[ SpamCop V4.8.3 ]
This message is brief for your comfort.  Please use links below for details.

Email from 185.112.249.110 / Thu, 19 Nov 2015 13:45:31 -0500
https://www.spamcop.net/w3m?i=z6383166094z69d741a8ca19c51558e78e79765186dcz

[ Offending message ]
Return-Path: <wit6080@gmail.com>
Delivered-To: x
Received: (qmail 73637 invoked by uid 89); 19 Nov 2015 18:45:31 -0000
Received: from 64.7.153.10 by vmail1.sentex.ca (envelope-from <wit6080@gmail.com>, uid 89) with qmail-scanner-1.25
 (clamdscan: 0.91.1/3906. spamassassin: 3.2.1.
 Clear:RC:0(64.7.153.10):SA:1(26.6/5.0):using.profile-x:.
 Processed in 0.672134 secs); 19 Nov 2015 18:45:31 -0000
X-Qmail-Scanner-Mail-From: wit6080@gmail.com via vmail1.sentex.ca
X-Qmail-Scanner: 1.25 (Clear:RC:0(64.7.153.10):SA:1(26.6/5.0):using.profile-x:. Processed in 0.672134 secs)
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on pumice5.sentex.ca
X-Spam-Flag: YES
X-Spam-Level: **************************
X-Spam-Status: Yes, score=26.6 required=5.0 tests=ADVANCE_FEE_4_NEW,
	AXB_XMAILER_MIMEOLE_OL_024C2,BAYES_99,BAYES_999,BOTNET,BOTNET_NORDNS,
	DCC_CHECK,DKIM_ADSP_CUSTOM_MED,FORGED_MUA_OUTLOOK,FREEMAIL_ENVFROM_END_DIGIT,
	FREEMAIL_FROM,FREEMAIL_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,FROM_MISSPACED,
	FROM_MISSP_EH_MATCH,FROM_MISSP_FREEMAIL,FROM_MISSP_MSFT,FROM_MISSP_REPLYTO,
	FROM_MISSP_TO_UNDISC,FROM_MISSP_XPRIO,FSL_CTYPE_WIN1251,FSL_NEW_HELO_USER,
	MSGID_FROM_MTA_HEADER,MSOE_MID_WRONG_CASE,NML_ADSP_CUSTOM_MED,
	NSL_RCVD_HELO_USER,RCVD_IN_BL_SPAMCOP_NET,SPF_HELO_FAIL,T_FROM_MISSP_DKIM,
	UNCLAIMED_MONEY shortcircuit=no autolearn=disabled version=3.4.0
X-Spam-Report:
	*  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
	*      [Blocked - see <http://www.spamcop.net/bl.shtml?66.128.68.162>]
	*  4.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
	*      [score: 1.0000]
	*  0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
	*  3.1 NSL_RCVD_HELO_USER Received from HELO User
	*  0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
	*      (wit6080[at]gmail.com)
	*  0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
	*      CUSTOM_MED
	*  3.5 BOTNET Relay might be a spambot or virusbot
	*      [botnet0.8,ip=185.112.249.110,maildomain=gmail.com,nordns]
	*  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
	*      (will0[at]mynet.com)
	*  0.0 BOTNET_NORDNS Relay's IP address has no PTR record
	*      [botnet_nordns,ip=185.112.249.110]
	*  0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
	*      digit (wit6080[at]gmail.com)
	*  0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
	*      [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=smtp1.sentex.ca;ip=64.7.153.10;r=pumice5.sentex.ca]
	*  2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
	*  0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
	*      [score: 1.0000]
	*  1.1 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
	*  0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
	*  0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
	*  1.0 FSL_NEW_HELO_USER Spam's using Helo and User
	*  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
	*  0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
	*  2.6 MSOE_MID_WRONG_CASE No description available.
	*  0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
	*  1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
	*      freemails
	*  0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
	*  0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
	*  0.0 FROM_MISSPACED From: missing whitespace
	*  0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
	*  1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
	*  0.4 FROM_MISSP_EH_MATCH From misspaced, matches envelope
	*  0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
	*  2.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
X-Envelope-From: wit6080@gmail.com
Received: from smtp1c.sentex.ca (HELO smtp1.sentex.ca) (64.7.153.10)
  by vmail1.sentex.ca with SMTP; 19 Nov 2015 18:45:31 -0000
Received: from ek31.htmarkherhggd.org ([185.112.249.110])
	by smtp1.sentex.ca (8.15.2/8.15.2) with ESMTP id tAJIjRcW076829
	for <x>; Thu, 19 Nov 2015 13:45:31 -0500 (EST)
	(envelope-from wit6080@gmail.com)
Message-Id: <2015___________________6829@smtp1.sentex.ca>
Received: from [66.128.68.162] (port=3528 helo=User)
	by ek31.htmarkherhggd.org with esmtpa (Exim 4.86)
	(envelope-from <wit6080@gmail.com>)
	id 1ZzUCv-0006r5-1u; Thu, 19 Nov 2015 13:45:21 -0500
Reply-To: <will0@mynet.com>
From: "William Thomson"<wit6080@gmail.com>
Subject: Please Read (Not Spam)
Date: Thu, 19 Nov 2015 10:45:21 -0800
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ek31.htmarkherhggd.org
X-AntiAbuse: Original Domain - avax.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: ek31.htmarkherhggd.org: authenticated_id: teincoh/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: ek31.htmarkherhggd.org: teincoh
X-Source:
X-Source-Args:
X-Source-Dir:
To: undisclosed-recipients:;
X-Virus-Scanned: clamav-milter 0.98.7 at smtp1.sentex.ca
X-Virus-Status: Clean
X-Scanned-By: MIMEDefang 2.75 on 199.212.134.4

ATTN:  IMPORTANT MESSAGE,
I am contacting with regards to this particular fund belonging to my deceased client, I decided to contact you about this unclaimed
deposits. If you are not interested, please ignore this mail and go about your normal business. I am Barrister William Thompson, principal
partner of Will and Williams & Co, Law Office and Notaries Public, and practicing Law in United Kingdom.
I will email you the full details once you respond.

Thank you

Will Thompson