How a Zip code was designed to misdirect investigators



By Richard M. Smith of www.ComputerBytesMan.com
July 17, 2002

I believe that the Zip code 08852 which appears in the return addresses on the Daschle and Leahy anthrax letters was no accident. It was purposely put on the anthrax letters by the Anthrax attacker to mislead investigators to blame Muslims for the attacks.

The Zip code 08852 is for the town of Monmouth Junction, New Jersey. (The anthrax letter gives the town Franklin Park in the return address which is one town over from Monmouth Park.) It turns out there is a relatively large Islamic Mosque located in Monmouth Junction. It is called the Islamic Society of Central Jersey. The Mosque is located on U.S. Route 1 in the Zip Code 08852.

The Mosque has a Web site which is here:

http://www.iscj.org/
Information about the Mosque can be found in a number of online directories. There are more than 30 Mosques in the New Jersey, but the Monmouth Junction Mosque is one of the few in central News Jersey area. Google easily locates these directories using the search string "New Jersey Mosques". Here are two directories with information about the Islamic Society of Central Jersey that are found by Google:
http://www.internetmuslim.com/Community_Center/newyork_info.htm
http://bloom.mit.edu/agakhan/usmosques/northeast.html
The Islamic Society of Central Jersey has over 700 members. It serves the relatively large population of Islamic believers in the geographical area between Princeton and Rutgers Universities.

I believe that the anthrax attacker added the fictitious return address to the Greendale School on the Daschle and Leahy letters after it appeared that his earlier anthrax letters to the media were not being opened. The attacker was betting that a Senate staffer would not ignore a letter from a 4th grade class of an elementary school.

Although there is no Greendale School in New Jersey, there is a Greenbrook School which is less than 5 miles away from the Islamic Society of Central Jersey. Information about this school is easily located by the search string "Monmouth Junction Schools" at Google:

http://www.myschoolonline.com/folder/0,1872,55363-352-38-30393,00.html
http://www.sbschools.org/
It also seems likely that anthrax attacker originally chose to mail all of his anthrax letters from the central New Jersey because there are a large number of drug and biotech companies in the area. The goal again was to misdirect investigators to think someone working in at a local biotech company was behind the attacks. The anthrax attacker probably does not live in central New Jersey, but somewhere within easy driving distance to the area.

Because the anthrax attacker needed to write the return addresses on the Leahy and Daschle letters before he filled them with anthrax, I think he created the fictitious return address using the Internet as I have outlined above. It is not necessary for him to be familiar with the central New Jersey area as the FBI and others have theorized.

If the return address was created from Internet searchs, server logs at some of the Web sites that I have listed might provide valuable clues about how the anthrax attacks were planned and by whom. Up to a dozen different Web sites might have information relavent to the anthrax investigation.

See also: Deconstructing the Return Addresses of the Leahy and Daschle Anthrax Letters

(C) 2002, ComputerBytesMan.com


FBI photo of the Leahy anthrax envelope




Islamic Society of Central Jersey
Monmouth Junction, NJ 08852