Jewel-Osco/Albertson’s: E-Pended List?
Jewel-Osco, a subsidiary of U.S. grocer Albertson’s, is spamming via ESP Cheetahmail (a subsidiary of Experian), and hitting email addresses that have never existed at all. It appears that Jewel-Osco has purchased an e-pended list.
Sending IPs: 8.7.42.86 and 8.7.42.87
Spam Sample:
Actual Headers:
Received: from mta924.e.albertsons.com (mta924.e.albertsons.com [8.7.42.86])
by <xxx> (Postfix) with SMTP id <xxx>
for <xxx>; Thu, 6 Oct 2011 11:xx:xx -0500 (CDT)
DomainKey-Signature: <xxx>
Date: Thu, 6 Oct 2011 16:35:51 -0000
Message-ID: <<xxx>.e.jewelosco.com>
List-Unsubscribe: <mailto:rm-<xxx>@e.jewelosco.com>
From: "Jewel-Osco" <JewelOsco@e.jewelosco.com>
To: <xxx>
Subject: <xxx>, Fill your breakfast bowl with great savings.
MIME-Version: 1.0
Reply-To: "Jewel-Osco" <<xxx>@e.jewelosco.com>
Content-type: multipart/alternative; boundary="=<xxx>"
Readable Email:
From: Jewel-Osco <JewelOsco@e.jewelosco.com>
To: <spamtrap>
Subject: <E-Pended Name>, Fill your breakfast bowl with great savings.
Reply-To: Jewel-Osco <support-<xxx>@e.jewelosco.com>
<E-Pended Name>, Piping hot savings on hot cereal. Save $1.00.
View this email in Web Browser:
http://e.jewelosco.com/a/<xxx>
Forward this email to a friend:
http://e.jewelosco.com/a/<xxx>
********************
Find Us On Facebook:
http://e.jewelosco.com/a/<xxx>/facebook
********************
View Weekly Ad:
http://e.jewelosco.com/a/<xxx>/weekly?STORENUMBER=<xxx>
********************
<removed>
If you would like to unsubscribe from Jewel-Osco(R) email,
please click the link below:
http://e.jewelosco.com/a/<xxx>
You may contact us at:
SUPERVALU, Inc.
11840 Valley View Rd.
Eden Prairie, MN 55344-3691
or call 1-877-932-7948
Copyright 2011 SUPERVALU INC. All Rights Reserved.
All proprietary trademarks are owned by SUPERVALU INC.
or its subsidiaries. All third party trademarks are
owned by their respective owners.