John Williams [email protected]

[Tim Atem]

Header Analysis Quick Report
Originating IP: 208.93.60.97
Originating ISP: Region Iii Education Service Center
City: Victoria
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.170.41 with SMTP id t41csp1768498ioe;
Sun, 31 May 2015 12:27:45 -0700 (PDT)
X-Received: by 10.202.218.132 with SMTP id r126mr14320157oig.69.1433100465761;
Sun, 31 May 2015 12:27:45 -0700 (PDT)
Return-Path: <[email protected]>
Received: from vhost.esc3.net (vhost.esc3.net. [208.93.60.97])
by mx.google.com with ESMTPS id c2si7439472oih.6.2015.05.31.12.27.45
for <<snipped>>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 31 May 2015 12:27:45 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 208.93.60.97 as permitted sender) client-ip=208.93.60.97;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of [email protected] designates 208.93.60.97 as permitted sender) smtp.mail=[email protected];
dmarc=fail (p=NONE dis=NONE) header.from=yeah.net
Received: from vhost.esc3.net (vhost.esc3.net [127.0.0.1])
by vhost.esc3.net (8.13.8/8.13. with ESMTP id t4VJ8m7W007525
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <<snipped>>; Sun, 31 May 2015 14:08:48 -0500
Received: (from apache@localhost)
by vhost.esc3.net (8.13.8/8.13.8/Submit) id t4VJ8mIR007524;
Sun, 31 May 2015 14:08:48 -0500
Date: Sun, 31 May 2015 14:08:48 -0500
Message-Id: <[email protected]>
To: <snipped>
Subject: Beloved One,Kindly Help Me Please
From: John Williams <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit

Dear Beloved,

I am John Williams,my late father deposited in the Bank fund ($4.5 million dollars) deposited in a fix deposit account without my knowledge is ready to be freely paid out. I do not want funds credited in my name since my late father brothers are monitoring all my activities ,they might find out about the money if it is credited in my names. I want the bank to transfer it immediately in your names so that you can come down here in Benin Republic to take me to your country. I have been very sick, I am not use to the condition at the refugees camp, the whole delay is making me suffer here at the refugee camp.

The bank will then credit your account after few hours and you can then transfer funds to any account of your choice worldwide. I need to submit a copy of your passport photograph to the bank to enable them credit your account after you reply my mail, Feel free to send me an email if you are not clear with my message. I am truly desperate to leave this camp and live a better life. Please act fast! Reply to ([email protected])

John Williams.