Page 1 of 1

We need to find this person

Posted: Wed Mar 22, 2017 3:39 pm
by BeardedBastardsSC

We think someone may have purchased product from our website using a stolen credit card. We need to figure this out ASAP.

Thank you,
Bearded Bastards Supply Co, LLC


Delivered-To: {removed}
Received: by with SMTP id g31csp802499edd;
Thu, 16 Mar 2017 11:29:06 -0700 (PDT)
X-Received: by with SMTP id q23mr9208873wrc.163.1489688946655;
Thu, 16 Mar 2017 11:29:06 -0700 (PDT)
Return-Path: <{removed}>
Received: from ( [2a00:1450:400c:c09::231])
by with ESMTPS id s15si7573592wrc.222.2017.
for <{removed}>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 16 Mar 2017 11:29:06 -0700 (PDT)
Received-SPF: pass ( domain of {removed} designates 2a00:1450:400c:c09::231 as permitted sender) client-ip=2a00:1450:400c:c09::231;
dkim=pass [email protected];
spf=pass ( domain of {removed} designates 2a00:1450:400c:c09::231 as permitted sender) smtp.mailfrom={removed};
dmarc=pass (p=NONE sp=NONE dis=NONE)
Received: by with SMTP id u132so41422429wmg.0
for <{removed}>; Thu, 16 Mar 2017 11:29:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20161025;
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20161025;
X-Gm-Message-State: AFeK/H2IJ6nc8/lGCC2z9fPH1dC3idmngxP4wWokGqy9EmHLNwVsWWX9xdxmeb9G/Aq14Q6IIXqO7A0MwvLz7w==
X-Received: by with SMTP id 67mr26978008wmu.86.1489688946123; Thu, 16 Mar 2017 11:29:06 -0700 (PDT)
MIME-Version: 1.0
Received: by with HTTP; Thu, 16 Mar 2017 11:29:05 -0700 (PDT)
In-Reply-To: <CANHK4HNj7kuDfVfUE1f=[email protected]>
References: <CANHK4HNj7kuDfVfUE1f=[email protected]>
From: damien law <{removed}>
Date: Thu, 16 Mar 2017 14:29:05 -0400
Message-ID: <CAPsQxUCs2U9Thh_=[email protected]>
Subject: Re: Your Order
To: "Bearded Bastards Supply Co." <{removed}>
Content-Type: multipart/alternative; boundary=001a1145a83675aa56054add3cc6

Content-Type: text/plain; charset=UTF-8

Ship to my bill

On Monday, March 13, 2017, Bearded Bastards Supply Co. <
{removed}> wrote:

> Good morning!
> First of all, thank you for your order. We are reaching about the order
> for the scope. It looks like the shipping address you provided is for a
> shipping hub. Unfortunately we do not ship to hubs or out of the country at
> this time. May we use the billing address to ship this order? Please
> advise.
> Thank you
> Aaron Ames
> Bearded Bastards Supply Co, LLC.

Re: We need to find this person

Posted: Wed Mar 22, 2017 4:37 pm
by Chrispcritters
Unfortunately Google no longer includes the sender's IP address in the headers. I think I noticed that the sender's name didn't match the spelling in the email address. This would be a red flag to me. Have you tried calling them?

Do you have an IP address from your ordering system?

I suggest that you contact the credit card company and verify the order through them.

Re: We need to find this person

Posted: Wed May 24, 2017 4:49 pm
by DjLyon
Actually, you can still find them. Unsure if this is a Ghost, but this could very well be it. Dublin, Ireland. :lol: :lol: :lol:

Don't mess with me, you will be found.