@primerano Doubt it is firesheep since the emails are going out in the wee hours of the morning plus Gmail runs under https://