HireAmericanCitizens Whacked by China

Date: Thursday, March 16, 2006 2:27 AM

JOB DESTRUCTION NEWSLETTER

March 16, 2006 No. 1438

The HireAmericanCitizens website has been whacked.

If you go to the website you will see this:
http://www.hireamericancitizens.org/

Account for domain hireamericancitizens.org
has been suspended

The owner of HAC, Richard Armstrong, notified me that his web hosting
service suspended the account - without notice. The website simply went
POOF! His web hosting service isn't being helpful either because they won't
give him a reason for their actions, or who made the decision to shut it
down.

...It gets weirder...

An abuse report sent to Armstrong has a cryptic email related to the
American Workers Coalition and some spamcop references (see below). I
decided to check out the AWC to see what's going on. Much to my surprise
when I went there I got the following message:

http://www.awcorg.us/

American Workers Coalition is closing shop, and we
are not sure if it will open again.

IT GETS WEIRDER!

The spam report below originated from the IP 218.25.165.163. I used the
"swiss army knife" of all web IP reseach sites (Sam Spade) to determine
where that IP is located - China!

Go to this link and you will be able to see more details about the Chinese
who are running that IP.
http://www.samspade.org/t/ipwhois?a=218.25.165.163

So what does this all mean?

That's the million dollar question and right now I don't have any answers.
Armstrong's organization HireAmericanCitizens has been in the forefront of
the battle against H-1B and outsourcing. If you recall, Armstrong led an
unsuccessful petition drive to get an anti-outsourcing bill onto the
Colorado State ballot. The AWC was used by many activists as a forum and a
blog. Both sites probably have their share of enemies.

The bottom line is that Armstrong's website was shut down by a cabal that
is behaving like they are taking their orders from Beijing - ya know, sort
of like Google, Yahoo, and Microsoft.

I can imagine a few possibilities about what may have occurred:

* The Chinese deliberately masqueraded as the HireAmericanCitizens website
and spammed some people in order to sabotoge the website.

* A Chinese spammer spoofed HireAmericanCitizens in order to hide their
identity. Savvy spammers can do this and it most often originates overseas.
Their job is made easier if they can find an open mail port, which is the
responsibility of the web host to plug up. We pay for our web services
because we expect professionals to deal with these details but it seems
that in this case HAC is being treated as a throwaway item.

In either case the web host should not have shut down HAC without first
allowing Richard to defend himself. Regardless of the reason for whacking
the website the web host is at fault for not protecting their paying
customers.

Folks, this is electronic warfare. If they can take down
HireAmericanCitizens most of us that run websites are in jeopardy. I don't
know if this is a random event or the beginning of a campaign to take us
down.

To email Richard Armstrong use this: stateoart@att.net

To see what HAC and AWC looked like, go to the Wayback Machine and enter
the full URL:
http://www.archive.org/

+++++++++++++++++++++++++++++++++++++++++++++++++++

cat: spam
desc: SPAMVERTIZING
server: BSD15.INFINOLOGY.NET
created by: arbi
created on: Thu, 9 Mar 2006 10:37:33 -0800
updated by: arbi
updated on: Thu, 9 Mar 2006 10:38:09 -0800
images: 7no images

download account re-activation form

INITIAL NOTE:

Spamvertised web site: http://www.hireamericancitizens.org
http://www.spamcop.net/w3m?i=z1681205556z53fc513613576050abef254e3e50fea9z

http://www.hireamericancitizens.org is 8.3.8.106; Mon, 06 Mar 2006 22:57:34
GMT

[ Offending message ]
Return-Path:
Received: from n7a.bullet.dcn.yahoo.com (n7a.bullet.dcn.yahoo.com
[216.155.203.227])
by mx3.phreaker.net (Postfix) with SMTP id 7D1AE1F0DFFE
for ; Sun, 5 Mar 2006 23:58:16 +0000 (UTC)
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima;
d=yahoogroups.com;
b=OMnteSFVm6xIx8g95iM7KffO1CRN4FfCl60L1ZiVWO7OvNPKrWnuMrZK4n5Lckdl9IwHvEVa
YbQwCuQMG2l2cXv/o4bFOfWC4KARDr9hvPoCN9vz+kKDwvmaj5
JVf2S;
Received: from [216.155.201.64] by n7.bullet.dcn.yahoo.com with NNFMP; 05
Mar 2006 23:57:59 -0000
Received: from [66.218.69.2] by t1.bullet.dcn.yahoo.com with NNFMP; 05 Mar
2006 23:57:59 -0000
Received: from [66.218.66.94] by t2.bullet.scd.yahoo.com with NNFMP; 05 Mar
2006 23:57:58 -0000
X-Yahoo-Newman-Property: groups-email
X-Sender: info@axmf.com
X-Apparently-To: x
Received: (qmail 2182 invoked from network); 5 Mar 2006 23:57:54 -0000
Received: from unknown (66.218.66.218)
by m1.grp.scd.yahoo.com with QMQP; 5 Mar 2006 23:57:54 -0000
Received: from unknown (HELO mail.axmf.com) (218.25.165.163)
by mta3.grp.scd.yahoo.com with SMTP; 5 Mar 2006 23:57:54 -0000
Received: (qmail 5772 invoked by uid 509); 6 Mar 2006 08:41:54 +0900
Message-ID: <2006_________________mail@mail.axmf.com>
X-Originating-IP: 218.25.165.163
X-eGroups-Msg-Info: 2:12:4:0
Sender: x
MIME-Version: 1.0
Mailing-List: list x; contact
AmericanWorkersCoalition-owner@yahoogroups.com
Delivered-To: mailing list x
List-Id:
Precedence: bulk
List-Unsubscribe:
Date: 6 Mar 2006 08:41:54 +0900
Reply-To: x
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-HotPOP-Delivered-To: x

www.ZaZona.com
Support this Newsletter and ZaZona.com by donating:
www.zazona.com/Donations.htm

To Subscribe, Unsubscribe or to view the Archive go to:
http://www.zazona.com/shameh1b/JobDestructionNews.htm

Back to archives