[Openfirst-debug] SPAM Fwd: more

[James J. <Wal...@no...>]

Spam detection software, running on the system "webone.timginn.com", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Hello, You have been chosen to participate in an
  invitation only limited time event! Are you currently paying over 3% for
  your mortgage? STOP! We can help you lower that today! Answer only a few
  questions and we can give you an approval in under 30 seconds it is that
  simple! [...] 

Content analysis details:   (18.2 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.4 HELO_DYNAMIC_IPADDR    Relay HELO'd using suspicious hostname (IP addr
                            1)
 0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay lines
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [71.255.48.203 listed in dnsbl.sorbs.net]
 3.1 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [71.255.48.203 listed in sbl-xbl.spamhaus.org]
 1.7 RCVD_IN_NJABL_DUL      RBL: NJABL: dialup sender did non-local SMTP
                            [71.255.48.203 listed in combined.njabl.org]
 1.1 URIBL_SBL              Contains an URL listed in the SBL blocklist
                            [URIs: groovyloans.com]
 3.4 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
                            [URIs: groovyloans.com greatloantimes.com]
 3.6 URIBL_SC_SURBL         Contains an URL listed in the SC SURBL blocklist
                            [URIs: groovyloans.com greatloantimes.com]