Business proposal spam from Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 30 Oct 2022 13:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1opDcV-00046T-Cv

for dave@doctor.nl2k.ab.ca;

Sun, 30 Oct 2022 13:05:19 -0600

Resent-From: The Doctor

Resent-Date: Sun, 30 Oct 2022 13:05:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-mw2nam10hn2224.outbound.protection.outlook.com ([52.100.157.224]:39232 helo=NAM10-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1opABo-000A0w-Fy

for doctor@doctor.nl2k.ab.ca;

Sun, 30 Oct 2022 09:25:36 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=B7iU+sRqwskyG1cNDFryCl/ysYtMJCK3p2BBDKufk6DWk+ifbU+FvYXt+zScdfeXHysBDrFExgpOcwN/u+DJ+6mNYCPQKvqZ0wD5V5RP0c2k/PGaKcnMfdKZQihuVuSblZC/JRhOTupk6gCyCc9C2LHI+0R0fgIipS9utZRd+s2xS7pXUJVc9/oSroUjeezG2p8z5e8W234Ci74ySpfjZ5o+ppcMLUdK410QStMb6T645ZbXKLmSB7XzEBR1UBseH3clWQ/Jeyri99NHjaUljA45ds/EYZ2yQQsLDZRkuiwE+5HxYv9YqdTyVTh2Y2CrAv/xnc1BTI1E6vYvS04Bsw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=71b8Hcq0jbWLm9Mr1IJyvq/N3UExkjznuA19heg3urU=;

b=NPM1i3jKL8xqmvsYAb6OWmUJKTHVO9UxMfG28cWMx4Hu5BUoMsafxwCAAFFbkf8lg2wAjDoCOrlZtYmjHV26oaUwXkfOYpcYjUNWdMJc6U4lQn5RkhAjC+MJnhpNYGmPVAGqXZD0erCa2VfGJBLnPy7ek+EBopqxuaHvz+1ahGA77GH0LNL92pPQIZa5w6niRAWAtmPXxYB3E2SxoarQXah4NP30L3z9/Pr8Ka7kH4MwVSePZ2EwypV8HelO2DXkirSjMmYzDqNiQTZXS2IT8R3FI96YqgUN5Cac8vIFpde0LVAC+nu2m4O1Y3S4Mlt1czOELtUDWXn6h8hJ8Vpp6Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=softfail (sender ip

is 209.184.167.3) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=sheldonisd.com; dmarc=none action=none

header.from=sheldonisd.com; dkim=none (message not signed); arc=none

Received: from BN8PR12CA0005.namprd12.prod.outlook.com (2603:10b6:408:60::18)

by BL0PR1501MB4132.namprd15.prod.outlook.com (2603:10b6:208:89::25) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5769.16; Sun, 30 Oct

2022 15:22:40 +0000

Received: from BN8NAM12FT009.eop-nam12.prod.protection.outlook.com

(2603:10b6:408:60:cafe::79) by BN8PR12CA0005.outlook.office365.com

(2603:10b6:408:60::18) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5769.19 via Frontend

Transport; Sun, 30 Oct 2022 15:22:40 +0000

X-MS-Exchange-Authentication-Results: spf=softfail (sender IP is

209.184.167.3) smtp.mailfrom=sheldonisd.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=sheldonisd.com;

Received-SPF: SoftFail (protection.outlook.com: domain of transitioning

sheldonisd.com discourages use of 209.184.167.3 as permitted sender)

Received: from mail.sheldonisd.com (209.184.167.3) by

BN8NAM12FT009.mail.protection.outlook.com (10.13.182.242) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.20.5791.10 via Frontend Transport; Sun, 30 Oct 2022 15:22:39 +0000

Received: from MAIL-365.ad.sheldonisd.com (10.1.16.82) by

MAIL-365.ad.sheldonisd.com (10.1.16.82) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2106.2; Sun, 30 Oct 2022 10:14:25 -0500

Received: from [193.47.61.101] (193.47.61.101) by MAIL-365.ad.sheldonisd.com

(10.1.16.82) with Microsoft SMTP Server id 15.1.2106.2 via Frontend

Transport; Sun, 30 Oct 2022 10:14:24 -0500

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: [EXTERNAL EMAIL - USE CAUTION] Greetings!

To:

From: "Mr. Paul Morgan"

Date: Sun, 30 Oct 2022 16:14:25 +0100

Reply-To:

Message-ID: <5d96c505-281a-4f38-9e57-058ddfc1807e@MAIL-365.ad.sheldonisd.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN8NAM12FT009:EE_|BL0PR1501MB4132:EE_

X-MS-Office365-Filtering-Correlation-Id: bfb4fd91-9c5f-4fe5-e41e-08daba8a9527

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?iso-8859-1?Q?u2aKFD2iOuGsFW+sTEnX0/qFIN0PY6rlH5HxfROcSGEpa8OaoUXLlf996K?=

=?iso-8859-1?Q?5sWUDNHhjBKGRT5kUb0s2VREYe2cD4CWcqG5GcFCbG8ivAzX16DEZZpTp9?=

=?iso-8859-1?Q?j9BqsBZ5jWqKi0WbTuJnLTBWkrkT/YW0QmsUotnzI868uFKD/sZTJ+P41p?=

=?iso-8859-1?Q?av0TeQ3IkO5mSjft2kWoOWgjD+sg+txfk3JvP0ox2EPwghYvye+MCbBCY4?=

=?iso-8859-1?Q?9nkJVa47b/XPH9DIFl3LhNjv09bS+zxsld3wEgxY42n646sFvd9ZjfT35W?=

=?iso-8859-1?Q?9y6M3gcpawFTiwJ2/rwJe1/U4Zz7WKoCWqBvvb9CoXMWR4gR4E9SGmGAhv?=

=?iso-8859-1?Q?0shaqY7M2wJ/+ZnZg3NpE8v/pqvS7yzDnOfhXHHCFAYWyejbVLrHnygNKR?=

=?iso-8859-1?Q?BbwiOUkH0VV6eVWP392nj76f4BlrQ8Ktj6gNknl12a2a6YrHqR14/DIBK5?=

=?iso-8859-1?Q?UFPOYWFLD0p0pfC1BFcFclP6y1jUZyg5XM+hJulxKFFhLMAoACO1xHNmQN?=

=?iso-8859-1?Q?dFgYsDN8Rlz3In44g/1flSmLnZO4eppKmtqdYJWGwCaPUFLQuwX7Hst5+N?=

=?iso-8859-1?Q?c0LMNj4SCkUXr+SyXsLnPopu5QR+qmp9xTsTXxMYI8FCkrgKqo+KMTRoCD?=

=?iso-8859-1?Q?wGrOoq5LXFUIv+NMSRRRJKFCZFzXyWX1lg6DfwW1/MtEnbDICyu1nwXs70?=

=?iso-8859-1?Q?et6i0ZCn7nWQx9cfLEyLPerI9EHsxb/QV1p7RRv6o5QnRALV3YuyPk2Ia6?=

=?iso-8859-1?Q?pKGfk0LalqcnsU6Ukc0PacxIn3+Adn3VUhspVyftvmN8LP4c6n3gV7hH55?=

=?iso-8859-1?Q?28hxudDfh+39EU/EHIcNeLN8F/IuWFP8LmVwwCZI9WRCx+D/9orGZx5f3S?=

=?iso-8859-1?Q?pznCEtZUHnKM6iBX06CNvfybfzdNeq8k4ng4Z3Z5kJvMWU8aJeqoW3iL5G?=

=?iso-8859-1?Q?W63eUTHW8wr6zU407oOZStV0GnBWUg0o3/372TD5mqXqjT8HAaMH5hSAu8?=

=?iso-8859-1?Q?KHqrorFe9mE0uEnzKw91msXJ7Qf4CyCQ26nkdTYuibleXQwRaxHeYDNz/H?=

=?iso-8859-1?Q?7tOAjaQSHIvy+u8o/CJ94F5xx0dpXzo7J1nl8gqOS9W2AglBaWYj19rs8o?=

=?iso-8859-1?Q?OrDBV6/43qTEUThZJHTljZ5NSetFLNE9t0xZDXn3aWf9J5ZAyUZWYcO9/p?=

=?iso-8859-1?Q?L5J9akcp55iJq/+UhxH8dQOO2+aer4wUOhLmyTqq3cyI3XSbz61nvi4X?=

X-Forefront-Antispam-Report:

CIP:209.184.167.3;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.sheldonisd.com;PTR:mail.sheldonisd.com;CAT:OSPM;SFS:(13230022)(346002)(39860400002)(376002)(396003)(136003)(451199015)(36840700001)(46966006)(40470700004)(82310400005)(41320700001)(478600001)(82740400003)(31696002)(6916009)(956004)(5660300002)(2860700004)(8676002)(16576012)(6706004)(70586007)(70206006)(83380400001)(40460700003)(36860700001)(316002)(8936002)(4744005)(186003)(786003)(426003)(47076005)(7636003)(2906002)(83170400001)(356005)(7596003)(31686004)(41300700001)(26005)(336012)(40480700001)(42882007)(16900700008);DIR:OUT;SFP:1501;

X-OriginatorOrg: sheldonisd.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Oct 2022 15:22:39.5144

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: bfb4fd91-9c5f-4fe5-e41e-08daba8a9527

X-MS-Exchange-CrossTenant-Id: 3237ab13-a154-4aab-bc15-73e6206d6acc

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3237ab13-a154-4aab-bc15-73e6206d6acc;Ip=[209.184.167.3];Helo=[mail.sheldonisd.com]

X-MS-Exchange-CrossTenant-AuthSource:

BN8NAM12FT009.eop-nam12.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR1501MB4132



CAUTION: This email originated from outside of the organization. DO NOT cli=

ck links, provide credentials or open attachments unless you validate the s=

ender and know the content is safe.



Good day,



I would like to get in touch with you.

Please advise if I am contacting the right person.



Sincerely,



Mr. Paul Morgan.