MainSleaze

A Brazilian investment company, Fortune Invest, sent bulk email in Portuguese to a spamtrap via Brazilian ESP Dinamize. Dinamize uses the domain smartcrm.com.br to do its bulk mailing. The spamtrap is at one of my personal domains, not a spamtrap domain, but is a pure spamtrap — the email address never existed at all. The web site for that domain was in English. I do not speak Portuguese, and have never visited Brazil or had business connections in that country.

Sending IP: 189.77.218.166

Spam Sample:

Actual Headers:

Received: from smtp77166.smartcrm.com.br (smtp77166.smartcrm.com.br [189.77.218.166])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Tue, 18 Oct 2011 10:xx:xx -0500 (CDT)
Received: from script22 (unknown [10.1.77.148])
        by smtp77166.smartcrm.com.br (Postfix) with ESMTP id <xxx>
        for <xxx>; Tue, 18 Oct 2011 13:xx:xx -0200 (BRST)
Date: Tue, 18 Oct 2011 13:xx:xx -0200 (BRST)
From: Fortune Invest <contato@fortuneinvest.com.br>
Reply-To: Fortune Invest <contato@fortuneinvest.com.br>
To: <xxx>
Message-ID: <<xxx>.JavaMail.root@script22>
Subject: =?iso-8859-1?Q?Fortune_Invest_e_BanifInvest_co?=
 =?iso-8859-1?Q?nvidam_para_palestra_em_Niter=F3i?=
MIME-Version: 1.0
Content-Type: text/html;charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Mailer: SmartCRM <xxx>

Readable Email:

From: Fortune Invest <contato@fortuneinvest.com.br>
To: <spamtrap>
Subject: Fortune Invest e BanifInvest convidam para palestra em Niterai
Reply-To: Fortune Invest <contato@fortuneinvest.com.br>

Convidamos voce a vir assistir a nossa palestra do dia 20/10 .s 19hs, ondeiremos apresentar nossa parceira e mostrar novidades na plataforma de negociao.