Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Need Help Tracking an Email (Kind of Vanity-Possible Hate Email from CNN's Aaron Brown)
My email | 10-3-29-04 | Lance Romance

Posted on 10/29/2004 6:36:08 PM PDT by Lance Romance

Hey, I received a strange email today and I am having trouble tracking it to it's source. It is virulent in it's hatred of GWB. I sent out 2 emails yesterday that could have caused the response. One to my friend, who is a Kerry bootlicker and one to Aaron Brown at CNN, who is also a Kerry bootlicker.

The return email seems to have been put together rather hastily. My IP tracker says it's from Houston, but this information also came up. Need some help.

Here is the text of the email:

>Why would you want to vote for a drunk driving, cocaine using IDIOT? Here is George Bush's plan for America.

-You will no longer pay taxes based on your income, instead you will be taxed on what you purchase.

-The IRS will be eliminated and replaced with a national retail tax.

-Eliminate ALL corperate taxes (instead the middle class will replace these taxes)

-Instead of taxing income, George Bush will tax you at least 30% for every purchase you make.

So what does this mean? When you buy groceries at $100 there will be a +$30 tax added. Now that people are taxed at least 30% on every purchase they are more likely to buy products outside the usa.

Effectively killing 80% of small businesses which employ 53% of the nation.

-George Bush has lost over 3 million jobs since he was "elected"

-George Bush has blocked prescriptions from canada which would allow people to save money. (He claimed the drugs were not safe but the same drugs were made in the usa and approved by the FDA)

-George Bush is allowing flu vaccines from canada but not prescriptions. Proving he is for the big drug companies and not americans.

-George Bush is against stem cell research. Not because of his christian faith but because stem cell research could produce low priced cures for diabetes, alzheimer's, and other diseases that would make big drug companies loose BIG revenues.

-George Bush has cut funding to protect nuclear power plants from terrorists attacks. Many nuclear plants are located within 200 miles of major cities and suburbs.

-No president in the history of the united

ALL OF THE STATMENTS ABOVE CAN BE VERIFIED BY YOU. DON'T BELIVE WHAT THE MEDIA TELLS YOU, DO YOUR OWN RESEARCH USING GOOGLE AND FIND OUT THE TRUTH ABOUT GEORGE BUSH.

Here is what Microsoft Outlook Options gave me.

Status: U

Return-Path:

Received: from cs6820659-156.houston.rr.com ([68.206.59.156])

by aaron.mail.atl.earthlink.net (EarthLink SMTP Server) with SMTP id 1cnsHz5rb3Nl3qa0

Fri, 29 Oct 2004 05:05:37 -0400 (EDT)

From: "Maryellen Sharpe"

Subject: WMD's found in IRAQ!

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--49175543356471440"

Message-Id:

<200410290505.1cnsHz5rb3Nl3qa0@aaron.mail.atl.earthlink.net>

Date: Fri, 29 Oct 2004 05:05:37 -0400 (EDT)

X-ELNK-AV: 0

I underlined the intersting part considering CNN is based in Atlanta. Any help would be appreciated


TOPICS: Your Opinion/Questions
KEYWORDS: aaronbrown; cnn
Lets Go Freeper Nerds.
1 posted on 10/29/2004 6:36:09 PM PDT by Lance Romance
[ Post Reply | Private Reply | View Replies]

To: Lance Romance

On the case


2 posted on 10/29/2004 6:38:43 PM PDT by Turk82_1 (They also serve who merely stand and wait.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Lance Romance

Somehow I can't believe a CNN anchor would say "don't believe what the media tells you". He is the media.


3 posted on 10/29/2004 6:39:24 PM PDT by Tall_Texan (Let's REALLY Split The Country! (http://righteverytime3.blogspot.com))
[ Post Reply | Private Reply | To 1 | View Replies]

To: Lance Romance

I have a couple very anti-Bush emails that arrived in my outlook this afternoon, from someplace called 'misleader.com'. I have never heard of them or their site until now and I would like to know how they got my email address.

Blocking is somewhat satisfying but it would be more fun to make their lives miserable in some small way, whoever they are.

Has anyone else been getting strange garbage like that?


4 posted on 10/29/2004 6:41:03 PM PDT by SusaninOhio
[ Post Reply | Private Reply | To 1 | View Replies]

To: Lance Romance

Mail Header

An email will gather together information from each of the computers it passes through on the way to the recipient and this is stored in the email header. In Outlook, right click on the email message and select Options.Headers are best read from the bottom up, as they are added to as the email passes through the system:

Note: The "Reply-To" field is added by the originator and serves to direct replies, whereas the "Return-Path" field is used to identify a path back to the originator.

 

Header line Meaning
Microsoft Mail Internet Headers Version 2.0 Header title

Received: from EXIC1.lse.ac.uk ([158.143.216.121]) by ExF2.lse.ac.uk with Microsoft SMTPSVC(5.0.2195.5329);
             Tue, 15 Jul 2003 12:16:56 +0100

Email passed from Exchange gateway servers to staff mailbox server

Received: from EXAV2.pc.lse.ac.uk ([158.143.216.132]) by EXIC1.lse.ac.uk with Microsoft SMTPSVC(5.0.2195.5329);             Tue, 15 Jul 2003 12:16:55 +0100

Email passed from anti-virus servers to Exchange gateway server

Received: From exas1.lse.ac.uk ([158.143.216.135]) by EXAV2.pc.lse.ac.uk (WebShield SMTP v4.5 MR1a);            id 1058267813844; Tue, 15 Jul 2003 12:16:53 +0100

Email passed from anti-spam servers to anti-virus servers
Content-Class: urn:content-classes:message  
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300  

Received: from web60003.mail.yahoo.com ([216.109.116.226]) by exas1.lse.ac.uk with Microsoft SMTPSVC(5.0.2195.5329); Tue, 15 Jul 2003 12:14:24 +0100Message-ID: <20030715111424.6388.qmail@web60003.mail.yahoo.com>

Email received by LSE anti-spam server from originator’s email server. This is the point of entry to the LSE.
Received: from [158.143.113.49] by web60003.mail.yahoo.com via HTTP; Tue, 15 Jul 2003 12:14:24 BST Date and time received by the originator’s email servers
Date: Tue, 15 Jul 2003 12:14:24 +0100 (BST) Date and time sent
From: "Daniel Simpson" <djs@yahoo.co.uk> Originator’s email address
Reply-To: <d.simpson@hotmail.com> Reply to address
Subject: Test Email Subject
To: <f.muir@lse.ac.uk> Recipients email address
MIME-Version: 1.0  
Content-Type: multipart/alternative;  
boundary="0-710479544-1058267664=:1719"  
Content-Transfer-Encoding: 8bit  
Return-Path: <djs@yahoo.co.uk> Originator’s email address
X-OriginalArrivalTime: 15 Jul 2003 11:14:24.0580 (UTC) FILETIME=[3F7D6840:01C34AC2] Arrival time at originators email servers

--0-710479544-1058267664=:1719
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
--0-710479544-1058267664=:1719
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

--0-710479544-1058267664=:1719--

Start of the email message

5 posted on 10/29/2004 6:41:58 PM PDT by idkfa
[ Post Reply | Private Reply | To 1 | View Replies]

To: Lance Romance
This one is probably to easy, the host name is aaron.mail.atl.earthlink.net. I doubt the "aaron" is a coincidence.
6 posted on 10/29/2004 6:42:03 PM PDT by notfondajane (I did think Barbarella was kinda cool though.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Tall_Texan

A lot of leftists think the media is conservative. If he is one of these he would say it.


7 posted on 10/29/2004 6:42:13 PM PDT by farmfriend ( In Essentials, Unity...In Non-Essentials, Liberty...In All Things, Charity.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Lance Romance
I email with Aaron Brown regularly - and that does not sound like it would come from him -

Is he completely biased? For Da*n sure he is!! - Will he ever admit it - hell no.

His bias drives me nuts at times - his complete unwillingness to see it drives me even further crazy.

If the email came out of Houston I doubt it was from Aaron (unless it was from his blueberry handheld).

8 posted on 10/29/2004 6:42:17 PM PDT by draino
[ Post Reply | Private Reply | To 1 | View Replies]

To: SusaninOhio

Do a 'whois' on the domain, and if any discrepencies show, complain to their domain registrar.


9 posted on 10/29/2004 6:43:05 PM PDT by Slings and Arrows ("I heff good news and bad news. Good news is I saw Allah. Bad news is he was wearing a yarmulke.")
[ Post Reply | Private Reply | To 4 | View Replies]

To: Lance Romance

Earthlink is NOT Aaron Browns email -


10 posted on 10/29/2004 6:43:46 PM PDT by draino
[ Post Reply | Private Reply | To 1 | View Replies]

To: Lance Romance

That's funny. I got the exact same e-mail spam. I think it is mailed out to random e-mail addresses, so it's probably a waste of time trying to figure out where it came from. Just add it to the penis enlargement and viagra spam mail in the trash.


11 posted on 10/29/2004 6:44:00 PM PDT by orangelobster
[ Post Reply | Private Reply | To 1 | View Replies]

To: Slings and Arrows

thanks - i'll try that.


12 posted on 10/29/2004 6:45:00 PM PDT by SusaninOhio
[ Post Reply | Private Reply | To 9 | View Replies]

To: Lance Romance

re: my post, never mind...


13 posted on 10/29/2004 6:45:22 PM PDT by notfondajane (I did think Barbarella was kinda cool though.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Lance Romance
SpamCop it. Basic service is free.
14 posted on 10/29/2004 6:46:00 PM PDT by Slings and Arrows ("I heff good news and bad news. Good news is I saw Allah. Bad news is he was wearing a yarmulke.")
[ Post Reply | Private Reply | To 1 | View Replies]

To: SusaninOhio

My pleasure.


15 posted on 10/29/2004 6:46:34 PM PDT by Slings and Arrows ("I heff good news and bad news. Good news is I saw Allah. Bad news is he was wearing a yarmulke.")
[ Post Reply | Private Reply | To 12 | View Replies]

To: SusaninOhio

Here's the joy about "misleader.com": It's a person!

Organization:
Eli Pariser
Eli Pariser
452 W 57th St
New York, NY 10019
US
Phone: (646)326-6333
Email: eli.pariser@moveon.org

Registrar Name....: Register.com
Registrar Whois...: whois.register.com
Registrar Homepage: http://www.register.com

Domain Name: MISLEADER.COM

Created on..............: Tue, Jun 17, 2003
Expires on..............: Fri, Jun 17, 2005
Record last updated on..: Sun, Feb 15, 2004

Administrative Contact:
Eli Pariser
Eli Pariser
452 W 57th St
New York, NY 10019
US
Phone: (646)326-6333
Email: eli.pariser@moveon.org

Technical Contact, Zone Contact:
Register.Com
Domain Registrar
575 8th Avenue - 11th Floor
New York, NY 10018
US
Phone: 902-749-2701
Fax..: 902-749-5429
Email: domain-registrar@register.com

Domain servers in listed order:

NS2.CTSG.COM 216.205.128.121
NS3.CTSG.COM 216.205.128.133

Send me the complete email to turk82_1@yahoo.com. Chances are, this boob sent it from work - in which case you can call his employer and complain about it.


16 posted on 10/29/2004 6:47:11 PM PDT by Turk82_1 (They also serve who merely stand and wait.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: draino; Lance Romance

Maybe you two should forward the e-mail to Brown - I have no idea who he is, but I doubt he appreciates having his identity stolen.


17 posted on 10/29/2004 6:49:14 PM PDT by Slings and Arrows ("I heff good news and bad news. Good news is I saw Allah. Bad news is he was wearing a yarmulke.")
[ Post Reply | Private Reply | To 8 | View Replies]

To: Lance Romance

I am no Freeper nerd, but just looking at the spelling and punctuation errors in that e-mail would make it absolutely comical if it was indeed, sent from a CNN hack.


18 posted on 10/29/2004 6:49:41 PM PDT by GnuHere
[ Post Reply | Private Reply | To 1 | View Replies]

To: draino

Hey Draino, Why not post the headeers from ONE of YOUR Aaron Brown emails?

Gorio


19 posted on 10/29/2004 6:54:36 PM PDT by gorio
[ Post Reply | Private Reply | To 8 | View Replies]

To: Lance Romance

No connection btw the aaron.mail.atl specifiers and Aaron Brown.

The entire string before the @earthlink is part of a routing scheme by earthlink. Essentially splitting network traffic/requests into segments (aaron, betty, condi or whatever), protocol (mail denotes smtp or pop; other variations in the string are likely web for http; and ftp for ftp, etc.) finally atl could be geographically based on city (Atlanta) or other region (Atlantic?).

That said, I may be missing something but it looks like the @earthlink address is you, and the other address is the sender.


20 posted on 10/29/2004 6:55:50 PM PDT by sbMKE
[ Post Reply | Private Reply | To 1 | View Replies]

To: idkfa
I posted everything that was in the header. What I found interesting was the aaron.atl.earthlink.... section of it.

I will admit my email to Aaron was quite saucy and also mentioned Fox News. I would love to be able to track this.

21 posted on 10/29/2004 6:56:10 PM PDT by Lance Romance
[ Post Reply | Private Reply | To 5 | View Replies]

To: gorio
Hey Draino, Why not post the headeers from ONE of YOUR Aaron Brown emails?

Huh? Sorry, I don't follow.

22 posted on 10/29/2004 6:56:41 PM PDT by draino
[ Post Reply | Private Reply | To 19 | View Replies]

To: SusaninOhio

Blocking is somewhat satisfying but it would be more fun to make their lives miserable in some small way, whoever they are.

I would depend on your firewall/virus software. It sems to me you should always reject anything you are not familier with (butyou may need to unreject as lots of links here upset my little firewall hehe)


23 posted on 10/29/2004 6:57:34 PM PDT by montanajoe
[ Post Reply | Private Reply | To 4 | View Replies]

To: Lance Romance
Got the exact same spam twice today from 2 different sources.
The socialists and apologists for terrorism are busy, obviously nervous.
24 posted on 10/29/2004 6:57:58 PM PDT by MrBambaLaMamba (Buy 'Allah' brand urinal cakes - If you can't kill the enemy at least you can piss on their god)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Lance Romance

RR usually assigns IPs on a rotating dynamic basis. A user shows multiple IPs per connection/session.

If this is your sender it's a home user. Likely not in VA.


Search results for: 68.206.59.156

OrgName: Road Runner
OrgID: RRSW
Address: 13241 Woodland Park Road
City: Herndon
StateProv: VA
PostalCode: 20171
Country: US

ReferralServer: rwhois://ipmt.rr.com:4321

NetRange: 68.200.0.0 - 68.207.255.255
CIDR: 68.200.0.0/13
NetName: RR-SOUTHEAST-BLK3
NetHandle: NET-68-200-0-0-1
Parent: NET-68-0-0-0-0
NetType: Direct Allocation
NameServer: DNS1.RR.COM
NameServer: DNS2.RR.COM
NameServer: DNS3.RR.COM
NameServer: DNS4.RR.COM
Comment:
RegDate: 2003-01-31
Updated: 2004-09-17

OrgAbuseHandle: ABUSE10-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-703-345-3416
OrgAbuseEmail: abuse@rr.com

OrgTechHandle: IPTEC-ARIN
OrgTechName: IP Tech
OrgTechPhone: +1-703-345-3416
OrgTechEmail: abuse@rr.com


25 posted on 10/29/2004 6:58:55 PM PDT by sbMKE
[ Post Reply | Private Reply | To 1 | View Replies]

To: draino
If we match the header from one of your "confirmed" Aaron Brown emails to the "suspected fake" Aaron Brown email, then it will confirm or deny authenticy.

Gorio
26 posted on 10/29/2004 6:59:54 PM PDT by gorio
[ Post Reply | Private Reply | To 22 | View Replies]

To: Lance Romance

I would think an email addy with Aaron with an Atlanta ISP would be quite common as Hank Aaron would be a icon there. Like there probably is a lots of Favre@xxx.wisc.com's out there.


27 posted on 10/29/2004 7:00:55 PM PDT by L`enn
[ Post Reply | Private Reply | To 1 | View Replies]

To: L`enn

There is a site out there called samspade..I cant remember exact address but tat might help


28 posted on 10/29/2004 7:08:39 PM PDT by montanajoe
[ Post Reply | Private Reply | To 27 | View Replies]

To: SusaninOhio

misleader was an ad moveon.org was running in 2003. Just a thought


29 posted on 10/29/2004 7:10:23 PM PDT by eddiebear
[ Post Reply | Private Reply | To 4 | View Replies]

To: Lance Romance

aaron is just the name of one of earthlink's atlanta mail servers. If its on the right side of the AT sign then its really probably not a person's name.


30 posted on 10/29/2004 7:10:58 PM PDT by Arkinsaw
[ Post Reply | Private Reply | To 21 | View Replies]

To: Lance Romance

houston.rr.com is the local RoadRunner address.


31 posted on 10/29/2004 7:11:32 PM PDT by Xenalyte (Anything is possible when you don't understand how anything happens.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Lance Romance

C'mon, Lance. You've been around here long enough. It's just some spam. Even if you found the "original" sender, it's likely some dupe.


32 posted on 10/29/2004 7:12:00 PM PDT by Mr. Bird
[ Post Reply | Private Reply | To 1 | View Replies]

To: L`enn
Thanks everyone. My nerdiness was not enough to decipher the header. I appreciate your help.

I was intrigued by the aaron.atl... The return email was obviously a fake. I thought it was somehow connected to my salty email to Aaron Brown.

I guess this is a spam email, becuase others have received it as well.

33 posted on 10/29/2004 7:15:32 PM PDT by Lance Romance
[ Post Reply | Private Reply | To 27 | View Replies]

To: gorio
I can assure you (him) that Aaron Brown does not use an "earthlink" email address.

For thoughtfulness reasons I would not put Aaron Brown's email on an open forum. Though, he is open to private email me and I will confirm for him what is Aaron's real email.

Also, I am sure if any others on here email at all with Aaron they will "get" my "blueberry" comment.

34 posted on 10/29/2004 7:16:45 PM PDT by draino
[ Post Reply | Private Reply | To 26 | View Replies]

To: Lance Romance

It's spam. My IP is 68.xxx.xxx.xxx and I'm in Houston.

The problem is that the spammer can "change" his/her IP address by changing his/her network card or going offline by unplugging his cable modem for awhile then plug it back in with the hope that his IP address will change.....assuming that he has a dynamic IP.

If he has a static IP then you can nail him. :-)


35 posted on 10/29/2004 7:50:49 PM PDT by El Gran Salseron (It translates as the Great, Big Salsa Dancer, nothing more. :-))
[ Post Reply | Private Reply | To 1 | View Replies]

To: El Gran Salseron
My apologies to everyone, I thought that it was too much of a coincidence that a day after a blistering email to Aaron Brown, I would get a reply email from a mailserver with aaron in it.

Thanks for the help and I hope we can track this crap down and stop it.

36 posted on 10/29/2004 9:17:44 PM PDT by Lance Romance
[ Post Reply | Private Reply | To 35 | View Replies]

To: Lance Romance

Somehow I think a network anchor has better things to do than spam you with hate mail.


37 posted on 10/29/2004 9:32:51 PM PDT by Dave S
[ Post Reply | Private Reply | To 1 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson