MainSleaze

Vintage U.S. candy maker Necco® set bulk email advertisements to two spamtrap addresses in the past 36 hours. The spamtraps might have been legitimate email addresses at one time, but not after 2005. Despite this, the email claims that these email addresses “recently registered with a network site to receive special online offers.” This is not true for any reasonable definition of “recent”. The ESP is Yesmail, a subsidiary of Infogroup.

Sending IP: 204.92.146.53

Spam Sample:

Actual Headers:

Received: from smtp.vmail-3.com (smtp.vmail-3.com [204.92.146.53])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Thu,  1 Mar 2012 21:xx:xx -0600 (CST)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Content-Transfer-Encoding: 8bit
Message-ID: <xxx>
Content-Type: multipart/alternative; boundary="<xxx>"
MIME-Version: 1.0
X-Mailer: MIME::Lite <xxx>
Date: Fri, 2 Mar 2012 03:xx:xx UT
To: <xxx>
From: "Necco" <IG@Vmail-3.com>
Reply-To: IG@Vmail-3.com
Subject: Get a Free Roll of your beloved candy-Necco Wafers
X-Campid: cid=<xxx>@Vmail-3.com
List-Unsubscribe: <mailto:unsubscribe-<xxx>@Vmail-3.com>
X-Pviq: <xxx>
Sender: "Necco" <IG@Vmail-3.com>
X-Eid: <xxx>

Readable Email:

From: Necco <IG@Vmail-3.com>
To: <spamtrap>
Subject: Get a Free Roll of your beloved candy-Necco Wafers
Reply-To: IG@Vmail-3.com

You recently registered with a network website to receive special online offers.

To no longer receive messages, please use this link to remove your subscription.

<removed>

<removed>

135 American Legion Hwy | Revere, MA 02151