I didn't send that email?

Ok, so I get an email from my sister a few minutes ago replying to an email that I never sent her. How do I look up where this email came from?

Here is the email:

From: [mailto: ]
Sent: Tuesday, June 22, 2010 11:17 AM
To: <removedname> @gmail.com
Subject: Re: translation

AAAAAAAAAHHHHHHH… SHALOM??? What are we jewish now?

— On Tue, 6/22/10, <removedname> @gmail.com < @gmail.com> wrote:

From: <removedname> @gmail.com < @gmail.com>
Subject: translation
To: <removedname> @yahoo.com
Date: Tuesday, June 22, 2010, 8:06 AM
God blessing for your new year of life and today a beautiful birthday I wish you of entire heart SHALOM

Happy Birthday Steph

Here is what I think is the header?

Delivered-To: [email]<removedname> @gmail.com[/email] Received: by 10.100.142.10 with SMTP id p10cs165559and; Tue, 22 Jun 2010 10:16:38 -0700 (PDT) Received: by 10.91.50.34 with SMTP id c34mr4180702agk.44.1277226994854; Tue, 22 Jun 2010 10:16:34 -0700 (PDT) Return-Path: <<removedname> @yahoo.com> Received: from web82301.mail.mud.yahoo.com (web82301.mail.mud.yahoo.com [209.191.85.221]) by mx.google.com with SMTP id a14si22013076ibl.41.2010.06.22.10.16.33; Tue, 22 Jun 2010 10:16:33 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of [email]<removedname> @yahoo.com[/email] designates 209.191.85.221 as permitted sender) client-ip=209.191.85.221; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email]pmkin721@yahoo.com[/email] designates 209.191.85.221 as permitted sender) smtp.mail=pmkin721@yahoo.com; dkim=pass (test mode) header.i=@yahoo.com Received: (qmail 50423 invoked by uid 60001); 22 Jun 2010 17:16:32 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1277226992; bh=D4UvoeGhnDjVjCZSlGINq5qr9L/blrcMiKP56Mkutqo=; h=Message-ID:X-YMail-OSG:Received:X-Mailer :D ate:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=fdvugEaIk+AhThk7tryO8I8V3jVsYyWT3MC2vAvPieY3lfdl2w9O9rljIpfFXWmEzaN7IYUMaOQghr1WnuF2LCf7ASV84REmoR0Mi5rZ4EnJyIcxTUz8zgQoG52UkaibIK8Tgc348jqzlsXfnRkwAAIQLuJnCXAT4D/8mSsF4b4= DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer :D ate:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=zTUyBq8CN61deD4QiQccAvIaPdnoHH2lnYQtMNsg7MS1LslNrjlv0J5/YffDKInhXMr6zhORjnlMWzM/l8wbV+CWRscmpqwxi1PcJrT5XlbcUZrJ2GjS17Pl2LaLZd78cBB6HL2QQLWusTyZGkTQ90QAaogvGsx4/QilmiJbOig=; Message-ID: <303448.50405.qm@web82301.mail.mud.yahoo.com> X-YMail-OSG: 1LVxQA8VM1kfR4mZsw4OKDxVE.gE2bvFsMxudF4OD.MByqa 4N9hZzLLOmuSHPJuTglM9kdlnAbOG.H4T784tSWggEOOc3GLQ9EbvmvEUiKh eg8IkhoY35XPp.0UhedIP6jzsb75L2Y01jn47yBFNHejeQfVR6Jzb4fytAQR W4W5pgYxaPb6vy8mTWKhsq6gxk4NeM7q_hluuk4sk_s_i1tCstz8i787RuwZ QQTZdSb1xH.SLTtSAZH.k42JfYoxGa0LkBLyge8crj49LIWiO1rgw2DwvzBw Xgj3lTlPG.5c.QOAWLW4ALNGvdJlDNS5PCOdwHLkRlLhKu_VkRA06ZDFsn09 E03bUxAXVFn5s Received: from [76.214.200.55] by web82301.mail.mud.yahoo.com via HTTP; Tue, 22 Jun 2010 10:16:31 PDT X-Mailer: YahooMailClassic/11.1.4 YahooMailWebService/0.8.103.269680 Date: Tue, 22 Jun 2010 10:16:31 -0700 (PDT) From: <removedname> <<removedname> @yahoo.com> Subject: Re: translation To: [email]<removedname> @gmail.com[/email] In-Reply-To: <000001cb120b$b4a31d00$1de95700$@com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-199933945-1277226991=:50405"

Someone’s gotten into your account; I’d change your password. SHALOM!

Shalom? Oooohhh, you mean bacon, right?

Do you have a history of heavy drinking? If so, do you have a history of drunk e-mailing? You never know.

Is that the one that went all emo on Facebook btw?

Weird, I would say someone got a hold of your account, do as previously said and change your password… other than that I dunno its strange.

yep… that was the one that went all emo on facebook.

And for some reason I really dont think someone is “in” my account. It IS her birthday today and I just dont see how some joe schmo off the street would login to my email only to send my sister a happy birthday on the correct day no less. I checked my gmail calendar, and it does not list her birthday (or any other events)

To me it seems like an automated email… but from where did it come from ? What program could possibly send an email from my gmail account?

Have you just made yours and your sister’s e-mail adress public in a gamer forum full of (allegedly - check the personality disorder thread) psychopaths? Or is that address a placeholer?

To me, this e-mail looks either automated or written by someone who was on drugs. How’s your 23year old son doin, by the way? Didn’t he have this little issue with getting high at other people’s places, causing you massively embarrassing parenting advices from other parents?

don’t forget to clear saved passwords after checking your emails on another computer

It is probably a fake addresser. All someone would need is the email address of you and your sister.

You’ve got it easy, It turns out everyone on my contacts list got an email that was apparently from me about free viagra.

It is the first time my gmail email has been successfully spoofed is all. And it isnt all that hard to assume what my email address is. Doesnt EVERYone have a gmail account?

And feel free to email my sister and tell her she is hawt. She needs a little pick me up attitude going for her birthday.

Careful…she could get alot of SPAM.

Run an ip trace of the last known address. (someone attempted to scam me before, they failed miserably.)

Catz, remove the email adresses from the original posts, you will get a lot of spam otherwise.

First, check your “sent items” list and see if it really came from in your account. Second, have your sister give you the header info from the email she received. The header info you put up looks like it was from an email sent to you… :slight_smile:

:s igh: ok removing the email address then…

meanwhile, it does not show up in my “sent” email, which is why I was thinking it was a program? I was hoping someone would know about said program but I guess not.

meanwhile… everyone, please send pmkin721 der at yahoo der dot com email and tell her happy birfday. :s nicker: she will wonder where all the emails are coming from.

Uhhhhh…

TL;DR :jizz:

I have no idea what TL;DR means.

too long; didn’t read

You’d need the header of the message that SHE received. We could get the ip in there, but that header right there just tells us where her reply went through, so it’s not much help.
But first thing to do (if not already done) would be to change your password… chances are some chinese bot hacked in your account or something. It happened to me with my hotmail account: every single contact of me received a message about some bullshit, and I asked one of them to give me the header, and it traced to China… I hate China.

Founded in 2004, Leakfree.org became one of the first online communities dedicated to Valve’s Source engine development. It is more famously known for the formation of Black Mesa: Source under the 'Leakfree Modification Team' handle in September 2004.