1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved: Was scammed by an imposter on email

Discussion in 'General Security' started by linsjean, May 13, 2015.

Thread Status:
Not open for further replies.
Advertisement
  1. linsjean

    linsjean Thread Starter

    Joined:
    Sep 6, 2006
    Messages:
    328
    He stole someone's ID and username from a "friend" on Facebook. I thought it was my friend private messaging me, but it was an imposter. I gave to my friend my email address so I could correspond with this "new possible friend" and we exchanged a lot of emails and pics for about a week. The very last comment he made was "I have 1.2 million dollars in my account, how much do you have to help the underpriviledged kids" I told him I have no savings account and that was the last I heard from him. He led me to believe that he was going to relocate and meet me. I was able to copy/paste here for you the full message source.

    x-store-info:sbevkl2QZR7OXo7WID5ZcVBK1Phj2jX/
    Authentication-Results: hotmail.com; spf=pass (sender IP is 209.85.213.173; identity alignment result is pass and alignment mode is relaxed) [email protected]; dkim=pass (identity alignment result is pass and alignment mode is relaxed) header.d=gmail.com; x-hmca=pass [email protected]
    X-SID-PRA: [email protected]
    X-AUTH-Result: PASS
    X-SID-Result: PASS
    X-Message-Status: n:n
    X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0y
    X-Message-Info: gamVN+8Ez8V+RHg+F+brAfDaei/IGNqwdMGcggYHi/OH92lhkDHPn7b+QtitTaoIMTf9MGiDs4cuJAmD8zVRPEoTCSVtYQ5uwlTYQboOjFHG2+Zgth1q99yfDQe2eMlrK6/JTsuSCr+KiHoM35nO29jxHQAQBV4wPd7SSqpCLGy7gvkCyTUHiX4iZNOiN1+uXXS7BoEUEmUHopUs+GWc1Dl4tU3JL5eO
    Received: from mail-ig0-f173.google.com ([209.85.213.173]) by BAY004-MC2F23.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
    Sat, 9 May 2015 01:06:10 -0700
    Received: by mail-ig0-f173.google.com with SMTP id t9so43978304ige.1
    for <>; Sat, 09 May 2015 01:06:10 -0700 (PDT)
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
    d=gmail.com; s=20120113;
    h=mime-version:date:message-id:subject:from:to:content-type;
    bh=m0jSzwX8tzVDQse6yA8BTSRv7g2oeCm84Fwq/VuSryU=;
    b=Sqg7Q7tcLyYSYo4c7/vlO2pHXd8p3Qmyez5Up2NKpTUP24oXaVdFO8BdNBxd5SLw3d
    py0fXFSkxpCEQ/xBJvBjQ7Ag7khNU7vCuaoQJCtDsR5b10qse2ggNtDiKtsM6TO0lrQM
    J/iFzoZGepp2RwfAyNSqilo+vrOTkvccqDrz4GXWMwD2lD9qCJg6KI5gbThbLo4891dO
    LynRB/3VoBaEmkUCfFh37qX40mxbNN5YBA8lRfBCzqhRSc8e4NzuSssaJz/dygd9bp4z
    6iO2dVK9t+WR6/nxSQGIEx0jnCwhR6VJwPYu4EfMPdEA8zvkj3HghreWWaQCV5Ltoa+8
    aGpQ==
    MIME-Version: 1.0
    X-Received: by 10.107.163.79 with SMTP id m76mr2090080ioe.85.1431158770276;
    Sat, 09 May 2015 01:06:10 -0700 (PDT)
    Received: by 10.79.96.129 with HTTP; Sat, 9 May 2015 01:06:10 -0700 (PDT)
    Date: Sat, 9 May 2015 16:06:10 +0800
    Message-ID: <[email protected]om>
    Subject: hello
    From: Robert Cooper <[email protected]>
    To: [email protected]
    Content-Type: multipart/alternative; boundary=001a11402aca1ea0900515a19ece
    Return-Path: [email protected]
    X-OriginalArrivalTime: 09 May 2015 08:06:10.0789 (UTC) FILETIME=[02BEA950:01D08A2F]

    --001a11402aca1ea0900515a19ece
    Content-Type: text/plain; charset=UTF-8


    Is there a way to:

    1. Find out where that IP address is coming from and
    2. Report to who where?

    He was using Gmail and I was outing hotmail (Outlook).

    Thanks!
     
  2. cwwozniak

    cwwozniak Trusted Advisor Spam Fighter

    Joined:
    Nov 28, 2005
    Messages:
    64,199
    First Name:
    Chuck
    For security and/or privacy reasons, Google does not include the source IP address of senders in the email header.
     
  3. linsjean

    linsjean Thread Starter

    Joined:
    Sep 6, 2006
    Messages:
    328
    His IP address is: 209.85.213.173 It IS in the email header when I clicked on Message source after opening one of his emails. So, what is a good site to put in any IP address to find location? Even a state location would suffice.
     
  4. linsjean

    linsjean Thread Starter

    Joined:
    Sep 6, 2006
    Messages:
    328
  5. linsjean

    linsjean Thread Starter

    Joined:
    Sep 6, 2006
    Messages:
    328
    That tells me he's was emailing me from Alabama and so he lied about his location because he said he lived in Texas and was visiting in California with his sister at the time he was emailing me from his laptop. I am mainly concerned if he could have got my IP address and more importantly my friend on facebook, well, she changed her password, but I do not see her as a "friend" there anymore and so maybe she closed her account there. Any ideas how to report this guy? He probably gave me a fake name, but a person's IP address does not lie about their location, right?
     
  6. cwwozniak

    cwwozniak Trusted Advisor Spam Fighter

    Joined:
    Nov 28, 2005
    Messages:
    64,199
    First Name:
    Chuck
    As it says on the page in your link, 209.85.213.17 is most likey the IP address of the Google mail server. That particular server may be physically located in Alabama. The individual that sent the email through that server could have been anywhere.

    Unless there was some criminal activity involved, there is nobody to report your concerns to. The person probably used fake information to set up the gmail account in the first place.

    As for the person getting your IP address, if you access your hotmail account through a residential broadband service, your public IP address is one number in a large pool of numbers used by your service provider and may change from time to time. The only people that can match the public IP address to you, are your service provider. Also, it is my understanding that Microsoft does not included the sender's IP address for sent messages.
    http://answers.microsoft.com/en-us/...ve-email/d7879280-1862-4f9d-803a-0433edffe277
     
  7. linsjean

    linsjean Thread Starter

    Joined:
    Sep 6, 2006
    Messages:
    328
    ok, thank you.
     
  8. IMiteBable2help

    IMiteBable2help

    Joined:
    Nov 6, 2001
    Messages:
    1,094
    There is a facebook profile setting to not allow the general public to see who is in your friends list. I suggest you don't have your friends list public. Had it been hidden this couldn't have happened. They read your friends list, create an account with a name that is the same as one in your list, then convince you it is your friend, then they go from there to reek all kinds of havoc. There is no way that an email header is going to lead you to a real location or person. As others have said that IP is just the email server. This is just another variation of a 411 scam. The reality is that it's some dude (actually, a team of scammers) over in Nigeria in an internet cafe who has a free google email address so even if you tracked it all the way to the computer they used it ends up just being an internet cafe and could have been anyone.. I can't believe in this day and age people still fall for phishing scams it just floors me. Hide your friends list from your public profile. It's a good idea for a myriad of reasons, this incident being one of them. https://www.facebook.com/help/community/question/?id=528585953868160
     
  9. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1148173

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice