MainSleaze

Blair, a U.S.-based department store with an established mail order operation, is sending bulk email to an email address that was closed before 2008. Blair might be mailing a fallow email list, might be accepting unconfirmed web form subscriptions, or might have purchased a list. Their ESP is Yesmail, a division of Infogroup.

Sending IP: 206.165.243.202

Spam Sample:

Actual Headers:

Received: from blair-202.blair.postdirect.com (blair-202.blair.postdirect.com [206.165.243.202])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Fri, 25 Nov 2011 04:xx:xx -0600 (CST)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Date: Fri, 25 Nov 2011 02:xx:xx PST
From: "Blair.com Email Specials" <blair@e.blair.com>
Subject: Save 30% off everything - all weekend long.
To: <xxx>
Message-ID: <Blair_com<xxx>@e.blair.com>
X-Vitals: <xxx>
List-Unsubscribe: <mailto:blair<xxx>@e.blair.com?subject=unsubscribe>
X-Header-Versions: Blair_com<xxx>@e.blair.com
Reply-To: Blair_com<xxx>@e.blair.com
X-Header-CompanyDBUserName: blair
X-Header-MasterId: <xxx>
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="<xxx>"

Readable Email:

From: Blair.com Email Specials <blair@e.blair.com>
To: <spamtrap>
Subject: Save 30% off everything – all weekend long.
Reply-To: Blair_com<xxx>@e.blair.com

Blair .com Email Specials
Quality, service and value since 1910.
Your satisfaction is our guarantee.

To view this email with images, please click here.
http://links.blair.com/t.d?<xxx>

Please add blair@e.blair.com to your address book to keep receiving our specials.

No need to beat the crowds or the clock. It’s all on sale here – all weekend long!

30% OFF EVERYTHING!

Shop now through Monday with this amazing offer.

Click this link to shop now.
http://links.blair.com/u.d?<xxx>

<removed>

If you would rather not receive future email offers from Blair, please click this link to remove your email address, <xxx>, from our list.
http://pages.blair.com/unsubscribe.jsp?<xxx>

Click this link to update your Blair email preferences.
http://pages.blair.com/update_profile.jsp?<xxx>

(c) BLAIR 2000-2011 | 220 Hickory St., Warren, PA 16366