Consider performing a
SpamAssassin Rule: HTTP_ESCAPED_HOST
Standard description: Uses %-escapes inside a URL's hostname
Explanation
The message includes HTML with an obfuscated URL. This is probably an attempt to avoid text-based filters
Further Info
The default scores for this rule can be found in the online list of tests.