Except the actual link takes you to a phishing site
The actual header is
Delivery-date: Tue, 22 May 2012 13:02:02 +0100
Received: from [212.159.8.109] (helo=avasin17.plus.net)
by inmx01.plus.net with esmtp (PlusNet MXCore v2.00) id 1SWnms-0000WT-9L
for <snip>; Tue, 22 May 2012 13:02:02 +0100
Received: from mail.giftsgenie.in ([182.18.140.43])
by avasin17.plus.net with Plusnet Cloudmark Gateway
id D01z1j0020wNQUe01021qw; Tue, 22 May 2012 13:02:02 +0100
X-CM-Score: 0.00
X-CNFS-Analysis: v=2.0 cv=XfwLPfF5 c=1 sm=1 a=M20wWworYiKPJwCdmTDx6Q==:17
a=Dyoqhi_TatcA:10 a=oGxiN2Irl4QA:10 a=L4qnMgM3Va4A:10 a=pDPmxvSol7IA:10
a=Cfj4BQAnxiAA:10 a=n1sWTDmVAAAA:8 a=eWUsc8H4AAAA:8 a=y2OgE_ozAAAA:8
a=l518iwJ_AAAA:8 a=Dg8ajZtuAAAA:8 a=sScr6U9RAAAA:8 a=URgeTnf6yR6OLHLrZbEA:9
a=nvpgLVaWMYdWwIfhSdIA:7 a=Ft8UYL4EG9YA:10 a=_W_S_7VecoQA:10
a=8bKuS1BDVToA:10 a=bNyUOZXVdd4A:10 a=1vm7oQD3k_TfqLTI:21
a=oM5aRqcI293H0kkg:21 a=M20wWworYiKPJwCdmTDx6Q==:117
Received: (qmail 4550 invoked by uid 1019); 22 May 2012 11:59:36 -0000
Received: from customer50208.105.wv.cust.t-mobile.co.uk (HELO User) (test@178.105.196.31)
by mail.giftsgenie.in with SMTP; 22 May 2012 11:59:36 -0000
Reply-To: <onlinecommunications@o2online.co.uk>
From: "The O2 Team"<onlinecommunications@o2online.co.uk>
Date: Tue, 22 May 2012 13:01:28 +0100
MIME-Version: 1.0
Does anybody understand the Cloudmark coding
