Microsoft: Deals on Windows 7 for Spamtraps

Microsoft is up to two spamtraps now; it has sent unsolicited bulk advertising email to two different email addresses that have not been live since before 2008. One of those email addresses has received Microsoft spam previously; the other has not received email from Microsoft since before it became a spamtrap. The ESP is ExactTarget.

Sending IP:

Spam Sample:

Actual Headers:

Received: from ( [])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Mon, 12 Mar 2012 07:xx:xx -0500 (CDT)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Received: by (PowerMTA(TM) v3.5r15) id <xxx> 
        for <xxx>; Mon, 12 Mar 2012 06:xx:xx -0600 
        (envelope-from <bounce-<xxx>>)
From: "Microsoft Store" <>
To: <xxx>
Subject: Get a $200 gift card with purchase of Windows 7 PC $699
Date: Mon, 12 Mar 2012 06:xx:xx -0600
List-Unsubscribe: <mailto:leave-<xxx>>
MIME-Version: 1.0
Reply-To: "Microsoft Store" <reply-<xxx>>
x-job: <xxx>
Message-ID: <xxx>
Content-Type: multipart/alternative;

Readable Email:

From: Microsoft Store <>
To: <spamtrap>
Subject: Get a $200 gift card with purchase of Windows 7 PC $699
Reply-To: Microsoft Store <reply-<xxx>>

Get $200 to spend in-store
With the purchase of a Windows 7 PC for $699 or more.*

Samsung Series 5
Sleek and chic design also features a high-definition display for those on the go. $899.00

Hurry, gift card offer ends 4/8/12
Shop now:<xxx>


Microsoft Corporation, One Microsoft Way, Redmond, WA, 98052, USA

Share your enthusiasm and join our team. View all careers at the Microsoft Store at<xxx>

Microsoft respects your privacy. Please view our online Privacy Statement at<xxx>
If you would prefer to no longer receive promotional emails from the Microsoft Store, please go to<xxx>
to unsubscribe. To set your contact preferences for other Microsoft communications, see the communications preferences section of the Microsoft Privacy Statement at<xxx>

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Go back to top