MainSleaze

S.C. Johnson, a U.S.-based household products company known to every small child (and everybody else) in the United States, is sending bulk emails to email addresses that have not been live for many years. These email addresses receive no legitimate email. Until today, they have received no email from S.C. Johnson. So why are these email addresses suddenly getting email from this company? One spamtrap hit might be a typo; several usually means a purchased list. The ESP is Cheetahmail, a subsidiary of Experian.

Sending IP: 64.37.95.144

Spam Sample:

Actual Headers:

Received: from mta140.mail-scjohnson.com (mta140.mail-scjohnson.com [64.37.95.144])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Tue, 13 Dec 2011 10:xx:xx -0600 (CST)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Date: Tue, 13 Dec 2011 16:xx:xx -0000
Message-ID: <<xxx>@mta140.mail-scjohnson.com>
List-Unsubscribe: <mailto:rm-<xxx>@mail-scjohnson.com>
From: "Right@Home(TM)" <RightatHome@mail-scjohnson.com>
To: <xxx>
Subject: Order by 12/15 to get Free Shipping on Cerra Christmas gifts!
MIME-Version: 1.0
Reply-To: "Right@Home(TM)" <support-<xxx>@mail-scjohnson.com>
Content-type: multipart/alternative; boundary="<xxx>"

Readable Email:

From: Right@Home(TM) <RightatHome@mail-scjohnson.com>
To: <spamtrap>
Subject: Order by 12/15 to get Free Shipping on Cerra Christmas gifts!
Reply-To: Right@Home(TM) <support-<xxx>@mail-scjohnson.com>

To ensure you receive future Right@Home(TM) emails, simply add
RightatHome@mail-scjohnson.com to your email address book.
Not sure how? We’ll show you:
http://mail-scjohnson.com/a/<xxx>

<removed>

WHY YOU RECEIVED THIS EMAIL
This email was sent to you because you signed up for Right@Home(TM) – SC Johnson’s e-newsletter.

MANAGE YOUR PREFERENCES
To change your email address, use this link:
http://mail-scjohnson.com/<xxx>

To unsubscribe, use this link:
http://mail-scjohnson.com/<xxx>

YOUR PRIVACY
Your privacy is important to us. Use this link to view our privacy policy:
http://mail-scjohnson.com/a/<xxx>

LIVE IN CANADA?
If you live in Canada, click here:
http://mail-scjohnson.com/<xxx>

(c) 2011 S. C. Johnson & Son, Inc. All Rights Reserved.
Consumer Relationship Center
1525 Howe Street
Racine, WI 53403
United States of America