Stuck! Only can find server ARIN - need origin of how emailed me this letter

Post your questions about IP address geolocation here.
Locked
xxbancheexx
New Member
Posts: 3
Joined: Wed May 06, 2015 7:35 am

Stuck! Only can find server ARIN - need origin of how emailed me this letter

Post by xxbancheexx » Wed May 06, 2015 7:45 am

In need of your help, please!

I have ran the trace email address source, but only shows it came from a google server in CA. I believe I might be getting scammed by emailer, since this is a international contact. I have followed all the steps I can find on this website to locate IP address and location of this emailer! I am stuck! If any one could lend a hand or your knowledge in helping to locate where this emails are coming from and by who. I would greatly appreciate your expertise! Here is one of the headers that this emailer is sending me:

From {removed}@gmail.com Mon May 4 15:13:33 2015
X-Apparently-To: {removed}@sbcglobal.net.; Mon, 04 May 2015 15:15:08 +0000
Return-Path: <{removed}@gmail.com>
Received-SPF: pass (domain of gmail.com designates 209.85.217.177 as permitted sender)
dGhpcyBodWdlIGNpdHkuIExvbmVsaW5lc3MgLSBteSBwYXJ0bmVyIGluIGxp
ZmUuIExvbmVsaW5lc3MuIFdoYXQgZG8gd2Uga25vdyBhYm91dCBsb25lbGlu
ZXNzPyBFbXB0aW5lc3MsIHNpbGVuY2UgaW4gYSBzaG93ZXIsIGJvcmVkb20s
IGEgcGFpbi4uLiBJdCBpcyBwb3NzaWJsZSB0byBwcmVzZW50IG1hbnkgY29t
cGFyaXNvbnMuIFJvYmVydCBJIHVuZGVyc3RhbmQgeW91ciBkaQEwAQEBAQ--
X-YMailISG: CmXPQl8WLDsBJkrAsirHKVlEx7gU17zglsTMC0SsnMgdISx2
7Xxv4tu6jC_NWUdFwLoDBS1iiVCcxqNie7IwjdLkua9t_PIVa6fGXpG3ENoF
l0IH6E560fIuDITQ9xOMLhH0asM8vYq4oRGJH.s0d0uRKxpmQEwYODzBX2bK
d5lVCbHghhEB2pIhwEY0_FSzAWA9Lc85yrefyLLrHGKff4EzNF_gvWBP9XDG
mtZT_CxtPk8IA4soiWuNAtk0m0F6WkCZAP2Ia8jpXN09vIl6f8oWUa5__dM7
2.pbsDr_ag.TBCBCelnpQqKA0RTZJKGPn6ZmYyKTkWrUXMliIt5knFnN8PKY
cuhA89BqRxAorvH3zUQ5HlpqHyNWvX_iaf9Y9D7yNrmzU0wXCM6lcXUHzoCN
TPk8EnLal7S3PbzL3.z9yYGvp8hxzh71z2bBRvijfQOPaizLZs9qsPITsU5.
Bs0eflY5FXRnovuxbneHsol9A.wAv.A7aWHRW3KvI.j62z5XDwIJJ8se0pOu
0ygsolLOYh6VJNx36igdObA_g5xis_KFRcOQ5jJ_5n8xXaGuJdVsaCLvbQaR
x2ymcNqksRSq3ZxMrDRIkGHZEKxOGRkR.qPguVD5_oKuhE1xYtgN600iv3wF
iihfdHK.7d_8jE8Ng_12GokGOHjR3rfGJ6s1_.seDGrkipcWau8xnmBF5JlB
9E7HIVBs5kQ4u9YiSrs49VngBzrYFm7IP2qNjZ8gH8XJiRm3OlKwmo.hQZ66
KMs0lcTYLopzs.x9K8b9gHJVu160d98CaJ2E4N0iOCDbkNAexraugGt5DQJx
TZkK4OHjUX4o2dhUhab4psBAfFn5bO6bnUQ_.OkBw6v3N27HhMrT1Z2Jm8.4
CQ_S4WklFeBBGvPGdfC.TaItwcGMMcWr8nbBbu0NK5dovZWLmv259GWRWtmd
fbOvqzBuc55UGTIUC.u.BvgxfQBwmFwLzn1B340cYsApFJofoiis7qYQG_vW
pR7Q1snKbAmqOtQxPLlsSdty5H0_.f5owfm7BJRBmAX1cUk7SKfvwVpAPOTn
govtQ_WYkvZRpDvbBrJBB0D1lKNaNQP_q1tMxMNGz9tgjyx4dHUGy3j.D61N
OCKn4HEEOBmnGOBGf57TrmPqy9HnhtOsNAGGPyfCAtvC4Oyz9wMmdHNUFi0O
NNm2pHDGkyP2p0EAAQ.NicYKFL.WnKisMUrdYikGr4D9XE9J7utLeMeJPSJ1
eWe0cvGl24Mu8ims1VaHhmw1rro4GUBY_vH4IkJxPori_J8ILs.EBMYdMO50
ydZUmnT_VDsejvdN.v5H7Oa5n0asLb6K1wOlYVc4JbX0iKDRnRyUGpxpUE6X
TQoxmKcDVCBk825kTpfdHtffP8mSpFFVhW50vu_0UR1deG6C5xV5Q5Sb67qm
WfqExDDsMI.RLdXnBc5O5BBtxbbi6wn0Zg--
X-Originating-IP: [209.85.217.177]
Authentication-Results: mta1042.sbc.mail.ne1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-lb0-f177.google.com) (209.85.217.177)
by mta1042.sbc.mail.ne1.yahoo.com with SMTPS; Mon, 04 May 2015 15:13:27 +0000
Received: by mail-lb0-f177.google.com with SMTP id uc2so107009705lbb.2
for <{removed}@sbcglobal.net>; Mon, 04 May 2015 08:13:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=date:from:reply-to:message-id:to:in-reply-to:references
:mime-version:content-type:content-transfer-encoding;
bh=0caYpTui0f4gkNWQ6DtW9DGD/KaYrkxH2t+1TU3VFRM=;
b=C4jwnzJNRaUzL+nEMF2qi6/dDLAiOaQfWr0HUPd4LzXfkhizNwRTB09+RSkZL8Tk/H
Yn2QNzm1nTtPfKOGkcyAD3w8WKczpHvfLGKYyEdGyok0oeIp+zMxgkT6IF7pc9jM0bre
YqAIPo5Xr2CINtvxfBssQcLxNLJB2pf92hwBOPh5EeAdMsEVcMn1un3fgKSmzSpEyC2Z
CkTlLkEDnC+TjoN082DSzmfLePIbfsscMVRz6vZK5QWHMb7P8RgSldE7E1d7DQE4Jwyp
2K6FUNnpNIHNQrYo8C/p0hqZ2pWZdBHqAQo9Ydo+Ajyc/8DxhIp5cI697UsB2uawo8JQ
SkSw==
X-Received: by 10.112.142.232 with SMTP id rz8mr19343404lbb.74.1430752406577;
Mon, 04 May 2015 08:13:26 -0700 (PDT)
Return-Path: <{removed}@gmail.com>
Received: from LES ([188.187.137.144])
by mx.google.com with ESMTPSA id ky7sm3412042lab.37.2015.05.04.08.13.23
for <{removed}@sbcglobal.net>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Mon, 04 May 2015 08:13:24 -0700 (PDT)
Date: Mon, 4 May 2015 08:13:33 -0700
From: {removed}@gmail.com
X-Mailer: The Bat! (v3.0.1.33) Professional
Reply-To: {removed}@gmail.com
X-Priority: 3 (Normal)
Message-ID: <1788225747.20150504081333@gmail.com>
To: {removed}@sbcglobal.net.
In-Reply-To: <1964377171.179508.1430603353269.JavaMail.yahoo@mail.yahoo.com>
References: <1964377171.179508.1430603353269.JavaMail.yahoo@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Length: 4024

User avatar
Chrispcritters
Forum Administrator
Posts: 2445
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: Stuck! Only can find server ARIN - need origin of how emailed me this letter

Post by Chrispcritters » Wed May 06, 2015 8:49 am

Unfortunately Google does not include the sender's IP address in most of their emails.
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.

xxbancheexx
New Member
Posts: 3
Joined: Wed May 06, 2015 7:35 am

Re: Stuck! Only can find server ARIN - need origin of how emailed me this letter

Post by xxbancheexx » Wed May 06, 2015 11:41 am

any ideas of how I can locate who is using this gmail account? I am not having luck with reverse email look up either... Thank you!

User avatar
Chrispcritters
Forum Administrator
Posts: 2445
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: Stuck! Only can find server ARIN - need origin of how emailed me this letter

Post by Chrispcritters » Wed May 06, 2015 11:47 am

You would need to hire a lawyer and start issuing subpoenas. If the sender's IP address is outside the country you would probably need to hire a lawyer in that country too.

You might want to see if you can get the IP address via a service like WhoReadMe.
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.

xxbancheexx
New Member
Posts: 3
Joined: Wed May 06, 2015 7:35 am

Re: Stuck! Only can find server ARIN - need origin of how emailed me this letter

Post by xxbancheexx » Wed May 06, 2015 2:26 pm

Thanks Chris!
I am hiring company out of TX, who can assist in these needs. Very Serious Problem here!!! Need to find out if this person is real or a scammer!! They are using a Gmail account, which only shows me the server IP address. We are talking about thousands of USD and my sons tuition money!!! just when you think a company or person is legal.....<_<

User avatar
Chrispcritters
Forum Administrator
Posts: 2445
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: Stuck! Only can find server ARIN - need origin of how emailed me this letter

Post by Chrispcritters » Wed May 06, 2015 2:34 pm

If you could post some results and costs down the road that may be helpful to other users.
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.

Locked

Who is online

Users browsing this forum: Gavriilhat and 3 guests