No Spam?

SPAM: Cialis Professional. Beyond compare. Buy at our shop.

Sender: Hilary Matthews <xcmifdte***@*gslaw.com> Sent on: 04/07/2017 05:05 AM Subject: Cialis Professional. Beyond compare. Buy at our shop. Amount: 1

Message (Plain Version)


 
If you can't read this email, please view it online http://30.firstaidmarket.ru
Hola! Online Shop presents pharmaceuticals with delivery service in Europe, the United States and Canada.
You can buy anti-acidity, anti-allergy/asthma, antifungals, herpes medication, diabetes medication, antiviral, antifungals, blood pressure, antibiotics, anti-depressant and other various products. Keep your eye out for discount when purchasing
        Purchase now!     

If you no longer wish to receive these emails, simply click on the following link Unsubscribe.
You are receiving this message because you registered with WebMD. If you did not register for WebMD please contact our Customer Care Team WebMD Privacy Policy | Unsubscribe © 2017 WebMD, LLC. All rights reserved. WebMD Office of Privacy | 1201 Peachtree Street, NE | Atlanta, GA 30361
 

Header

Return-Path: xcmifdte***@*gslaw.com
X-Original-To: jodd**@*pambog.com
Received: from gallois.livando.com (gallois.livando.com [31.170.109.xxx])
by mx.discard.email (Go MTA) with ESMTP
for jodd**@*pambog.com; Fri, 07 Apr 2017 05:05:53 +0200 (CEST)
X-PDA-ORIGIN: gallois.livando.com
Received: (qmail 3099 invoked by uid 569); 7 Apr 2017 03:05:53 -0000
Delivered-To: joddodbj-joddoc******@*oddoc.de
X-Originally-To: l*@*oddoc.de
Received: (qmail 3096 invoked from network); 7 Apr 2017 03:05:52 -0000
Received: by simscan 1.4.0
ppid: 3054,
pid: 3064,
t: 3.4535s

scanners:
clamav: 0.99.2/m:57/d:23273
spam: 3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lv01.virtualhosts.de
X-Spam-Flag: YES
X-Spam-Level: *******************************
X-Spam-Status: Yes, score=31.9 required=4.8 tests=DRUGS_ERECTILE,
FSL_HELO_BARE_IP_2,HTML_IMAGE_RATIO_06,HTML_MESSAGE,MIME_HTML_ONLY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_HELO_IP_MISMATCH,RCVD_ILLEGAL_IP,RCVD_IN_BARRACUDA_BRBL,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_DNSBL_INPS_DE,
RCVD_IN_RP_RNBL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RCVD_NUMERIC_HELO,RDNS_NONE,
SUBJECT_DRUG_GAP_C,T_KAM_HTML_FONT_INVALID,URIBL_DBL_SPAM,URIBL_JP_SURBL,
URIBL_SBL,URIBL_SBL_A autolearn=disabled version=3.4.1
X-Spam-Report:
* 1.3 RCVD_ILLEGAL_IP
Received: contains illegal IP address
* 1.0 SUBJECT_DRUG_GAP_C Subject contains a gappy version of 'cialis'
* 1.2 RCVD_HELO_IP_MISMATCH
Received: HELO and IP do not match, but should
* 0.9 RCVD_NUMERIC_HELO
Received: contains an IP address used for HELO
* 1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
* [
URIs: firstaidmarket.ru]
* 1.3 RCVD_IN_RP_RNBL
RBL: Relay in RNBL,
* https://senderscore.org/blacklistlookup/
* [104.220.172.xxx listed in bl.score.senderscore.com]
* 0.7 RCVD_IN_XBL
RBL: Received via a relay in Spamhaus XBL
* [104.220.172.xxx listed in zen.spamhaus.org]
* 1.2 RCVD_IN_BL_SPAMCOP_NET
RBL: Received via a relay in bl.spamcop.net
* [Blocked - see http://www.spamcop.net/bl.shtml?104.220.172.xxx]
* 3.0 RCVD_IN_DNSBL_INPS_DE
RBL: Received via a relay in inps.de DNSBL
* [IP address 104.220.172.xxx automatically added]
[to inps.de-DNSBL at 2017-03-13 03:51:51 UTC, see]
[http://dnsbl.inps.de/query.cgi?action=check&ip=104.220.172.xxx]
* 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
* [
URIs: firstaidmarket.ru]
* 1.6 RCVD_IN_BRBL_LASTEXT
RBL: No description available.
* [104.220.172.xxx listed in bb.barracudacentral.org]
* 2.0 RCVD_IN_BARRACUDA_BRBL
RBL:
Listed: Barracuda Reputation Block List
* (BRBL)
* [104.220.172.xxx listed in b.barracudacentral.org]
* 0.6 RCVD_IN_SORBS_WEB
RBL:
SORBS: sender is an abusable web server
* [104.220.172.xxx listed in dnsbl.sorbs.net]
* 0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
* [
URIs: firstaidmarket.ru]
* 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
* [
URIs: firstaidmarket.ru]
* 0.0 HTML_IMAGE_RATIO_06
BODY: HTML has a low ratio of text to image area
* 0.0 T_KAM_HTML_FONT_INVALID
BODY: Test for Invalidly Named or Formatted
* Colors in HTML
* 0.0 HTML_MESSAGE
BODY: HTML included in message
* 1.1 MIME_HTML_ONLY
BODY: Message only has text/html MIME parts
* 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
* above 50%
* [
cf: 100]
* 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
* [
cf: 100]
* 2.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
* 2.2 DRUGS_ERECTILE Refers to an erectile drug
* 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
* 2.0 FSL_HELO_BARE_IP_2 No description available.
Received: from unknown (HELO 31.170.109.xxx) (104.220.172.xxx)
by gallois.livando.com with SMTP; 7 Apr 2017 03:05:49 -0000
X-Message-Info: BXHAxFI74qFyxYKLh13g7BE1XKDvuXAv
Received: from sgktmih37.mail2why.com ([62.96.197.xxx]) by bu3-h21.mail2why.com with Microsoft SMTPSVC(5.0.2195.xxx);
Fri, 07 Apr 2017 09:01:48 +0500
Received: from fordhamsoccerobstinatekd77 (defendant[232.199.228.xxx])
by mail2why.com (jgiyzid69) with SMTP
id 34286508227090742932wvb4o
(
Authid: PedroDrew);
Fri, 07 Apr 2017 05:59:48 +0200
From: "Hilary Matthews" xcmifdte***@*gslaw.com
To: "'Lw'" l*@*oddoc.de
Subject: Cialis Professional. Beyond compare. Buy at our shop.
Date: Thu, 06 Apr 2017 21:01:48 -0700
Message-ID: 119285u7ay99$1f8f3862$18w7sfkl@bartlettlionessoilclothle89
MIME-Version: 1.0
Content-Type: text/html;
Content-Transfer-Encoding: 7Bit