandresearch.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

id 1oIVek-000BCm-IA

for doctor@netknow.ca;

Mon, 01 Aug 2022 07:40:31 -0600

From:_20 Second Pain Fix

Subject:_Top Doc: “Neuropathic Pain? Do This Immediately…” (End Neuropathy)

Date: Mon, 01 Aug 2022 15:39:59 +0200

To: doctor@netknow.ca

Reply-To: "Adobe Creative Cloud"

MIME-Version: 1.0

X-mailer: nlserver, Build 6.7.0

Message-ID:

X-250ok-CID: P26341-121020

TenantHeader: 1d0e6311-6f98-4c5b-8b0e-VdNkwlkcf8AXEoWJZmkgB1S

Affinity: prod.default

X-cust_MessageID: 1938757681

X-cust_DeliveryID: 350826

X-cust_InstanceName: aci_prod

MessageMaxRetry:20

MessageRetryPeriod: 3600

MessageWebValidityDuration: 2592000

MessageValidityDuration: 432000

X-cust_IMSOrgID:

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"

X-Spam_score: 9.9

X-Spam_score_int: 99

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: |MC:SUBJECT| |MC_PREVIEW_TEXT| View this email in your

browser If your doctor ever told you…



Content analysis details: (9.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: page.link]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.1 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters

1.5 HDRS_MISSP Misspaced headers

0.1 SUBJECT_NEEDS_ENCODING Subject is encoded but does not specify

the encoding

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} _Top Doc: “Neuropathic Pain? Do This Immediately…” (End Neuropathy)



















*|MC:SUBJECT|*

























































































View this email in your browser



































































If your doctor ever told you…





That the only thing left to do was amputate…





Here’s a story of how my mom went from…





Almost losing her leg to becoming pain-free once again.



















































































This nerve pain breakthrough is so astonishing…





Over 13,039 Americans have finally become able to live their normal life…





… after years of agony from numbness, pins and needles, and a relentless burning sensation all over their body.





Thanks to what scientists call…





The “Nerve Control Emergency Response Program”.





You can now enjoy a healthy, normal life without the nightmare of losing a leg.





Discover what this “Nerve Control Emergency Response Program” is…





And how it can make you pain-free just like my mom.





=> Click here to discover more >> How my Mom went from ‘extreme pain’ to pain-free? (True story)

























































Home Depot Phish from Moscow, Russia

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 31 Jul 2022 23:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oINaY-000ITT-HR

for dave@doctor.nl2k.ab.ca;

Sun, 31 Jul 2022 23:03:34 -0600

Resent-From: The Doctor

Resent-Date: Sun, 31 Jul 2022 23:03:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [193.108.114.128] (port=49006 helo=laimanting.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

id 1oIJdS-000JUl-Fn

for bin@nl2k.ab.ca;

Sun, 31 Jul 2022 18:50:23 -0600

From:_Congratulations

Subject:_We want to reward you for your feedback!

Date: Sun, 31 Jul 2022 16:18:25 +0200

To: bin@nl2k.ab.ca

Reply-To: "Adobe Creative Cloud"

MIME-Version: 1.0

X-mailer: nlserver, Build 6.7.0

Message-ID:

X-250ok-CID: P26341-121020

TenantHeader: 1d0e6311-6f98-4c5b-8b0e-CqZ5avuSFgvmgRxWOOtrhR1

Affinity: prod.default

X-cust_MessageID: 1938757681

X-cust_DeliveryID: 350826

X-cust_InstanceName: aci_prod

MessageMaxRetry:20

MessageRetryPeriod: 3600

MessageWebValidityDuration: 2592000

MessageValidityDuration: 432000

X-cust_IMSOrgID:

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"

X-Spam_score: 13.1

X-Spam_score_int: 131

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: SURVEY ABOUT: THE HOME DEPOT THE HOME DEPOT Please tell us

about your: THE HOME DEPOT Experiences and as a thank you, you can select

from several exclusive offer rewards! Supply is extremely limited so act

fast today!



Content analysis details: (13.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: page.link]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[193.108.114.128 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel

letters

1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.5 HDRS_MISSP Misspaced headers

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} _We want to reward you for your feedback!