Topps: Spamming Purchased Lists

Apparently the online store for Topps, the famed chewing gum and baseball cards company, wants spamtraps to buy their products. Or so I would surmise after over two dozen spamtraps at several spamtrap domains received their latest advertisement. Unusually for mainsleaze spam, these advertisement emails were sent directly from Topps’ own IPs.

Sending IP: 68.170.132.142

Spam Sample:

Actual Headers:

Received: from <xxx>.etopps.com (mail02.etopps.com [68.170.132.142])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Fri, 14 Oct 2011 03:xx:xx -0500 (CDT)
Received: from <xxx>.toppscolo.com ([192.168.102.<xxx>])
        by <xxx>.etopps.com (8.13.8/8.12.8) with ESMTP id <xxx>
        for <xxx>; Fri, 14 Oct 2011 04:xx:xx -0400
Received: from mail pickup service by NALIAPP01.toppscolo.com with Microsoft SMTPSVC;
         Fri, 14 Oct 2011 01:xx:xx -0400
Thread-Topic: ShopTopps.com New Products!
thread-index: <xxx>
From: <announcements@etopps.com>
To: <xxx>
Subject: ShopTopps.com New Products!
Date: Thu, 13 Oct 2011 19:xx:xx -0400
Message-ID: <<xxx>@toppscolo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_<xxx>"
X-Mailer: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.1.7600.16385
X-OriginalArrivalTime: <xxx>

Readable Email:

From: <announcements@etopps.com>
To: <spamtrap>
Subject: ShopTopps.com New Products!

ShopTopps.com

<removed>

©2011 The Topp Company, Inc. All rights reserved.
One Whitehall St, New York NY 10004-2109. Tel: 212.376.0300

========================================================================
You are subscribed to our mailing list as <xxx>.
If you no longer wish to receive this Topps email,
please click here to unsubscribe.

3 Responses to Topps: Spamming Purchased Lists

  1. Pingback: Topps: Three Time Loosers » MainSleaze

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Go back to top