MainSleaze

The United States branch of Swedish home furnishings company IKEA is sending spam to a role email address, an email address that never sent mail or signed onto bulk email lists, advertising furniture and home products. The advertising email states that the spammed email address “recently registered with a network website to receive special online offers”. This is not true. Other language in the spam invites the spam victim to sign up for their list, which appears to acknowledge that IKEA knows that the owner of this email address did not in fact ask for email from IKEA. In short, IKEA appears to have purchased a list and to make no effort to hide that fact. The ESP is Yesmail, a division of InfoGroup.

Sending IP: 204.92.146.106

Spam Sample:

Actual Headers:

Received: from smtp.vsender-5.com (smtp.vsender-5.com [204.92.146.106])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Sun,  8 Jan 2012 20:xx:xx -0600 (CST)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Content-Transfer-Encoding: 8bit
Message-ID: <xxx>
Content-Type: multipart/alternative; boundary="<xxx>"
MIME-Version: 1.0
X-Mailer: MIME::Lite <xxx>
Date: Mon, 9 Jan 2012 02:xx:xx UT
To: <xxx>
From: "IKEA USA" <IKEA@Vsender-5.com>
Reply-To: IKEA@Vsender-5.com
Subject: Organize your home without cleaning out your wallet
X-Campid: <xxx>
List-Unsubscribe: <mailto:unsubscribe-cid<xxx>@Vsender-5.com>
X-Pviq: <xxx>
Sender: "IKEA USA" <IKEA@Vsender-5.com>
X-Eid: <xxx>

Readable Email:

From: IKEA USA <IKEA@Vsender-5.com>
To: <spamtrap>
Subject: Organize your home without cleaning out your wallet
Reply-To: IKEA@Vsender-5.com

You recently registered with a network website to receive special online offers. To no longer receive messages, please use the link below to remove your subscription.
http://Vsender-5.com/webforms/unsub/index.jsp?<xxx>

Get inspired. Get invited. Get on the list!
There’s always something new and exciting happening at your IKEA store. Be the first to know about it. Join the IKEA mailing list!
Click here to sign up now: http://ct.Vsender-5.com/rd/cts?<xxx>

<removed>

(C) Inter IKEA Systems B.V. 2012.

Please do not reply to this email. For customer service, click here:
http://ct.Vsender-5.com/rd/cts?<xxx>

If you wish to subscribe to future communications from IKEA, please sign up here:
http://ct.Vsender-5.com/rd/cts?<xxx>

Click here to see the IKEA privacy policy for more details:
http://ct.Vsender-5.com/rd/cts?<xxx>

IKEA North America Services, LLC. 420 Alan Wood Road, Conshohocken, PA 19428