Exposures: Emailing an E-Pended Email Address?
Exposures, a photograph-based personalized gifts seller affiliated with catalog retailer Miles Kimball, is sending bulk email to the same spamtrap as Miles Kimball and another Miles Kimball affiliate. The ESP is E-Dialog.
The spamtrap email address that Exposures emailed was closed in 2007. The name in Exposures’ bulk email is female, but the email address originally belonged to a man, which normally indicates an e-pended list. Prior to approximately one week ago, this email address had not previously received email from Exposures via its own IPs or any ESP.
Sending IP: 208.94.23.134
Spam Sample:
Actual Headers:
Received: from mileskimball.outbound.ed10.com (mileskimball.outbound.ed10.com [208.94.23.134]) by <xxx> (Postfix) with ESMTP id <xxx> for <xxx>; Mon, 28 Nov 2011 05:xx:xx -0600 (CST) DomainKey-Signature: <xxx> Received: from [127.0.0.1] ([127.0.0.1:xx]) by <xxx>.e-dialog.com (envelope-from <xxx>) (ecelerity 2.2.2.45 r(<xxx>)) with ECSTREAM id <xxx>; Mon, 28 Nov 2011 06:xx:xx -0500 Date: Mon, 28 Nov 2011 06:xx:xx -0500 Content-Type: multipart/alternative; boundary="<xxx>" Content-Transfer-Encoding: binary MIME-Version: 1.0 From: "Exposures" <Exposures@em.exposuresonline.com> Reply-To: "Exposures" <Exposures.<xxx>@em.exposuresonline.com> To: <xxx> Subject: Cyber Monday Savings! FREE Shipping + 20% OFF... Message-Id: <<xxx>@e-dialog.com> X-Mail-From: <xxx>@mileskimball.bounce.ed10.net X-Match: mileskimball.bounce.ed10.net X-RCPT-To: <xxx> X-Mailer: EDMAIL R6.00.02
Readable Email:
From: Exposures <Exposures@em.exposuresonline.com>
To: <spamtrap>
Subject: Cyber Monday Savings! FREE Shipping + 20% OFF…
Reply-To: Exposures <Exposures.<xxx>@em.exposuresonline.com>
<e-pended name removed>, Cyber Monday Savings! FREE Shipping + 20% OFF
Don’t miss this exciting e-mail from Exposures. Please enable images, or click below to view this in a Web browser:
http://link.exposuresonline.com/<xxx>
<removed>
Exposures, 250 City Center, Oshkosh, WI 54906
This email was sent to you because you asked to receive updates and promotions from Exposures.
If you would like to unsubscribe from receiving e-mails like this in the future, click below:
http://link.exposuresonline.com/<xxx>