William Steven [email protected]

Return-Path: <[email protected]>
Received: from mail-la0-x244.google.com (mail-la0-x244.google.com [2a00:1450:4010:c03::244])
by mx.google.com with ESMTPS id w10si1531750lal.42.2014.04.09.11.06.05
for <snip>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Wed, 09 Apr 2014 11:06:05 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:4010:c03::244 as permitted sender) client-ip=2a00:1450:4010:c03::244;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:4010:c03::244 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-la0-x244.google.com with SMTP id pv20so582654lab.11
for <snip>; Wed, 09 Apr 2014 11:06:05 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.152.2.225 as permitted sender) client-ip=10.152.2.225
X-Received: from mr.google.com ([10.152.2.225])
by 10.152.2.225 with SMTP id 1mr2790795lax.37.1397066764263 (num_hops = 1);
Wed, 09 Apr 2014 11:06:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=xqqlOFfSSehRXzsRpSwB6+951TtHRXAK6C0qxA5VLCU=;
b=bPeNtKENCmi3g9VnUMvqsscvcux8xN128geD+uVF3qgWmF7qlpS4ySxndjBJTkxZLd
la0wjjK2l3vvcxPPalPNbbN4tBkndmq4LQE9qJQFFF9RHFsc1r1rLbdTfm2JKjTMSXQz
AXLM9iBfISPKWp+r+hg/ZaLYamIqiNfJUpfyyHKQCCLk5SCnIhBDwYSa5WexT3rRj+iB
mYvWH7OYF0Jng6Y2IrVDFe/R7GdJW2VQH1JRYvdlWiiNeeQcCRro2ZInHm7vD9C0Mi2A
b4TSQuChqCESe4Y/J1gMXgYZC4VWW1Iz0B680tM3dQ2psDRYop1rAYMqYFy3KtBdgwO+
hc6Q==
MIME-Version: 1.0
X-Received: by 10.152.2.225 with SMTP id 1mr2790795lax.37.1397066764258; Wed,
09 Apr 2014 11:06:04 -0700 (PDT)
Received: by 10.114.175.106 with HTTP; Wed, 9 Apr 2014 11:06:04 -0700 (PDT)
Date: Wed, 9 Apr 2014 06:06:04 -1200
Message-ID: <CAAoTozGNWxXt623VEmRatfB9vrpYELh=RoAN5AthTRY2M4_M4A@mail.gmail.com>
Subject: Order Of (snip)
From: William Steven <[email protected]>
To: snip
Content-Type: multipart/alternative; boundary=089e013c61a036168804f69ff4bd

I'm not posting the body, because the bait did not start in the usual way. Instead of spamming a request for a catalog or website, he directly asked a nonexistent person (one of my baiting characters), who lives at a nonexistent address, for a nonexistent item which the nonexistent person sells. The only possible explanation is that he got my baiting character's email address and product list from another scammer.

If you get an email from William Steven, ignore it. He is attempting to buy items with stolen credit cards.

His shipper is Conca Logistic <[email protected]>. The shipper is another character played by the same scammer. He will ask you to send money to the shipper; the scammer will then pocket it and not come to pick up your items.