Finding out senders IP or trying to

[VFM]

Hello,

I’ve received an email via hotmail/outlook from a gmail address.

I’ve followed the advice on a few threads but I keep getting getting ‘USA’ Microsoft or Google as the IP location.

I wondered if that is in-fact correct for the below information.

Many thanks
Marie

Received: from LO2P265MB4741.GBRP265.PROD.OUTLOOK.COM (2603600:237::10) by LO0P265MB3418.GBRP265.PROD.OUTLOOK.COM with HTTPS; Tue, 24 May 2022 17:21:23 +0000 Received: from AM9P195CA0019.EURP195.PROD.OUTLOOK.COM (260320b:21f::24) by LO2P265MB4741.GBRP265.PROD.OUTLOOK.COM (2603600:237::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5273.14; Tue, 24 May 2022 17:21:21 +0000 Received: from AM7EUR06FT064.eop-eur06.prod.protection.outlook.com (260320b:21f:cafe::1b) by AM9P195CA0019.outlook.office365.com (260320b:21f::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5273.15 via Frontend Transport; Tue, 24 May 2022 17:21:21 +0000 Authentication-Results: spf=pass (sender IP is 209.85.219.172) smtp.mailfrom=gmail.com; dkim=pass (signature was verified) header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass reason=100 Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates 209.85.219.172 as permitted sender) receiver=protection.outlook.com; client-ip=209.85.219.172; helo=mail-yb1-f172.google.com; pr=C Received: from mail-yb1-f172.google.com (209.85.219.172) by AM7EUR06FT064.mail.protection.outlook.com (10.233.255.196) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5273.14 via Frontend Transport; Tue, 24 May 2022 17:21:21 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:827180325AF606758BA35DAF15C8ED75A0DCD650F3655F454A7696935AF4FF1E;UpperCasedChecksum:11524C3374674541ED1F222DCA57243118098F7DD1B69420D653C06CE4936805;SizeAsReceived:2738;Count:15 Received: by mail-yb1-f172.google.com with SMTP id o80so32080144ybg.1 for <[email protected]>; Tue, 24 May 2022 10:21:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:frommessage-id:subject:to; bh=DygKoZVGeqOvwInVjCXyxi/RLLHUnTU3f8nqkoNzY8g=; b=eTwM21LBv8jPKna0f/N2DhhsVAABlUTOhm8fFxeUXE+6gVGQgB6l4Wv0Q4wccm4SKo 6ixw83fGV17C4xjLbTv8ReN1QGyabvyuVICZ284BOFyyD2Az9DUPk2bcqbQmOMPKwhSv HV+sLpAPvHv/fwUs/bAa4KJO9oId8P98zhw7OQZ9TZ7/H3mdRegNKksp88j+AGvhEg45 cua/U8dDeAHypIXKBBkObeJcTfeGDy7KgFf0GeJAetwWdu294JRegHjmTv2WCsCAzm/b 2BG3CLvftMht5C/hp1GBmSG5zK9Yy6ERM3oncDxL3dQQIHYvGZaIkXK1YK1aS3GB1fxa ruHA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=DygKoZVGeqOvwInVjCXyxi/RLLHUnTU3f8nqkoNzY8g=; b=UWrW2EnAZiaHt6IALqq2Ag3kXkf3ysU0P0Y0p7DvYSqg3wGj0zoEDRW9YBulA6jY4L VfE5rx2kqgRSt7oUehA2PcHtDhLQxT8T53sdka6Tm7NFssoSlPsz7bSiWP52vRwCy5bx evlnGT8W3Q7fi5F5w2CyPGbWALOau/5KhYFdHYT8ChwvoKY3Nv7rl40wBS4dyoGCLGbv KSvOxuHkAQ46OFGVlRxRngj8c9KxZ+HeX4pI5s0p6povxg1pF+ZTIcDKFLoMgsZ5FLiv FT6BvZXjZtdCRD7uBy8jcryuwH2oXnkYIeLL1daonScR9aRB3nq43yilFsTsUOTwHNnN XXGQ== X-Gm-Message-State: AOAM533NForH7Lg2Hu6rgDXMi7rD0yMjik0yn+gmRs3HFl8h2oH9fY02 Ip/wcDE3yVGdKDk0k0ydzgej5KWQhNe+ZiW8SwXU67zo X-Google-Smtp-Source: ABdhPJxQHN5m1gHhu46l67YuN3/ao7DZ0+dHpYqrr6kjQ5QkEyZgqfRczPSkV5JSmo5bhkeOF9FIzlkabi4VukQTPZs= X-Received: by 2002:a05:6902:90a:b0:64a:cce0:5cb7 with SMTP id bu10-20020a056902090a00b0064acce05cb7mr27072284ybb.192.1653412880640; Tue, 24 May 2022 10:21:20 -0700 (PDT) References: <LNXP265MB1465[email protected]> <CA[email protected]> <LNXP265MB1465[email protected]> <CA[email protected]> <LNXP265MB1465[email protected]> In-Reply-To:

[Correll Van Zant]

Hello,

I’ve received an email via hotmail/outlook from a gmail address.

I’ve followed the advice on a few threads but I keep getting getting ‘USA’ Microsoft or Google as the IP location.

I wondered if that is in-fact correct for the below information.

Many thanks
Marie

Received: from LO2P265MB4741.GBRP265.PROD.OUTLOOK.COM (2603600:237::10) by LO0P265MB3418.GBRP265.PROD.OUTLOOK.COM with HTTPS; Tue, 24 May 2022 17:21:23 +0000 Received: from AM9P195CA0019.EURP195.PROD.OUTLOOK.COM (260320b:21f::24) by LO2P265MB4741.GBRP265.PROD.OUTLOOK.COM (2603600:237::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5273.14; Tue, 24 May 2022 17:21:21 +0000 Received: from AM7EUR06FT064.eop-eur06.prod.protection.outlook.com (260320b:21f:cafe::1b) by AM9P195CA0019.outlook.office365.com (260320b:21f::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5273.15 via Frontend Transport; Tue, 24 May 2022 17:21:21 +0000 Authentication-Results: spf=pass (sender IP is 209.85.219.172) smtp.mailfrom=gmail.com; dkim=pass (signature was verified) header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass reason=100 Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates 209.85.219.172 as permitted sender) receiver=protection.outlook.com; client-ip=209.85.219.172; helo=mail-yb1-f172.google.com; pr=C Received: from mail-yb1-f172.google.com (209.85.219.172) by AM7EUR06FT064.mail.protection.outlook.com (10.233.255.196) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5273.14 via Frontend Transport; Tue, 24 May 2022 17:21:21 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:827180325AF606758BA35DAF15C8ED75A0DCD650F3655F454A7696935AF4FF1E;UpperCasedChecksum:11524C3374674541ED1F222DCA57243118098F7DD1B69420D653C06CE4936805;SizeAsReceived:2738;Count:15 Received: by mail-yb1-f172.google.com with SMTP id o80so32080144ybg.1 for <[email protected]>; Tue, 24 May 2022 10:21:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:frommessage-id:subject:to; bh=DygKoZVGeqOvwInVjCXyxi/RLLHUnTU3f8nqkoNzY8g=; b=eTwM21LBv8jPKna0f/N2DhhsVAABlUTOhm8fFxeUXE+6gVGQgB6l4Wv0Q4wccm4SKo 6ixw83fGV17C4xjLbTv8ReN1QGyabvyuVICZ284BOFyyD2Az9DUPk2bcqbQmOMPKwhSv HV+sLpAPvHv/fwUs/bAa4KJO9oId8P98zhw7OQZ9TZ7/H3mdRegNKksp88j+AGvhEg45 cua/U8dDeAHypIXKBBkObeJcTfeGDy7KgFf0GeJAetwWdu294JRegHjmTv2WCsCAzm/b 2BG3CLvftMht5C/hp1GBmSG5zK9Yy6ERM3oncDxL3dQQIHYvGZaIkXK1YK1aS3GB1fxa ruHA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=DygKoZVGeqOvwInVjCXyxi/RLLHUnTU3f8nqkoNzY8g=; b=UWrW2EnAZiaHt6IALqq2Ag3kXkf3ysU0P0Y0p7DvYSqg3wGj0zoEDRW9YBulA6jY4L VfE5rx2kqgRSt7oUehA2PcHtDhLQxT8T53sdka6Tm7NFssoSlPsz7bSiWP52vRwCy5bx evlnGT8W3Q7fi5F5w2CyPGbWALOau/5KhYFdHYT8ChwvoKY3Nv7rl40wBS4dyoGCLGbv KSvOxuHkAQ46OFGVlRxRngj8c9KxZ+HeX4pI5s0p6povxg1pF+ZTIcDKFLoMgsZ5FLiv FT6BvZXjZtdCRD7uBy8jcryuwH2oXnkYIeLL1daonScR9aRB3nq43yilFsTsUOTwHNnN XXGQ== X-Gm-Message-State: AOAM533NForH7Lg2Hu6rgDXMi7rD0yMjik0yn+gmRs3HFl8h2oH9fY02 Ip/wcDE3yVGdKDk0k0ydzgej5KWQhNe+ZiW8SwXU67zo X-Google-Smtp-Source: ABdhPJxQHN5m1gHhu46l67YuN3/ao7DZ0+dHpYqrr6kjQ5QkEyZgqfRczPSkV5JSmo5bhkeOF9FIzlkabi4VukQTPZs= X-Received: by 2002:a05:6902:90a:b0:64a:cce0:5cb7 with SMTP id bu10-20020a056902090a00b0064acce05cb7mr27072284ybb.192.1653412880640; Tue, 24 May 2022 10:21:20 -0700 (PDT) References: <LNXP265MB1465[email protected]> <CA[email protected]> <LNXP265MB1465[email protected]> <CA[email protected]> <LNXP265MB1465[email protected]> In-Reply-To:

I can give you information about 209.85.219
But you are not going to like it.
I have the same thing as you.
And I know who's behind it!