That's an excellent point, and actually complete's the loop on the story. The machines that this scammer is using run linux, which explains why the user agent

That's an excellent point, and actually complete's the loop on the story. The machines that this scammer is using run linux, which explains why the user agent reported this both when they were reading the pages directly, and when the started using google translate. Neat. I hope they follow up by taking my advice and including the referal so we get to see exactly where it's coming from.