MainSleaze

KMart, a U.S.-based discount department store, is sending email advertisements to a spamtrap email address that was closed in 2006. The ESP is Yesmail, a subsidiary of Infogroup.

As this is one of Yesmail’s offerings that states that, “You registered with a network website to receive special online offers”, it is impossible to know whether the spamtrap email address opted in to anything at any time or not. That is, I presume, intentional. :/ As this spamtrap was closed for many years and rejected email during that period, it does not appear on any legitimate marketing email lists. KMart should choose its advertising partners more carefully if it doesn’t want to get a reputation for spamming.

Sending IPs: 204.92.146.74

Spam Sample:

Actual Headers:

Received: from smtp.vmail-4.com (smtp.vmail-4.com [204.92.146.74])
        by <xxx> with ESMTP id <xxx>; 03 Jul 2012 05:xx:xx -0000
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Content-Transfer-Encoding: 8bit
Message-ID: <xxx>
Content-Type: multipart/alternative; boundary="<xxx>"
MIME-Version: 1.0
X-Mailer: MIME::Lite <xxx>
Date: Tue, 3 Jul 2012 05:xx:xx UT
To: <xxx>
From: "Kmart" <kmart@Vmail-4.com>
Reply-To: kmart@Vmail-4.com
Subject: Hot Savings at Kmart including 40% off Patio Sets
X-Campid: <xxx>
List-Unsubscribe: <mailto:unsubscribe-cid=<xxx>@Vmail-4.com>
X-Pviq: <xxx>
Sender: "Kmart" <kmart@Vmail-4.com>
X-Eid: <xxx>

Readable Email:

From: Kmart <kmart@Vmail-4.com>
To: <spamtrap>
Subject: Hot Savings at Kmart including 40% off Patio Sets
Reply-To: kmart@Vmail-4.com

You registered with a network website to receive special online offers. To no longer receive messages, please use the link below to remove your subscription.
http://Vmail-4.com/webforms/unsub/index.jsp?<xxx>