did anybody get geotrust spam today.

I would like to compair header notes with a few people

Mike

hey mike, I got it send me a pm and we'll compare notes.

Steven

better in public so that others can check notes also

here goes : headers

Return-Path: <marketing@geotrust.com>
Delivered-To: postmaster@adehost.com
Received: (qmail 14401 invoked by uid 110); 9 May 2002 22:44:42 -0000
Delivered-To: hostmaster@adehost.com
Received: (qmail 14395 invoked from network); 9 May 2002 22:44:41 -0000
Received: from unknown (HELO www.surveymonkey.com) (65.42.172.138)
by ns.adehost.com with SMTP; 9 May 2002 22:44:41 -0000
Received: from AspEmail ([65.42.172.138]) by www.surveymonkey.com with Microsoft SMTPSVC(5.0.2195.4453);
Thu, 9 May 2002 17:40:21 -0500
From: <marketing@geotrust.com>
To: hostmaster@adehost.com
Reply-To: marketing@geotrust.com
Subject: GeoTrust: True Credentials Express for client certificates
Date: Thu, 09 May 2002 17:40:21 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--=C3EB924ACEBB48669A31_F9C8_130B_6296"
Message-ID: <SURVEYMONKEYNEW6aRZ00003af7@www.surveymonkey.com>
X-OriginalArrivalTime: 09 May 2002 22:40:21.0281 (UTC) FILETIME=[80579910:01C1F7AA]

Dear FreeSSL Customer:

As a valued GeoTrust FreeSSL customer we want to make sure you are aware of the best-of-breed e-business security solutions in the industry.

GeoTrust is happy to introduce True Credentials Express - a fully managed enterprise trust service, without the wait. Registration for this service is fully automated, enabling instant access to client certificates for secure e-mail (S/MIME), client authentication and VPN applications.

A special introductory setup fee for True Credentials Express:
- $495 with the first 10 S/MIME enabled certificates free!
- Each additional certificate purchased thereafter is only $15
- A bulk discount of $3 per certificate applies to orders of 50 or more.

To learn more or sign-up please use the link provided below:

http://info.geotrust.com/s.asp?A=1048196E140


Thank you for being a valued GeoTrust customer!

Please note: If do not wish to receive further promotional e-mails from us, please click the link below, and you will be automatically removed from this mailing list.
http://info.geotrust.com/r.asp?A=1048196E140

ok this is what I discovered talking to the ISP in Michigan last night:

surveymonkey seems to be the bridge that someone used

the company usdco ( when you do the Whois you'll see them )
is the company whom has the server that is bad ( bridge point )

the ip's that are used are cable modems ( confirmed that with the ISP because she was on the 65.42 block at one time ) funny thing is that I had to question here about that because I was understanding that the 24 or 22 block was cable modems.

the text of the message has the true identity of the spammer

Geotrust did not reply to my inquiry

Mike