MainSleaze

Loquierooo, an online boutique that sells high-end electronics and other high-end products, is sending “offers” emails to a spamtrap via French ESP Emailvision. The spamtrap is a long-closed email address that has not been live for years, and that rejected email for over twelve consecutive months in the interim before being re-enabled. It should not receive any bulk email any longer.

Sending IP: 81.92.123.108

Spam Sample:

Actual Headers:

Received: from mercure-onzeei.ccemails.net (mercure-onzeei.ccemails.net [81.92.123.108])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Sun, 23 Oct 2011  4:xx:xx -0500 (CDT)
DKIM-Signature: <xxx>
Received: by mercure-onzeei.ccemails.net id hkfgcq0hu84f 
        for <xxx>; Sun, 23 Oct 2011 11:xx:xx +0200 
        (envelope-from <xxx>)
Date: Sun, 23 Oct 2011 11:xx:xx +0200 (CEST)
From: Loquierooo <<xxx>@comunicaciones.loquierooo.com>
Reply-To: <xxx> <info@loquierooo.com>
To: <xxx>
Message-ID: <<xxx>@<xxx>.emv2.com>
Subject: =?iso-8859-15?Q?Nueva_tienda_de_Electr=F3nica_e?=
 =?iso-8859-15?Q?n_Loquierooo,_siempre_en_stock?=
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=<xxx>
X-EMV-Platform: p5cce.campaigncommander.com$
X-EMV-CampagneId: <xxx>
X-EMV-MemberId: <xxx>
List-Unsubscribe: http://comunicaciones.loquierooo.com/HD?<xxx>

Readable Email:

From: Loquierooo <<xxx>@comunicaciones.loquierooo.com>
To: <spamtrap>
Subject: Nueva tienda de Electronica en Loquierooo, siempre en stock
Reply-To: <xxx> <info@loquierooo.com>

Si no puedes ver correctamente este mensaje, sigue el siguiente enlace

<removed>

Loquierooo es una marca comercial propiedad de Centre de Redistribucio de Mercaderies S.L. con CIF B-63195887, inscrita en el Resigtro Mercantil de Barcelona tomo 35.633, folio 87, hoja B 274.758.

Si no quieres recibir nuestras promociones, solo tienes que seguir el enlace