chris@grohort.net Chris Hackett EQUITY CAPITAL SOLUTION

[SlapHappy]

* 86.99.123.142 Emirates Telecommunications Corporation Sharjah United Arab Emirates
64.135.214.8 Fvi Hampshire United States
72.32.253.97 Rackspace Email & Apps San Antonio United States
*Probable originating IP address

Received: by 10.217.61.7 with SMTP id h7csp458596wex;
Wed, 17 Oct 2012 06:37:21 -0700 (PDT)
Received: by 10.60.169.241 with SMTP id ah17mr14963613oec.37.1350481041392;
Wed, 17 Oct 2012 06:37:21 -0700 (PDT)
Return-Path: <chris@grohort.net>
Received: from server83.appriver.com (server83a.appriver.com. [72.32.253.97])
by mx.google.com with ESMTPS id r10si23318335obv.209.2012.10.17.06.37.14
(version=TLSv1/SSLv3 cipher=OTHER);
Wed, 17 Oct 2012 06:37:21 -0700 (PDT)
Received-SPF: neutral (google.com: 72.32.253.97 is neither permitted nor denied
by best guess record for domain of chris@grohort.net) client-ip=72.32.253.97;
Authentication-Results: mx.google.com; spf=neutral (google.com: 72.32.253.97 is
neither permitted nor denied by best guess record for domain of chris@grohort.net)
smtp.mail=chris@grohort.net
X-Note-AR-ScanTimeLocal: 10/17/2012 8:37:04 AM
X-Policy: GLOBAL - grohort.net
X-Policy: GLOBAL - grohort.net
X-Policy: GLOBAL - grohort.net
X-Policy: GLOBAL - grohort.net
X-Policy: GLOBAL - grohort.net
X-Policy: Too many policies to list
X-Primary: chris@grohort.net
X-Note: This Email was scanned by AppRiver SecureTide
X-Virus-Scan: V-
X-Note-SnifferID: 0
X-Note: TCH-CT/SI:0-120/SG:2 10/17/2012 8:36:14 AM
X-GBUdb-Analysis: 0, 64.135.214.8, Ugly c=0.500003 p=-1 Source White
X-Signature-Violations:
0-0-0-1845-c
X-Note-419: 15.6263 ms. Checked 1327 of 1327 total signatures
X-Note: SCH-CT/SI:1-1327/SG:1 10/17/2012 8:36:57 AM
X-Note: Spam Tests Failed:
X-Country-Path: PRIVATE->UNITED STATES->UNITED STATES
X-Note-Sending-IP: 64.135.214.8
X-Note-Reverse-DNS: 64-135-214-8.FoxValley.net
X-Note-Return-Path: chris@grohort.net
X-Note: User Rule Hits:
X-Note: Global Rule Hits: G321 G322 G323 G324 G328 G329 G436
X-Note: Encrypt Rule Hits:
X-Note: Mail Class: VALID
X-Note: Headers Injected
Received: from dummy.name; Wed, 17 Oct 2012 08:37:04 -0500
Received: from dummy.name; Wed, 17 Oct 2012 08:37:02 -0500
From: Chris Hackett <chris@grohort.net>
Subject: Dear seller,
Thread-Topic: Dear seller,
Thread-Index: Ac2sbH09ttmj/yJqR1mhydYxosSBcg==
Date: Wed, 17 Oct 2012 13:37:02 +0000
Message-ID: <CFE9C215F830DC4486E7B938DFE2F1B44F2696A7@SBS2011.gro.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [86.99.123.142]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0


Dear seller,

Thanks for the response to our message on the website. We saw a similar product so please confirm to us if you/your company can make provision of the exact product which you can view by clicking the link to login.

http:/ /www.equitycapitalsolution.com/equity <<Phishing website link.


We await your response with details, price and quantity that can be made available on your product.

Have a wonderful day.

Regards
Mrs. Jean Weimer
Import/Export Manager.
EQUITY CAPITAL SOLUTION

[SlapHappy]

* 86.99.123.142 Emirates Telecommunications Corporation Sharjah United Arab Emirates
80.250.181.26 Taganrog State University Of Radio-engineering Rostov Russian Federation
*Probable originating IP address

Received: by 10.217.61.7 with SMTP id h7csp513017wex;
Wed, 17 Oct 2012 13:02:10 -0700 (PDT)
Received: by 10.152.124.111 with SMTP id mh15mr16586859lab.20.1350504130316;
Wed, 17 Oct 2012 13:02:10 -0700 (PDT)
Return-Path: <info@ecs.com>
Received: from mail.tsure.ru (mail.tsure.ru. [80.250.181.26])
by mx.google.com with ESMTPS id il9si4758104lab.2.2012.10.17.13.01.44
(version=TLSv1/SSLv3 cipher=OTHER);
Wed, 17 Oct 2012 13:02:10 -0700 (PDT)
Received-SPF: neutral (google.com: 80.250.181.26 is neither permitted nor denied
by best guess record for domain of info@ecs.com) client-ip=80.250.181.26;
Authentication-Results: mx.google.com; spf=neutral (google.com: 80.250.181.26 is
neither permitted nor denied by best guess record for domain of info@ecs.com)
smtp.mail=info@ecs.com
Received: from localhost.tsure.ru ([127.0.0.1]:61426 helo=cube.webmail.tsure.ru)
by mail.tsure.ru with esmtp (Exim 4.69 (FreeBSD))
(envelope-from <info@ecs.com>)
id 1TOZms-0006WX-Ib; Thu, 18 Oct 2012 00:00:18 +0400
Received: from 86.99.123.142
(SquirrelMail authenticated user cdp)
by cube.webmail.tsure.ru with HTTP;
Thu, 18 Oct 2012 00:00:18 +0400
Message-ID: <8ee2b719364a793151d06bdae202edbb.squirrel@cube.webmail.tsure.ru>
Date: Thu, 18 Oct 2012 00:00:18 +0400
Subject: Dear seller,
From: "EQUITY CAPITAL SOLUTION" <info@ecs.com>
Reply-To: m.weimer09823@yahoo.com
User-Agent: SquirrelMail/1.4.20-RC2
MIME-Version: 1.0
Content-Type: text/plain;charset=koi8-r
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal


Dear seller,

Thanks for the response to our message on the website. We saw a similar
product so please confirm to us if you/your company can make provision of
the exact product

which you can view by clicking the link to login.
http:/ /www.equitycapitalsolution.com/equity <<Phishing website.


We await your response with details, price and quantity that can be made
available on your product.

Have a wonderful day.

Regards
Mrs. Jean Weimer
Import/Export Manager.

EQUITY CAPITAL SOLUTION

[SlapHappy]

* 74.115.1.229 Anchorfree n/a Anonymous Proxy

Received: by 10.217.61.7 with SMTP id h7csp254717wex;
Fri, 19 Oct 2012 13:00:31 -0700 (PDT)
Received: by 10.204.153.23 with SMTP id i23mr803779bkw.52.1350676831100;
Fri, 19 Oct 2012 13:00:31 -0700 (PDT)
Return-Path: <ivan.kunac@optinet.hr>
Received: from optinet.hr ([85.114.34.11])
by mx.google.com with ESMTPS id fu20si4239498bkc.121.2012.10.19.13.00.29
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 19 Oct 2012 13:00:31 -0700 (PDT)
Received-SPF: neutral (google.com: 85.114.34.11 is neither permitted nor denied by best guess record for domain of ivan.kunac@optinet.hr) client-ip=85.114.34.11;
Authentication-Results: mx.google.com; spf=neutral (google.com: 85.114.34.11 is neither permitted nor denied by best guess record for domain of ivan.kunac@optinet.hr) smtp.mail=ivan.kunac@optinet.hr
Received: (qmail 27035 invoked by uid 48); 19 Oct 2012 12:33:16 -0000
Received: from 74-115-1-229.anchorfree.com (74-115-1-229.anchorfree.com
[74.115.1.229]) by um.optinet.hr (Horde MIME library) with HTTP; Fri, 19
Oct 2012 14:33:14 +0200
Message-ID: <20121019143314.l82j1lp0b4sc4ocg@um.optinet.hr>
X-Priority: 3 (Normal)
X-User-Agent: optinet.um/1.0
Date: Fri, 19 Oct 2012 14:33:14 +0200
From: ivan.kunac@optinet.hr
Reply-to: m.weimer@kimo.com

--
Dear Sir/Madam,

I write to inform you that we are interested in your products.

Please kindly send us your catalog. And we would like to inquire about the following:

*Minimum Order Quantity
*Your delivery time
*Payment terms

Regards
Mrs. Jean Weimer
Import/Export Manager.
EQUITY CAPITAL SOLUTION