AT&T: Still Trying to Get a Spamtrap to Buy U*Verse

Three weeks later, AT&T spammed the same spamtrap it did earlier again, pushing it to buy AT&T’s U*Verse service. The spamtrap in question is a “pure spamtrap”, that is, an email address that never existed at all. The ESP is still Cheetahmail, a subsidiary of Experian.

NOTE: Almost half of the email message body text consisted of disclaimers and legal notices, omitted from the sample below. This has nothing to do with whether it’s spam or not, but one lesson I learned the hard way a few years ago is not to buy anything but a house that comes with a sales contract too long and complicated for an average person with a high school education to understand. And with the house, have an attorney that you (not the seller) is paying read it and tell you what it says before you close the deal.

Sending IP:

Spam Sample:

Actual Headers:

Received: from ( [])
        by <xxx> (Postfix) with SMTP id <xxx>
        for <xxx>; Mon, 31 Oct 2011 05:xx:xx -0500 (CDT)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Date: Mon, 31 Oct 2011 10:xx:xx -0000
Message-ID: <<xxx>>
List-Unsubscribe: <mailto:rm-<xxx>>
From: "AT&T" <>
To: <xxx>
Subject: Your exclusive U-verse offer ends soon - order now and save
MIME-Version: 1.0
Reply-To: "AT&T" <support-<xxx>>
Content-type: multipart/alternative; boundary="=<xxx>"

Readable Email:

From: AT&T <>
To: <spamtrap>
Subject: Your exclusive U-verse offer ends soon – order now and save
Reply-To: AT&T <support-<xxx>>

Save with U-verse: Get TV, Internet and Home Phone starting at $89/mo. Save now:<xxx>

View online:<xxx>




Order online now:<xxx>

Find an AT&T store:<xxx>

Call 1.800.773.7928


To ensure delivery of AT&T emails to your inbox, add to your email address book or safe senders list. Here’s how:<xxx>

View AT&T’s Privacy Policy:<xxx>

Click here to Unsubscribe:<xxx>

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Go back to top