<div dir="ltr"><div class="gmail_default" style="font-family:georgia,serif;color:rgb(102,51,255)">Someone would appear to be spoofing Dan's email, and is sending a "document to review" which would appear to be a link to a site to harvest credentials.</div><div class="gmail_default" style="font-family:georgia,serif;color:rgb(102,51,255)"><br></div><div class="gmail_default" style="font-family:georgia,serif;color:rgb(102,51,255)">Unless Dan says otherwise, assume that email from:</div><div class="gmail_default" style="font-family:georgia,serif;color:rgb(102,51,255)"><br></div><div class="gmail_default" style="font-family:georgia,serif;color:rgb(102,51,255)"><table cellpadding="0" class="gmail-ajC" style="color:rgb(0,0,0);font-family:arial,sans-serif;font-size:12.8px"><tbody><tr class="gmail-UszGxc gmail-ajv"><td colspan="2" class="gmail-gL" style="padding:6px 0px"><span class="gmail-gI"><span name="DAN CONWAY" class="gmail-gD" style="font-size:12.8px"><br class="gmail-Apple-interchange-newline">DAN CONWAY</span> <span class="gmail-go gmail-gD" style="font-size:12.8px"><<a href="mailto:dconway@thkassoc.com">dconway@thkassoc.com</a>><br><br>That claims a document is "attach" <i>sic</i> . and which purports to link to "docusign" <br><br>is worse than spam.</span></span></td></tr></tbody></table></div></div>