Just Fabulous: Stylish Shoes for a Spamtrap?

Shoe matching service Just Fabulous is sending bulk email to an email address that has never existed (a pure spamtrap). This particular spamtrap appears to have recently been added to an e-pended list; it has started to receive snowshoe and mainsleaze spam in significant quantities in the past three months, almost all of it using a first name that is a plausible deduction from the spamtrap itself. The ESP is ExactTarget.

Sending IP:

Spam Sample:

Actual Headers:

Received: from mta.mail.justfab.com (mta.mail.justfab.com [])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Sun,  4 Dec 2011 12:xx:xx -0600 (CST)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Received: by mta.mail.justfab.com (PowerMTA(TM) v3.5r16) id <xxx> 
        for <xxx>; Sun, 4 Dec 2011 15:xx:xx -0600 
        (envelope-from <bounce-<xxx>@bounce.mail.justfab.com>)
From: "Just Fabulous" <stylist@mail.justfab.com>
To: <xxx>
Subject: <xxx>, Did You Forget?
Date: Sun, 04 Dec 2011 12:xx:xx -0600
List-Unsubscribe: <mailto:leave-<xxx>@leave.mail.justfab.com>
Reply-To: "Just Fabulous" <reply-<xxx>@mail.justfab.com>
x-job: <xxx>
Message-ID: <xxx>
Content-Type: multipart/alternative;

Readable Email:

From: Just Fabulous <stylist@mail.justfab.com>
To: <spamtrap>
Subject: <xxx>, Did You Forget?
Reply-To: Just Fabulous <reply-<xxx>@mail.justfab.com>

Don’t Forget To View This Month’s Selections In Your Boutique!
Shop Now


You are receiving this email because you signed up for personalized shoe matches from JustFab.com.

If you no longer wish to receive this email, you may

Contact our Fashion Consultants at
1-866-337-0906 | Mon-Fri 7am – 7pm PST


JUSTFABULOUS | 2301 Rosecrans Avenue, El Segundo, CA 90245

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Go back to top