Via Peter Warren, it’s a phoney email suggesting that the sinister puppetmaster of the Conservative Hidden Agenda[tm] has spoken…
(Email’s content in the extended entry)
A computer expert on the show says he’s run a traced the email to St.Petersburg, Russia, which is a sign that it’s created by someone intent on hiding their tracks who has a little more knowledge of the internet than the average spoofer. The account was opened Dec.18, 2005.
Furthermore, as a member of the VRWC, I can also assure folks that it didn’t come from us.
Update – More on this case of the spy who spammed me….
Upperdate – Skimming the comments, at the rate the resident SDA “geeks” are going, expect disclosure of the culprit’s shoe size by mid-afternoon. Heh.
*****
From: National Council
To: standupf@standupforcanada.net
SUBJECT: JUST A FEW DAYS LEFT…NOTHING TO WORRY ABOUT
Date: Sun., 15 Jan. 2006 06:28:44 +0300
Dear Fellow Conservatives:
These are exciting times. Here we are in the home stretch on our way to victory in Election 2006!
In just a few more days, our leader Stephen Harper will become the next Prime Minister of Canada!
As your Chair, I want to thank each and everyone of you for your work in bring us so close to the victory. During a campaign like this one, it is not always possible or wise to speak about every details of our plans. Don’t be confused or upset by Stephen saying that he has “evolved.” After all, winning is the name of the game.
When we form Government on Jan. 23rd., be rest assured that we will not let you and your families down. As promised, all the issues that are precious to you will be dealt with. We will have the power to get on with repairing the social fabric of this country and restoring the Christian values we all hold dear.
Keep the faith, keep up the pressure, and God bless Canada.
Don
PS: This is a post-only mailing — please do not reply to this message
*****
Hey Ed,
Wouldn’t happen. Why? Because a Conservatove leader knows his consumers are Christians and speaks to them. Bush is about as Christian as a door post but he talks the talk just for his customers. This is simple market research. The second a conservative leader says ‘praise allah’ there goes his Christian vote and without that majority he might as well give up. We don’t vote conservative because we love the party, we vote for them because they are the only ones who share our values.
As The Invisible Hand noted in his page, the registration for standupforcanada.net has now changed to someone called ‘Vit Jouss’. Fake again I’m sure.
However, don’t go chasing standupforcanada.net. Yes it looks good, but remember it appears in a header that is easily faked too. The real headers are the usedns.com ones – these tell you some information. Harder to fake. Easy to remove, but harder to fake.
There is no evidence that ties standupforcanada.net to this email at all. The evidence of it in the from field can be faked easily and IS all the time for spam. The fact that everyone is running after that domain means that they are keeping you from finding out who is really involved. Just because it says standupforcanada.net doesn’t mean it ever originated from a machine involved with that domain.
They could have easily used the real conservative domain name….easily! The fact that they didn’t do that shows that they want to throw you off the trail with an obvious deviation. I could send any of you an email right now that appeard to come from Paul Martin. It is that easy….
So don’t go chasing standupforcanada.net in association with this email. It’s a fascinating domain name for sure though….
Do you think that was there intention to start with? Throw us of the trail. I know I’ve put a lot of time into researching this character which has kept me from more important things. Maybe the Liberals are intending to keep us busy with this muck so they can unveil their secret agenda while we aren’t looking….
Ed – Islam, Christianity and Judaism are all Abrahamic religions. “God bless Canada” is meaningful to all of them. As I see it, Allah, and Yaweh are AKA’a for God.
Just goes to show the Conservatives are a big tent! Not sure about non-Abrahmic religions; perhaps someone can enlighten us (in a separate thread please; let’s try to stay on-topic)
Good work analyzing the headers on this fake email. I expect some minion somewhere is losing sleep over this.
Just a little note that I didn’t see before….
Registration Service Provided By: INTERNET AGENCY REPLAY
Contact: +812.7158528
The Registrar of the domain actually is Replay.ru as well. I missed that one. The domain was actually registered in Russia by the guys that host the domain. The fact that the registrant name keeps changing may mean that they have access to the internal workings of the system. Meaning, if they change registrant everyday then it is probably a script doing it. If they change it only a couple times it may have been manually.
I’ve filed a report with ICANN that this domain is fake. The only problem is that the email is probably valid – because it points to the host. Anyone care to email them? If ICANN verifies the info is fake they will remove the domain and put Replay.ru on watch. Don’t hold your breath though.
But none of this leads us back to who was responsible, and how did they get the email list to start with?
Mike Duffy
On your show Countdown on Saturday nite Belinda Stronach made a very very serious accusation against Stephen Harper that she saw “an e-mail from Don Plett Party President” assuring people that ” we are going to bring forward a private member’s bill to bring back abortion”. She repeated she “saw the e-mail “.
In view of the fact that it has come to light that a fake e-mail originating in St. Petersburg Russia, as exposed on Perter Warren’s radio show with help of a computer expert on Sunday on CKNW, has been circulated and purported to come from National Council and signed Don, Canadians have a right and expect that CTV should undertake to let us know if this is the e-mail that Stronach referred to ( although this letter was only signed Don whereas Stronach made the claim the e-mail she saw was from Don Plett )
The fake e-mail’s message essentially states “Don’t be confused or upset by Stephen saying that he has “evolved” “. The purpose of the letter obviously is to promote the myth of a hidden agenda and a scary party.
Stronach took advantage of being on a national program to make a very serious accusation and now in view of the fact it has come to light there is a fake letter she should tell us what e-mail she was referring to and show us the copy with an explanation or if she made some serious inaccurate accusations an apology is certainly in order since she is a cabinet minister in the present government and must share some sense of responsibility and accuracy.
Mike I know that you nor your program Count Down or the CTV National Network want to play any part in some hoax or be responsible for propagating false and malicious information on such an important subject at this time. As time is of the essence I would hope that the Conservative Party would work with you to ask Elections Canada and the RCMP to begin an immediate investigation of this matter. Securing a copy of the letter that Stronach said she saw would be the initial point of investigation to see if her statements can be corroborated in any way shape or form.
Watching Stronach reveal her poor judgement has been the most satistying part of the election for me. She’ll probably lose her seat anyway. She also tried to dispute the Income Trust investigation by the SEC by waving around an email acknowledging receipt of the NDP letter. Oops, Belinda, there was a subsequent email from the SEC. Sunday on Question Period she raised this ridiculous idea of copyright infringment on the Tories attack the attack ad. On Friday night she apparently waved around the bogus email referred to above. The Liberals must be running for the exits when Belinda Stronach becomes your spokesperson about the true hidden agenda. This from someone who on Monday was totally excited about Mr Harper’s team, then on Tuesday has to leave the party, for a Cabinet position, because Stephen Harper was in bed with the separatists. If Harper is so scary, why did you support him? Belinda, you are proving you have so political savvy, probably because you have never paid you dues and tried to buy your position. Reminds me of the old British army, where aristocrats bought their commissions! She is simply non-credible with no political instincts, borne out of lack of experience in real life. Aurora voters go Conservative!!
Kate,
Maybe you could help me get the message out by posting this somewhere.
OK folks, I’ve done all I can do today, off to work. We can do a lot to help this matter though.
Everyone who receives this fake email can help us work to reduce the likelihood of further fake emails from the original perpetartor AS WELL as prevent the underhanded and deceitful use of the standupforcanada.net domain any further during the last week of the election.
The first thing you can do if you receive this letter is to forward a copy, with your complaint that it is spam which impersonates a very important person, to the following addresses:
abuse@infobox.ru
postmaster@infobox.ru
abuse@replay.ru
support@replay.ru
postmaster@usedns.com
This should help generate some traffic to those addresses. If infobox is a legitimate ISP then they will shutdown their customer who sends the mail. If they are involved in sending the mail, nothing will happen.
The second important thing you can do is report the email as spam with your ISP, whether that is Yahoo, Shaw Cable or whomever. They may write a filter to ensure that email gets flagged as spam for others.
The third thing you can do is to create yourself an account at spamcop.net and give them a copy of the email complete with headers. The account is free. What you will be doing here is informing them that the IP that sent you the mail is responsible for spam. This means they will likely block ALL email originating from that IP address. If you click ‘send report’ they will also send an anonymous report to the administrator of the IP block who will then have to deal with it as well.
So you can have an important role in helping to stop further emails from these people during the rest of the election.
Sems assuredly like a joe job sent by someone to discredit the Conservatives. Perhaps it was targeted to snarfed addresses from sites like this one … anyway good job doing the homework, alhthough I’d doubt you see any real action on a takedown by the Russians, They tend to be slow or non-responsive.
==
Neil Schwartzman
Chair, Board of Directors & English Media Relations
CAUCE Canada: The Canadian Coalition Against Unsolicited Commercial Email
The one I got wouldn’t have been the result of an address in a comments section. I use mail aliases that identify the blogs I post to. I started doing that quite some time ago after Damian Penny’s comments were harvested.
djb, I also use mail aliases to identify incoming mail. I frequent this forum but haven’t received the email yet, so unlikely a harvester picked it up.
Neil, thanks for the praise on the work. I would have said this was a ‘joe job’ as well, but too many things seem to point to otherwise. For example, the domain in the from field does use the same dns as the mail server and corresponds with the web hosting companies involved.
What strikes me further is the changing registration information on the domain. Either a) they are on to us or b) they frequently register domains by proxy for customers for the purpose of mass email and then write a script that changes the fake registration names often. After all, they are the registrars for the domain in question.
I received this email in my junkmail box and immediadetly sent it on to people I thought would be interested in the libellous forgery. I sent out an email to those addresses Altruistic mentioned…anything else I can do? Has anyone tried sending all the info to the so-called CTV Whistleblower?
I would appreciate it if anyone who has received this spam send it to me with FULL HEADERS.
Thanks
==
Neil Schwartzman
Chair, Board of Directors & English Media Relations
CAUCE Canada: The Canadian Coalition Against Unsolicited Commercial Email
2305 Oxford Avenue
Montr�al, Qu�bec
CANADA H4A 2X7
[Tel]: [514] 485-4474 | [Fax]: [419] 793-0430
[AIM / MSN / Yahoo!]: CAUCECanada
[Web]: http://cauce.ca
See http://stopspamhere.ca for ways to prevent spam from hitting your inbox.
Neil: I sent this to neil@cauce, but just in case:
MIME-Version: 1.0
Received: from jupiter.usedns.com ([85.142.33.27]) by bay0-mc9-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Sun, 15 Jan 2006 10:05:23 -0800
Received: from standupf by jupiter.usedns.com with local (Exim 4.52)id 1EyCFk-0007u7-C3for andrewwcmason@hotmail.com; Sun, 15 Jan 2006 21:05:20 +0300
X-Message-Info: 6sSXyD95QpXuGVmWrTP8IL5AmD0bqcqHN3drW6nGRRU=
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – jupiter.usedns.com
X-AntiAbuse: Original Domain – hotmail.com
X-AntiAbuse: Originator/Caller UID/GID – [33424 32003] / [47 12]
X-AntiAbuse: Sender Address Domain – jupiter.usedns.com
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php admin.php
X-Source-Dir: standupforcanada.ru:/public_html/mlist
Return-Path: standupf@jupiter.usedns.com
X-OriginalArrivalTime: 15 Jan 2006 18:05:24.0093 (UTC) FILETIME=[41ADBAD0:01C619FE]
In addition to the email hoax, there is another scam people should be made aware of:
BEWARE OF LIBERAL PHONE SCAM!
There is an apparent scam going around (as reported by a caller on CFRA) where a caller asks what party you are planning to vote for. If the reply is Conservative, the caller says ‘OK we’ve registered your vote, no need to go to the polls’.
Spread the word and make sure this doesn’t happen in your ridings!
Thanks Andrew. This further agrees with others who have received the email. The fact that it keeps coming from the same machine on the same ISP at the same host says this is deliberate and not the act of some mass mailing criminal software that utilizes machines all over the globe for the purpose of hiding their identity.
At the very least it is someone with ill morals who does this all the time and knows the ropes. At the very most it is someone who may be more likely to commit a crime. When I worked at a host everyday we had to deal with the same situation. Overnight someone would signup for an instant account using a stolen credit card. They’d create a domain, send out some mass email and flee.
Hopefully Neil has more time, knowledge and resources then I do to deal with the matter.
Also, Andrew, if you want to contact the whistleblower about the matter feel free. I think the more people you can get it to the better. There’s a good chance at some point we’ll find out more about this. Someone knows someone who got the email who knows someone who knows someone who started the whole mess. Or maybe someone just knows more about the network we are dealing with, like the people at Spamhaus.
Isn’t Belinda’s brother heavily involved in internet betting sites and promotion of “Party Girls”?
He may even be well connected enough to know who could possibly be sending out fake e-mails that his sister seems to have intimate knowledge of.
Or am I just suspicous?
Alex
It would be interesting to figure out how they got the email list. This may be an official CPC list from a certain point in time. Compare who received the email to how it was on the list at a certain time. Is it both former PC and Alliance members, or only one?
Anyway, who had access to the lists of the CPC? A few people at head office. Leadership Candidates ie Stronach, Harper, and the other fellow. I am pretty sure that those who ran for national council only received the list for that province.
When did any of us first receive the email? When did Bimblinda say she saw it?
Why would someone in Russia want to discredit the CPC, or help the Liberals?
Could it be that the Liberal Kyoto “plan” is to send billions of dollars to Russia in exchange for “emission credits” … whereas the CPC is proposing to re-direct that money to transit tax credits?
No… I’m sure it’s just a coincidence.
P.S. Seriously, why is this not front page news? The Liberal commercials accuse Harper of taking money from US Republicans on the basis of no evidence. This e-mail suggests that maybe the Liberals are getting help from the Russians, who stand to benefit (in the billions of dollars) from Liberal Kyoto policy. None of the above posts mentions this…
Smith – it is far more likely that someone merely rooted the site through St. Petersburg, or that someone in Canada paid a private individual in Russia to send out the emails. However, between this, the fake CFRA calls and suspicious polling station closures there does seem to be a story in here. But the MSM won’t touch it! And making “crazy” accusations only works (sometimes!) for Liberals.
Smith,
Russia and China are a breeding ground for hackers and the like. Russia is known for it’s vast ‘fields’ of email server farms that do nothing but send out spam all day long.
It’s likely that whoever initiated this simply chose to use an off-continent “company” to send the mail for them.
After all, if you were going to break into your neighbors house, wouldn’t you wear a disguise?
Just like the pharms that sell online meds, I’m sure this spammer chose someone proficient at the task who could cover up for them.
health insurance texas cat health insurance http://hochubumer.allsoch.ru/health_insurance/north_carolina_blue_cross_health_insurance.html maryland health insurance instant online health insurance quotes http://hochubumer.allsoch.ru/health_insurance/new_mexico_health_insurance.html and …. health insurance health insurance company http://hochubumer.allsoch.ru/health_insurance/health_insurance_rates.html international health insurance danmark provident american life & health insurance company http://hochubumer.allsoch.ru/health_insurance/health_insurance_for_college_students.html childrens health insurance affordable family health insurance http://hochubumer.allsoch.ru/health_insurance/lifewise_health_insurance.html .Thanks.
carisoprodol user forums abuse carisoprodol http://hochubumer.allsoch.ru/carisoprodol/carisoprodol.html carisoprodol ingredien___ withdrawl carisoprodol http://hochubumer.allsoch.ru/carisoprodol/buy_carisoprodol_online.html and …. carisoprodol without prescription withdrawl carisoprodol http://hochubumer.allsoch.ru/carisoprodol/carisoprodol_children.html carisoprodol without prescription carisoprodol addiction http://hochubumer.allsoch.ru/carisoprodol/carisoprodol_oral.html carisoprodol cheap carisoprodol comparison http://hochubumer.allsoch.ru/carisoprodol/carisoprodol_user_forums.html .Thanks.
cheap butalbital side effects of butalbital http://hochubumer.allsoch.ru/butalbital/butalbital_withdrawal.html butalbital online butalbital german http://hochubumer.allsoch.ru/butalbital/butalbital_free_shipping.html and …. cheap butalbital acetaminophen and butalbital http://hochubumer.allsoch.ru/butalbital/injectable_butalbital.html butalbital butalbital / asprin interactions http://hochubumer.allsoch.ru/butalbital/butalbital_with_codeine.html butalbital reaction butalbital order http://hochubumer.allsoch.ru/butalbital/what_is_butalbital.html .Thanks.
increase sperm volume thicker increase sperm volume thicker natural http://hochubumer.allsoch.ru/sperm/index.html foods to increase sperm count increase sperm quantity http://hochubumer.allsoch.ru/sperm/ways_to_increase_sperm_count.html and …. how to increase mobility in sperm help to increase sperm count http://hochubumer.allsoch.ru/sperm/what_to_eat_to_increase_sperm_count.html increase sperm amount increase in sperm production http://hochubumer.allsoch.ru/sperm/increase_your_sperm_load.html thing to increase sperm count to concieve increase sperm mobility http://hochubumer.allsoch.ru/sperm/increase_ejaculate__sperm.html .Thanks.
bupropion hcl zyban zyban does it work http://hochubumer.allsoch.ru/zyban/zyban_cheapest.html zyban good zyban comment fonctionne http://hochubumer.allsoch.ru/zyban/zyban_forum.html and …. take zyban and effexor at same time zyban prices http://hochubumer.allsoch.ru/zyban/index.html gain i taking weight will zyban bupropion hci zyban http://hochubumer.allsoch.ru/zyban/zyban_dangerous_side_effects.html foreign zyban discount zyban http://hochubumer.allsoch.ru/zyban/release_sustained_tablet_zyban.html .Thanks.