suzyrice.com Rotating Header Image

BAD PHOTOSHOP AND SPARTAN CONTENT = FAKE BUSH SITE

Took me about one minute to determine that moby minions are spare on talent, bare in humor and raw in gossipy ickyness and will not hesitate to pose. Posers. Oh, “Mary Cheney!” I’m surprised they didn’t “wedge” her name in there.

The quite audaciously bad anti-Bush, “Bush Can” site.

And, send the promotional garbage emails to SpamCop.net. It’s a free service, register your account, forward as attachment, presto: report your Spam.

“Bush Can”: I bet the Kerry campaign worked all week on it.

Here’s a copy of the full header with the bogus e-mail message, “soliciting” blogger support for their “fake documents” scam — if I’m wrong about this, I’ll be the first to apologize and retract the comments I’ve made here about “yesbushcan.com,” but I don’t think I’m wrong:

RedDotSml.gif Bogus E-Mail and solicitations:

From helpwin@yesbushcan.com Sat Oct 16 16:07:00 2004
X-Apparently-To: mailo@suzyrice.com via 216.136.174.219; Sat, 16 Oct 2004 16:04:55 -0700
X-Originating-IP: [64.112.225.86]
Return-Path: < helpwin @yesbushcan.com >
Received: from 64.112.225.86 (EHLO mail.rebelMouse.com) (64.112.225.86) by mta100.biz.mail.re2.yahoo.com with SMTP; Sat, 16 Oct 2004 16:04:54 -0700
Received: from berry01 [64.112.225.86] by mail.rebelMouse.com with ESMTP (SMTPD32-7.10) id A9943C00A0; Sat, 16 Oct 2004 16:07:00 -0700
Message-ID: <15037223.1097968020687.JavaMail.SYSTEM@berry01>
Date: Sat, 16 Oct 2004 16:07:00 -0700 (PDT)
From: helpwin@yesbushcan.com Add to Address Book
To: ####### @ ####### .com
Subject: More False Documents
Mime-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Mailer: ColdFusion MX Application Server
Content-Length: 632

RatherGate proved that bloggers are the best fact checkers. That is why we are writing to a few bloggers asking for help.

Yes Bush Can has collected several documents that are clearly suspect. But we need your help to prove they are fake:
http://www.yesbushcan.com/falsedocs.shtml

Let’s spring to action before these documents needlessly tarnish the reputation of our Commander and Chief. You know the drill: analyze the handwriting, search for factual errors, and post your discoveries.

And keep us posted by sending email to FakeDocs@yesbushcan.com.

Thanks in advance for your help.

YesBushCan

RedDotSml.gif Spamcop.net’s report:

Spam Header
X-Apparently-To: x via 216.136.174.219; Sat, 16 Oct 2004 16:04:55 -0700
X-Originating-IP: [64.112.225.86]
Return-Path: < helpwin @yesbushcan.com >
Received: from 64.112.225.86 (EHLO mail.rebelMouse.com) (64.112.225.86)
by mta100.biz.mail.re2.yahoo.com with SMTP; Sat, 16 Oct 2004 16:04:54 -0700
Received: from berry01 [64.112.225.86] by mail.rebelMouse.com with ESMTP
(SMTPD32-7.10) id A9943C00A0; Sat, 16 Oct 2004 16:07:00 -0700
Date: Sat, 16 Oct 2004 16:07:00 -0700 (PDT)

From: helpwin@yesbushcan.com
To: x
Subject: More False Documents

Mime-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Mailer: ColdFusion MX Application Server
Content-Length: 632
View entire message
Parsing header:
Received: from 64.112.225.86 (EHLO mail.rebelMouse.com) (64.112.225.86) by mta100.biz.mail.re2.yahoo.com with SMTP; Sat, 16 Oct 2004 16:04:54 -0700
64.112.225.86 found
host 64.112.225.86 (getting name) no name
Possible spammer: 64.112.225.86
Received line accepted
Received: from berry01 [64.112.225.86] by mail.rebelMouse.com with ESMTP (SMTPD32-7.10) id A9943C00A0; Sat, 16 Oct 2004 16:07:00 -0700
64.112.225.86 found
host 64.112.225.86 (getting name) no name
64.112.225.86 not listed in dnsbl.njabl.org
64.112.225.86 not listed in cbl.abuseat.org
64.112.225.86 not listed in dnsbl.sorbs.net
64.112.225.86 is not an MX for mta100.biz.mail.re2.yahoo.com
64.112.225.86 is an MX for rebelMouse.com
Possible spammer: 64.112.225.86
host mail.rebelMouse.com (checking ip) = 64.112.225.86

64.112.225.86 not listed in dnsbl.njabl.org
64.112.225.86 not listed in cbl.abuseat.org
64.112.225.86 not listed in dnsbl.sorbs.net
Chain test:mail.rebelMouse.com =? 64.112.225.86
64.112.225.86 is an MX for rebelMouse.com
64.112.225.86 is mx
mail.rebelMouse.com and 64.112.225.86 have close IP addresses – chain verified
Possible relay: 64.112.225.86
Received line accepted
Tracking message source: 64.112.225.86:
Routing details for 64.112.225.86
[refresh/show] Cached whois for 64.112.225.86 : postmaster@tcpipservices.com
Using abuse net on postmaster@tcpipservices.com
No abuse net record for tcpipservices.com
Using default postmaster contacts postmaster@tcpipservices.com
Yum, this spam is fresh!
Message is 1 hours old
64.112.225.86 not listed in dnsbl.njabl.org
64.112.225.86 not listed in dnsbl.njabl.org
64.112.225.86 not listed in cbl.abuseat.org
64.112.225.86 not listed in dnsbl.sorbs.net
64.112.225.86 not listed in relays.ordb.org.
64.112.225.86 not listed in query.bondedsender.org
64.112.225.86 not listed in iadb.isipp.com
Finding links in message body
Parsing text part

Resolving link obfuscation
http://www.yesbushcan.com/falsedocs.shtml
host 64.115.210.58 (getting name) = static-64-115-210-58.isp.broadviewnet.net.

Tracking link: http://www.yesbushcan.com/falsedocs.shtml
No recent reports, no history available
Resolves to 64.115.210.58
Routing details for 64.115.210.58
[refresh/show] Cached whois for 64.115.210.58 : isp-noc@broadviewnet.net
Using abuse net on isp-noc@broadviewnet.net
abuse net broadviewnet.net = postmaster@broadviewnet.net, abuse@broadviewnet.net
Using best contacts postmaster@broadviewnet.net abuse@broadviewnet.net

From: helpwin@yesbushcan.com (More False Documents)
RatherGate proved that bloggers are the best fact checkers. That is why we are writing to a few bloggers asking for x

Report Spam to:
Re: 64.112.225.86

Share

7 C O M M E N T S

  1. msl says:

    Suzy, here’s some interesting data:

    #1, the domain registrar is in France. Figures Huh…

    Website Title:
    Yes Bush Can

    Meta Keywords:
    President George W Bush, First Lady Laura Bush, Vice President Dick Cheney, Bush Cheney 2004, Reelect Bush, Campaign 2004, Reelect Bush Cheney, George Bush 2004, GOP, Republican, Republican Party, Republican National Committee, George W. Bush, President

    Response Code:
    206

    SSL Cert:
    localhost.localdomain SSL is expired!

    Website Status:
    Active

    Reverse IP:
    Web server hosts 17 websites (reverse ip tool requires free login)

    Server Type:
    Apache/2.0.40 (Red Hat Linux) (Spry.com also uses Apache)

    IP Address:
    64.115.210.58 (ARIN & RIPE IP search)

    IP Location:
    – Broadview Networks

    Cached Whois:
    Cached today

    Record Type:
    Domain Name

    Monitor:
    Monitor or Backorder

    Wildcard search:
    ‘yesbushcan’ or ‘yes bush can’ in all domains.

    Other TLDs:

    .com
    .net
    .org
    .info
    .biz
    .us

    X
    [5 available domains]

    Name Server:
    NS7.GANDI.NET

    ICANN Registrar:
    GANDI

    Created:
    2004-08-14

    Expires:
    2005-08-14

    Status:
    ACTIVE

    % GANDI Registrar whois database for .COM, .NET, .ORG., .INFO, .BIZ, .NAME
    %
    % Access and use restricted pursuant to French law on personal data.
    % Copy of whole or part of the data without permission from GANDI
    % is strictly forbidden.
    % The sole owner of a domain is the entity described in the relevant
    % ‘domain:’ record.
    % Domain ownership disputes should be settled using ICANN’s Uniform Dispute
    % Resolution Policy: http://www.icann.org/udrp/udrp.htm
    %
    % Acces et utilisation soumis a la legislation francaise sur
    % les donnees personnelles.
    % Copie de tout ou partie de la base interdite sans autorisation de GANDI.
    % Le possesseur d’un domaine est l’entite decrite dans
    % l’enregistrement ‘domain:’ correspondant.
    % Un desaccord sur la possession d’un nom de domaine peut etre resolu
    % en suivant la Uniform Dispute Resolution Policy de l’ICANN:
    % http://www.icann.org/udrp/udrp.htm
    %

    And:
    Here’s an interesting list of the domains that are “co-located” on the same server:

    http://www.Airinfos.com

    http://www.Censors.org

    http://www.Cheneybush.com

    http://www.Cpteuro.com

    http://www.Cuejack.com

    http://www.Exxonceo.com

    http://www.Gatt.org

    http://www.Hispanicsforarnold.com

    http://www.Iraqtribunal.org

    http://www.Reamweaver.com

    http://www.Rt2k.com

    http://www.Rtmark.com

    http://www.Socialstability.org

    http://www.Theanti-drug.com

    http://www.Theyesmen.org

    http://www.Vikingvideo.org

    http://www.Yesbushcan.com

  2. millersam says:

    But somebody should do something about those DUI memos.

  3. Pete says:

    I received and email too, to which I replied:

    Dear Wankers,

    I am so pleased to have made it onto your email list as a conservative blogger dedicated to exposing frauds like you. I’m so motivated that I’ll be publishing on my blog who you are–and–that the registration on your whois listing is in FRANCE! Surrender you cheese eating monkey you!

    Thanks for your encouragement,

    Pete

  4. -S- says:

    msl:

    Wow, thanks…I’m sure a lot of people other than me (but including me!) are grateful for that information.

    I got as far as doing a TraceRoute on the origin I.P.A. and it is from a location in Oregon, at least as to that I.P.A. that is identified (in the headers and the SpamCop Report I reprinted, above).

    Yeah, frauds. I knew it, particularly when I read the e-mail referring to “our Commander AND Chief” among other ridiculous things.

    The e-mail HOPES for an inflammation and exaggerated discussion (by us “bloggers,” no less!) of their preposterous “documents.”

    Let’s have a discussion about Liberal Frauds, instead.

    I’m going to move the information shared by “msl” into a later edit on the thread itself, so people can easily see the fraud involved.

  5. -S- says:

    I agree that the sales pitch is disgusting.

    It’s the “everything is everything and nothing means nothing” line of reasoning that seems to be responsible for driving many Liberals into a pit: “can’t figure out if being in the pit is bad so much as those not in the pit might be.”

    The email is an attempt to fan the flames; they appear to be attempting to GENERATE DISCUSSION of these “document” issues. It’d both distract bloggers (who they identify as “rathergate bloggers”) from realities of the moment and make them a source of ridicule (further ridicule) to the Liberals on the internet, and then the MSM no doubt afterward.

    They appear to me to be working like a lookout: “they went THATAWAY!” while the crooks run in the opposite direction.

    Frauds.

  6. Anonymous says:

    I got that piece of junk too. You have a lot more patience than I do.

    Here’s a wonderful snippet from these malcontents’ “theanti-drug” site.

    Whether committed by religious extremists (like al Qaeda), governments (like Iraq or the USA), corporations, or non-governmental political organizations, Terrorism can be defined this way:The use or threatened use of force or violence by a person or an organized group against people or property with the intention of intimidating or coercing societies or governments, often for ideological, economic, or political reasons.Of course; one person’s “Terrorism” is another’s Liberation Struggle, Crusade, Jihad, or day job. This is not to excuse the terrorist acts of any group, just an effort to “level the playing field” a bit in a situation where one culture (The West, with the USA in the lead position) is attempting to create a world where it defines all of the terms of the game. If we’re going to call the use of violence to coerce or intimidate societies or governments “terrorism”, then we need to be honest and call “our” violent, coercive acts terrorism too.Disgusting. “Level the playing field” my ass.

  7. Anonymous says:

    Rent a sense of humor for a moment or two. Anyone with half a brain spending more than a nanosecond on the yesbushcan.com web site would realize it’s a parody. I mean, a Patriot Pledge where you promise to surrender your children for a military draft, and sign them up to pay off the debt that Bush is racking up? A “Smokey the Log” mascot that explains how bored trees are unless they’re cut down?

    If you think there’s even a remote chance that could be mistaken for an actual pro-Bush web site, that says a lot more about the Republicans than it does about the site’s creators.

    —————————————————-

    Ed. Note: the cautionary post about that being “a fake Bush site” is due to the headline-gullibility by many among the public, who is influenced to misunderstand by site name/s and headline/s and doesn’t look into the details as you do. Whether revealing details or not, a “fake” is still a fake.