EuroStar: Offering First Class Express Railroad Tickets to a Spamtrap
EuroStar, the high speed rail line that links London to Paris and Brussels via a tunnel underneath the English Channel, today sent a bulk email advertisement to an email address that has never existed. The ESP is SilverPop.
The email oddly lacked anything except a section directing the recipient to use a link. I checked the email source; this was not due to a rendering error in my email program. The full message body is provided below, with a tagged URL redacted.
Sending IP: 74.112.71.176
Spam Sample:
Actual Headers:
Received: from mail2737.eurostar.mkt3133.com (mail2737.eurostar.mkt3133.com. [74.112.71.176])
by <xxx> with ESMTP id <xxx>; Thu, 07 Jun 2012 08:xx:xx -0000 (UT)
Received-SPF: <xxx>
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Received: by mail2737.eurostar.mkt3133.com (PowerMTA(TM) v3.5r16) id <xxx>
for <xxx>; Thu, 7 Jun 2012 08:xx:xx +0000
(envelope-from <v-<xxx>@bounce.mkt3133.com>)
Date: Thu, 7 Jun 2012 08:xx:xx +0000 (GMT)
From: Eurostar <email@eurostar.messages5.com>
Reply-To: email@eurostar.messages5.com
To: <xxx>
Message-ID: <xxx>
Subject: =?utf-8?Q?60_000_A/R_Paris_-_Londres_=C3=A0_88=E2=82=AC?=
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="<xxx>"
x-mid: <xxx>
x-job: <xxx>
x-orgId: <xxx>
List-Unsubscribe: <mailto:v-<xxx>@bounce.mkt3133.com?subject=Unsubscribe>
Readable Email:
From: Eurostar <email@eurostar.messages5.com>
To: <spamtrap>
Subject: 60 000 A/R Paris – Londres à 88€
Reply-To: email@eurostar.messages5.com
Si ce message ne s’affiche pas correctement, vous pouvez le visualiser grâce à ce lien:
http://links.mkt3133.com/servlet/MailView?<xxx>
Pour être certain de recevoir nos newsletters, merci d’ajouter email@eurostar.messages5.com à votre carnet d’adresses