MainSleaze

AT&T is spamming the purest sort of spamtrap — an email address at a domain that has never had a legitimate email address at all — via ESP Cheetahmail (i.e. Experian). AT&T really should confirm opt-ins, or perhaps should prevent its marketing department from purchasing lists?

Sending IP: 63.236.76.120

Spam Sample:

Actual Headers:

Received: from mta820.e.att-mail.com (mta820.e.att-mail.com [63.236.76.120])
        by <xxx> (Postfix) with SMTP id <xxx>
        for <xxx>; Mon, 10 Oct 2011 05:xx:xx -0500 (CDT)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Date: Mon, 10 Oct 2011 10:xx:xx -0000
Message-ID: <<xxx>@mta820.e.att-mail.com>
List-Unsubscribe: <mailto:rm-<xxx>@e.att-mail.com>
From: "AT&T U-verse" <att@e.att-mail.com>
To: <xxx>
Subject: Take advantage of this exclusive deal on U-verse
MIME-Version: 1.0
Reply-To: "AT&T U-verse" <support-<xxx>@e.att-mail.com>
Content-type: multipart/alternative; boundary="=<xxx>"

Readable Email:

From: AT&T U-verse <att@e.att-mail.com>
To: <spamtrap>
Subject: Take advantage of this exclusive deal on U-verse
Reply-To: AT&T U-verse <support-<xxx>@e.att-mail.com>

<xxx>, switch to U-verse today and get TV and Internet for only $49/mo:
http://e.att-mail.com/a/<xxx>/get

View online:
http://e.att-mail.com/a/<xxx>/webview?t_params=<xxx>

(C)2011 AT&T Intellectual Property. All rights reserved.
All non-AT&T names and images are copyrights or trademarks
of their respective owners

AT&T – 1055 Lenox Park Blvd., Room 4A34, Atlanta, GA 30319-5309,
United States of America

Offer Code: <xxx>