Page 1 of 1

Looking for origin location of this email header

Posted: Wed Oct 14, 2020 8:42 pm
by dgaitan7
Hi,

I recently was scammed on an apartment hunt and was hoping to track down the origin for the sender of the email header below. I entered the ip address and got notice it was likely a mail server for Gmail but was hoping there might be more information y'all can determine from the header.

I appreciate the help!


Received: from 10.201.219.84
by atlas109.ptnr.mail.bf1.yahoo.com with HTTP; Sat, 3 Oct 2020 05:15:03 +0000
Return-Path: <{removed}@gmail.com>
Received: from 209.85.167.52 (EHLO mail-lf1-f52.google.com)
by 10.201.219.84 with SMTPs; Sat, 3 Oct 2020 05:15:03 +0000
X-Originating-Ip: [209.85.167.52]
Received-SPF: pass (domain of gmail.com designates 209.85.167.52 as permitted sender)
Authentication-Results: atlas109.ptnr.mail.bf1.yahoo.com;
dkim=pass [email protected] header.s=20161025;
spf=pass smtp.mailfrom=gmail.com;
dmarc=success(p=NONE,sp=QUARANTINE) header.from=gmail.com;
X-Apparently-To: {removed}@gaitan5.com; Sat, 3 Oct 2020 05:15:03 +0000
X-YMailISG: 4qITtScWLDsQB7mWaVAs3lX7eQxVqXSrO.Az1vtj8L9bfLPv
jyhcvToUaUsggOUAouBUB9mtudQWf8tRgcVeJFHFU8yF9SoswHJd6eapEHQz
mKkhaJmMeNU7OYxL0BVBzpWLeK6_6.5qbTCUoiH1XKaD8O0gypwq3nJYaWpQ
TsoZPK9LPtBwVFJFD.52BFKN_abAjmgF9HWDtQzsR7e1qpUBIHz9ki0XahaJ
CcTbmVWcAiCKT.inMPSezEX4lhWejq0FOAri4JKjgF.PR74xrPhI8Wl44m23
TnXaLA0pnaXx5VltWcy.SzPMhluuIHCJeLVt1dZCHNnMlFX4YeEFY3RtSkkc
cpBg_aBRZ.qjOZM1q7WOtYzCcHV4eg32B_CAbYNB68NsiioUWfxQSJp_qUk6
ajiSKCQ4MYT4zQAIu3DTlM1hHnbj2JI7Cbucc71Hrzvf5VdZXUAaJG5.ly_6
FFEw1Uqi_GdALya0VQ1LbG2p8CujUmf_4itW2CKACYI2bl5RM1lPmapL6ehj
CDk.wwyQBSDLgxkDVY8tgnP3z6a2IHoXiHggeMZHnsfDURoUzh5cMfDF6Awu
lKP6pjX8OgbdY5RTONR9y_drWt7ubtpAO0aigAqswrdXS.tCLi3A0LKKFiHd
U6_0OhKNbSGX8AmgdrYhzEvkhK_giSwLaimNzkaa1NnR0C8uJJALTxHvZpNM
vBcJQFdMlIdFYRdjVMYAlGbB04mO5zowOzKpSV0RBRMT5Sv7ccgvhSFbndxi
CKXT2IlyLFz3AKaXU3AGAubaQGrIbNvdWYTWeka_vbalc4p9RC25mPP8iT8c
HBs4YvOJTu4BUEAbCaj.wamNYlI0TLovL_Dl6YPX5F_2GRzeFCIVjxDoALs.
Px9tEIS6eXzFoq1ZbZpGbfD0hq0oOGJPgtmKeXxyhkWW3k0uc0FMPBmpdSM7
Yvm19FnXFX85ggZDEupOxccbd2X4WMhMErtMiEde5wRwKRiPaOQXL8SJfbPA
ELNF5o2WOgjDKVEy3XwXKwc1.vg77f7lY.Nx9IsC1dAeUsqP8any6lAVcx0C
AJYOQ7WndWgyA2nEmexqyPNpMuW5SPVWV5lDJO4kpyBcO7pMIKzQquXAP8Hm
pmI3BoZ2J34KnR7n9avB2oozeQHIhNasnNex0WbRt.Hkkg--
Received: by mail-lf1-f52.google.com with SMTP id m5so4421706lfp.7
for <{removed}@gaitan5.com>; Fri, 02 Oct 2020 22:15:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
bh=H58Go1MrHKUNdAUiBQUIOd5lxnEHnHWYdnn+U3yu4yY=;
b=YITTmeGp8rbE659nHVpX2Ov6ALoCobyxlvtCGGYlVM6x7bb9NNeCBJv2RZfQ67wp2J
cIzYJw+SfDkTmk6zUx5QkIz0mq/6gyD1pQEaLiVCstrZ8x3IkwL8Yy3X++hjWORGkTnJ
q3tjdjc8XeXpOryKSJDZx39SO93cNfSVpVx14BkN4dZxOXgwH1GphoqSJIwN0uGM5q86
SObP52R+NIXmPIf/TMT2r8e8fIJctZYLULLfmOwG9P4WSch8wpB/QpD7mnC4Xj/atG4p
45FFjgDp7d5aNB3DXXVIfjOOT458Hk5/bYCMtEdZDbh5lB3fpoFf5zYVX4vJ9RqRsWZn
+StQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:references:in-reply-to:from:date
:message-id:subject:to;
bh=H58Go1MrHKUNdAUiBQUIOd5lxnEHnHWYdnn+U3yu4yY=;
b=KWctpnZ7/FyRu3/c4Dq9OuNfGtLlqTelR1/195SOE4PjS3qkWJP2UOKZpYawt4T6Dg
wxfzzCkkFlv8B6rCXON1bxxEDhzhn85zla6LsmZIf53MNHlcsxWwAPo+3LE9Zn2EelVh
u0RjsGx1TQMCyZMSbec0MHOAaL5yVibXlLJ53rYb0yEWy1amo19HF1BVEFoeB6XhbTmc
HbE5BmIS71/RASC/UuxL4cMt09lCATk/yy99m7prIiIF3hNdwHHuEkGXJgxrPzjWzGk0
oj6bFb9tHfs9PG5pMKxfeqaIWgKTNT6zRB22aXZ3h3aKx/GivJPX6QYL8jAOH+YuQarZ
lkaA==
X-Gm-Message-State: AOAM5326/sFFV29ufbj639wNnDI5JdXR5PL0iXn708Lv7j0vAXwghced
qq0hMG1MHxn6cfgqqljAV4ocw8STHnEX6CIS3ftZ5IW+
X-Google-Smtp-Source: ABdhPJzGlu57LiYq71uE9ZDkjFgt9EekTM/NjqdR1LmjL2zQPYGezXL6DYL/DfelPHEg1j/ez1P48kS+p/fGqQvHjME=
X-Received: by 2002:ac2:58e2:: with SMTP id v2mr2149358lfo.95.1601702101030;
Fri, 02 Oct 2020 22:15:01 -0700 (PDT)
MIME-Version: 1.0
References: <[email protected]>
<CABQXRkqcgS2YhctMH7uwQht0ByGLS1=[email protected]> <[email protected]>
In-Reply-To: <[email protected]>
From: Huss Jacob <{removed}@gmail.com>
Date: Fri, 2 Oct 2020 22:14:51 -0700
Message-ID: <[email protected]om>
Subject: Re: $1,200 / 1br - 688ft2 - Spacious Furnished One Bedroom One
Bathroom (Denver, CO)
To: Dominick {removed} <{removed}@gaitan5.com>
Content-Type: multipart/mixed; boundary="000000000000c4bd3205b0bd541a"
Content-Length: 76676

Re: Looking for origin location of this email header

Posted: Thu Oct 15, 2020 6:29 am
by Chrispcritters
Unforunately, Google no longer includes the sender's IP address in the headers.