I'm 100% certain I've been getting catfished. Help me track this IP address so I know where it's coming from!

Post your questions about tracing the source IP address of an email here.
Locked
jaredbaiman
New Member
Posts: 1
Joined: Fri Dec 11, 2015 12:30 pm

I'm 100% certain I've been getting catfished. Help me track this IP address so I know where it's coming from!

Post by jaredbaiman » Fri Dec 11, 2015 12:35 pm

Delivered-To: {removed}@gmail.com
Received: by 10.202.57.137 with SMTP id g131csp695293oia;
Fri, 7 Aug 2015 18:42:24 -0700 (PDT)
X-Received: by 10.152.6.69 with SMTP id y5mr10711517lay.72.1438998143900;
Fri, 07 Aug 2015 18:42:23 -0700 (PDT)
Return-Path: <{removed}@gmail.com>
Received: from mail-la0-x241.google.com (mail-la0-x241.google.com. [2a00:1450:4010:c03::241])
by mx.google.com with ESMTPS id jg8si8987585lbc.29.2015.08.07.18.42.22
for <{removed}@gmail.com>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 07 Aug 2015 18:42:23 -0700 (PDT)
Received-SPF: pass (google.com: domain of {removed}@gmail.com designates 2a00:1450:4010:c03::241 as permitted sender) client-ip=2a00:1450:4010:c03::241;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of {removed}@gmail.com designates 2a00:1450:4010:c03::241 as permitted sender) smtp.mail={removed}@gmail.com;
dkim=pass header.i=@gmail.com;
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-la0-x241.google.com with SMTP id d1so3195981lab.3
for <{removed}@gmail.com>; Fri, 07 Aug 2015 18:42:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=E1/S64W2erJqp5PteEO/gIVVo2NiotS+Sn0bXXSYX3w=;
b=XP4htKeVp383BNeZLAnDkhK0ew3s9NdziWTVioQlTYAg3vtjaHblJK5ZJIIxFilRJ/
sFplWf1hNbAYP2nfuI0dQaV76ITSDCd8TDsnTpavVeE5kDkmjVRF7EizMSrSHoxOwzuc
G+gZDlvarVb1FAbLvVDXic7tZEF7eqqIiS4wmv7R5Cc7ddlBFLGk9+VonYv1/SXr1sMW
RPC0vS4eziW2KGRg5G8BF+uW+XU4qlbWpZsNh1lZYKiIA9i+0E/dDv511wmeLa/xH+Cc
ecTr+L1vIDom90HCDeRjiUKV21tLjAc5tqOfsU17eyDjyA0kCULeA8bEGX0ukznSNCc5
kmqQ==
MIME-Version: 1.0
X-Received: by 10.152.170.195 with SMTP id ao3mr9827976lac.30.1438998142396;
Fri, 07 Aug 2015 18:42:22 -0700 (PDT)
Received: by 10.25.153.206 with HTTP; Fri, 7 Aug 2015 18:42:22 -0700 (PDT)
Date: Fri, 7 Aug 2015 17:42:22 -0800
Message-ID: <CAAq=yLYeUvr+TaQ1qdFd7TGewjgA5Ny+4ipg8t6QXQ001gAgaw@mail.gmail.com>
Subject: Here it is.
From: first name <{removed}@gmail.com>
To: Jared Baiman <{removed}@gmail.com>
Content-Type: multipart/alternative; boundary=089e0112c59e1c2dd5051cc2dd51

User avatar
Chrispcritters
Forum Administrator
Posts: 2460
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: I'm 100% certain I've been getting catfished. Help me track this IP address so I know where it's coming from!

Post by Chrispcritters » Fri Dec 11, 2015 5:47 pm

Unfortunately emails sent from gmail.com addresses cannot be tracked without a court order.

I would trust your instincts. If you think something is off it probably is.
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.

imapayne
New Member
Posts: 1
Joined: Tue Feb 02, 2016 4:57 pm

Re: I'm 100% certain I've been getting catfished. Help me track this IP address so I know where it's coming from!

Post by imapayne » Tue Feb 02, 2016 5:40 pm

jaredbaiman,
What chrispcritters said is not true about gmail. I am in your situation and I recognize the IP address you want to search.
It is: 2a00:1450:4010:c03::241
It is at the end of the "received from line", the 7th line down. I have done a lot of research because I have been feeling the same way and I noticed that they are in Europe in "Lappeenranta, South Karelia, Finland"
I'm receiving emails from the same IP address. But when I look at other peoples "scam websites" I don't see anyone else having complaints from Finland. Could you please update me? Were you being catfished from this area? Your response is much appreciated.

User avatar
Chrispcritters
Forum Administrator
Posts: 2460
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: I'm 100% certain I've been getting catfished. Help me track this IP address so I know where it's coming from!

Post by Chrispcritters » Wed Feb 03, 2016 7:54 am

2a00:1450::/29 is allocated to Google. The geolocation database provider used for that lookup is incorrect.
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.

Locked

Who is online

Users browsing this forum: No registered users and 3 guests