Return-Path: <yzyexxy@jimser.eu>
Delivered-To: kevin+spam@sesco.ie
Received: from webhosting1900.is.cc
	by webhosting1900.is.cc with LMTP
	id IEgYESXsJF2ajg4ArtUB9w
	(envelope-from <yzyexxy@jimser.eu>)
	for <kevin+spam@sesco.ie>; Tue, 09 Jul 2019 15:33:57 -0400
Return-path: <yzyexxy@jimser.eu>
Envelope-to: kevin@sesco.ie
Delivery-date: Tue, 09 Jul 2019 15:33:57 -0400
Received: from smtp54.bigcommerce.net ([104.195.80.18]:36769)
	by webhosting1900.is.cc with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
	(Exim 4.92)
	(envelope-from <yzyexxy@jimser.eu>)
	id 1hkvsA-00407j-Lk
	for kevin@sesco.ie; Tue, 09 Jul 2019 15:33:57 -0400
Received: from mail12.bigcommerce.com (10.171.25.100) by smtp52.bigcommerce.net id h4jm242k0a4e for <kevin@sesco.ie>; Tue, 9 Jul 2019 13:07:44 -0500 (envelope-from <yzyexxy@jimser.eu>)
Received: from mail.jimser.eu (mail.jimser.eu [5.199.139.92])
	by mail12.bigcommerce.com (Postfix) with ESMTP id A7F1B400311
	for <now@securitydirect.ie>; Tue,  9 Jul 2019 13:07:42 -0500 (CDT)
Received: from jimser.eu (unknown [185.48.248.138])
	by mail.jimser.eu (Postfix) with ESMTPA id 3C272801764;
	Tue,  9 Jul 2019 20:33:33 +0300 (EEST)
Message-ID: <yzyexxy64263734.21506136@mail.jimser.eu>
From: "Pill shipping" <yzyexxy@jimser.eu>
To: <contact@scansounds.ie>
Date: Tue, 09 Jul 2019 20:35:20 +0300
MIME-Version: 1.0
Content-Type: multipart/related;
	type="multipart/alternative";
	boundary="----=_NextPart_000_0006_01D53695.D1453B60"
Precedence: bulk
List-Id: b34026757v31352787
X-Complaints-To: abuse@jimser.eu
List-Unsubscribe: <http://jimser.eu/ru/unsubscribe/do?hash=3548461500637682>
X-Spam-Status: Yes, score=12.1
X-Spam-Score: 121
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "webhosting1900.is.cc",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  
 Content analysis details:   (12.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: tinderson.eu]
  3.5 INTERSERVER_RULE_SPAMMY_NETWORK RBL: In Spammy Network RBL added
                              3.5 to score
                       [5.199.139.92 listed in rblspamassassin.interserver.net]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=yzyexxy%40jimser.eu;ip=104.195.80.18;r=webhosting1900.is.cc]
  0.7 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.3 HTML_IMAGE_ONLY_04     BODY: HTML: images with 0-400 bytes of words
  0.5 KAM_EU                 RAW: Prevalent use of .eu in spam/malware
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL
                             blocklist
                             [URIs: tinderson.eu]
 -0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at https://www.dnswl.org/,
                              no trust
                             [104.195.80.18 listed in list.dnswl.org]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
 -1.0 MAILING_LIST_MULTI     Multiple indicators imply a widely-seen list
                             manager
  0.0 TVD_SPACE_RATIO        No description available.
  0.1 HTML_SHORT_LINK_IMG_1  HTML is very short with a linked image
X-Spam-Flag: YES
Subject:  ***SPAM***  Best seller

This is a multi-part message in MIME format.

------=_NextPart_000_0006_01D53695.D1453B60
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0007_01D53695.D1453B60"

------=_NextPart_000_0007_01D53695.D1453B60
Content-Type: text/plain;
	charset="windows-1251"
Content-Transfer-Encoding: quoted-printable

=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
------=_NextPart_000_0007_01D53695.D1453B60
Content-Type: text/html;
	charset="windows-1251"
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD>=0D=0A<META http-equiv=3D"Content-Type" content=3D"te=
xt/html; charset=3Dwindows-1251">=0D=0A</HEAD>=0D=0A<BODY bgColor=
=3D#ffffff>=0D=0A<DIV align=3Dcenter><FONT size=3D2 face=3DArial>=
<A =0D=0Ahref=3D"http://tinderson.eu/oxymaner4/"><IMG border=3D0=20=
hspace=3D0 alt=3D"" src=3D"cid:952e901d536952d3552fa0eb9000a1@yzy=
exxy" width=3D800 height=3D440></A></FONT></DIV></BODY></HTML>=0D=
=0A

------=_NextPart_000_0007_01D53695.D1453B60--

------=_NextPart_000_0006_01D53695.D1453B60
Content-Type: image/jpeg;
	name="catricaffaq.jpeg"
Content-Transfer-Encoding: base64
Content-ID: <952e901d536952d3552fa0eb9000a1@yzyexxy>

[encoded data, 151151 characters]
5gNJAof4Gnnig9rAIYVI4n+RFMAf/9k=
------=_NextPart_000_0006_01D53695.D1453B60--

