Untitled


text/x-generic 1454749142.H549337P6790.01-sh-r10u35-ss38.simplehelix.host,S=5803 ( ASCII mail text )

Return-path: <marcinthc252@interia.pl>
Envelope-to: brandie_hutchinson@ufe-co.com
Delivery-date: Sat, 06 Feb 2016 02:59:02 -0600
Received: from mx1.comphas.it ([5.249.138.94]:52266 helo=Server1.local)
	by 01-sh-r10u35-ss38.simplehelix.host with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
	(Exim 4.86)
	(envelope-from <marcinthc252@interia.pl>)
	id 1aRyhp-0001kE-3Z
	for brandie_hutchinson@ufe-co.com; Sat, 06 Feb 2016 02:59:02 -0600
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
Received: from fvljm.com (unknown [31.154.89.157])
	by Server1.local (Postfix) with ESMTPSA id 653D41AADB;
	Sat,  6 Feb 2016 09:46:43 +0100 (CET)
From: <marcinthc252@interia.pl>
To: "Brandie Hutchinson" <brandie_hutchinson@ufe-co.com>, "Brock"
 <eloy.angus@aol.com>, "Bronislaw Palka" <Palka841@cennik.com.pl>, "Bubble Witch Saga" <bubblewitchsaga@newsletter.king.com>, "Bubble Witch Saga" <info@newsletter.king.com>
Date: Sat, 6 Feb 2016 09:45:37 +0100
Message-ID: <0000d659f5ca$9cd7dc4c$c06b3f68$@interia.pl>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0001_13B194F1.26D06EB7"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdFnus2aDc7FqlRD4t7q+sHVAtQiHA==
Content-Language: en-us
X-Spam-Status: Yes, score=21.8
X-Spam-Score: 218
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "01-sh-r10u35-ss38.simplehelix.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.

 Content preview:  Hello! New message, please read <http://bayranhcam.tk/begin.php?5cg01>
    marcinthc252@interia.pl [...]

 Content analysis details:   (21.8 points, 5.0 required)

  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  3.1 AXB_JT_FOLNO0          JT's fingerprint
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [5.249.138.94 listed in psbl.surriel.com]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             (marcinthc252[at]interia.pl)
  2.5 RCVD_IN_MSPIKE_L3      RBL: Low reputation (-3)
                             [5.249.138.94 listed in bl.mailspike.net]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=marcinthc252%40interia.pl;ip=5.249.138.94;r=01-sh-r10u35-ss38.simplehelix.host]
  0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
                             digit (marcinthc252[at]interia.pl)
  0.0 HTML_MESSAGE           BODY: HTML included in message
  5.0 KAM_TK                 RAW: Abuse of .tk domain registrar which offers free domains
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  2.5 DUP_SUSP_HDR           Duplicate suspicious message headers
  0.0 RCVD_IN_MSPIKE_BL      Mailspike blacklisted
X-Spam-Flag: YES
Subject:  ***SPAM***  Fw: new important message

This is a multipart message in MIME format.

------=_NextPart_000_0001_13B194F1.26D06EB7
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hello!


New message, please read <http://bayranhcam.tk/begin.php?5cg01>


marcinthc252@interia.pl


------=_NextPart_000_0001_13B194F1.26D06EB7
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas=
-microsoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:off=
ice:word" xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml"=
 xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV=3D"C=
ontent-Type" CONTENT=3D"text/html; charset=3Dus-ascii"><meta name=3DGe=
nerator content=3D"Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
=2EMsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:2.0cm 42.5pt 2.0cm 3.0cm;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN link=3D"#0563=
C1" vlink=3D"#954F72"><div class=3DWordSection1><p class=3DMsoNormal><=
span lang=3DEN-US>Hello!<o:p></o:p></span></p><p class=3DMsoNormal><sp=
an lang=3DEN-US><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><span=
 lang=3DEN-US><b>New message, please read</b> <a href=3D"http://bayran=
hcam.tk/begin.php?5cg01">http://bayranhcam.tk/begin.php</a><o:p></o:p>=
</span></p><p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></=
span></p><p class=3DMsoNormal><span lang=3DEN-US>marcinthc252@interia.=
pl<o:p></o:p></span></p></div></body></html>

------=_NextPart_000_0001_13B194F1.26D06EB7--