The DKIM-Signature isn't correct. They do not use sha1. This a fishing attack vector in my opinion.

DKIM-Signature: v=1; a=rsa-sha1;