>This is the header of the spam email I got (I only changed my email address). And I don't see it tell me anything about the spammer.
>

What do you mean? You have everything about the spammer, you can go a knock their door!!

http://my-address-ip.com/whois-ip-address-51.36.213.0.html


The 51.36.213.0 IP address is associated with the country Saudi Arabia and the city Jeddah whose postal code is . The longitude and latitude of the 51.36.213.0 IP address is 39.2192 / 21.5169. The information provided on this IP address is free. To find out if your IP address is fixed or dynamic, it is recommended to ask your ISP. This information about IP addresses is exclusively for V4 IP addresses.


You have they address :) (Just kidding, if they are any good they are probably using multiple proxys)

>>>>>>>>The whole schema sounds like the lazy montenegrin virus: "your machine is now, ahem, infected. Please format your system disk for us".
>>>>>>>
>>>>>>>Where do you press ctrl+u? I cannot read the source of this spam email.
>>>>>>
>>>>>>In my email client. The key combination didn't change, AFAIK, for the last 20+ years.
>>>>>
>>>>>I know I am using the wrong email client: Outlook.
>>>>
>>>>To view email message headers in Outlook:
>>>>1. Open Outlook.
>>>>2. Double-click the message to open it in its own window.
>>>>3. Click the File tab and select Properties.
>>>>4. The properties for the selected message display in a dialog box. ...
>>>>5. Right click inside the Internet headers pane and click Select All. ...
>>>>6. Close the Properties box.
>>>>
>>>>https://support.office.com/en-us/article/view-internet-message-headers-cd039382-dc6e-4264-ac74-c048563d212c
>>>
>>>Thanks for the tip. But I cannot read much in the header of the message. He/she must have hid all compromising information.
>>
>>Here's the first half of it:
>>

From - Sun Feb 17 12:20:52 2019
>>X-Account-Key: account3
>>X-UIDL: sm_1D5F1163_325800af6a67452ab55db02ce9292e3c
>>X-Mozilla-Status: 1001
>>X-Mozilla-Status2: 00000000
>>X-Mozilla-Keys:                                                                                 
>>Return-Path: <atendimento@vjsrepresentacao.com.br>
>>Received: from mcegress-14-lw-4.correio.biz (mcegress-14-lw-4.correio.biz [191.252.14.4]) by dpmail24.doteasy.com with SMTP;
>>   Sun, 17 Feb 2019 03:18:11 -0800
>>X-Sender-Id: _forwarded-from|122.54.134.175
>>Received: from admincontrolpanel.com (unknown [10.30.225.40])
>>	by mcrelay.correio.biz (Postfix) with ESMTP id 7AE9F853DF9
>>	for <ndragan@ndragan.com>; Sun, 17 Feb 2019 08:17:58 -0300 (-03)
>>X-Sender-Id: _forwarded-from|122.54.134.175
>>Received: from admincontrolpanel.com (plesksa03.admincontrolpanel.com
>> [10.30.224.225])
>>	by 0.0.0.0:2500 (trex/5.9.14);
>>	Sun, 17 Feb 2019 08:17:58 -0300
>>X-LW-Relay: Forwarding
>>X-LW-SenderId: _forwarded-from|122.54.134.175
>>Received: from admincontrolpanel.com (localhost [127.0.0.1])
>>	by admincontrolpanel.com (Postfix) with ESMTP id 4736E360F2D
>>	for <ndragan@ndragan.com>; Sun, 17 Feb 2019 08:04:47 -0300 (-03)

>
>This is the header of the spam email I got (I only changed my email address). And I don't see it tell me anything about the spammer.
>
>

>Return-Path: <mybusinessemailaddress>
>Received: from [51.36.213.0] (UnknownHost [51.36.213.0]) by sm03.internetmailserver.net with SMTP;
>   Thu, 7 Mar 2019 04:11:49 -0800
>Message-ID: <2316CAB98DFF65FECB17645022B82316@1A8MHYNAG>
>From: <mybusinessemailaddress>
>To: <mybusinessemailaddress>
>Subject: *** SPAM ***SPAM-LOW:  Caution! Attack hackers to your account!
>Date: 7 Mar 2019 16:57:42 +0200
>MIME-Version: 1.0
>Content-Type: text/plain;
>	charset="ibm852"
>Content-Transfer-Encoding: 8bit
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>X-SmarterMail-Spam: SPF_None, UCEProtect Level 1, Reverse DNS Lookup [Failed], ISpamAssassin 0 [raw: 0], SpamAssassin 7 [raw: 2], DK_None, DKIM_None
>X-SmarterMail-TotalSpamWeight: 12
>X-Antispam: spam, score=90
>X-Antivirus: avast! (VPS 190307-0, 03/07/2019), Inbound message
>X-Antivirus-Status: Clean
>