Spam detection software, running on the system "weak.org", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  About this mailing: You are receiving this e-mail
  because you subscribed to MSN Featured Offers. Microsoft respects your
  privacy. If you do not wish to receive this MSN Featured Offers e-mail,
  please click the "Unsubscribe" link below. This will not unsubscribe you
  from e-mail communications from third-party advertisers that may appear
  in MSN Feature Offers. This shall not constitute an offer by MSN. MSN
  shall not be responsible or liable for the advertisers' content nor any
  of the goods or service advertised. Prices and item availability subject
  to change without notice. [...] 

Content analysis details:   (44.1 points, 4.3 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.3 HELO_DYNAMIC_HCC       Relay HELO'd using suspicious hostname (HCC)
 3.4 HELO_DYNAMIC_IPADDR    Relay HELO'd using suspicious hostname (IP addr
                            1)
 1.3 SPF_FAIL               SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/why.html?sender=jammer%40weak.org&ip=71.1.248.72&receiver=weak.org]
 0.6 HTML_IMAGE_ONLY_20     BODY: HTML: images with 1600-2000 bytes of words
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.0 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                            above 50%
                            [cf: 100]
 5.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [71.1.248.72 listed in dnsbl.sorbs.net]
  11 URIBL_SBL              Contains an URL listed in the SBL blocklist
                            [URIs: approvedrain.com]
 3.3 URIBL_AB_SURBL         Contains an URL listed in the AB SURBL blocklist
                            [URIs: standrain.com approvedrain.com]
                            [mustrain.com comeprice.com storehigh.com]
 3.4 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
                            [URIs: standrain.com approvedrain.com]
                            [mustrain.com comeprice.com storehigh.com]
 1.5 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: standrain.com approvedrain.com]
                            [mustrain.com comeprice.com storehigh.com]
 2.6 URIBL_OB_SURBL         Contains an URL listed in the OB SURBL blocklist
                            [URIs: standrain.com approvedrain.com]
                            [mustrain.com comeprice.com storehigh.com]
 3.6 URIBL_SC_SURBL         Contains an URL listed in the SC SURBL blocklist
                            [URIs: standrain.com approvedrain.com]
                            [mustrain.com comeprice.com storehigh.com]
 0.5 HTML_SHORT_LINK_IMG_3  HTML is very short with a linked image

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

