Woolrich: Fine Winter Woolens… for a Spamtrap
U.S. woolen manufacturer Woolrich, which has been in operation since the early 1800s, just started sending bulk email advertisements to an email address that never existed at a domain that has not been live for over seven years. The ESP is ExactTarget.
This spamtrap hit could be the result of a typoed subscription that the company did not confirm, or could be part of a purchased list.
Sending IP: 68.232.197.128
Spam Sample:
Actual Headers:
Received: from mta.email.woolrich.com (mta.email.woolrich.com [68.232.197.128])
by <xxx> (Postfix) with ESMTP id <xxx>
for <xxx>; Mon, 12 Nov 2012 10:xx:xx +0000 (UCT)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Received: by mta.email.woolrich.com id <xxx> for <xxx>;
Mon, 12 Nov 2012 10:xx:xx -0600
(envelope-from <bounce-<xxx>@bounce.email.woolrich.com>)
From: "Woolrich" <shop@email.woolrich.com>
To: <xxx>
Subject: Ultimate Stocking Stuffers + Free Shipping
Date: Mon, 12 Nov 2012 10:xx:xx -0600
List-Unsubscribe: <mailto:leave-<xxx>@leave.email.woolrich.com>
MIME-Version: 1.0
Reply-To: "Woolrich" <reply-<xxx>@email.woolrich.com>
x-job: <xxx>
Message-ID: <xxx>
Content-Type: multipart/alternative;
boundary="<xxx>"
Readable Email:
From: Woolrich <shop@email.woolrich.com>
To: <spamtrap>
Subject: Ultimate Stocking Stuffers + Free Shipping
Reply-To: Woolrich <reply-<xxx>@email.woolrich.com
Our Very Best Stocking Stuffers
For Her: Aloe Socks
Pamper her with our softest, most popular socks — aloe-infused to soothe and moisturize tired feet.
Shop Socks for Her > http://click.email.woolrich.com/?qs=<xxx>
For Him: Boot Sock, 2-Pack $19
Shop Socks for Him > http://click.email.woolrich.com/?qs=<xxx>
For All: Our Warmest, Big Woolly Socks
Engineered to handle the most extreme work and weather.
<removed>
If you’d like to change your communication preferences or you’d rather not receive messages from Woolrich, go to:
http://click.email.woolrich.com/?qs=<xxx>
Woolrich, Inc., c/o Customer Service, 2 Mill Street Woolrich, PA 17779