-----Original Message-----
From: Chandler Willis <cwillis@westernexp.com>
Sent: Thursday, March 20, 2025 10:18 AM
To: irt@westernexp.com
Subject: FW: Junk:f96a0ade-37d4-4da1-e534-08dd67c0fb58|dave@quickconsultantshq.co|(Re: Devin - Quick favor) 3/20/2025 3:09:47 PM
False positive, this is spam. Verified the links are safe and there are no attachments contained.
-----Original Message-----
From: Kace Security Helpdesk <securityhelpdesk@westernexp.com>
Sent: Thursday, March 20, 2025 10:10 AM
To: irt@westernexp.com
Subject: FW: Junk:f96a0ade-37d4-4da1-e534-08dd67c0fb58|dave@quickconsultantshq.co|(Re: Devin - Quick favor) 3/20/2025 3:09:47 PM
________________________________________
From: Devin Bishop <dbishop@westernexp.com>
Sent: Thursday, March 20, 2025 10:09:47 AM (UTC-06:00) Central Time (US & Canada)
To: Kace Security Helpdesk
Subject: Junk:f96a0ade-37d4-4da1-e534-08dd67c0fb58|dave@quickconsultantshq.co|(Re: Devin - Quick favor) 3/20/2025 3:09:47 PM
# Questionable URLs detected in message:
None
Received: from MW4PR12MB6974.namprd12.prod.outlook.com (2603:10b6:303:207::18) by CY8PR12MB8266.namprd12.prod.outlook.com with HTTPS; Thu, 20 Mar 2025 15:07:58 +0000
Received: from DS7PR06CA0009.namprd06.prod.outlook.com (2603:10b6:8:2a::28) by MW4PR12MB6974.namprd12.prod.outlook.com (2603:10b6:303:207::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8534.34; Thu, 20 Mar 2025 15:07:52 +0000
Received: from DS2PEPF00003441.namprd04.prod.outlook.com (2603:10b6:8:2a:cafe::76) by DS7PR06CA0009.outlook.office365.com (2603:10b6:8:2a::28) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8511.27 via Frontend Transport; Thu, 20 Mar 2025 15:07:50 +0000
Received: from us-smtp-inbound-delivery-1.mimecast.com (170.10.128.131) by DS2PEPF00003441.mail.protection.outlook.com (10.167.17.68) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8534.20 via Frontend Transport; Thu, 20 Mar 2025 15:07:50 +0000
Received: from mail-qv1-f54.google.com (mail-qv1-f54.google.com [209.85.219.54]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-193-Uo6TdZjeO0KMNBOecSS82g-1; Thu, 20 Mar 2025 11:07:47 -0400
Received: by mail-qv1-f54.google.com with SMTP id 6a1803df08f44-6e86b92d3b0so7310516d6.2 for <dbishop@westernexp.com>; Thu, 20 Mar 2025 08:07:47 -0700 (PDT)
Received: from bf952b80-389e-4a2b-9f67-b2b3563dc7d9.local (ec2-44-202-57-198.compute-1.amazonaws.com. [44.202.57.198]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-6eade20935csm95455376d6.5.2025.03.20.08.07.45 for <dbishop@westernexp.com> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 20 Mar 2025 08:07:45 -0700 (PDT)
Content-Type: application/ms-tnef; name="winmail.dat"
Content-Transfer-Encoding: binary
From: Dave Rodriguez <dave@quickconsultantshq.co>
To: Devin Bishop <dbishop@westernexp.com>
Subject: Re: Devin - Quick favor
Thread-Topic: Devin - Quick favor
Thread-Index: AQHblpVePuRazNR3S0KR6zEfDCq6ULN8JoCA
Date: Thu, 20 Mar 2025 15:07:45 +0000
Message-ID: <bf952b80-389e-4a2b-9f67-b2b3563dc7d9@quickconsultantshq.co>
References: <97f0b1c5-1a2c-4003-ac65-6b9db45ee188@quickconsultantshq.co>
In-Reply-To: <97f0b1c5-1a2c-4003-ac65-6b9db45ee188@quickconsultantshq.co>
Content-Language: en-US
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-AuthSource: DS2PEPF00003441.namprd04.prod.outlook.com
X-MS-Has-Attach:
X-MS-Exchange-Organization-Network-Message-Id: f96a0ade-37d4-4da1-e534-08dd67c0fb58
X-MS-Exchange-Organization-SCL: -1
X-MS-TNEF-Correlator: <bf952b80-389e-4a2b-9f67-b2b3563dc7d9@quickconsultantshq.co>
X-MS-Exchange-Organization-RecordReviewCfmType: 0
received-spf: SoftFail (protection.outlook.com: domain of transitioning quickconsultantshq.co discourages use of 170.10.128.131 as permitted sender)
x-ms-publictraffictype: Email
x-ms-exchange-crosstenant-id: 7574e840-7b4e-4dde-9344-850222919bd8
MIME-Version: 1.0
If you want such reports to go to Microsoft directly, you can change the reported message destinations from the settings at https://security.microsoft.com/userSubmissionsReportMessage
This email has been scanned for email related threats and delivered safely by Mimecast.
For more information please visit http://www.mimecast.com