The Ghost of Snapped Shot

Or, welcome to my low-maintenance heck.

< 
<<
 a
 >
>>
c 
Afternoon Fan Mail by Brian C. Ledbetter on 17-Jun-2008

From the vast wonderland that is the Internet, I get an unusually specific e-mail threat. Ain't technology grand?

Date: Tue, Jun 17, 2008 at 1:56 PM
From: paul t <[email protected]>
To: me
Subject: Red Neck?

Your site is stupid, you act like a stupid American, and it would be my pleasure to end your site and your wife's life with a rocket propelled grenade. How ignorant, you think America is the world? America will see itself bombed and its soldiers families raped on the docks that they return upon. Sincerely, An Iranian Dual National who loves how ignorant your ideasb are. Go back to your trailer park or die in Jihad.

ps, learn how to use the internet.


I guess this means Paul doesn't appreciate our regularly recurring series.

Pity, that!

For those of you who know how to use the Internet more than ignorant wi'w me, I've posted the raw headers for this e-mail in the extended body of this article.

You know. For peaceful and non-DDOS'ing purposes, of course.

Update: It took me a while to get it, but Ace's witty take on the matter has me in stitches. I do hate being so dense, though!

I've contacted the Washington Field Office of the FBI (per Atlas' advice), since this would appear to be an interstate matter. I've also sent a request-for-information to the Earthlink abuse office, though I'm not holding my breath to hear back from them. Will post updates as they come in, of course!

Full SMTP mail headers:

Delivered-To: [email protected]
Received: by 10.142.139.11 with SMTP id m11cs329714wfd;
Tue, 17 Jun 2008 10:56:33 -0700 (PDT)
Received: by 10.143.8.17 with SMTP id l17mr3170285wfi.106.1213725393477;
Tue, 17 Jun 2008 10:56:33 -0700 (PDT)
Return-Path:
Received: from elasmtp-masked.atl.sa.earthlink.net (elasmtp-masked.atl.sa.earthlink.net [209.86.89.68])
by mx.google.com with ESMTP id 6si356858ywp.3.2008.06.17.10.56.31;
Tue, 17 Jun 2008 10:56:33 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 209.86.89.68 as permitted sender) client-ip=209.86.89.68;
DomainKey-Status: good (test mode)
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 209.86.89.68 as permitted sender) [email protected]; domainkeys=pass (test mode) [email protected]
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=dk20050327; d=earthlink.net;
b=rxyvvDVQ0XelNcuydruYeLpRD4fsGB90flW0J10vZZPIhk6M6I7HQ41tiPtpS4Xh;
h=Received:Message-Id:From:To:Content-Type:Content-Transfer-Encoding:Mime-Version:Subject:Date:X-Mailer:X-ELNK-Trace:X-Originating-IP;
Received: from [24.199.80.166] (helo=user-0ccek56.cable.mindspring.com)
by elasmtp-masked.atl.sa.earthlink.net with esmtpsa (TLSv1:AES128-SHA:128)
(Exim 4.67)
(envelope-from )
id 1K8fPz-0003iE-Fx
for [email protected]; Tue, 17 Jun 2008 13:56:31 -0400
Message-Id: <[email protected]>
From: paul t
To: [email protected]
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v924)
Subject: Red Neck?
Date: Tue, 17 Jun 2008 13:56:30 -0400
X-Mailer: Apple Mail (2.924)
X-ELNK-Trace: 85406276caeab1a68a8014768e00525074bf435c0eb9d4780182ff3 (...)
a4749f0d954fe0471eebe55eb448c18ceb8e13ce4350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 24.199.80.166


I'll say this: I can't fault this aspiring terrorist for his good choice in operating systems, even if I do think he could use a lesson in Netiquette or two.

I've forwarded all of this to Earthlink, and will be in touch with the local authorities next, if necessary.


My newfound friend apparently discovered Snapped Shot by searching for the Hamas flag:

24.199.80.166 - - [17/Jun/2008:12:53:36 -0500] "GET /archives/348-Al-Quds-Day-Blame-Da-Joooos-Day.html HTTP/1.1" 200 19723 "http://www.crwflags.com/FOTW/FLAGS/ps%7Dhamas.html" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14"
24.199.80.166 - - [17/Jun/2008:13:04:11 -0500] "GET /archives/2251-Business-Going-Strong-Flags-Flambee-for-Euro-Muslims.html HTTP/1.1" 200 10379 "http://www.snappedshot.com/about/contact_info.html" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14"

  #TROP

Comments:

#1 Alice H 17-Jun-2008
Well, he's likely in New York City, according to visualware.com.

http://visualiptrace.visualware.com/
#2 Benson 17-Jun-2008
"America will see itself bombed and its soldiers families raped on the docks that they return upon."

Should I even ask what the h*ll he's talking about?
#3 Brian C. Ledbetter 17-Jun-2008
I should've known... Thanks for the info, Alice! It didn't even occur to me to check, since Earthlink and Mindspring have always been associated with Atlanta to me.

Now I have to wonder if this isn't Joey Cohen's ill-doing.

Regards,
Brian
#4 Alice H 17-Jun-2008
Your best bet is to ask MPJ or any sites where Joey Cohen has posted if they has an IP address for him. You won't necessarily be able to rule him out, since if he's on dial-up he may not have a static IP address, but if it's a match it's a pretty good bet that it's him. (Again, not 100%, since it could be a dynamic IP address due to being dial-up)

Geobytes.com shows it coming up as Mt Vernon, NY, and says it's not a proxy. Earthlink should almost definitely be able to track down who was using that IP address, although they may give you some nonsense about it. I think contacting the FBI was a good move - I can't imagine Earthlink refusing to give them information about a terrorist threat.
#5 Cletus 17-Jun-2008
lol @ him calling you ignorant in the same sentence that he insinuates iran and islam can beat america
#6 forest 17-Jun-2008
So this might be an Iranian with dual citizenship in the US? His neighbors and co-workers probably think he's a "moderate".

Hopefully the threats aren't serious, but it would be good to see him deported.
#7 Michael Moon 17-Jun-2008
"dual citizenship"?? Hmmm. You know, every wave of immigrants in the past came here because they loved what this country stood for and wanted to be part of it. The islamofascists apparently came because they hate this country and want to be part of the soft jihad efforts to tear it down.
#8 mychimo 17-Jun-2008
Try googling the IP address.

Looks like its an open relay.
#9 Tom W. 17-Jun-2008
"America will see itself bombed and its soldiers families raped on the docks that they return upon."

What is it with Muslim holy warriors and their affinity for rape? They rape women, men, children, all in the name of God.

Miniskirts are immoral, but rape, torture, and mass murder are sanctioned by God and Muhammed (Puhbuhhh).

Silly jihadi. Who's going to do all this bombing and raping in the U.S.? The Revolutionary Guards? The Qods Force? Hezbollah?

About two days after a bomb goes off in the U.S., Iran will experience the worst week of the mullahs' lives, and then the poor, passive Iranians will spend the next fifty years riding around in donkey carts, wishing they hadn't put up with the bastids in exchange for the prestige of being a nuclear power.
#10 Howie 17-Jun-2008
This would not be Jewsef Cohen aka Yousef al Khattab. He always uses and anonymous proxy in emails he sends. Even though he has a gmail account. Its not his MO.

2 Joey is not Iranian.
#11 captainfish 17-Jun-2008
Tom W., ...

AMEN!!!
AMEN!!!
AMEN!!!

Just imagine this. Number our current fighting force of COMPLETELY VOLUNTEER members. Should something else happen and we can pinpoint who did it, and a massive outcry rises up out of this nation, that number will more than quadruple from just the ARMED brothers from the south and plains states.
#12 dcat 18-Jun-2008
Hmmm I wonder if this is the same nut job at my site?
#13 Anonymous 18-Jun-2008
Mt Vernon, NY

Enter the IP here...

http://www.geobytes.com/ipLocator.htm?GetLocation
#14 pst314 18-Jun-2008
"What is it with Muslim holy warriors and their affinity for rape?"

It's how they demonstrate the moral superiority of Islam.
#15 alexis 05-Nov-2008
hi guys
does anyone know if this could be the same guy who uses the username and id of:
chocotini on youtube
the full address is http://www.youtube.com/user/chocotini

i have reason to believe that he's been posting abusive message on us as well.
one of his e mail addresses is
[email protected]

you can respond directly with any info to my e mail address. this time i'm trying to nail him as i'm sick of this fucker. sorry about the language........
#16 alexis 05-Nov-2008
hi guys
about my earlier comment. the guy is called zamon taraneh and one of his blogs for instance can be found here
http://www.cholonization.com/2007_07_13_archive.html

he's also got various myspace pages. just thought it might help nailing the guy.
alexis.
Powered by Snarf ยท Contact Us