Blackmail scam
Abuser: Simple fake of the FROM mail header. Ask your mail provider to activate SPF, to block the m*f*cker
from Smith618.edu (unknown [181.121.95.198]) by ...
from unknown (35.131.88.76) by smtp.endend.nl with ASMTP; Mon, 03 Dec 2018 ...
from unknown (95.152.34.167) by rsmail.alkoholic.net with ASMTP; Mon, 03 Dec 2018 ...
from unknown (HELO smtp.doneohx.com) (Mon, 03 Dec 2018 11:... -0800) by smtp.endend.nl with QMQP; Mon, 03 Dec 2018 ...
from unknown (HELO mx.reskind.net) (Mon, 03 Dec 2018 11:... -0800) by asx121.turbo-inline.com with LOCAL; Mon, 03 Dec 2018 11:... -0800
from mx03.listsystemsf.net ([37.137.121.218]) by relay.2yahoo.com with ESMTP; Mon, 03 Dec 2018 11:... -0800
....
So, to the business! I'm sure you don't want to show these files and visiting history to all your contacts.
Transfer $971 to my Bitcoin cryptocurrency wallet: 1971pHPgLaTmuYtoH4BsGSfFMZaAjotium
...
Germany, 2018-12-03 22:49:10