Wednesday, October 19, 2016

If Joe Patterson didn't send the email, who did?

While I'm waiting for Joe to get back to me I decided I'd investigate his claim. I just happen to be an IT guy, so I grabbed the header out of the email and decided to analyze it a bit. Here's the header:

########## start header ############

Delivered-To: john.podesta@gmail.com
Received: by 10.25.81.205 with SMTP id f196csp1616808lfb;
        Mon, 16 Nov 2015 21:41:04 -0800 (PST)
X-Received: by 10.140.17.8 with SMTP id 8mr39958184qgc.80.1447738864202;
        Mon, 16 Nov 2015 21:41:04 -0800 (PST)
Return-Path: <podesta@law.georgetown.edu>
Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0054.outbound.protection.outlook.com. [157.56.111.54])
        by mx.google.com with ESMTPS id c196si28806261qkb.1.2015.11.16.21.41.03
        for <john.podesta@gmail.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
        Mon, 16 Nov 2015 21:41:04 -0800 (PST)
Received-SPF: pass (google.com: domain of podesta@law.georgetown.edu designates 157.56.111.54 as permitted sender) client-ip=157.56.111.54;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of podesta@law.georgetown.edu designates 157.56.111.54 as permitted sender) smtp.mailfrom=podesta@law.georgetown.edu;
       dmarc=fail (p=NONE dis=NONE) header.from=outlook.com
Received: from SN1PR0701CA0016.namprd07.prod.outlook.com (10.162.96.26) by
 BLUPR07MB529.namprd07.prod.outlook.com (10.141.204.141) with Microsoft SMTP
 Server (TLS) id 15.1.325.17; Tue, 17 Nov 2015 05:41:01 +0000
Received: from BN1BFFO11FD048.protection.gbl (2a01:111:f400:7c10::1:107) by
 SN1PR0701CA0016.outlook.office365.com (2a01:111:e400:5173::26) with Microsoft
 SMTP Server (TLS) id 15.1.325.17 via Frontend Transport; Tue, 17 Nov 2015
 05:41:01 +0000
Authentication-Results: spf=fail (sender IP is 141.161.191.75)
 smtp.mailfrom=law.georgetown.edu; gmail.com; dkim=none (message not signed)
 header.d=none;gmail.com; dmarc=fail action=none header.from=outlook.com;
Received-SPF: Fail (protection.outlook.com: domain of law.georgetown.edu does
 not designate 141.161.191.75 as permitted sender)
 receiver=protection.outlook.com; client-ip=141.161.191.75;
 helo=mail.law.georgetown.edu;
Received: from mail.law.georgetown.edu (141.161.191.75) by
 BN1BFFO11FD048.mail.protection.outlook.com (10.58.145.3) with Microsoft SMTP
 Server (TLS) id 15.1.325.5 via Frontend Transport; Tue, 17 Nov 2015 05:41:01
 +0000
Resent-From: <podesta@law.georgetown.edu>
Received: from na01-bn1-obe.outbound.protection.outlook.com (141.161.191.14)
 by LAW-CAS2.law.georgetown.edu (141.161.191.21) with Microsoft SMTP Server
 (TLS) id 14.3.248.2; Tue, 17 Nov 2015 00:41:00 -0500
Received: from BLUPR07CA082.namprd07.prod.outlook.com (10.160.24.37) by
 BLUPR07MB529.namprd07.prod.outlook.com (10.141.204.141) with Microsoft SMTP
 Server (TLS) id 15.1.325.17; Tue, 17 Nov 2015 05:40:58 +0000
Received: from BL2FFO11FD014.protection.gbl (2a01:111:f400:7c09::110) by
 BLUPR07CA082.outlook.office365.com (2a01:111:e400:8ae::37) with Microsoft
 SMTP Server (TLS) id 15.1.331.15 via Frontend Transport; Tue, 17 Nov 2015
 05:40:58 +0000
Authentication-Results: spf=pass (sender IP is 65.55.90.15)
 smtp.mailfrom=outlook.com; law.georgetown.edu; dkim=none (message not signed)
 header.d=none;law.georgetown.edu; dmarc=pass action=none
 header.from=outlook.com;
Received-SPF: Pass (protection.outlook.com: domain of outlook.com designates
 65.55.90.15 as permitted sender) receiver=protection.outlook.com;
 client-ip=65.55.90.15; helo=SNT004-OMC1S4.hotmail.com;
Received: from SNT004-OMC1S4.hotmail.com (65.55.90.15) by
 BL2FFO11FD014.mail.protection.outlook.com (10.173.160.222) with Microsoft
 SMTP Server (TLS) id 15.1.325.5 via Frontend Transport; Tue, 17 Nov 2015
 05:40:58 +0000
Received: from SNT150-W75 ([65.55.90.9]) by SNT004-OMC1S4.hotmail.com over TLS
 secured channel with Microsoft SMTPSVC(7.5.7601.23008); Mon, 16 Nov 2015
 21:40:57 -0800
X-TMN: [dTeiFt+mIlzCgMdOmxQpdxSi3rWYMV/J]
X-Originating-Email: [viejojoe@outlook.com]
Message-ID: <SNT150-W75F932A59B6A19648914E9C31D0@phx.gbl>
Return-Path: podesta@law.georgetown.edu
Content-Type: multipart/alternative;
boundary="_fc519084-0824-42d1-831d-1142b62d26bb_"
From: Joe Patterson <viejojoe@outlook.com>
To: "podesta@law.georgetown.edu" <podesta@law.georgetown.edu>
Subject: A 2016 game changing, feature film project for your consideration.
Date: Mon, 16 Nov 2015 21:40:57 -0800
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 17 Nov 2015 05:40:57.0622 (UTC) FILETIME=[889AE360:01D120FA]
X-EOPAttributedMessage: 1
X-Microsoft-Exchange-Diagnostics-untrusted: 1;BL2FFO11FD014;1:fMtUfYRpXoOG6bdL28sF7y92ZBi/rYId1jN5clT+pP9WziFH6pYqo7alkkE2SKPO86frnbLw/WjpRPiv2VVWgq4GYxbieY2tWnzEwEu8IaE4PtIlxSr2mtGh2jo5lP5BiRx/i/RDRW7TDdHv/Y+rzT8RoLesWRitOT11Go6WGlRKumuvTwkFPSgKrpygXYx/OZbPhpIaCQT0ihWkkGYBFnTKL9vDs8Rc6gHangpMOwntKWh3hovqMnlybH56dvorI3QxBORNDgZvmY/Up4UyG8ctea2R7IpmbizXlrHve4n3sTp2wdLlIM6BsAPOcx/iqyxMBlGMANS3wRxuLE7drqs2KtkWMilm2t+qZ2byDoScaYAV7Q1GRBszew/JRrAX
X-Forefront-Antispam-Report-Untrusted: CIP:65.55.90.15;CTRY:US;IPV:NLI;EFV:NLI;SFV:NSPM;SFS:(6009001)(2980300002)(438002)(199003)(189002)(104016004)(102066001)(15975445007)(106466001)(54356999)(50986999)(586003)(15714825004)(19580395003)(86362001)(19580405001)(189998001)(33656002)(4050100002)(19625215002)(107886002)(36756003)(300700001)(2171001)(46316001)(11100500001)(450100001)(87572001)(2501003)(229853001)(512944002)(6806005)(110136002)(5001970100001)(5008740100001)(84326002)(2351001)(92566002)(77806003)(14444003);DIR:INB;SFP:;SCL:1;SRVR:BLUPR07MB529;H:SNT004-OMC1S4.hotmail.com;FPR:;SPF:Pass;PTR:snt004-omc1s4.hotmail.com;A:1;MX:1;LANG:en;
X-Microsoft-Exchange-Diagnostics-untrusted: 1;BLUPR07MB529;2:IFD/qF53OLl4FW8tNsQaOL/7iTca+ch/KBggAucFC1YbMbfG5+wyAth3o0XQqukOXXL/zI6kw05IzCfGw3zuMMiRqjD5VyoucsYP+bDfANQBNnzS3dZi7dWnbiN7+cgzfcgnC3jpbFPrzCBvLCvzESHyFgT921/pJBeY3kuZhLo=;3:d56FeAUCWgzJ7qWQaL/2hKGhOnzaMwl1AXYI2frAPLUZryF+tA694qLWeAr2z/mhY/u7zfGaB9j/tD/mcz1lTq7GGHT6cBrP8/gtwfOJ0HqESyiX6smB8v70nzrPmRHjq6KdXwdPQPX9i2vx4rXJzXTGkFhE7uTEqGHG1wq0IKJYF+OlFkFgnuKXS5pIz/A7MyphgYyrOs0tdhbB/OV605zRFTwSIqs83LSHKzbRuXgqZd/kdhPJSiRVp+mdJJRZrRH511jLBdP+WZm7V/PZWdm2feFKArQP8Jjad3xp/2T14PKATealw1mhL9Utzai+;25:Js9xF4oG1Hzf2VOSrym30cIlRkSc+S8fMPnCCzUiiHESOA+/mi8/m1k0N7X3TNPVRjcmefHsW5ZQ6El9UZmla/YK3GnA9IEtvDdyMkfbY6WX+HWTBcMmzMmGr2jOhiUc5rTNaDmgGDDVST/p4AoDbtgrcA2XqD73WfV111fO7tWOQQX02EY/ZTYUo2++ywrd0Wx5IEqt8na7hUxKzeC3UBW4/aG6H+eAyc0kWaq44QnwiFBvw43QyshHbf1BjHAadSv0N1iMKL6rhB2/Y3Ht7A==
X-Microsoft-Antispam-Untrusted: UriScan:;BCL:0;PCL:0;RULEID:(8251501001)(3010001)(71701003)(71702001);SRVR:BLUPR07MB529;
X-LD-Processed: 935c2642-8489-46fc-97cc-1143c4b55ea3,ExtAddr,ExtAddr
X-Microsoft-Exchange-Diagnostics-untrusted: 1;BLUPR07MB529;20:uZA1xjzgs61fL3xpt9mfk3tLLa8g3OjmwjJdw3nvSpSXGf9kJfFS+pHKH04aQC6DiWXscgD9Iqu8b/VdMuKpLe+lVOQ54GydwR9bXYOJMEA0RUnQD/Y0iXeI7uvme5vHABg5GP1dTtOmBXvF9ZwKzIWdJq+5jOlQzowy2dhstRdy9uSBkaKcDLHC3nVKf9ZEontUe25ukTxisVUqL7dEOzxI0l/jJ6FhcECnlQTX2dwYQS7Y+98e6DHaQvHQxfdt2uhNsDh+IKzUZLX2uY8bzgU+AuYIj+oTPsYmuiOtwHV5KuOUbra3ROrD3B7jfbF8c90Us2FEKdKHXn1QOly+9GBVBm4y9m67G8APak2uAchU3NTd3YjVSfOeH0fXNIFoLSutJiEMnLJMPjyz91ugu13Vx4+L8dH4sJS3VFcIcgY=;4:BrAAlIKOoMqpVg4WfsgwY3v+LJeNVd0sEfje2xBXc1sPSAnd3R+jF02FQXHoAgZjDw7QB+7IBcx38JFTzApWVeLjUBcN/r/CF+dN4BO0EHTBzI93KA/WW2P4MTXDWuzCnSyCtbZGgT5BtnPKcmZcT/Iq1puzn2a1edQmyC3U2+CFh0/s/zMRyyAdcafMN8MGH5GOrUCPwWqMPzks5mgthVzbgi3var/okrs6ztglcwtVj4perQpEYTVSP+mQ9VrO9Sl1qXcTxq2/F+ecW5IB0yomkXUccGXYbWVv7kgT7LokXThwQKUykiczB2Zlo6ZhvBLy/KPl8N5oNYiUiTgCN5I/iKGoSvIg4Ygvzz7diEMOdvqnDlSYZJxYVkwYZhXa
X-Exchange-Antispam-Report-Test:
UriScan:(79046362386883);UriScan:(79046362386883);
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(601004)(2401047)(8121501046)(520078)(3002001)(10201501046);SRVR:BLUPR07MB529;BCL:0;PCL:0;RULEID:;SRVR:BLUPR07MB529;BCL:0;PCL:0;RULEID:(601004)(2401047)(5005006)(8121501046)(520078)(3002001)(10201501046);SRVR:BLUPR07MB529;BCL:0;PCL:0;RULEID:;SRVR:BLUPR07MB529;
X-Microsoft-Exchange-Diagnostics-untrusted: =?us-ascii?Q?1;BLUPR07MB529;23:3OU1Bpo+iWfBxfq603x7w/OoPFuD/qaf1DkARsuFD9?=
 =?us-ascii?Q?BQ/pCGUQ8a6m1U1IkoutVxlgXKdukSzdstWe0CjIlbnoOneITmt1uhNAimIY?=
 =?us-ascii?Q?1G9wkSD5F43QX8xivSp9EVU+3eNLIIJxWwJMGAYvqhtA/XnTcp3GWuUUONP5?=
 =?us-ascii?Q?6xWZarjP5bgVcjMVBr2tk4Ch+W4dQR6jkYiAII591ya5d4Ap1FEqJkqHhpfb?=
 =?us-ascii?Q?pSGmEWFe7bBxaAEqq7I96dvaoIgpxaAf7PlZ78in7HBxvWwKUsUsHgoCIPkd?=
 =?us-ascii?Q?6sBRet33gTeoeqxrZBbfRW/hx29Ul3CASQ0YwJ89tU+DMp/WeBfh4Z2OWdso?=
 =?us-ascii?Q?RGGol8rTUQaI7Hgy5wa6YaVceQCRmSsI1nin1Gn48R8AG4XrX+96zgTPhWTw?=
 =?us-ascii?Q?DGzQq4WnLfn/g12oozSURkWZ/noGTqe1tPQMCZZgMOaT4eobligGGnazYwsb?=
 =?us-ascii?Q?bGY7VKO3cgWEeqwfac6dN1C0prqBhgDNx0+g7z7QVUsxbsBiSDKoF6/TOQVK?=
 =?us-ascii?Q?K/jJmO6B6aOdOcX6ba/03bWCZBZ7hERgoIebHN5OKCMDhkHBUvp6z/txvDNw?=
 =?us-ascii?Q?bR8hCbKkh5IuXmkeAvRiTP+c8nOuw51ipMSk9YWO8NPWobTBXIgQlbigT/jk?=
 =?us-ascii?Q?NhjbNLQ4rMKIGkdF910eGPTPgygwTlMG70dhEEDnfA3toYPHwZsttpMxi9ZM?=
 =?us-ascii?Q?zFdRejaddyjqoM0t2jqaA+jVAW6AfWAufb9cM6FDyrFyUOqdy+gpPMVGHWdU?=
 =?us-ascii?Q?fx+apC1rAAs+bEac+8GF7cXU+IsUnqeSDo/WPFO4oDFcbCTP9U9JSvWZcfj5?=
 =?us-ascii?Q?HgvjVoLQX9X77YC41IZu7QThnZzIZZ033hhDSom9jmTIV4ONNGVRxSi0pmy9?=
 =?us-ascii?Q?N0loUf+7ZyceTqGb2XBFoWl2DOV+XSrpqhWC4QyOyQNn/cLkDQ+wlYVXVfCc?=
 =?us-ascii?Q?hwY9LvZ4uky5cHKxtV1CbRKkYPSgfJ8tQtxh8sucZo6PfGxcrKp2hpdKyfn6?=
 =?us-ascii?Q?7o3k4k8nqOh4J2K5qlacrQDmIpIVDWoyMduU2uK6a6TS/QUa3HjolK6kL1oy?=
 =?us-ascii?Q?RdnRQ=3D?=
X-Microsoft-Exchange-Diagnostics-untrusted: 1;BLUPR07MB529;5:ZM6XP6mVuU/2CEh3bq8HXYpVYD1xaVzV08Y/6Uyo3AwXsiJvAQ8w7ebtgIl1ntDuuJPUhXN6hd+Fk3pcuDjAKWzLgRVWbTVJypByeskaDIU9MDMzOWB6mlNjT2iL/bqP6ODvWTLrsqp1xpbSL64Vag==;24:CWgYQ4IJwo+itxMuH17JmzQVr+9rjcDD97u6nXFW6d27GggQMGfq6NaLu6Wy6Gx7fD2CHzZYUXIBo7QEU8tgxO+353v4q9Up193aO7qpPhI=;20:DGNBUdxkAZeWAozTrYkW6NRTEK3YQzUAKDBPfVudYa3sPYEGowdBMieie2J03KW0BuH7euR7yImprPvCvrh/BQ==
SpamDiagnosticOutput: 1:23
SpamDiagnosticMetadata: NSPM
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR07MB529
X-OrganizationHeadersPreserved: BLUPR07MB529.namprd07.prod.outlook.com
X-CrossPremisesHeadersFiltered: LAW-CAS2.law.georgetown.edu
X-MS-Exchange-Transport-CrossTenantHeadersStripped: BN1BFFO11FD048.protection.gbl
X-Microsoft-Exchange-Diagnostics: 1;BN1BFFO11FD048;1:jIgV0N6DFbKfXaUMoh6BRReV3KOwhk7e++bmEMVe8ZO3qCKaHJN9KjaUpsWelPxTzQqvoSjuVZUbQRrWGouYqdP9Z0cvnrNVx6Op3/YUT2hRXcy8rKGfldg0iiBsfEtLMeC3UlpKS2rDYRKGpB94xrtdqfOHeAKR5LbXFFcna9Q62uakIxqaIcs7j94n3qTXz/YkwW6UP4EITACEZkfVkJEfsY0vttVjtdLoxRsW6bVwMgGUVSfSCh9m69CYUTRN0pjAmkLvfmgIUut6ck1jEgacSLLcgv64NHyvjWtb5lXHg8jA6JwSEPjpRfbhQaC4U2skc6JYZh8x+/KNFZKw9fkfaYsTLv3zf1GKVrJ2nuEBuvqG0Q1kLKgY42KoOcRBOfHyzZcZECko7LYHxyZs+w==
X-Forefront-Antispam-Report:
CIP:141.161.191.75;CTRY:US;IPV:NLI;EFV:NLI;SFV:NSPM;SFS:(10009020)(6009001)(2980300002)(1110001)(1109001)(339900001)(199003)(189002)(104016004)(102066001)(15975445007)(106466001)(54356999)(50986999)(586003)(15714825004)(19580395003)(960300001)(19580405001)(189998001)(33656002)(87936001)(4050100002)(19625215002)(107886002)(81156007)(5007970100001)(36756003)(300700001)(5001960100002)(2171001)(85426001)(46316001)(11100500001)(450100001)(87572001)(2501003)(229853001)(4001450100002)(512944002)(6806005)(5002220100002)(75432002)(88552001)(110136002)(5008740100001)(84326002)(2351001)(92566002)(105606002)(97736004)(77806003)(14444003)(42882005);DIR:OUT;SFP:1101;SCL:1;SRVR:BLUPR07MB529;H:mail.law.georgetown.edu;FPR:;SPF:Fail;PTR:InfoDomainNonexistent;A:1;MX:1;LANG:en;
X-Microsoft-Exchange-Diagnostics:
1;BLUPR07MB529;2:NDhzV2BVh/wG8A0YBRycs8l1kapTDMyQpN4DSUs6irp0kdkhfahX1lGPX3uUrm90c1vNLrzJi01KZz4h/9S9GxYlEKKAsVGj5/4ARJbN6FZokXhO0XXk64pVGN4JKwr5gn3HJ4a+QjF4lzozGjAJlRAeQUrPHSWH4dllWwsX6lo=;3:BATQdGS6zlpskc++LiizUSUk+MsqcefW9pLulzy9LWXDL4j7kRlBNTQbNiUwASCtfLBfADy+5NSMr+ype1NdVDi4QCDpakNhThfKmgt0GB21FBm3kQ0KjY7SrXzeUiqRhiiJOiYSYEiS3AChFlkfuOeqnx0lNTHMNOZbhiChaBIhyfypDYPHK4sAXoDDYiUU85g9p+WKY3fpbnxt1C5lttkr9nb4ByBA3gKfqZsq3hGc7IhGcMsLofhb1MrHxLkf;25:JUZLDlvfuoP1d7kPnee30kwKIShLso3L9fG3d/PSoqg6tj71VWmkBe6UthwThiN+UN7oQ5IU9VoFH/Vry9O2KmYRhTWo33DJppTuAy+93NO+MgCytp1doAhRWnUzpj+mp3L7lnV24sfh70aNAQ69YcyUsp7PlaLUOMgpkxKXzc6DOv4t7t90HkSjdYDWPTDeh9xPvCecGZ5loOyBpalp8dUNbwzj17hh9leZjd6y4hOIz15eNmg8ixIbrJWKIrX9KPI9I1VcR6DrP0l6NRD7wA==
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BLUPR07MB529;
X-Microsoft-Exchange-Diagnostics:
1;BLUPR07MB529;20:6MBg9w/BILSTecEY7EM/9GicuL7MHgoMjd18uNw6O2x+5Mior7ecTt4bP+KIBXR3cRVfI/iNScuCytdfPJ/VGvlhnvNnDGXY8ZukVlUJC6hkCDYPmhgnJxOQ9wVr5GMHj+DbkEgs1KiupzYwSdbTdKQGgv3AfpUgTk39jiRdSt/elI5iJWnyazAe9r9G6Mm2ger5HT7tSNVPZ/o4u0JDzIphYBCFb7njJdsJl1pSsxWglm3nz6512f9ow94/SdvEHCwraSPNfzzGCKWhnwOedMBPV+u1FJmtXweYD/1kcLVim15ZdfwpP9poJ3Mwc+Q+AJ0BEikms/jdnIfSpfKiy1hQqsW0iEPImmnsKLB6Uwx2g06sPsMrQGWt4oiKLFcgJocgepolhFXDYKH3WCKi6d1O1upKSVsVBrNrDjEF07c=;4:cEedbe1Rhxva1K8FSu88iY78tg0dRopIErarPipRypXTneCUMOAZ7zaW0FKCtQB2e1EO1RiQHYyxGyZz9/yzzX6UrpUtOLdWDFJe9/oNZuZfPzobMdEam0WIGi7ylA/+v3WhmTwQJrQ4n48lSlk4LM7q5ZrauC5vL/cFAZ+XDeHwXVdrHdjci+M+DSK10c3leTrlwYoSlNnihTqSIfAKTrcwz3bZdJMluT95P4vOyIxe67TQcQW95CHlLx8nJLFIvVrK3017ojdgw0iX9FXngZ2Qplf2ZHV8zt2XtvU6o1Vxweq2i6fPzbmGDixbgXy6W5JT0jp4BNcPHcDJ5LVRM4rVGvlZmiAYrjtePvjhz57YaqKh+CZEdsSElopX5cZQ
X-Microsoft-Antispam-PRVS:
<BLUPR07MB52928EB2A4EA155233D400D931D0@BLUPR07MB529.namprd07.prod.outlook.com>
X-Forefront-PRVS: 07630F72AD
X-Microsoft-Exchange-Diagnostics:
=?us-ascii?Q?1;BLUPR07MB529;23:DP37+7BaK9q8Q1KXNm6smOaMnWEKeeB3GD+FDL72zg?=
 =?us-ascii?Q?DBkaPJ56sdk34JoPWE373JIRALygVEQRClW+632Tnb7qrI9bMV9J2bgytfWR?=
 =?us-ascii?Q?2nmEVRomT09Tjz8LmkEc5cePXZ6A/PCDTeaJMAU2cDGPIiHof42oR6xAo3bY?=
 =?us-ascii?Q?sM32sEbU6H7cCV7AopxywatJYW7xbcTgeZN5BvKBUmaiohi77o+wedpLN1Uc?=
 =?us-ascii?Q?v7ApzE3QcCA/NZj+xm6ZxgSvohWJjFtAA0JKAAx2TUJ4R9+2Ua3sH01gLTmg?=
 =?us-ascii?Q?tKu8Pf9If+goefXjG1Lo1iP83RpFb7GVhkwew8JIdDHta49VBYIV2GaO46Uq?=
 =?us-ascii?Q?2QmcrDuirACv8Y1ET6LYJgYrcuLILfN7Knhi6976WRX3W7pZhNDF6Gpfpp8w?=
 =?us-ascii?Q?EYnev5jtspeIyl7JIQr+vIiFLCbqCas9lUM7h8eK68VR70XgNtGjp+EgX825?=
 =?us-ascii?Q?30h012xu70G+JQyl8w9pQ2mvGtltwgp+q/BAqw5VySNrfhPSP6E4ddPb/wEn?=
 =?us-ascii?Q?GFkrD8ZIWPHZ+jpEKLy4rTVzIF9xUJU07VlVoG0hMcMWoO2qKvMIcbhXCb+h?=
 =?us-ascii?Q?X02U6uf57AP0YP9F+LzFGedQQMgR2C/gR6r9Lh8s6Ft9eKczsVfMkMDXATeQ?=
 =?us-ascii?Q?SuuDEtV+GfCiZ3m7sX5pkF2Auoo3X4d2sh1bsbL7C6qwhwLKMYHgY9UTVpSn?=
 =?us-ascii?Q?3zwcXYKCerWjPL4Xw70kD3dOFCrwgeSIVy7VUjDw/Jiqd8l0mCDVwV08loT/?=
 =?us-ascii?Q?9mzdaU3FNosJYUJ8FEJMC13jMhBgKbA5fybakV2TtWeVmbJdSW07YNyKUBcy?=
 =?us-ascii?Q?PSJAZCPBlPuusZYnW+ywVQXSrstf4XvApJcLsPFRRQ16c7cJOQ9ekGYlx8wN?=
 =?us-ascii?Q?verRrNsDQvPLXk96rmDz1s2c24UwAEtUbvlk8pj8oBMuOcZcHh+QHdsx14A6?=
 =?us-ascii?Q?LgvaAkwaQ5azwZvTBYTOSd+1mLmDi5azJHXf5J/R4Nq2OEW/jJlQjXrasE8F?=
 =?us-ascii?Q?fYcjsujef4cnR2E0k3DXN3hzGS2NYZmtcgRiugOs7MIRTjEmnZAC/M/MGmOY?=
 =?us-ascii?Q?CKeDCNz5y414AHuUeNHDvm38VoJIc7xmH381kOz2Fc5RyeIXePGJwqt4oth6?=
 =?us-ascii?Q?AdOg+SGPD0TL8fDc/GEOW3KQ15hsYWtwpV7dLXKa8y3nR34plmIlgiX7G7Aj?=
 =?us-ascii?Q?26gWZ386c9PZ34V/OkIUP1cKOT31joZ41EHuycaaA5KzlwWMYBhvP5JqAwFR?=
 =?us-ascii?Q?ikvy4eRM3P9jZ1HV1TvfBZH4ngdCsZTisqHkBm56+iQ1QQNK/vnw546TvaDw?=
 =?us-ascii?Q?qPQryQedm+5LHLrQds1gl2yIJz6IDrP7eKZFzKGB5HDr7q2MofUgAXXdZXUe?=
 =?us-ascii?Q?R0bRjYUksqC4K8muTcsPbBNZQ=3D?=
X-Microsoft-Exchange-Diagnostics:
1;BLUPR07MB529;5:J+agkuuID8dw/nk4WbeofJ0LLYE97nZGSK4teFbELtydsMtIalf3wandJil/aZeKrvduJzB912sUn9yPxUIDXTvn5OPvK8psO3XMkNkXpApgJ8C3RaV0DohzhNzA98LdN4aDp6IASy12UYHvR4JRjQ==;24:BfkUGxl+AvabVsHJ39d2Kc2nzK466vIoy3GU5zdBzccyot1FzC8tkNf6I3MygbgRpg3eE5XMCNzaJAJnF5agrI/wFqaUzByLscenLLMd0h4=;20:5H8QoUDeQUj8lG6gQ1shkVDryPw7uhwDKVyny6xPdw4jmsFV5OyifUHYc7dEgxQBzMDs19IaAwjNlxbLOKq1Ig==
X-OriginatorOrg: law.georgetown.edu
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Nov 2015 05:41:01.1389
 (UTC)
X-MS-Exchange-CrossTenant-Id: 935c2642-8489-46fc-97cc-1143c4b55ea3
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=935c2642-8489-46fc-97cc-1143c4b55ea3;Ip=[141.161.191.75];Helo=[mail.law.georgetown.edu]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR07MB529
--_fc519084-0824-42d1-831d-1142b62d26bb_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

########## end header #############

That may look like a bunch of nothing to you, but in reality it's the most beautiful thing in the world because it's organized information, or data, and data is evidence. If you take that header and put it into a website like http://mxtoolbox.com/Public/Tools/EmailHeaders.aspx it tells you a whole lot about where the email came from, who it went to, how many servers it touched on its way, etc.

If you want to see the results for this header, go to:

http://mxtoolbox.com/Public/Tools/EmailHeaders.aspx?huid=70f1d8c3-7777-4d31-8f7b-0e72d66104c3

So what do we learn from the analysis? I want to make it perfectly clear that this is not my area of expertise, and I'm only an hour or so into my analysis. THESE FINDINGS ARE PRELIMINARY, AND COULD BE COMPLETELY WRONG. EXPERTS ARE ENCOURAGED TO DO THEIR OWN ANALYSIS AND CONFIRM OR DEBUNK MY FINDINGS.

To me it looks like John Podesta sent the email found in the Wikileaks archive to John Podesta. Why? Here's the relevant data:

Delivered-Tojohn.podesta@gmail.com
X-Receivedby 10.140.17.8 with SMTP id 8mr39958184qgc.80.1447738864202; Mon, 16 Nov 2015 21:41:04 -0800 (PST)
Return-Path<podesta@law.georgetown.edu>
Received-SPFpass (google.com: domain of podesta@law.georgetown.edu designates 157.56.111.54 as permitted sender) client-ip=157.56.111.54;
Authentication-Resultsmx.google.com; spf=pass (google.com: domain of podesta@law.georgetown.edu designates 157.56.111.54 as permitted sender) smtp.mailfrom=podesta@law.georgetown.edu; dmarc=fail (p=NONE dis=NONE) header.from=outlook.com
Resent-From<podesta@law.georgetown.edu>
X-TMN[dTeiFt+mIlzCgMdOmxQpdxSi3rWYMV/J]
X-Originating-Email[viejojoe@outlook.com]
Message-ID<SNT150-W75F932A59B6A19648914E9C31D0@phx.gbl>
FromJoe Patterson <viejojoe@outlook.com>
To"podesta@law.georgetown.edu" <podesta@law.georgetown.edu>
SubjectA 2016 game changing, feature film project for your consideration.
DateMon, 16 Nov 2015 21:40:57 -0800
See the Resent-From? It's "podesta@law.georgetown.edu"
And the Delivered-To? "john.podesta@gmail.com" (the hacked email account)

So, whether Joe Patterson sent the email to john.podesta@gmail.com or not (and therefore Joe is telling the truth - technically), it tentatively looks like John Podesta sent THIS email to John Podesta... but really, I could be wrong about that. I'm sick at the moment, and we don't do our best thinking when we're sick, and more research is definitely needed, or some kind of expert in this stuff needs to corroborate what I'm saying. 


Questions? Ask them, and I'll do my best to answer as I have time... and remember,

DON'T JUMP TO CONCLUSIONS - ASK QUESTIONS

No comments:

Post a Comment