After over 80 schools across Delhi-NCR received a bomb threat via email on May 1 morning the investigation agencies suspect that the email originated from a server located in Russia, sources said. Sources say a single IP address was used to send the email to all schools.
The Cyber team of the Delhi Police has also joined the investigation. Sources say the initial investigation shows that the email address, used to send the threat mail to over 80 schools in Delhi-NCR, had a Russian domain. However, the police are yet to ascertain whether the email actually originated from Russia.
The police is now tracking the IP address of the email address. Sources have told ANI that these kind of emails are usually sent using a VPN connection to enable the sender to mask the original IP address. The cyber team is confident of tracing the IP address. Sources in the investigation team also say that the Dark Web could have been used to send the threat mail. In order to cover all flanks different teams of the Delhi Police are working on different aspects of the investigation. The Noida, Ghaziabad, and Delhi police are conducting a joint investigation to address the situation.