Scammer ID... Need aid!

[Orentel]

Ok people. Can anyone help me identify this scum scammer? Nearly fell for it, he/she doesn't know I've spotted him/her, so I can't delay it for long. I wanna get this scum before he/she escapes.

x-store-info:SmXCjkY1Un5L3qlTmewTw2528Vzv4BD31NGduIR/3COJ/zcJLF3UWwv2lXD4iRy5A6F6mtqfsiiW6IaEtqg10yCLF2nCfMwYZpZ9oiCSpcbOYyi5RT4ahinrVE4QHsudEQ4uTbaPULQ=
Authentication-Results: hotmail.com; spf=pass (sender IP is 209.85.223.180; identity alignment result is pass and alignment mode is relaxed) smtp.mailfrom={removed}@gmail.com; dkim=pass (identity alignment result is pass and alignment mode is relaxed) header.d=gmail.com; x-hmca=pass header.id={removed}@gmail.com
X-SID-PRA: {removed}@gmail.com
X-AUTH-Result: PASS
X-SID-Result: PASS
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MTtsPTE7YT0xO0Q9MDtHRD0wO1NDTD0w
X-Message-Info: DFa+w7oqK+9KtdTT4RrJBWcMSkQ6MFNRUsgWkWiLvzPWVU/gfBuO9P2rkT38oKBeHRyIpzkgeetc3LgXTtBA7wniAlI5GrJ6LEvfuVvxc+kXYM47udPN+H/L8YAHmBf2A8/3so/gnlKtzrCOR3mKqjSr92Jlu9NraehPX2rgdHRtj+WB+pF5h7jXyt/MSvQqnnCFUrqCUNbS0AyDz3HtZfP7iNl5Zjzx0pjA0KysEUsLeKiyTh6Ivg==
Received: from mail-io0-f180.google.com ([209.85.223.180]) by BAY004-MC6F17.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Wed, 29 Jul 2015 03:50:35 -0700
Received: by mail-io0-f180.google.com with SMTP id a135so17053417ioe.1
for <{removed}@hotmail.com>; Wed, 29 Jul 2015 03:50:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:referencesmessage-id:subject:from:to
:content-type;
bh=5dYs1Au5ULEu8PlhuZuSuIkx7QhvtwAvqOu1F9TMpmc=;
b=k7zbW37649xz1iCTG8FVC+GFZlx8i6S7RIrkU0K3II7EkEqdAIJsPG7oK/rhorCEGS
EhoYrKXGNN2uNoWqc3BliKRYvx+GlmiOnh5MBJZLf342jHC2cZVwCHOgMZQBjPZjYhyx
Az9jQtPVXxOuJH99Zy1yL2Xn5KPFZ3JW7rrQGLrj+6CPkMpKfpkhzYeqrpAnwA6YrtzP
2y8lo/uYg3YB4kgR01u2R5pBmSjzPRIHJaXeV4DzWpty3V8yhvT3//pZdYmmxt//1as3
4aiPoKtYvuB9BrXL36NIpiOWK6xSJs9mPHTsWQwaqO/3eBTDLGK2J6GxfXUTFcEjUIFG
0C5Q==
MIME-Version: 1.0
X-Received: by 10.107.165.136 with SMTP id o130mr443579ioe.76.1438167035523;
Wed, 29 Jul 2015 03:50:35 -0700 (PDT)
Received: by 10.107.48.68 with HTTP; Wed, 29 Jul 2015 03:50:34 -0700 (PDT)

[Chrispcritters]

Unfortunately Google does not include the sender's IP address in the headers.

[nielsencl1]

You are lucky if you did not fall for their scam. There are ways to trick them into letting you know where they are, but it may not be worth the effort. The best way to get back at scum like this is post some messages they send you to warn others about what they are doing.

[fhalenvenz]

This one almost got me can you pls trace it for me.

From "Alain.chritian feneon" Wed Sep 2 11:15:50 2015
X-Apparently-To: [email protected]; Wed, 02 Sep 2015 11:21:10 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of gmail.com designates 209.85.214.170 as permitted sender)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X-YMailISG: xuDr9IkWLDsWyNSVYl.ZB_kXYDkPr28Z_SDphLL0_kMAmqRe
xD54Ri4xIIHVZsVBdNuJpg6cAuzbqmdApvEvWSWdTz_ZlMiPk6I7_J9XzM7M
.Hx9FcfmSLGJxo0CMQQISCUkLFqytWpvr2h0GmrpK2S79BCEKby5DIf6_r0Y
NzeIYSZw31KJH3l_GAJs4NNZpiGVdsNVZ0sH_xoXQ2GgkSFMT85mUwpyBpT4
4hiWYaukvqe3Sb2kzrj.5AOl8jRs.hx_5q4kK6uxci7gffz.BcpVA7wFxchU
sUTo9FeawfE3LvRcCEiTjFD5YEOXjCZoTYFphgMK7lI7kAAh6A8izUT0.bVM
jq2hSX7Geh5vDIup7BFWIFqTJX1jcrJri6wR_u.2uyMQJzwIgf5Tai6QXjGA
XgR2VVYvBf_1HD2K.BBSqNoeCK8nJheXbwHqd4ajIFpg2UUUHbDlrf_391yV
g5_AmzzCZJ7VBnuW7HKsnyfRBNsz8zve98lvJ3A2In0rlyuBY4mvdWCEXPMx
Lux9aSJjlzYlpE6AZ4YxWppKnMp.Hifzv8ms_.AheLkj7FYVht43AeXo7ya8
KTqSvZa9DCKWPc.eHew72lTnqW4zynrODF477xDK_vHDi_eQvVK8JaZcXvAP
SkuCacFFYumyu5.k8Nfs0e0DcvlpRu.gAcRJBf0D9x6lscy2R8cjZhnGJa1H
lv1DPm2Pr7Mz5K1zGZ.lJDmxlc5jI4ccjgrEqYoXME.LySd1gHmW3bDRJOKe
71f6c6CVnzEanjTeFUhikB4sZet4wMKRp9XQGa5XZPQ2tSZMKXZUWJe1Sus9
nyoKBuWI38sU7jaagLJkYe0_xx8IOlqxi8JwEAoDY__Yw0eohz8OCTDldRM5
sQLBQjNBVCkIzycI5lmTJXH54_gOIqAVzfOOAKUFWJX5_.pPnufcq0gAMN1f
oiY2pMco44R15SYZwh.v2pwR4RG09iYpuMLsR3dFXuGkwxGJ4IA6Y0w1Fn85
rqreb4m_wLJI6C2f7B_M996u.tf.0kzDCkUOx7ODZRFQYWcWoUc3Q.T.13mp
L_3bXkfMT.tEonA4ANtSKhGhcSnFYAEr_X.nbQjl6bmH87JbGW1lNFv8DTX_
vzx.ZPNmur7Qgxv8aVwhih77uSwxQPIQm8nWiWwc3YzZqmCAWC31l1dowbgM
8bgHgbneO1Nfmr2We_yXMAncC7n45JzIl_aqTkGnWLUHkPW35VSaBgzsxHUx
XCyck.QL1jDRKrCtnrfW3CT1c.qvshKVrAZGnpeXLOGnf.vSbiL3EA.fmA--
X-Originating-IP: [209.85.214.170]
Authentication-Results: mta1470.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-ob0-f170.google.com) (209.85.214.170)
by mta1470.mail.bf1.yahoo.com with SMTPS; Wed, 02 Sep 2015 11:21:07 +0000
Received: by mail-ob0-f170.google.com with SMTP id ts10so5067980obc.1
for <[email protected]>; Wed, 02 Sep 2015 04:21:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:referencesmessage-id:subject:from:to
:content-type;
bh=PXOCSGPTabq38RApFGGXjjXHGgXocBt7kMSBV2NG7Ng=;
b=dywLrvkYDcph7HRp8jz+Z/D/FInN9YlaMyt1cRp/QiS/ag1q7sJHI2mOFtm3hqPZJL
8cUFV/6Cb3Ezoux1oYst5rvkXdMBxwKWS4196MhTcqXnS2fQc+uDzy+sFKkmZfUaPSfN
u5ilAsvKuiwVF9yVLrCKpMbut0HR8kWbPqtHChax/9e8aDUO/YM6V4tYi6UAiX7IxKOy
x3M5A43NF65kxjDq/bkrN8aQTSjBVuKgp/LBBTa3JDy9BKr2pKvCNrftpvWpYq50YRqN
WgNsE8cuHQf6QeSMeG/FPY0gCoFmrMaLOD440tWT2m2G5L9sB40jb7jAkdjD71m/Kfmy
dA4w==
MIME-Version: 1.0
X-Received: by 10.60.35.136 with SMTP id h8mr19705049oej.49.1441192550514;
Wed, 02 Sep 2015 04:15:50 -0700 (PDT)
Received: by 10.182.59.43 with HTTP; Wed, 2 Sep 2015 04:15:50 -0700 (PDT)
In-Reply-To: <[email protected]om>
References: <CAOsMy-GyYs61VC5iO+2=[email protected]>
<[email protected]om>
<[email protected]om>
<[email protected]om>
<[email protected]om>
<[email protected]om>
<CAOsMy-GNbO=[email protected]>
<CAOsMy-GSrn3nmVBadN+9Lbd0nR_Mx=[email protected]>
<CAOsMy-HbR0ihxc6eakfkH=wyj=[email protected]>
<[email protected]om>
<[email protected]om>
<CAOsMy-FUYP7CDNnkQfdrgt2=oyxgtPZ=[email protected]>
<CAOsMy-G6jmicngE6tq7MCxjGxHsEjomXTCL3_Bi=[email protected]>
<[email protected]om>
Date: Wed, 2 Sep 2015 12:15:50 +0100
Message-ID: <[email protected]om>
Subject: Fwd: Honda Civic Spoon
From: "Alain.chritian feneon" <[email protected]>
To: [email protected]
Content-Type: multipart/mixed; boundary=089e0116060a07e07b051ec1cad1
Bcc: [email protected]
Content-Length: 1154627

[Shelley_777-]

If it is someone pretending to be in US military (a lot of that happening-they steal actual soldier's pictures as well as identity-a blog (don't remember name, but Google " military wife's blog knowing if you are being scammed for some good advise.) . Also, call Army CID to report. They want to be aware of whom is being victimized. Under no circumstances should you contact actual soldier-will take his mind away from full alert which he/she needs in order to stay alive while in harms reach. Contacting their family also bad idea= will worry them, probably mention it to active duty personnel, & nothing they can do about it. Best left in hands of COD.

Best way to easily check if fraud? Ask for their APO address. Even if deep black ops, will STILL have APO address