Mysterious Creepy Spam Email V2 Oh god they're back
64 replies, posted
Original thread: [url]http://facepunch.com/showthread.php?t=1430850[/url]
TL;DR: I've been getting some really, really disturbing emails lately laden with riddles, ciphers and vague threats. All of them from "LUCY GAGNON"<lucyg1@shaw.ca>, though I suspect they're using an email spoofer. In their last email to me, they referred to me by my real name through a cryptogram, meaning whatever it is isn't automated and it's specifically for me.
So I thought everything was done and over with, the last email they sent me was months and months ago. It's basically been out of my mind for a while now. I had "lost" and whatever they were trying to do was done. And then this afternoon, at 12:53, ol' Lucy sent me another email.
[quote]Subject: Call Your MOTHER
Body:
She's worried sick about you.
1
0
0
0
8
8
4
8
2
1
What's that?[/quote]
Obviously that number sequence is some more cryptography shit. It doesn't appear to be a valid phone number. It could be the key for some other cryptogram, possibly one I've already been sent. Can you guys help?
0 = 0
1 = 2^0
2 = 2^1
4 = 2^2
8 = 2^3
[QUOTE=Paraprose;46920818]In their last email to me, they referred to me by my real name through a cryptogram, meaning whatever it is isn't automated and it's specifically for me.
[/QUOTE]
i wouldnt be so sure about this...is your real name attached to your email account? if not then your facebook?
some bots will save your name in order to send more emails to trick you into thinking its a person.
[QUOTE=Paraprose;46920818]Original thread: [url]http://facepunch.com/showthread.php?t=1430850[/url]
TL;DR: I've been getting some really, really disturbing emails lately laden with riddles, ciphers and vague threats. All of them from "LUCY GAGNON"<lucyg1@shaw.ca>, though I suspect they're using an email spoofer. In their last email to me, they referred to me by my real name through a cryptogram, meaning whatever it is isn't automated and it's specifically for me.
So I thought everything was done and over with, the last email they sent me was months and months ago. It's basically been out of my mind for a while now. I had "lost" and whatever they were trying to do was done. And then this afternoon, at 12:53, ol' Lucy sent me another email.
Obviously that number sequence is some more cryptography shit. It doesn't appear to be a valid phone number. It could be the key for some other cryptogram, possibly one I've already been sent. Can you guys help?[/QUOTE]
Can you post the e-mail header as well as upload the original pictures already? Pretty sure we asked you like 3 months ago and you never did.
[QUOTE=WitheredGryphon;46922536]Can you post the e-mail header as well as upload the original pictures already? Pretty sure we asked you like 3 months ago and you never did.[/QUOTE]
[quote]Received: by 10.70.96.2 with SMTP id do2csp1451967pdb;
Tue, 13 Jan 2015 10:46:21 -0800 (PST)
X-Received: by 10.194.94.227 with SMTP id df3mr6496524wjb.34.1421174780213;
Tue, 13 Jan 2015 10:46:20 -0800 (PST)
Return-Path: <lucyg1@shaw.ca>
Received: from emkei.cz ([2a01:5e0:36:5001::1491:8ce5])
by mx.google.com with ESMTP id et4si21787293wib.44.2015.01.13.10.46.19
for <iramatak@gmail.com>;
Tue, 13 Jan 2015 10:46:20 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email]lucyg1@shaw.ca[/email] does not designate 2a01:5e0:36:5001::1491:8ce5 as permitted sender) client-ip=2a01:5e0:36:5001::1491:8ce5;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email]lucyg1@shaw.ca[/email] does not designate 2a01:5e0:36:5001::1491:8ce5 as permitted sender) smtp.mail=lucyg1@shaw.ca
Received: by emkei.cz (Postfix, from userid 33)
id 6827CD5785; Tue, 13 Jan 2015 19:53:07 +0100 (CET)[/quote]
What original pictures?
So that sequence of numbers backwards is a valid phone number.
My friend called it and got this: [url]http://vocaroo.com/i/s0nCT2su1z0H[/url]
Transcript:
[quote]The number you have dialed, 4-8-8-0-0-0-1, has been disconnected. If you feel you have reached this recording in error, please check the number and dial again. Or ask your mother for assistance. [message repeats][/quote]
So it starts out like a normal wrong number phone message, but that last line it's so chilling. It fits so seamlessly in that it catches you off guard. And it's obviously related because both the email and that message mention "my mother," which I think is a codename for some other entity or possibly the key to something.
You try asking your mom about this shit yet?
[QUOTE=matt000024;46934054]You try asking your mom about this shit yet?[/QUOTE]
She barely understands what email is.
...the perfect disguise. Shit!
Interesting. That e-mail was specifically for you. I'm going to try playing around with that number and see if I can figure anything out.
[url]https://emkei.cz/[/url] is a customizable anonymous mailer. This could be one of your friends pulling a prank on you.
Or some kind of ARG.
[URL="http://forums.majorgeeks.com/showthread.php?t=282859"]But it looks like this kind of shit's happened before[/URL] and in much more severe levels, so maybe it's just some troll fuck who goes onto Facebook, looks up random people, and then decides to ecreepstalk them for no reason except to inject a little creepy into peoples' lives.
I'd talk to your mom.
[QUOTE=elixwhitetail;46934234][url]https://emkei.cz/[/url] is a customizable anonymous mailer. This could be one of your friends pulling a prank on you.
Or some kind of ARG.
[URL="http://forums.majorgeeks.com/showthread.php?t=282859"]But it looks like this kind of shit's happened before[/URL] and in much more severe levels, so maybe it's just some troll fuck who goes onto Facebook, looks up random people, and then decides to ecreepstalk them for no reason except to inject a little creepy into peoples' lives.
I'd talk to your mom.[/QUOTE]
I know it's an email spoofer, but I haven't even really been directly threatened. Previous emails from the first thread have just said things like "don't trust a face" and "Jacob, I tried to save you." It could be a troll, but what would that accomplish? It's not like this is making me upset or mad or anything. The first email just said "Hello." How many people are going to reply to that? I just replied for a laugh and it led to this. It all adds up to me thinking this probably isn't an elaborate troll.
Nobody I know with my email address has this level of interest/knowledge in cryptography. I don't have a Facebook and I don't give out my email address to more than a few people.
Even if it all turns out to be some joke/experiment in the end, I had fun trying to figure it all out. So I win no matter what. Unless they kill me.
[QUOTE=Paraprose;46934282]I know it's an email spoofer, but I haven't even really been directly threatened. Previous emails from the first thread have just said things like "don't trust a face" and "Jacob, I tried to save you." It could be a troll, but what would that accomplish? It's not like this is making me upset or mad or anything. The first email just said "Hello." How many people are going to reply to that? I just replied for a laugh and it led to this. It all adds up to me thinking this probably isn't an elaborate troll.
Nobody I know with my email address has this level of interest/knowledge in cryptography. I don't have a Facebook and I don't give out my email address to more than a few people.
Even if it all turns out to be some joke/experiment in the end, I had fun trying to figure it all out. So I win no matter what. Unless they kill me.[/QUOTE]
Out of curiosity, how did your friend manage to call that number? It's a spoofed area code and my phone can't connect. I tried using Google Voice and it won't connect either. Did he use Skype or something?
The email server it's using is my ISP's, and they do host webmail. It's possible that the email account could be compromised if they're handling responses to the account (the webmail does have POP forwarding).
I'd contact them using [URL="http://www.shaw.ca/"]the Contact options on their homepage[/URL] and ask for the abuse department to investigate if the account's been compromised (or if the user is just crazy). I wouldn't expect a lot of information back since customer privacy's involved in the account, but it could lead to something, who knows.
Keep in mind, as well, that if someone is really trying to fuck with you, they could be using info gleaned from a compromised email account belonging to someone you contact. This is getting a little into movie script territory, maybe, but you don't have to be directly compromised for people to know things about you. Why, is another question.
[QUOTE=WitheredGryphon;46934321]Out of curiosity, how did your friend manage to call that number? It's a spoofed area code and my phone can't connect. I tried using Google Voice and it won't connect either. Did he use Skype or something?[/QUOTE]
He's not online, but he lives in Canada, where the spoofed email address is (shaw.ca) so it might just not work for us in the States but it would work for him. I'm not sure how all that works. I realize this raises the point that my friend could be doing all this, but he's decrypting most of it, so I think it would kind of defeat the purpose for him to come up with the puzzle and then immediately solve it for me.
[QUOTE=Paraprose;46934011][B]Or ask your mother for assistance.[/B][/QUOTE]
HIDEKI KAMIYA NO!
Did he dial the right number of zeroes? Because one extra digit puts it into a [URL="https://en.wikipedia.org/wiki/Telephone_numbers_in_Seychelles"]1-248 pattern[/URL], aka the country code for the Seychelles.
[QUOTE=elixwhitetail;46934416]Did he dial the right number of zeroes? Because one extra digit puts it into a [URL="https://en.wikipedia.org/wiki/Telephone_numbers_in_Seychelles"]1-248 pattern[/URL], aka the country code for the Seychelles.[/QUOTE]
He's online now. He dialed 284880001 into his home phone.
Even dialing out to Canada isn't working. Is anyone else able to get this number to call correctly?
If nobody can truly call then it is pretty much confirmed that it is your friend who is messing with you. You can even hear him laugh a little bit in the recording.
[quote]4:32 PM - The Angry Clown: Just typed it into my phone
4:32 PM - The Angry Clown: Home phone
4:32 PM - Frontier Psychiatrist: What exactly did you type?
4:32 PM - The Angry Clown: the number, no +!
4:32 PM - The Angry Clown: +1
4:33 PM - Frontier Psychiatrist: 1284880001
4:33 PM - Frontier Psychiatrist: ?
4:33 PM - The Angry Clown: Yes
4:33 PM - The Angry Clown: Without the 1 though
4:34 PM - Frontier Psychiatrist: 284880001?
4:35 PM - The Angry Clown: 218-488-0001
4:35 PM - The Angry Clown: Yes
4:35 PM - The Angry Clown: Oh
4:35 PM - The Angry Clown: What?
4:35 PM - The Angry Clown: You've got the wrong number
4:35 PM - Frontier Psychiatrist: The numbers backwards are 1 2 8 4 8 8 0 0 0 1
4:36 PM - The Angry Clown: uhm
4:36 PM - The Angry Clown: Excuse me?
4:36 PM - Frontier Psychiatrist: She's worried sick about you.
1
0
0
0
8
8
4
8
2
1
What's that?
4:36 PM - Frontier Psychiatrist: Copied directly from the email
4:37 PM - The Angry Clown: What happened there?
4:37 PM - Frontier Psychiatrist: ?
4:37 PM - The Angry Clown: I definitely called 218-488-0001
4:38 PM - The Angry Clown: Looking at the log now
4:38 PM - The Angry Clown: I must have read it wrong
4:38 PM - The Angry Clown: But it still went to that voice
[/quote]
So there's that.
[editline]14th January 2015[/editline]
[QUOTE=jackteam54;46934465]If nobody can truly call then it is pretty much confirmed that it is your friend who is messing with you. You can even hear him laugh a little bit in the recording.[/QUOTE]
His mom was doing dishes in the background.
Ok, that one connected this time. The number was 2184880001, U.S. if anyone wants to try it as well.
[editline]Edited: [/editline]
The phone doesn't respond to any keypresses, so that's interesting. Pretty stumped right now.
[QUOTE=Paraprose;46934440]He's online now. He dialed 284880001 into his home phone.[/QUOTE]
[del]Your friend's lying or still dialing wrong. +28 is a country code that is unassigned and reserved for expansion. 1-284 is the British Virgin Islands but the number is one digit too short.
Every version of the number is literally invalid under the numbering plans used in today's telecom networks.[/del]
oh, it was one digit short from a copy-paste error or something. Huh. Well, never mind that
That [URL="http://phonenumbermachine.com/218-448-0XXX"]exchange is registered to Rural Cellular for mobile numbers[/URL], but it could've been ported out to somewhere else or forwarding to somewhere.
So did my mystery contact make a typo or is the whole phone number thing a fluke? The "mother" thing seems too connected to be a coincidence, even if it's a digit off.
4:47 PM - The Angry Clown: Well, idk what happened but I clearly typed it into the phone wrong
4:48 PM - The Angry Clown: It's too big of a coincidence that there's anything but that second number as the answer
I called the number and it connected, repeated the same message it gave your friend. I ran it through a spectogram for anything hidden but nothing came up. I'm not entirely sure what's up with this now.
[editline]Edited: [/editline]
I'm somewhat curious as to how your friend managed to misplace the numbers that significantly and yet still find the correct phone number. That part is what seems suspicious to me.
Maybe you pissed off a serial killer and he's just using you as his play toy for awhile.
[QUOTE=WitheredGryphon;46934591]I'm somewhat curious as to how your friend managed to misplace the numbers that significantly and yet still find the correct phone number. That part is what seems suspicious to me.[/QUOTE]
4:51 PM - The Angry Clown: But I cannot explain how the wrong number leads to the right answer
I've known him for 4-5 years now, he's never played any kind of joke/trick on me. Very straightforward person, not the kind who would ever pull a prank.
[QUOTE=Paraprose;46934629]4:51 PM - The Angry Clown: But I cannot explain how the wrong number leads to the right answer
I've known him for 4-5 years now, he's never played any kind of joke/trick on me. Very straightforward person, not the kind who would ever pull a prank.[/QUOTE]
Try responding to Lucy asking for assistance. That may lead you to the next part of the puzzle. That's literally the only thing I can think of at this point.
[QUOTE=WitheredGryphon;46934642]Try responding to Lucy asking for assistance. That may lead you to the next part of the puzzle. That's literally the only thing I can think of at this point.[/QUOTE]
I already replied asking who "my mother" is and saying that I found the phone number. I should get a response soon. Or in the next 3 months. Who knows.
The recording is set up to sound like a switch recording, but it isn't (duh, the phone company doesn't refer you to your mother). Switch recordings usually give a code at the end that, if you happened to know the internal tables, would tell you what switch your phone call was on when the recording kicked in because something went wrong.
And, crypto puzzles do occasionally intentionally introduce errors to frustrate attempts.
P.S. I think I may have something.
[code]
For A=0 B=1 etc.,
M O T H E R
12 13 21 14 4 19
1-213-211-4419[/code]
It's a California number and is a landline. You [I]may[/I] be calling a business or some shit, so be prepared for someone to answer.
[QUOTE=elixwhitetail;46934678]The recording is set up to sound like a switch recording, but it isn't (duh, the phone company doesn't refer you to your mother). Switch recordings usually give a code at the end that, if you happened to know the internal tables, would tell you what switch your phone call was on when the recording kicked in because something went wrong.
And, crypto puzzles do occasionally intentionally introduce errors to frustrate attempts.
P.S. I think I may have something.
[code]
For A=0 B=1 etc.,
M O T H E R
12 13 21 14 4 19
1-213-211-4419[/code]
It's a California number and is a landline. You [I]may[/I] be calling a business or some shit, so be prepared for someone to answer.[/QUOTE]
He called:
5:15 PM - The Angry Clown: Blank for a few seconds. Then busy signal.
Sorry, you need to Log In to post a reply to this thread.