MainSleaze

Online printing company ColorFX is sending bulk email to an email address that was closed in 2007. The email address belonged to a small company that has not been in business for almost five years. From mid-2008 through the end of 2009, the email address rejected all email with a 500-level error; it should have long since been removed from any properly-run bulk email list. The ESP is IContact.

Sending IP: 216.27.86.169

Spam Sample:

Actual Headers:

Received: from drone112.ral.icpbounce.com (drone112.ral.icpbounce.com [216.27.86.169])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Mon,  5 Dec 2011 05:xx:xx -0600 (CST)
Date: Mon, 5 Dec 2011 06:xx:xx -0500
To: <xxx>
From: "ColorFXweb.com" <info@colorfxinc.com>
Subject: Deal of the Day 12-05-11
X-Priority: 3
X-Mailer: PHPMailer (phpmailer.codeworxtech.com) [version 2.2]
Errors-To: bounces+<xxx>@icpbounce.com
List-Unsubscribe: <https://app.icontact.com/icp/listunsubscribe.php?<xxx>>
X-List-Unsubscribe: <https://app.icontact.com/icp/listunsubscribe.php?<xxx>>
X-Unsubscribe-Web: <https://app.icontact.com/icp/listunsubscribe.php?<xxx>>
X-ICPINFO:
X-Return-Path-Hint: bounces+<xxx>@icpbounce.com
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="<xxx>"
Message-Id: <<xxx>@drone112.ral.icpbounce.com>

Readable Email:

From: ColorFXweb.com <info@colorfxinc.com>
To: <spamtrap>
Subject: Deal of the Day 12-05-11

Hello Subscriber,

[1]ColorFX, Inc. Printing and Packaging. Toll Free: 877-763-7671. See What We
Can Do For You. Our Existing Coupons. Up to 64% Off on most Catalogs. Up to 37%
Off on most Calendars. Up to 39% Off on most Banners. Free Shipping for
California. Subject to terms and conditions. Go to ColorFXweb.com for more
details. www.colorfxweb.com ColorFX Inc. 11050 Randall St. Sun Valley, CA
91352-2621

<removed>

This message was sent to <xxx> from:
ColorFXweb.com info@colorfxinc.com | ColorFX Inc.
11050 Randall St. | Sun Valley, CA 91352-2621

Manage Your Subscription:
http://app.icontact.com/icp/mmail-mprofile.pl?<xxx>