1e100.net identifies Google's servers, not their workstations, so I'd say it's far more likely that either: A) You have some unidentified script accessing your

1e100.net identifies Google's servers, not their workstations, so I'd say it's far more likely that either: A) You have some unidentified script accessing your account or B) You visited a web page that used an XSS attack to intiate some type of account access that you didn't authorize Neither case implies that you intended this access to occur. Web-based email clients are suceptible to all the same security vulnerabilities as other web apps. In the case of B, it's even possible that the XSS attack was against some third-party service that is authorized to access your email. I know you've said you don't use any of these types of services, but you'd be amazed what you can forget :) I'd start by looking at what apps you've authorized to access your information, and work backward from there. You can see which apps have access by visiting the page below. https://accounts.google.com/b/0/IssuedAuthSubTokens https://accounts.google.com/b/0/IssuedAuthSubTokens If you're not comfortable clicking the link, you'll want to look for the "Authorized Access" section of your Google Account page. You can get there by: * Log in to your Gmail * Click your name in the upper right * Click "Account" in the pop-up * Click "Security" in the list on the left * Click "Edit" next to "Authorizing applications and sites"