MainSleaze

Burt’s Bees, a popular U.S.-based natural cosmetics manufacturing company, is now sending bulk emails to a spamtrap that it allegedly updated via the opt-out FreshAddress service several weeks ago. Despite this futile and pointless attempt to turn an opt-out email address into an opt-in email address, their email still hit one of my spamtraps. It will likely hit several others when the rest of the list is mailed. The ESP is Responsys.

Sending IP: 12.130.139.231

Spam Sample:

Actual Headers:

Received: from omp.e.burtsbees.com (omp.e.burtsbees.com [12.130.139.231])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Tue, 17 Jan 2012 13:xx:xx -0600 (CST)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Received: by omp.e.burtsbees.com (PowerMTA(TM) v3.5r17) id <xxx> 
        for <xxx>; Tue, 17 Jan 2012 11:xx:xx -0800 
        (envelope-from <brtbees.<xxx>@<xxx>.rsys2.com>)
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="<xxx>"
Date: Tue, 17 Jan 2012 11:xx:xx -0800
From: "Burt's Bees" <burtsbees@e.burtsbees.com>
Reply-To: "Burt's Bees" <reply@e.burtsbees.com>
Subject: Here's a $1 off coupon for something new and natural
List-Unsubscribe: http://e.burtsbees.com/pub/optout?<xxx>
X-<xxx>: <xxx>
X-<xxx>: <xxx>
X-cid: brtbees.<xxx>
To: <xxx>
Message-ID: <<xxx>@omp.e.burtsbees.com>

Readable Email:

From: Burt’s Bees <burtsbees@e.burtsbees.com>
To: <spamtrap>
Subject: Here’s a $1 off coupon for something new and natural
Reply-To: Burt’s Bees <reply@e.burtsbees.com>

http://e.burtsbees.com/pub/cc?<xxx>

What comes in three smelltastic scents, is made by the natural company you love, and is brand new?

http://e.burtsbees.com/pub/cc?<xxx>

For people who like vibrantly natural, awesome things, here’s something vibrantly natural and awesome! And because you are a member of the Hive we are giving you an exclusive sneak peak. So what is g???d,TM exactly? It’s a new natural personal care brand that smells stupendous. With scent names like=20
Orange Petalooza^TM.

<removed>

Burt’s Bees (c) Copyright 2012

You received this email because <xxx> registered to receive Burt’s Bees email having signed up at www.burtsbees.com.

Burt’s Bees Inc. * 210 West Pettigrew Street * Durham, NC 27701
(c) Burt’s Bees Inc. 2012