MainSleaze

Coupons.com, a web site that sends emailed coupons for products from major manufacturers and retailers, is sending coupons to an email address that was closed in 2004. Since the domain Coupons.com was first registered in 1994, the original owner of this email address might have requested these emails. However, the address has not been active for eight years. For four of those years, it rejected all email at SMTP time with a 500-level rejection. Coupon.com might have ignored bounces for those years, might have left the email address uncontacted for years, or might have accepted a typoed email address and failed to confirm it. A purchased list is also a possibility. The ESP is Responsys.

Sending IP: 12.130.137.33

Spam Sample:

Actual Headers:

Received: from om-coupons.rsys1.com (om-coupons.rsys1.com [12.130.137.33])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Wed, 15 Feb 2012 06:xx:xx -0600 (CST)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Received: by om-coupons.rsys1.com (PowerMTA(TM) v3.5r17) id <xxx> 
        for <xxx>; Wed, 15 Feb 2012 04:xx:xx -0800 
        (envelope-from <Coupons@email.coupons.com>)
MIME-Version: 1.0
Content-Type: text/html;
        charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Wed, 15 Feb 2012 04:xx:xx -0800
From: "Coupons.com" <Coupons@email.coupons.com>
Reply-To: "Coupons.com" <reply@email.coupons.com>
Subject: Print Coupons for Hormel Weeknight Meals and More!
X-cid: coupons.<xxx>
X-sgxh1: <xxx>
To: <xxx>
X-valueof-USERID: <xxx>
Message-ID: <<xxx>@om-coupons.rsys1.com>

Readable Email:

From: Coupons.com <Coupons@email.coupons.com>
To: <spamtrap>
Subject: Print Coupons for Hormel Weeknight Meals and More!
Reply-To: Coupons.com <reply@email.coupons.com>

View web version
Add SuperSaver@email.coupons.com to your address book and get your savings every time!

<removed>

Why did I get this? You’ve received this because you’ve indicated an interest in getting weekly coupon alerts from Coupons.com, where we are committed to bringing you great offers from your favorite brands!

If you feel you have received this email in error or you no longer wish to receive our weekly newsletter, simply UNSUBSCRIBE. Please note it may take up to seven to ten days to process your request during which time you may continue to receive the weekly newsletter from us.

NOTE: I found no CAN-SPAM address in this email. Since images were tagged, I did not retrieve them, so that address might have been hidden in an image. If so, that is at best bad practice and at worst a violation of CAN-SPAM.