Just Fabulous: Stylish Shoes for a Spamtrap?
Shoe matching service Just Fabulous is sending bulk email to an email address that has never existed (a pure spamtrap). This particular spamtrap appears to have recently been added to an e-pended list; it has started to receive snowshoe and mainsleaze spam in significant quantities in the past three months, almost all of it using a first name that is a plausible deduction from the spamtrap itself. The ESP is ExactTarget.
Sending IP: 68.232.192.164
Spam Sample:
Actual Headers:
Received: from mta.mail.justfab.com (mta.mail.justfab.com [68.232.192.164])
by <xxx> (Postfix) with ESMTP id <xxx>
for <xxx>; Sun, 4 Dec 2011 12:xx:xx -0600 (CST)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Received: by mta.mail.justfab.com (PowerMTA(TM) v3.5r16) id <xxx>
for <xxx>; Sun, 4 Dec 2011 15:xx:xx -0600
(envelope-from <bounce-<xxx>@bounce.mail.justfab.com>)
From: "Just Fabulous" <stylist@mail.justfab.com>
To: <xxx>
Subject: <xxx>, Did You Forget?
Date: Sun, 04 Dec 2011 12:xx:xx -0600
List-Unsubscribe: <mailto:leave-<xxx>@leave.mail.justfab.com>
Reply-To: "Just Fabulous" <reply-<xxx>@mail.justfab.com>
x-job: <xxx>
Message-ID: <xxx>
Content-Type: multipart/alternative;
boundary="<xxx>"
Readable Email:
From: Just Fabulous <stylist@mail.justfab.com>
To: <spamtrap>
Subject: <xxx>, Did You Forget?
Reply-To: Just Fabulous <reply-<xxx>@mail.justfab.com>
Don’t Forget To View This Month’s Selections In Your Boutique!
http://click.mail.justfab.com/?<xxx>
Shop Now
<removed>
You are receiving this email because you signed up for personalized shoe matches from JustFab.com.
If you no longer wish to receive this email, you may
http://www.justfab.com/cancel/<xxx>/?<xxx>
unsubscribe.
Contact our Fashion Consultants at
1-866-337-0906 | Mon-Fri 7am – 7pm PST
<removed>
JUSTFABULOUS | 2301 Rosecrans Avenue, El Segundo, CA 90245