MainSleaze

U.S.-based mobile telephone company Verizon Wireless today sent a bulk email advertisement to a spamtrap that has not existed since 2003. The spamtrap has not previously received email from Verizon Wireless since it came out of timeout and became a spamtrap. Nonetheless, the spam claims, “You recently registered with a network website to receive special online offers.” This is not true for any reasonable definition of “recently”. The ESP is Yesmail, a subsidiary of Infogroup.

Sending IP: 204.92.134.14

Spam Sample:

Actual Headers:

Received: from smtp.ym-media1.com (smtp.ym-media1.com [204.92.134.14])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Tue,  6 Mar 2012 05:xx:xx -0600 (CST)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Content-Transfer-Encoding: 8bit
Message-ID: <xxx>
Content-Type: multipart/alternative; boundary="<xxx>"
MIME-Version: 1.0
X-Mailer: MIME::Lite <xxx>
Date: Tue, 6 Mar 2012 11:xx:xx UT
To: <xxx>
From: "Verizon Wireless" <VerizonWireless@ym-media1.com>
Reply-To: VerizonWireless@ym-media1.com
Subject: Getting a FREE phone from Verizon has never been easier.
X-Campid: cid=<xxx>@ym-media1.com
List-Unsubscribe: <mailto:unsubscribe-<xxx>@ym-media1.com>
X-Pviq: <xxx>
Sender: "Verizon Wireless" <VerizonWireless@ym-media1.com>
X-Eid: <xxx>

Readable Email:

From: Verizon Wireless <VerizonWireless@ym-media1.com>
To: <spamtrap>
Subject: Getting a FREE phone from Verizon has never been easier.
Reply-To: VerizonWireless@ym-media1.com

FREE shipping for a limited time.
Verizon Wireless http://ct.ym-media1.com/rd/cts?<xxx>

<removed>

(c) 2012 Verizon Wireless

Verizon Wireless | One Verizon Way | Mail Code: 180WVB | Basking Ridge, NJ 07920

This email was sent to <xxx>.
We respect your privacy. Please review our privacy policy for more information about click activity with Verizon Wireless and links included in this email.
http://ct.ym-media1.com/rd/cts?<xxx>

If you no longer wish to receive future emails, you may unsubscribe,
https://email.vzwshop.com/servlet/formlink/f?<xxx>
or easily adjust your subscription preferences from your profile information.
http://ct.ym-media1.com/rd/cts?<xxx>

You recently registered with a network website to receive special online offers. To no longer receive messages, please use the link below to remove your subscription.
http://ym-media1.com/webforms/unsub/index.jsp?<xxx>