Another email!

Demon C sent another email this past weekend.. again at midnight!  This time to Aunt Judy.  Here’s the message AJ forwarded… He also left a Wingdings secret message too, which I'll also translate.

---

now, i don't feel so left out . .

whoever you are, return to -C what is rightfully his . . . . b4 we're all wiped out . . wonder what the symbols mean in his sign-off. .

Begin forwarded message:

From: cimejes@worshipper.com

Date: April 10, 2010 12:00:44 AM EDT

To: judyklaw10@yahoo.com

Subject: Please, pardon my interruption.

Mrs. Klawitter,

I know you have been watching. I know you have been giggling. I know that you do not believe as well.
Many are asking for my identity. Many think that they know. Many think that they are clever and have solved this riddle. They have not.

Something as cold and as trivial as e-mail will not be my undoing. I am not hindered by technology. I am stronger because of it. It is my guise.

I must confess, I have admonished some recently for playing "childish games" when I myself have been putting pieces into place. These pieces are part of something much larger...something much more serious, but this "game" may not end with laughter. It may end with a veil being removed. You...all of you…will learn your true identities. You will come face to face with your own fears and indiscretions. Good intentions and those things that you take for granted, like loyalty and familial love, will slowly but surely slip away. You will turn on each other. It will be a disgrace.

Can you save yourselves? Perhaps. Believe me, I wish it were as simple as saying a magyck word or buying a book, and I could exit your lives. All that I can say is that something was taken from me. One of you was thoughtless and stole an item from me...something very close to my heart...a treasure. You knew you were wrong to take it. You were away from home, and you thought you were alone. You thought no one was watching. You thought that no one would miss it. You were wrong.

Unless the thief comes forward to reveal him or herself to me, you all are doomed. The answer is not buried deep. The guilty one knows...even as he or she is reading these words…you can feel the disgrace crawling up your spine like an insect, can’t you? Come forward. Speak to me. Return what is rightfully mine, and I will only seek retribution from you.
Your family is loving. It is a strong love, especially for those souls who are seemingly innocent. These "innocents" will continue to be marked until, of course, I get what I want.
-C

 

"Jack is next"

(Jack is her toddler grandson)

Time to confess and return the stolen treasure…  Poor little Jack has no idea, but he’s  “next”.  Whatever that means!  Maybe he’ll get a warrior doll too. 

Regardless, we’ve had a few people confess some thefts…

From Lee:

'If it's the seashell I stole at Bill/Lori's wedding, I will return it via FedEx ASAP!!!!

I think we have all stolen at some point, it is going to be a huge “true confessions” session before all is said and done…ought to find out some pretty interesting things about each other…remember it said you “weren’t at home”, so I think that implies on vacation …I just don’t know…I hate that little jack is going to have to take the hit for our indiscretions but what can I do? ' 

From Micah:

‘i know i stole quite a few knickknacks when i worked at that restaurant in chicago...some cigar cutters and whatnot. trying to think if i stole from bill...maybe a beer or two from his fridge? i wish he had been more specific about what it was.’

From Ryan:

‘One thing I did steal a long time ago, when I was little in Tennessee..  I stole a cedar widdling stick.  I've also stolen a bunch of stuff from work, like computers..  I doubt "C" wants his hard drive back tho.’

Anyone else wanna come clean??  Post it in the comments.

________________________

Also, it looks like "C" is smarter than I originally expected.

This last email to AJ originated (according to email headers) from the following IP:12.124.116.246

To my surprise, it looks like this email came from....  MAIL.GULFPACK.COM
C:\>nslookup 12.124.116.246
Name:    mail.gulfpack.com
Address:  12.124.116.246

Now, I highly doubt "C" works at Gulf-Great Lakes Packaging.  More likely "C" knows how to spoof his IP address to make it appear its coming from other places.  So, here's my apology to Bill.  Sorry.  There is a possibility it is NOT Bill.  I suppose, it still could be him.. and now he's covering his tracks, but based on Bill's enthusiasm (this blog) and believable denials..  I'm thinking "C" was smart from the get go.. and wanted us to believe it was Bill.  CRAP!  I guess, this will remain a mystery for a little longer.  We just might have a "sicko" out there.

Burning the hair

Toward the end of our Easter Sunday.. long after the mysterious phone call… We still had this letter that was given to me earlier in the week. The warning inside said to burn the hair to protect Micah from the “darkness”.

We wanted to see if the hair was actually Micah's. It looked like a close match to me. Check the video and decide for yourself. (sorry for the shaky cam)

Anyway, we decided to play along and burn the hair. What harm could it do?

Easter Sunday – Phone call from Mitch!

It has been 1 day since we found out who’s been playing playing “this game for children”. Honestly, I’m sort of sad it is over. Sorry everyone.

My immediate family would be together at my parent’s house on Easter Sunday. I was excited to accuse Bill in person. I wanted to look into his eyes and call him “C”. Guess what?!?… he still denied it! He denied it without even flinching.

He’s telling me that the real “C” must have hacked into his computer… and claims there are some unexplained security logs that would back this up. Hilarious! What a weak alibi!?! I’m actually starting to feel sorry for him… so I decided to drop it. He’s probably really mad and scrambling to keep the prank going.

--------------------------------------

Now, here’s where things get weird. Around 2:15pm the phone rings, an anonymous call (caller-id).

My mom answers it.

“Hello?”

{From my perspective it sounded like a typical telemarketing call. My mom was listening quietly, as if she’s waiting for an opportunity to politely tell them she wasn’t interested}

Then all of a sudden she blurts out in a nervous voice…

“Who is this?… Mitchell Henson?”

Everyone in the room turns their attention to this call.

My mom then hands the phone over to Micah.

Micah says, “Hello? Who is this?”

{Micah listening}

“No, I don’t know who this is.”

{again Micah listening}

“Hello?”

“Hello?”

Micah says to the room, “He hung up.”

--------------------------------------

After the call, we immediately start to question Micah and my mom.

--------------------------------------

Here’s what my mom remembers from the call:

“Hello”, she answers.

“This is Mitchell Henson, may i speak to Lisa?”, a non-threatening male voice said.

“This is Lisa”, my mom replied politely.

{This is where she has problems remembering.}

She’s almost sure he said something about the Easter holiday, but can’t remember exactly what was said.

“Who is this?… Mitchell Henson?” , she asked.

{She wanted the kids to know who she was talking to.}

“May I speak with Micah?”, he said.

Mom hands the phone over to Micah.

--------------------------------------

Here’s the information Micah relays afterwards:

Micah says, “Hello?“

“Hello”, Mitch replied.

“Who is this!?”, Micah demands.

“You know who this is.”

“No, I don’t know who this is.”

“All will be revealed.” said Mitch

“Hello? Hello?” Micah says to the room, “He hung up.”

--------------------------------------

How freaky and strange! So there’s some missing information here. Mitch certainly told my mom something more than just “Happy Easter”. BUT, she can’t remember a thing! She says she got so flustered once she heard the name Mitchell Henson. I joked (later) that maybe he was hypnotizing her.

Obviously, our attention turned to Bill. So, who did he put up to this? He STILL denied it. Swearing to GOD, it’s not him. Lori is also doing a great job of covering.

Whatever.. I still know its him. This is my take… he continued to deny it because he had this phone call already set.

Case closed?

Ryan here… Bill has been getting a lot of accusations (rightfully so!) as a result of his enthusiasm displayed in his most recent blog posts. I’ll now be adding events to the blog for what I hope to be closure to this little prank.

Today, my mom got a new email from “C”. She immediately IM’d me the details. I’m going to apologize upfront… this post gets kinda technical, but it’s important as it validates my findings.

Every email contains something called headers which basically logs where an email originates from. Knowing this, I decided to sniff around this new “C” email for the headers. My mom was kind enough to send me her username and password.

I logged into her account and checked out the email headers:

There is a line in the headers that reads: X-AOL-IP: 68.255.108.3
Using this website: http://www.ip2location.com/, I entered in the address. This was the result:

So, this email was sent by someone in CHICAGO that uses AT&T DSL. Sounded like Bill to me. How could I confirm this? I know, remote desktop… Bill uses it. After I entered in his IP in my remote desktop client… this is what I saw:

TOTALLY BUSTED! I immediately IM’d Bill telling him that he was caught. He denied it. I even told him that I would keep the prank going if he would just let me in on it. He STILL denied it. He then told me that Micah was at his apartment the night the email was sent. He said Micah sent it!

As I told Micah of the most recent discovery, I remembered that Micah had received an email from “C” earlier. I told him to forward me the headers immediately. He did.

This older email revealed the following ip: 68.255.108.248
Again, this verified it as being Bill’s computer (AT&T DSL, located in CHICAGO).

How could Bill deny this now? Surprisingly, he did! His first defense is that these headers that I posted are plain text and could have been easily been doctored. I promise… I have not changed anything. I invite him (or anyone) to check out the headers themselves. I’m sure my mom would be willing to pull up the email for anyone.

Since he hasn’t admitted it … I decided to send an email to expose this prank once and for all. After all, some people (right Amy?) were actually starting to believe.

This is the email thread. (click for larger size)

So, as far as I’m concerned, we have our prankster...

..the wolf if you WILL. Let’s burn him!

Cimeies contacts Lisa

A couple of interesting things about this email from Cimeies to my mom, Lisa. The time is at the stroke of midnight, weird. If that is to be believed, Micah has a pretty good alibi. He spent the night at my place last nite and was in bed before 12am. My computer is in the room where the guest bed is, but he would have had to know my computer password to be able to do anything from my computer. It's possible he could have done something with his phone, but that seems like a lot of trouble. Why not just wait a day and get to a computer?

Click on image for a larger view.

Webcam of Cimejes Letter to Ryan

I had a heck of a time uploading these webcam captures to YouTube (no matter what format I converted them into!!). Anyway, this is the video of Ryan opening his letter from "C".

Cimijes Letter to Ryan Part 1
Uploaded by zippyferguson.


Cimijes Letter to Ryan Part 2
Uploaded by zippyferguson.


Cimijes Letter Opening Part 3
Uploaded by zippyferguson.

Pics of Cimejes

Thanks Ryan for some interesting pics of Cimejes. Interesting how it is a master of grammar and Micah is an English teacher.