Hawk Tuah
Click to validate
Invoice pending
System upgrade
-----Original Message-----
From: Kace Security Helpdesk <securityhelpdesk@westernexp.com>
Sent: Monday, March 24, 2025 12:27 PM
To: irt@westernexp.com
Subject: FW: Phishing:5abee10f-fe63-4fb2-6353-08dd6af3f105|thomas.mian@princetontmx.com|(Princeton TMX Request: Your Feedback Matters - Help Us Improve with Our NPS Survey) 3/24/2025 5:26:50 PM
________________________________________
From: Macy Lear <mlear@westernexp.com>
Sent: Monday, March 24, 2025 12:26:50 PM (UTC-06:00) Central Time (US & Canada)
To: Kace Security Helpdesk
Subject: Phishing:5abee10f-fe63-4fb2-6353-08dd6af3f105|thomas.mian@princetontmx.com|(Princeton TMX Request: Your Feedback Matters - Help Us Improve with Our NPS Survey) 3/24/2025 5:26:50 PM
# Questionable URLs detected in message:
None
Received: from MN2PR12MB4222.namprd12.prod.outlook.com (2603:10b6:208:19a::21) by DM6PR12MB4402.namprd12.prod.outlook.com with HTTPS; Mon, 24 Mar 2025 16:51:58 +0000
Received: from MN2PR16CA0066.namprd16.prod.outlook.com (2603:10b6:208:234::35) by MN2PR12MB4222.namprd12.prod.outlook.com (2603:10b6:208:19a::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8534.42; Mon, 24 Mar 2025 16:50:11 +0000
Received: from BL6PEPF0001AB76.namprd02.prod.outlook.com (2603:10b6:208:234:cafe::8a) by MN2PR16CA0066.outlook.office365.com (2603:10b6:208:234::35) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8534.42 via Frontend Transport; Mon, 24 Mar 2025 16:50:11 +0000
Received: from us-smtp-inbound-delivery-1.mimecast.com (170.10.132.61) by BL6PEPF0001AB76.mail.protection.outlook.com (10.167.242.169) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8534.20 via Frontend Transport; Mon, 24 Mar 2025 16:50:10 +0000
Received: from mail-yb1-f181.google.com (mail-yb1-f181.google.com [209.85.219.181]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-330-RI7e2RIkOKySOFr9h6IYBw-1; Mon, 24 Mar 2025 12:50:07 -0400
Received: by mail-yb1-f181.google.com with SMTP id 3f1490d57ef6-e5372a2fbddso3748423276.3 for <mlear@westernexp.com>; Mon, 24 Mar 2025 09:50:07 -0700 (PDT)
Content-Type: application/ms-tnef; name="winmail.dat"
Content-Transfer-Encoding: binary
From: Thomas Mian <thomas.mian@princetontmx.com>
Subject: Princeton TMX Request: Your Feedback Matters - Help Us Improve with Our NPS Survey
Thread-Topic: Princeton TMX Request: Your Feedback Matters - Help Us Improve with Our NPS Survey
Thread-Index: AQHbnN0ODLlfWVJJAUW/q46VrJk14w==
Date: Mon, 24 Mar 2025 16:49:50 +0000
Message-ID: <CAGD8YEUFKP10VEyujNJnMnyUsaZwym5835m4C-tHq6c6d-KM=g@mail.gmail.com>
Content-Language: en-US
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-AuthSource: BL6PEPF0001AB76.namprd02.prod.outlook.com
X-MS-Has-Attach:
X-MS-Exchange-Organization-Network-Message-Id: 5abee10f-fe63-4fb2-6353-08dd6af3f105
X-MS-Exchange-Organization-SCL: -1
X-MS-TNEF-Correlator: <CAGD8YEUFKP10VEyujNJnMnyUsaZwym5835m4C-tHq6c6d-KM=g@mail.gmail.com>
X-MS-Exchange-Organization-RecordReviewCfmType: 0
x-ms-publictraffictype: Email
received-spf: SoftFail (protection.outlook.com: domain of transitioning princetontmx.com discourages use of 170.10.132.61 as permitted sender)
authentication-results: spf=softfail (sender IP is 170.10.132.61) smtp.mailfrom=princetontmx.com; dkim=fail (signature did not verify) header.d=princetontmx.com;dmarc=fail action=none header.from=princetontmx.com;compauth=softpass reason=201
x-mc-unique: RI7e2RIkOKySOFr9h6IYBw-1
x-ms-office365-filtering-correlation-id: 5abee10f-fe63-4fb2-6353-08dd6af3f105
x-ms-traffictypediagnostic: BL6PEPF0001AB76:EE_|MN2PR12MB4222:EE_|DM6PR12MB4402:EE_
x-ms-exchange-transport-crosstenantheadersstamped: MN2PR12MB4222
x-mimecast-spam-score: 1
x-eopattributedmessage: 0
x-eoptenantattributedmessage: 7574e840-7b4e-4dde-9344-850222919bd8:0
x-forefront-antispam-report: CIP:170.10.132.61;CTRY:US;LANG:en;SCL:-1;SRV:;IPV:CAL;SFV:SKN;H:us-smtp-inbound-delivery-1.mimecast.com;PTR:us-smtp-delivery-1.mimecast.com;CAT:NONE;SFS:(13230040)(5073199012)(30052699003)(43022699015)(69100299015)(82310400026)(13003099007)(4076899003)(8096899003);DIR:INB;
x-microsoft-antispam: BCL:0;ARA:13230040|5073199012|30052699003|43022699015|69100299015|82310400026|13003099007|4076899003|8096899003;
x-ms-exchange-crosstenant-originalarrivaltime: 24 Mar 2025 16:50:10.8019 (UTC)
x-ms-exchange-crosstenant-network-message-id: 5abee10f-fe63-4fb2-6353-08dd6af3f105
x-ms-exchange-crosstenant-id: 7574e840-7b4e-4dde-9344-850222919bd8
x-ms-exchange-crosstenant-fromentityheader: Internet
arc-seal: i=1; s=201903; d=dkim.mimecast.com; t=1742835010; a=rsa-sha256; cv=none; b=LtjADjx7+rAWa88a663bfR6DOEzcsxrG6S1+HVOuw7N9mF3jLTXe3IzfEUg4u1oYm228yp WXe3a14R2E9YpD6kbzPPuoNJjb8AoBfonEFhrwkLgFiCV3dQs1hu8skdJ33TN3PP4JS+Jv kos9AQQgvGOpGVjNWFwDqAXNBOFK41GUFUVwu3RqIPRS9Bd+mbPbZhKYY8utB7tRX0Bv4p wZLOrfmTySIhxaguyFo5hsZHN/IwcUqSX00z+DgGTq4e4SB3yeutpd8JrYw2vN3bNSWoVX 2V53VsOgBp7n3zdpnx6HxHaSqKvhZbOMXVppw3fFzg4TfYO+Me73IbMHQjWqbQ==
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=dkim.mimecast.com; s=201903; t=1742835010; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: dkim-signature; bh=mVIVwSEW67tund2tdRDL8WdiISN38zihOKFPVpEX9Is=; b=lfhJR6AzudMDkoNXFdcjHgkwCmPLfU1y8ECB6EBT+rBGeT/RU+Kb3YyFZ8Mt7BtLafxsEo /kCA/pv52ErEnh/o4UqEzZYVptBG1O4qlKzfPw8SLxuK+B+AO5ssCz3LawsAadVQBM2Kaw UiGFiIW2vQ2HcqpJI0sBbyPFX/DdW2sq3rCk2zd910ii/qVf4FFJaK0StCoP9l1msUf8bH JJHESRwcyO6oj3sb/BM3gS6hfbKv/pAMNRNVg2qmWZaZfZWQ/c1E4eL9l2SoX+YCwcvXxr 5vE1EZFHVo3q3IvcLlCwwbG4JKBrYvbmtV7Il1ftSmkHRmKVrP62F2uTl9TBeg==
arc-authentication-results: i=1; relay.mimecast.com; dkim=pass header.d=princetontmx.com header.s=google header.b=W7sy7pPR; dmarc=pass (policy=none) header.from=princetontmx.com; spf=pass (relay.mimecast.com: domain of thomas.mian@princetontmx.com designates 209.85.219.181 as permitted sender) smtp.mailfrom=thomas.mian@princetontmx.com
x-ms-exchange-transport-endtoendlatency: 00:01:47.2859524
x-ms-exchange-processed-by-bccfoldering: 15.20.8534.033
authentication-results-original: relay.mimecast.com; dkim=pass header.d=princetontmx.com header.s=google header.b=W7sy7pPR; dmarc=pass (policy=none) header.from=princetontmx.com; spf=pass (relay.mimecast.com: domain of thomas.mian@princetontmx.com designates 209.85.219.181 as permitted sender) smtp.mailfrom=thomas.mian@princetontmx.com
dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=princetontmx.com; s=google; t=1742835006; x=1743439806; darn=westernexp.com; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=7E/IRBHThagJQrfjeP9Jb05RhJXiVsdSx5fepYEbGGY=; b=W7sy7pPRnsKpzuuof2fUnUkMacU4pmlKpCdDu1gLQOXiB2jdckMyRMMeYsU3UocbEE e5UFkgzebo8fT7mIDIrZODwOsNI+b6/z8phajhaQp5nBlMC9KvS0OkKr+70Zutl0sWe6 GWrWGzCFe+AFVyESgCggjF12+NI9nWaxkFhibLVjZEd3x87bm2wH4lA+dVPU4YTRRyzf NBRaX7LhIAOq/rA32C+NeTBDZinPeJmJsQb6Wv3V8GFJsy8VsmuQ+zbNlZzxUpkqWhng /Jaxa8AXVXSQMuoIy37KWGMVlQ2Wt8Z2u1W5PkX9MwoPOPvENiW0PSvFW2WJdUrygg04 wMkA==
x-ms-exchange-atpmessageproperties: SA|SL
x-received: by 2002:a05:6902:2e0d:b0:e5b:3804:5c93 with SMTP id 3f1490d57ef6-e66a4d2400amr17053278276.10.1742835006204; Mon, 24 Mar 2025 09:50:06 -0700 (PDT)
x-google-dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1742835007; x=1743439807; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=7E/IRBHThagJQrfjeP9Jb05RhJXiVsdSx5fepYEbGGY=; b=DiQX6pZWLXEOdvmpSJStXIFJXMHBfa4xg2YxYjg/C0KMYV9neEGGDijrx1Wvb4xdzG Bgxicbm8qhi0OGuk2cjPBewLz2L+1yj4DXgQw9/aoV4psDKk7sHMPCIGjSYsZ7Mb70LI G6xkT99oAQILTe7/44//to4HLWE6tuDIa/v7znExMCP4lE1dkufAtV0KY8yIBLzwRsVJ lgFYdyQJZg3Duq0EFSWSst+PO6OczoO73kgOHY5HlEBOt9OWOT+U7qk+FBCZUE9v+4Pm ZUDotF3eAYdlcS2dki0aor8VWD4q0ViIy4+IKHlSuwy4OA0WcXY0cUIGfpfwuS48UQQg XKUQ==
x-gm-message-state: AOJu0Yy4mRWQK6hHZyDAGoNU+Vxe1qf7SqtSx5gF6A1DGhjQ51cxrDCD Pp9AMxrQmRhk/sB1n4FBDPAOx0I7Itdtshkjxb6u0Th+Rkk2bsLGHrmZp7Qsr2BMUEXpBBySIFa IOA/7+d/QqcjIYqrsLRhwgza4IrEOfZFdhBXTsA==
x-google-smtp-source: AGHT+IG0DwBJoHAVmIOhAp7D8mLqxxgXxpMiGVnxcYW87ylXzrSjG7OU09igCdO0wDA+LseMgnayCNEYT8A9Mn2iFLc=
x-ms-exchange-crosstenant-authas: Anonymous
x-ms-exchange-crosstenant-authsource: BL6PEPF0001AB76.namprd02.prod.outlook.com
MIME-Version: 1.0
If you want such reports to go to Microsoft directly, you can change the reported message destinations from the settings at https://security.microsoft.com/userSubmissionsReportMessage
This email has been scanned for email related threats and delivered safely by Mimecast.
For more information please visit http://www.mimecast.com