Help Understanding Gmail Headers

[DVDR_Dog]

Someone was attempting to scam me via my gmail account. I was looking for the IP of the originator's IP, all gmail's original email with headers just shows email originating from the scammer's domain (which was shut down today). The only reason I asked is I was interested in the email originator's geographic location. When the domain was active it was registered to a company that new nothing about this domain.
This seems to be a relatively new scam, I am looking for a job. These scammers set up a domain that usually has the name of the company offering the job and careers added to the name, e.g. careers(some company name) {no spaces or dots} .com. I have run into 2 offers so far.
These scammers have to be completely without a clue because they are offering these scams to seasoned IT professionals. They are looking to steal your identity during their pseudo onboarding process where to typically give bank info for direct deposit and you social security number.
So back to the issue, anybody know how to interpret headers from received email on your Gmail account?

 

[hacxx]

You're right to be cautious - this scam is becoming more common. To view and interpret Gmail headers, open the email, click the three dots (more menu), then "Show original." Look for "Received" lines—these show the path the email took. The first “Received” line (from the bottom up) may include the sender’s IP, but Gmail often hides it for privacy. If it’s a spoofed or compromised domain, the IP might not help much. For better analysis, tools like MXToolbox or MessageHeaderAnalyzer can help decode headers. Always report scams to Google and the FTC.

 

[DVDR_Dog]

Yeah I have done that. Originating IP: Arin shows it's registered or traceroutes back to Google. I was wondering if there is a way to decipher the code in those headers. Chalk one up for Google aiding the spammers. I have made it a campaign to report those funny domains to the domain they are trying to imitate. I have no idea why they thought they could pull that stunt on a seasoned IT guy.

 

[Diguelo]

One day New Delhi is going to burn in the fires of Alah.

And the little boys and girls scamming the hell out of the world can pray to whatever god they think isnt connected to the internet.

 

[AFFASocial]

Trace an email with its full header​

You can check the full header of an email you received from a Gmail account to know where it's from.

View & copy the full header of an email​

Gmail

Other mail services

Analyze an email header​

1. On your computer, open Gmail.
2. Open the email that you want to analyze.
3. Next to Reply
   
   , click More
   
   
   Show original.
   • In a new window, the full header shows.
4. Click Copy to clipboard.
5. Open Google Admin Toolbox Messageheader.
6. In the box, paste your header.
7. Click Analyze the header above.

Check if an email is delayed​

1. On your computer, open Gmail.
2. Open the email that you want to check.
3. Next to Reply
   
   , click More
   
   
   Show original.
   • In a new window, the full header shows.
4. Next to "Created at," check the delivery time.

 

[DVDR_Dog]

Wouldn't you know it, now I have some time available, haven't heard a peep from scammers. Back in the day I was part of a 419 baiting crew. That was really entertaining driving a scammer nuts, keeping the money so close they could smell it, then wham, slam the door. That was a blast ruing some clown in Lagos day. Shoot, I have some Google voice and corresponding email accounts ready to go. Is there a scammer strike in Kolkata?