GFI E-mail Test with F-prot

[Rose, Bobby]

Any ideas about this activex bugger?
In the message they have an IFRAME marker that sources
http://www.gfi.com/emailsecuritytest/ax.htm 
That page contains the code.

I'm trying to figure out how their content scanning would determine if
the message had executable code.  Wouldn't it have to follow the links
embedded in every message or are they just removing any code that
sources an external source?  If that's the case, what if it's a legit
sourcing?