20210520_PHISHING_SCAM_1

Good day to you!
I'm and I write you on behalf of a significant multinational corporation. I would like to offer you business collaboration for the upcoming several months. Official strategy and marketing plan I have loaded here:


http://idsecuritysolutions.com/ezekiel-wisozk/bill-95.zip


If you are interested in such a partnership, please get in contact with me.

Best Regards,
Arif Terrell,
Chief Secretary of Celestica Inc. USA Branch,
+1-631-623-2356




Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1497.2 via Mailbox Transport; Thu, 20 May 2021 15:31:18 -0500
Received: from MBX06D-ORD1.mex08.mlsrvr.com (172.29.9.27) by
 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
 id 15.0.1497.2; Thu, 20 May 2021 15:31:18 -0500
Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
 MBX06D-ORD1.mex08.mlsrvr.com (172.29.9.27) with Microsoft SMTP Server (TLS)
 id 15.0.1497.2 via Frontend Transport; Thu, 20 May 2021 15:31:18 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [162.0.209.94]
Authentication-Results: smtp27.gate.iad3b.rsapps.net; iprev=pass policy.iprev="162.0.209.94"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="premium168-5.web-hosting.com"; dkim=pass header.d=dipinvestment.sigmaedu.com.np; dmarc=none (p=nil; dis=none) header.from=dipinvestment.sigmaedu.com.np
X-Suspicious-Flag: NO
X-Classification-ID: 54337570-b9aa-11eb-8001-5254006b1ac1-1-1
Received: from [162.0.209.94] ([162.0.209.94:39393] helo=premium168-5.web-hosting.com)
	by smtp27.gate.iad3b.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
	id 01/1C-19422-517C6A06; Thu, 20 May 2021 16:31:18 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=dipinvestment.sigmaedu.com.np; s=default; h=MIME-Version:Message-ID:Subject
	:From:To:Date:Content-Type:Sender:Reply-To:Cc:Content-Transfer-Encoding:
	Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:
	Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
	List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=kACuduR2/HD17+ywR+6YuX9JE8RpVzaZ/sgZ6APAO+o=; b=UcPgIdaA+J9ZHJ04nTHMPYzQFh
	gNdhLdBkPgVJltpOL3m/Q7Ixz9TxQWH7lm1r4ej2P2Ofaj7Atk+/bdOyxuf6J8pAHSfHOOC8xm4QP
	tEn+MtZ59QYvfKVmljPH2N7eVbnhr3qeL0mSLvf6oqJx8oyNZWM7ipyz2ovp9unEnjMd46aWmktLU
	sjwqkQZ7Bg72PLDEJO9YeUJEWAiC+vJVmwcqyrmML4S+5hN0Tpv6R0Vj9sp2xgHN3Qgr9OOuAOHYV
	+bFPQdGENPzIiDJCFJFvXdtPGI9Vn1g65VG0POcY1Rcu68gDWQl6UuAjK/+f0ySlCuUUp6Y1LeFRz
	P6mZ7pEQ==;
Received: from ip-213-127-105-222.ip.prioritytelecom.net ([213.127.105.222]:14127 helo=premium168.web-hosting.com)
	by premium168.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
	(Exim 4.94.2)
	(envelope-from <[email protected]>)
	id 1ljpK4-000Mig-Hs
	for ; Thu, 20 May 2021 16:31:17 -0400
Date: Thu, 20 May 2021 21:31:12 +0200
To:
From: "Arif Terrell of Celestica" <[email protected]>
Subject: Commercial offer prop#5869587
Message-ID: <BC23F335CB875AAD7F1EDCE51F588E1AA28B8384@unknown>
MIME-Version: 1.0
X-OutGoing-Spam-Status: No, score=2.0
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - premium168.web-hosting.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - dipinvestment.sigmaedu.com.np
X-Get-Message-Sender-Via: premium168.web-hosting.com: authenticated_id: [email protected]
X-Authenticated-Sender: premium168.web-hosting.com: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
X-MS-Exchange-Organization-Network-Message-Id: e5518917-2f07-430e-78a0-08d91bce38f6
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX06D-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: multipart/alternative;
	boundary="B_3704364824_2058221370"

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3704364824_2058221370
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit