· 10 years ago · Nov 19, 2015, 08:54 PM
1[ SpamCop V4.8.3 ]
2This message is brief for your comfort. Please use links below for details.
3
4Email from 185.112.249.110 / Thu, 19 Nov 2015 13:45:31 -0500
5https://www.spamcop.net/w3m?i=z6383166094z69d741a8ca19c51558e78e79765186dcz
6
7[ Offending message ]
8Return-Path: <wit6080@gmail.com>
9Delivered-To: x
10Received: (qmail 73637 invoked by uid 89); 19 Nov 2015 18:45:31 -0000
11Received: from 64.7.153.10 by vmail1.sentex.ca (envelope-from <wit6080@gmail.com>, uid 89) with qmail-scanner-1.25
12 (clamdscan: 0.91.1/3906. spamassassin: 3.2.1.
13 Clear:RC:0(64.7.153.10):SA:1(26.6/5.0):using.profile-x:.
14 Processed in 0.672134 secs); 19 Nov 2015 18:45:31 -0000
15X-Qmail-Scanner-Mail-From: wit6080@gmail.com via vmail1.sentex.ca
16X-Qmail-Scanner: 1.25 (Clear:RC:0(64.7.153.10):SA:1(26.6/5.0):using.profile-x:. Processed in 0.672134 secs)
17X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on pumice5.sentex.ca
18X-Spam-Flag: YES
19X-Spam-Level: **************************
20X-Spam-Status: Yes, score=26.6 required=5.0 tests=ADVANCE_FEE_4_NEW,
21 AXB_XMAILER_MIMEOLE_OL_024C2,BAYES_99,BAYES_999,BOTNET,BOTNET_NORDNS,
22 DCC_CHECK,DKIM_ADSP_CUSTOM_MED,FORGED_MUA_OUTLOOK,FREEMAIL_ENVFROM_END_DIGIT,
23 FREEMAIL_FROM,FREEMAIL_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,FROM_MISSPACED,
24 FROM_MISSP_EH_MATCH,FROM_MISSP_FREEMAIL,FROM_MISSP_MSFT,FROM_MISSP_REPLYTO,
25 FROM_MISSP_TO_UNDISC,FROM_MISSP_XPRIO,FSL_CTYPE_WIN1251,FSL_NEW_HELO_USER,
26 MSGID_FROM_MTA_HEADER,MSOE_MID_WRONG_CASE,NML_ADSP_CUSTOM_MED,
27 NSL_RCVD_HELO_USER,RCVD_IN_BL_SPAMCOP_NET,SPF_HELO_FAIL,T_FROM_MISSP_DKIM,
28 UNCLAIMED_MONEY shortcircuit=no autolearn=disabled version=3.4.0
29X-Spam-Report:
30 * 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
31 * [Blocked - see <http://www.spamcop.net/bl.shtml?66.128.68.162>]
32 * 4.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
33 * [score: 1.0000]
34 * 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
35 * 3.1 NSL_RCVD_HELO_USER Received from HELO User
36 * 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
37 * (wit6080[at]gmail.com)
38 * 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
39 * CUSTOM_MED
40 * 3.5 BOTNET Relay might be a spambot or virusbot
41 * [botnet0.8,ip=185.112.249.110,maildomain=gmail.com,nordns]
42 * 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
43 * (will0[at]mynet.com)
44 * 0.0 BOTNET_NORDNS Relay's IP address has no PTR record
45 * [botnet_nordns,ip=185.112.249.110]
46 * 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
47 * digit (wit6080[at]gmail.com)
48 * 0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
49 * [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=smtp1.sentex.ca;ip=64.7.153.10;r=pumice5.sentex.ca]
50 * 2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
51 * 0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
52 * [score: 1.0000]
53 * 1.1 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
54 * 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
55 * 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
56 * 1.0 FSL_NEW_HELO_USER Spam's using Helo and User
57 * 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
58 * 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
59 * 2.6 MSOE_MID_WRONG_CASE No description available.
60 * 0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
61 * 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
62 * freemails
63 * 0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
64 * 0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
65 * 0.0 FROM_MISSPACED From: missing whitespace
66 * 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
67 * 1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
68 * 0.4 FROM_MISSP_EH_MATCH From misspaced, matches envelope
69 * 0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
70 * 2.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
71X-Envelope-From: wit6080@gmail.com
72Received: from smtp1c.sentex.ca (HELO smtp1.sentex.ca) (64.7.153.10)
73 by vmail1.sentex.ca with SMTP; 19 Nov 2015 18:45:31 -0000
74Received: from ek31.htmarkherhggd.org ([185.112.249.110])
75 by smtp1.sentex.ca (8.15.2/8.15.2) with ESMTP id tAJIjRcW076829
76 for <x>; Thu, 19 Nov 2015 13:45:31 -0500 (EST)
77 (envelope-from wit6080@gmail.com)
78Message-Id: <2015___________________6829@smtp1.sentex.ca>
79Received: from [66.128.68.162] (port=3528 helo=User)
80 by ek31.htmarkherhggd.org with esmtpa (Exim 4.86)
81 (envelope-from <wit6080@gmail.com>)
82 id 1ZzUCv-0006r5-1u; Thu, 19 Nov 2015 13:45:21 -0500
83Reply-To: <will0@mynet.com>
84From: "William Thomson"<wit6080@gmail.com>
85Subject: Please Read (Not Spam)
86Date: Thu, 19 Nov 2015 10:45:21 -0800
87MIME-Version: 1.0
88Content-Type: text/plain;
89 charset="Windows-1251"
90Content-Transfer-Encoding: 7bit
91X-Priority: 3
92X-MSMail-Priority: Normal
93X-Mailer: Microsoft Outlook Express 6.00.2600.0000
94X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
95X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
96X-AntiAbuse: Primary Hostname - ek31.htmarkherhggd.org
97X-AntiAbuse: Original Domain - avax.com
98X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
99X-AntiAbuse: Sender Address Domain - gmail.com
100X-Get-Message-Sender-Via: ek31.htmarkherhggd.org: authenticated_id: teincoh/only user confirmed/virtual account not confirmed
101X-Authenticated-Sender: ek31.htmarkherhggd.org: teincoh
102X-Source:
103X-Source-Args:
104X-Source-Dir:
105To: undisclosed-recipients:;
106X-Virus-Scanned: clamav-milter 0.98.7 at smtp1.sentex.ca
107X-Virus-Status: Clean
108X-Scanned-By: MIMEDefang 2.75 on 199.212.134.4
109
110ATTN: IMPORTANT MESSAGE,
111I am contacting with regards to this particular fund belonging to my deceased client, I decided to contact you about this unclaimed
112deposits. If you are not interested, please ignore this mail and go about your normal business. I am Barrister William Thompson, principal
113partner of Will and Williams & Co, Law Office and Notaries Public, and practicing Law in United Kingdom.
114I will email you the full details once you respond.
115
116Thank you
117
118Will Thompson