PacoLoco wrote:
With Steven1 on the job it's only a matter of time.

Steven1 on the job after an analysis of email headers from Yahoo from a person who got an email from Bktuna's Yahoo email address which is: Bktuna
Here is the Cliff's Notes' Version:
IP Address: 96.228.1.22
Hostname: pool-96-228-1-22.rcmdva.east.verizon.net
IP Address Country: United States
IP Continent: North America
IP Address City Location: Chester
IP Address Region: Virginia IP Address Latitude: 37.3568,
IP Address Longtitude: -77.4416
Organization: Verizon Internet Services
ISP: Verizon Internet Services
++++++++++++++++++++++++++++++++++++++++++++++++++++++
<Bktuna> :
Return-Path: Bktuna
Message Body: sz0156.wc.mail.comcast.net with LMTP; Tue, 17 Jul 2012 12:56:53 +0000 (UTC) id bQwq1j00t45kZ5e0BQwqxN; Tue, 17 Jul 2012 12:56:50 +0000 a=oJL9TIRMo0YA:10 a=QhovQ1LSeOkA:10 a=CjxXgO3LAAAA:8 a=C_IRinGWAAAA:8 a=PB7_6vwtFy7jxSOybxEA:9 a=wPNLvfGTeEIA:10 a=si9q_4b84H0A:10 a=rC2wZJ5BpNYA:10 a=fx8HPJFCAaMjOK7drBIA:9 a=_W_S_7VecoQA:10 a=frz4AuCg-hUA:10 a=rZTr+ZgUJr5/bwVPMGSalQ==:117 DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=IZSqT6Bnwwl0uMscoCPHLdSavwk0/uZT8Hw++zwNKGCD2Xklg6vbn+lBmTZGFKsKyfIvwKG0evhc7QHz0Q/njOV/3/oCAl19dYkKbEGHzswyWOD9UE9iPJQvxvVBz5gAJxbAvFyfbHa4MLARXR5MpNO1ibePR7tJiLOjw14b8vg=; xwo_fxmhfMhJOi.Z2tPoLlnsZkpDSHrKnGtVAK5BsvIkccjlUAtju.xo0SBU GKG_T58oKbQMue.uwhgwa3uyZA9vnY6YPqUcFgMwGQHobJ5v5aabgUTDdHYU hZwlhMp._SkjpO1U9sa9d2r.cylUqneT31AlCc_NGouD6QzXLblJihgXD3f1 XuEIsCDLhmqpFGrP1m1XDD1UovDCwvb42zelbH.2XKiHeezFo.GtSFqkL8cH yh0mMHvFHOcbRXZCJq9DxOhc0ZmYsFdlY6.1BFJCay10WhvYpiO0iU8xegdh OFYusoB.VCHnFkcs4SiM9YOdgsYqMMiSJz9Bniq19b1CTUzgXanZd_WiqQ92 NBfg7nGvEGcaRAG01z3EWZTsadNRtxWplo1PmKb1S0ec1nKcO1TkuCCeP.FB bWU0-
Received: from nm30.bullet.mail.bf1.yahoo.com ([98.139.212.189])
X-Caa-Spam: 00000
X-Authority-Analysis: v=2.0 cv=GqTACzJC c=1 sm=1
Received: from [98.139.212.145] by nm30.bullet.mail.bf1.yahoo.com with NNFMP; 17 Jul 2012 12:56:50 -0000
Received: from [98.139.212.208] by tm2.bullet.mail.bf1.yahoo.com with NNFMP; 17 Jul 2012 12:56:50 -0000
Received: from [127.0.0.1] by omp1017.mail.bf1.yahoo.com with NNFMP; 17 Jul 2012 12:56:50 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id:
97097.2360.bm@omp1017.mail.bf1.yahoo.com Received: (qmail 60065 invoked by uid 60001); 17 Jul 2012 12:56:50 -0000
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1342529809; bh=biRcL2pNBz0UWGBdMDLFsCk6H62xlS0vEIpyJyUX1II=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=bwY+r2+UKE/PQ8ht3wCFxDzWrMdjIIHGcBLUGCkS4KPk5dteCy7IAWmSVeNryPvBn84jiCF2v5pINGVfx44eMvGX2f1bNbCoEn6tw017casyYmSFpBjGX+rzj+et2GdYtuZF4+Dann1RQGw3ohwmedmLt1Cjn/A3CK+k0Wii/80=
X-Ymail-Osg: DdsUq.EVM1nWXXy_QZoQxHVh23IZyCgnWIz1Kxav.TJiXxd
Received: from [96.228.1.22] by web161602.mail.bf1.yahoo.com via HTTP; Tue, 17 Jul 2012 05:56:49 PDT
X-Mailer: YahooMailWebService/0.8.120.356233
References: <000001cd6385$708866c0$51993440$@net>
Message-Id: <1342529809.48108.YahooMailNeo@web161602.mail.bf1.yahoo.com>
Date: Tue, 17 Jul 2012 05:56:49 -0700 (PDT)
From: Bktuna
Reply-To: Bktuna
Subject: (REMOVED)
To: NAME REMOVED!!!!! (SECURITY)
In-Reply-To: <000001cd6385$708866c0$51993440$@net>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="406169123-1678565264-1342529809=:48108"
(Edit purposes: Removal of names and actual email addresses)