MainSleaze

King Ice, an online retailer of hip-hop jewelry for men, today sent a bulk email advertisement to an email address that has never heard from it before, and that was closed in 2004. The email makes no claim to opt-in, and provides no postal address or contact information for the advertiser that is visible in the text portion of the email. (Most of the email consists of remotely-loaded graphics.) The ESP is Campaigner.

Why is King Ice suddenly emailing an email address that has never heard from it before? The domain kingice.com was first registered in 2006, two years after this spamtrap could last have been a legitimate email address, so this is not bulk email sent to a fallow list. A typoed subscription is (in my opinion) unlikely in this case, but possible. I really think that King Ice probably purchased a list, however, although I can’t prove it.

Sending IP: 216.24.225.26

Spam Sample:

Actual Headers:

Received: from mta26.cp20.com (mta26.cp20.com [216.24.225.26])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Sat, 19 May 2012 14:xx:xx -0000 (UT)
Received: by mta26.cp20.com id <xxx> for <xxx>; Sat, 19 May 2012 14:xx:xx -0000 
        (envelope-from <KingIce_com_<xxx>@cp20.com>)
Message-ID: <<xxx>@backend.cp20.com>
Date: Sat, 19 May 2012 14:xx:xx -0000
X-Campaign: <xxx>
List-Unsubscribe: <mailto:KingIce_com_<xxx>@cp20.com?subject=unsubscribe>
Bounces-To: KingIce_com_<xxx>@cp20.com
Errors-To: KingIce_com_<xxx>@cp20.com
Reply-To: KingIce_com_<xxx>@cp20.com
To: <xxx>
From: "KingIce.com" <sales@kingice.com>
Subject: Get 15% Off Your Purchase & Browse Our Gold Collection
MIME-Version: 1.0
Content-Type: text/html

Readable Email:

From: KingIce.com <sales@kingice.com>
To: <spamtrap>
Subject: Get 15% Off Your Purchase & Browse Our Gold Collection
Reply-To: KingIce_com_<xxx>@cp20.com

<removed>

Giveaways, contests, exculsive discounts and more.

<removed>

You are subscribed to this mailing list as <xxx>. Please click here to modify your message preferences or to unsubscribe from any future mailings. We will respect all unsubscribe requests.