Please help me find the sender of this email

Post your questions about IP address geolocation here.
Locked
JimTeach
New Member
Posts: 1
Joined: Mon Jun 26, 2017 5:35 pm

Please help me find the sender of this email

Post by JimTeach » Mon Jun 26, 2017 5:39 pm

A fake email was sent to my me and my coworkers and caused a lot of heart ache. Please help me find the physical address of the person sending or a name if possible. Thank you in advance for any help.

here is the email header:

Received: by 10.107.59.132 with SMTP id i126csp1769820ioa;
Tue, 20 Jun 2017 11:08:37 -0700 (PDT)
X-Received: by 10.55.146.133 with SMTP id u127mr14624731qkd.17.1497982117083;
Tue, 20 Jun 2017 11:08:37 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1497982117; cv=none;
d=google.com; s=arc-20160816;
b=rUgQsJqQRGVj7LC3I/v+32pNPL6IOI1YkpnUWVjHbjsFs5zVlQ4nuRAL2dvxSlvVG8
Wcr+22aohAoIjEyhEa2YvwX8PLCAMTfsyYLroJo7n5ijwv4XLgFuo+5kr5uuTzChRbNY
gvLqshzZhFRwSBPdIDblGUzQz9V50mTtqgHULKk67wPPYdeNA47jKMpb/LoHg20BR+PX
+f34BTUJjy1HHJNRGFAtVcR7UUNOyanjpYC6wE4DoRps1qMrgytxpPTvxvSz48+2Vjdt
UN5dBfZMMMTEpx5TGtweyyaXd6dm5c1mtDqRnEHjs4+s9cTYZyFBxo7hBcA12GGCnuaL
YAhg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=sensitivity:importance:date:subject:to:from:message-id:mime-version
:arc-authentication-results;
bh=kaK4vhbeZPHjISRzxEFsXAhyMsmEqvemuqddgXMBB1o=;
b=F1Ds778D/wzsnd7lP2sTF9Xe+R9/lG9ylnkKXiAf7UK6sYkrWMY2VfTKiTxHSLL48Z
STbz/81K4MBz52stN66wcGqrpclQLkajn2UcUVwlkfg2QKd5NNFWg8GNWLf8soBBlVng
UDACU3roEbsDRLw2n1pGvKbRDUebKT+VPZ6g76srLgDVw4iJOVKCYqgclm69mTGyo/sM
PoRxeARdB86lE7cvm2zrOOLCZd+vxTKW8WdHlqzPNZBV0buE3s/sr3yIddMNGCPRgT0g
m2adS1coyl0vU8FeI+ruY2cYUEt9/pewQyicaK3+Fcx5vHhUuE0jKJcvOi/q7NQrEY3o
DiCQ==
ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: domain of {removed}@instruction.com designates 74.208.4.200 as permitted sender) smtp.mailfrom={removed}@instruction.com
Return-Path: <{removed}@instruction.com>
Received: from mout.gmx.com (mout.gmx.com. [74.208.4.200])
by mx.google.com with ESMTPS id s127si6616853qke.24.2017.06.20.11.08.36
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 20 Jun 2017 11:08:37 -0700 (PDT)
Received-SPF: pass (google.com: domain of {removed}@instruction.com designates 74.208.4.200 as permitted sender) client-ip=74.208.4.200;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of {removed}@instruction.com designates 74.208.4.200 as permitted sender) smtp.mailfrom={removed}@instruction.com
Received: from [165.155.208.66] by 3capp-mailcom-lxa08.server.lan (via HTTP); Tue, 20 Jun 2017 20:08:35 +0200
MIME-Version: 1.0
Message-ID: <trinity-7c75b2a3-6c25-4900-bf26-d258a733c89d-1497982115549@3capp-mailcom-lxa08>
From: Kathleen Elvin <{removed}@instruction.com>
To: {removed}
Subject: Availability
Content-Type: text/html; charset=UTF-8
Date: Tue, 20 Jun 2017 20:08:35 +0200
Importance: normal
Sensitivity: Normal
X-Priority: 3
X-Provags-ID: V03:K1:ns2+HGZQkMHRBEXL7Jh5AlYqi1b3TS7mEgYPOh6/3TM rX2aHlOTcNyvzb6rDlBNj2YjObFfpWMLd0pLpWMKxa/B+9BgzN /oEuC9RNUlqCeMqEvTQ6PNctIWNxQlcjppg0mTAC5sOLwB1BS7 Pr97XbR1XZaEnQ89bPaYTlGJ2/vTwyuA3tZX/EORg7uuN74DgG RmIoE/NiYb7RnORbu/Vb5cr92VP4JxrFs8zlUf25tNwr+KTloK 5X5y35xoL9N77Dgw5PHYgQjy5khEtTAR99eplFtbBZs4eLUoSA rAbtlFijhjDm7JO8aJBUrJQ4FKA
X-UI-Out-Filterresults: notjunk:1;V01:K0:duFVpvbV3RU=:IG52qTWZpzbD2LmudW8jiJ xRubdPIEme78gE/c+eI7DbtgYqyfFmaRlNwiQvtQ5kqgMjlHqHY2rxbXDPWcqxay6/bB1SSCk UZO7XXq2nL16UbTVY43G/SD9EQPfcRCQxtc7N8C11GnhQt7JyJAsrrjLzEi/u/eG1IP5gxr2e 4Z/K2ebjkH5bYGTknWICJKfVuR5uhXrRzmdLp1fZwFVPjTk/jeB7IjSIY2wxRj+on01x/g3Yc O6DEhwMOdDEN94+kPpOnZJxhEs9CrHNfC11JnJ/ZlY9R8F7qb+hOCkmjCbpPXurZCl2IkPbP2 zdGWAaGvWoDx5rjizkFZMX2I3wL/awDWMj6qjsFsTwJbKIvsaKZSgSR0ssAgIyNVR6G4MlMrf 4fQ1JsSCgoYQuPfSIuXSqtsva/sLq84BBXZZtl0zzCDCL7hXs1ZVqN3ucWz+Gt+X7VKivuBiC YAZHLLH8uA==

<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><p>Good afternoon ladies and gentlemen,</p>

<p>&nbsp;</p>

<p>Please send&nbsp;your availability on the following dates,&nbsp;</p>

<p>July 7 John Dewey High School&nbsp;50 Ave X Brooklyn</p>

<p>August 4 52 Chambers St Manhattan</p>

<p>August 18 John Dewey High School</p>

<p>All meetings will be from 10-12. I am exited about the coming year and meeting as many of you as possible before September.</p>

<p>&nbsp;</p>

<p>Yours Truly,</p>

<p>&nbsp;</p>

<p>Dr. Elvin</p></div></body></html>

Locked

Who is online

Users browsing this forum: No registered users and 1 guest