Safeway: Inviting a Spamtrap to View Cherry Blossoms

U.S. grocer Safeway is suddenly sending bulk email advertisements to an email address that been closed since at least 2007. This email address has not previously received email from Safeway since it completed its timeout period and was re-enabled as a spamtrap. Either somebody made a typo when subscribing to receive Safeway offers (unlikely in this case), Safeway reactivated a VERY old list that they had not contacted for years, or Safeway purchased a list. The ESP is Cheetahmail, a subsidiary of Experian.

Sending IP: 208.49.63.146

Spam Sample:

Actual Headers:

Received: from mta412.safeway.chtah.com (mta412.safeway.chtah.com [208.49.63.146])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Fri, 23 Mar 2012 06:xx:xx -0500 (CDT)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Date: Fri, 23 Mar 2012 11:xx:xx -0000
Message-ID: <<xxx>@mta412.subscribers.safeway.com>
List-Unsubscribe: <mailto:rm-<xxx>@subscribers.safeway.com>
From: "Safeway" <Safeway@subscribers.safeway.com>
To: <xxx>
Subject: Exclusive Offer: Get 50% off The Safeway Official Cherry Blossom Bouquet!
MIME-Version: 1.0
Reply-To: "Safeway" <support-<xxx>@subscribers.safeway.com>
Content-type: multipart/alternative; boundary="<xxx>"

Readable Email:

From: Safeway <Safeway@subscribers.safeway.com>
To: <spamtrap>
Subject: Exclusive Offer: Get 50% off The Safeway Official Cherry Blossom Bouquet!
Reply-To: Safeway <support-<xxx>@subscribers.safeway.com>

Safeway
Ingredients for life.

View with Images:
http://subscribers.safeway.com/<xxx>

=======================================================================

Celebrate spring with community festivities and fresh flowers!

National Cherry Blossom Festival

Please join us for these special events:

March 24-25
Family Days at the National Building Museum

April 7
Southwest Waterfront Fireworks Festival

April 14
National Cherry Blossom Festival Parade

April 21
Cherry Blast: Art + Music Dance Party

<removed>

You’ve received this e-mail because our records indicate you supplied an e-mail address when you submitted your Club Card application, contacted us via our website or signed-up via our website to receive email.

Click here to unsubscribe from all Safeway.com email lists:
http://subscribers.safeway.com/<xxx>

To read our privacy policy click here:
http://subscribers.safeway.com/<xxx>

Copyright (C) 2012 Safeway.com
5918 Stoneridge Mall Road
Pleasanton, CA 94588.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Go back to top