2 replies to this topic

[wyrmrider]

Recvd in my hotmail today notice the Subject: line and again in body

Hotmail select line} Jumbo! Weekly 08.09.04 - Ad-aware, Folder Icon XP Aug 9 71KB

Selecting gives:
From : Jumbo! Weekly <reply-c02c-1908-8a7ebf454c@nl.internet.com>
Reply-To : reply-c02c-1908-8a7ebf454c@nl.internet.com
Sent : Monday, August 9, 2004 9:22 PM
To : flurnet@hotmail.com
Subject : 08.09.04 - Ad-aware, Folder Icon XP


Go to previous message | Go to next message | Delete | Inbox
MIME-Version: 1.0
Received: from nl-mail5.internet.com ([64.62.164.185]) by mc10-f15.hotmail.com with Microsoft SMTPSVC(5.0.2195.6824); Mon, 9 Aug 2004 14:23:14 -0700
X-Message-Info: JGTYoYF78jEHjJx36Oi8+YDSEg8qKPPD
Message-Id: <20040809212252.C672A40E6@nl.internet.com>
Return-Path: newsletter@nl.internet.com
X-OriginalArrivalTime: 09 Aug 2004 21:23:14.0624 (UTC) FILETIME=[149C0400:01C47E57]

Hotmail
Message link (obscured by hotmail tracking)
http://64.4.22.250/c...N...3,c5pn,lg7g

The requested URL /file/13293.htm was not found on this server
Apache/1.3.27 Server at nl.internet.com Port 80

Not one who gives up easily

Google on Jupiter media gives:
Jupitermedia Corporation (Nasdaq: JUPM), (www.jupitermedia.com)

All newsletters are sent from the domain "internet.com." Please use this domain name (not the entire "from" address, which varies) when configuring e-mail or spam filter rules, if you use them.

Newsletter body lead item no mention that this is or not paid looks like editorial


Ad-Aware
Worried about spyware? Banish it with Adaware!

Clicking takes you to

Topdownloads networks
And then
Rizalsoftware

NOT Nicolas Stark Computing AB (LAVASOFT) makers of AD-AWARE


Boilerplate at bottom of “newsletter” (sic)

Jupitermedia Corporation has four divisions:
JupiterWeb, JupiterResearch, JupiterEvents and JupiterImages

Copyright 2004 Jupitermedia Corporation All Rights Reserved.
Legal Notices, Licensing, Reprints, & Permissions, Privacy Policy.

Jupitermedia Corporate Info | Newsletters | Tech Jobs | E-mail Offers

You are subscribed to the Jumbo! Weekly newsletter as flurnet@hotmail.com. To unsubscribe from the Jumbo! Weekly newsletter, please click here or email: u-c02c-8a7ebf454c-1908@nl.internet.com

To manage your newsletter subscription preferences, please click here.

To unsubscribe via postal mail, please contact us at:

Jupitermedia Corp.
Attn: Newsletter Subscription Dept.
475 Park Avenue South
New York, NY 10016

Let me know if I can help bag these scamers

wyrmrider

[Tuxedo Jack]

If you can get the full headers, I'll trace this and determine if it's from a trojaned spambot box.

[wyrmrider]

Hi Tuxedojack

I FWD you the e-mail from hotmail
As you may have noticed hotmail locks on to hot links and obscours the target
you do not really go where you think you are going by the route you think you are taking and when you get there you are not really there, just virtually, and if you time out you can't get back. LowWaterMark pointed this out to me.

I'll try and do some snooping on the three transfer links and to the rip off "product"
I e-mailed Lavasoft to give them yet another heads up.
I light of last weeks FTC victory over D-Squared you would think this kind of thing would lighten up. Ah Greed.

If you find anything get back to me. I intend to send the file to my contact at the FTC.

Wyrmrider