Need help on an email from my "daughter"

AMDMaddness

Platinum Member
Sep 1, 2003
2,406
2
81
I got an email addressed to me tonight that had my daughters name as the sender (first and last) and it said Hi daddy my daughter doesnt have email and my daughter is in the next room (she is 6) my wife is sleeping in her room tonight. We have a very unique spelling of our name so it is even more odd. We are spooked as heck at the moment and I have had no luck tracking down where the email came from any help???


Delivered-To: XXXXXXX@gmail.com
Received: by 10.78.165.15 with SMTP id n15cs261153hue;
Sat, 10 Feb 2007 21:04:43 -0800 (PST)
Received: by 10.114.73.1 with SMTP id v1mr6521735waa.1171170282670;
Sat, 10 Feb 2007 21:04:42 -0800 (PST)
Received: by 10.114.179.10 with HTTP; Sat, 10 Feb 2007 21:04:42 -0800 (PST)
Message-ID: <38006a4a0702102104j34ea1b40tbc0b4b21edb0b71b@mail.gmail.com>
Date: Sat, 10 Feb 2007 23:04:42 -0600
From: "emily XXXXXXX" <XXXXXXXX@gmail.com>
To: XXXXXXXX@gmail.com
Subject: daddy
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_31511_32064637.1171170282625"

------=_Part_31511_32064637.1171170282625
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

hi daddy

------=_Part_31511_32064637.1171170282625
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

hi daddy

------=_Part_31511_32064637.1171170282625--


I did a tracert on the IP and it doesnt get me anywhere


Tracing route to 10.114.179.10 over a maximum of 30 hops

1 1 ms 1 ms 1 ms wr850g.sc.charter.com [192.168.10.1]
2 7 ms 10 ms 9 ms 10.122.128.1
3 10 ms 9 ms 9 ms 172.22.32.1
4 11 ms 11 ms 11 ms 172.22.32.113
5 12 ms 11 ms 11 ms 172.22.5.6
6 14 ms 14 ms 14 ms 172.22.5.54
7 29 ms 22 ms 26 ms 10.114.179.10

Trace complete.

The ip belongs to www.IANA.org and there is no info there as they arent an ISP just the internet assigned numbers authority.

Any ideas? I checked all the computers in my house and none of them have logged into gmail in the last few days.


here is the reply to my reply


this is what it said:

i am so sorry i thought u were me dad!!!!!!!!!!!


Now I am hoping this is just some weird coincidence and she happens to have the exact name of my daughter and emailed me on accident. It?s beyond weird the email is sent from the same address ip address as before.
 

Balt

Lifer
Mar 12, 2000
12,673
482
126
If that is actually your daughter's e-mail address you might want to edit it out with the rest of the info you removed.
 

AMDMaddness

Platinum Member
Sep 1, 2003
2,406
2
81
No my daughter doesnt have email and my daughter is in the next room (she is 6) my wife is sleeping in her room tonight.
 

HybridSquirrel

Diamond Member
Nov 20, 2005
6,161
2
81
Originally posted by: AMDMaddness
No my daughter doesnt have email and my daughter is in the next room (she is 6) my wife is sleeping in her room tonight.

thts pretty scary for a 6 year old, maybe she had to do one for school? (my nephew started kindergarten this year and they had to make emails) does she use the computer?
 

AMDMaddness

Platinum Member
Sep 1, 2003
2,406
2
81
Originally posted by: HybridSquirrel
Originally posted by: AMDMaddness
No my daughter doesnt have email and my daughter is in the next room (she is 6) my wife is sleeping in her room tonight.

thts pretty scary for a 6 year old, maybe she had to do one for school? (my nephew started kindergarten this year and they had to make emails) does she use the computer?

No she doesnt have an email nor does she do it at school. It was sent tonight at 12:05am she was in bed at 8pm
 

HybridSquirrel

Diamond Member
Nov 20, 2005
6,161
2
81
Originally posted by: AMDMaddness
Originally posted by: HybridSquirrel
Originally posted by: AMDMaddness
No my daughter doesnt have email and my daughter is in the next room (she is 6) my wife is sleeping in her room tonight.

thts pretty scary for a 6 year old, maybe she had to do one for school? (my nephew started kindergarten this year and they had to make emails) does she use the computer?

No she doesnt have an email nor does she do it at school. It was sent tonight at 12:05am she was in bed at 8pm

ok, honestly what i would do is notify the police, if it is a hacker than can hand it over to the internet fraud dpt of the FBI or something. thats what i would do at least, might lose your pc for a month or so so they can "investigate"
 

Balt

Lifer
Mar 12, 2000
12,673
482
126
Originally posted by: AMDMaddness
No my daughter doesnt have email and my daughter is in the next room (she is 6) my wife is sleeping in her room tonight.

Yikes. Creepy. :confused:
 

Special K

Diamond Member
Jun 18, 2000
7,098
0
76
Maybe it's just a coincidence? I've received spam before and the sender's names were names of people I knew personally. Of course the body of the message just contained ads for drugs or something. Yours is just creepy.
 

pravi333

Senior member
May 25, 2005
577
0
0
its possible you might've given your daughter's name in some website & you got a spam out of it? but ya just 'hi daddy' is weird
 

Balt

Lifer
Mar 12, 2000
12,673
482
126
Is your last name part of your email address? Some spam generators will pick out that information and use it to make their fishing for a click a little more effective.
 

GundamW

Golden Member
Feb 3, 2000
1,440
0
0
Possibly some kind of trojan plant.
On the safe side, just keep an eye on your daughter for the next few days.
 

Kadarin

Lifer
Nov 23, 2001
44,296
16
81
I'm going with the phishing theory, too. You might want to do a virus scan on all of your PCs, too.
 

Lord Evermore

Diamond Member
Oct 10, 1999
9,558
0
76
Just to point out, the reason traceroute didn't go anywhere is because addresses in the 10.x.x.x network are not publicly routable IPs. They're reserved for use in private networks, and can be used by anyone because they can't be seen from any other network so they won't cause conflicts. Same as the 192.168.x.x block, and 172.16..x.x - 172.31.x.x block.

It's common for companies to use only the private space within their own network, and then use network address translation and firewalling for communication to the outside Internet.

One thing I'd suggest is contacting Google to ask them if they can identify where the message was sent from. They might tell you if it came from an IP in China or something, or one right in your hometown. Unfortunately, because it's only webmail, and the message only went from one gmail account to another, there is nothing you can use in the headers to tell you anything. It didn't get routed over any public networks, and doesn't identify the IP used to log into the account.

The suggestion to give it to the police is a good one, although I don't know how likely it is they'll do anything about it. Provide them with any responses from Google as well, and let Google know you'll be giving the email to the police. Don't want to scare you, but like GundamW said, keep an eye on the kid. It could be someone with nasty plans, or someone who just wants to terrorize you.

Or it could just be a prank. Google's response could get you the information you need to find out. You may be able to get in touch with the ISP the IP used for it belongs to, and find out if they can tell you who was using it at the time. They probably won't tell you that though, that may need to go through the police.