hxxp://Received[:] from SA0PR05MB8879[.]namprd05[.]prod[.]outlook[.]com (2603[:]10b6[:]806[:]153[::]16) by DM6PR05MB5674[.]namprd05[.]prod[.]outlook[.]com with HTTPS; Thu, 4 Apr 2024 15[:]31[:]36 +0000 Received[:] from BN9PR03CA0476[.]namprd03[.]prod[.]outlook[.]com (2603[:]10b6[:]408[:]139[::]31) by SA0PR05MB8879[.]namprd05[.]prod[.]outlook[.]com (2603[:]10b6[:]806[:]153[::]16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15[.]20[.]7409[.]46; Thu, 4 Apr 2024 15[:]31[:]29 +0000 Received[:] from BN1PEPF0000468D[.]namprd05[.]prod[.]outlook[.]com (2603[:]10b6[:]408[:]139[:]cafe[::]4c) by BN9PR03CA0476[.]outlook[.]office365[.]com (2603[:]10b6[:]408[:]139[::]31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15[.]20[.]7409[.]46 via Frontend Transport; Thu, 4 Apr 2024 15[:]31[:]29 +0000 Received[:] from inpost[.]tmes[.]trendmicro[.]eu (18[.]185[.]115[.]175) by BN1PEPF0000468D[.]mail[.]protection[.]outlook[.]com (10[.]167[.]243[.]138) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15[.]20[.]7452[.]22 via Frontend Transport; Thu, 4 Apr 2024 15[:]31[:]28 +0000 Received[:] from 40[.]107[.]6[.]126_[.]trendmicro[.]com (unknown [172[.]21[.]192[.]213]) by inpost[.]tmes[.]trendmicro[.]eu (Postfix) with SMTP id F31721001D876 for <natacha[.]faria@radissonhotels[.]com>; Thu, 4 Apr 2024 15[:]31[:]27 +0000 (UTC) Received[:] from EUR04-DB3-obe[.]outbound[.]protection[.]outlook[.]com (unknown [40[.]107[.]6[.]126]) by inpre01[.]tmes[.]trendmicro[.]eu (Trend Micro Email Security) with ESMTPS id A2FEB1001B0D8 for <natacha[.]faria@radissonhotels[.]com>; Thu, 4 Apr 2024 15[:]29[:]51 +0000 (UTC) Received[:] from AS8PR04CA0049[.]eurprd04[.]prod[.]outlook[.]com (2603[:]10a6[:]20b[:]312[::]24) by DB9P193MB1436[.]EURP193[.]PROD[.]OUTLOOK[.]COM (2603[:]10a6[:]10[:]2a5[::]15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15[.]20[.]7409[.]46; Thu, 4 Apr 2024 15[:]29[:]50 +0000 Received[:] from AMS0EPF000001AA[.]eurprd05[.]prod[.]outlook[.]com (2603[:]10a6[:]20b[:]312[:]cafe[::]cf) by AS8PR04CA0049[.]outlook[.]office365[.]com (2603[:]10a6[:]20b[:]312[::]24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15[.]20[.]7409[.]46 via Frontend Transport; Thu, 4 Apr 2024 15[:]29[:]50 +0000 Received[:] from mfod-usw2[.]prod[.]hydra[.]sophos[.]com (198[.]154[.]181[.]226) by AMS0EPF000001AA[.]mail[.]protection[.]outlook[.]com (10[.]167[.]16[.]150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15[.]20[.]7452[.]22 via Frontend Transport; Thu, 4 Apr 2024 15[:]29[:]49 +0000 Received[:] from ip-172-17-0-171[.]us-west-2[.]compute[.]internal (ip-172-17-0-171[.]us-west-2[.]compute[.]internal [127[.]0[.]0[.]1]) by mfod-usw2[.]prod[.]hydra[.]sophos[.]com (Postfix) with ESMTP id 4V9QXX0Flhz20G4 for <natacha[.]faria@radissonhotels[.]com>; Thu, 4 Apr 2024 15[:]29[:]48 +0000 (UTC) Received[:] from EUR03-DBA-obe[.]outbound[.]protection[.]outlook[.]com (mail-dbaeur03lp2169[.]outbound[.]protection[.]outlook[.]com [104[.]47[.]51[.]169]) (using TLSv1[.]2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mf-outbound-us-west-2[.]prod[.]hydra[.]sophos[.]com (Postfix) with ESMTPS id 4V9QWY2QBSzPjdl; Thu, 4 Apr 2024 15[:]28[:]57 +0000 (UTC) Received[:] from DB8P193MB0757[.]EURP193[.]PROD[.]OUTLOOK[.]COM (2603[:]10a6[:]10[:]145[::]10) by DB8P193MB0776[.]EURP193[.]PROD[.]OUTLOOK[.]COM (2603[:]10a6[:]10[:]150[::]7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15[.]20[.]7409[.]46; Thu, 4 Apr 2024 15[:]28[:]54 +0000 Received[:] from DB8P193MB0757[.]EURP193[.]PROD[.]OUTLOOK[.]COM ([fe80[::]208e[:]71f4[:]3b0f[:]dfd]) by DB8P193MB0757[.]EURP193[.]PROD[.]OUTLOOK[.]COM ([fe80[::]208e[:]71f4[:]3b0f[:]dfd%4]) with mapi id 15[.]20[.]7409[.]042; Thu, 4 Apr 2024 15[:]28[:]54 +0000 Arc-Seal[:] i=3; a=rsa-sha256; s=arcselector9901; d=microsoft[.]com; cv=pass; b=KJvnowdey2gdbvDSS6wRo7sK6OwMBuNC5tvnUELiiz8263y6jIDEB82vWgZOimmi6U3V+nsiTQ/0ZPgXIXEAQsJqBlGaYdAIQvj0B0t3Pzk/mx+f15S3UqafptsVzlhIQYsq792VbJ9cAG2BB/L1Al2Sx+hfxLpWI40fcb8OCFO5cCNmNPipdxU1gBcF8XplVUIOPBIurpDTg6tT/9hGDk/yAWEryWGAdpi162pofyP9IbNMd0Uhxn1XmEHXQthWjI5yRtAolgxmSeVxHBpCK+br1nn1rOeXvOXbMT9toTxIa2XGMXEa8ibORmfQqcwJb/suXK37dl9bu7782auG0w== Arc-Seal[:] i=2; a=rsa-sha256; s=arcselector9901; d=microsoft[.]com; cv=pass; b=lyR0ifb0PWXrzaIuzp+jdvwImbmp2kBgitOEYKsKRY6FNkNfKD94k0QIX62P4Q/ymLDqPeHPO7/d/+Tzdyf3osqGVdPDolRr48Olu5CcrY19YL2Py3Bkd0EAkxTyyr3zlAcsWbEMmzF4+2srEYC/sP9P8xaU/G2uW3SEvA/L0Q97xjCqWJ2epp2RONDE8Ft7OAcoU1m4D4+oy8L+lZcqexay32gesTfn0UdAPWiY3kjJ3whs5K+YihVGLZlgdHJEW4Jev0vQRvvJRqGYzvR71YJ5D9g8D+a9a8Qe/TIwFHPmQY8AqkZqSKzeO2+LEKdNh98/wydLOX1FEIV728Vyeg== Arc-Seal[:] i=1; a=rsa-sha256; s=arcselector9901; d=microsoft[.]com; cv=none; b=Givbtv+o1KM2XZPO3j2rAdYzi48bberFkL3l55rusn17TQPRCSvVyeKq8H2Itb4uTPraQNvTuvjqaOuykjMyqgb/ZEQ3qiwzBO+5PieW+vgDVRy1qNx+fnSW83LgMQ7fio9uagELotmBROsjpa1bv7YjM/zX5DkBGYOtr30j9oJk08+nsyP6pxLufFGvEdJ3ltqiNkDfhd+ZlUjPnUnG5eZFjKRfyT9WbYLXp3YFIbDLxiMcBnrN7lfWB4oIx4sutPSZYpzQUYwAdnbroywDktmUtMIauhrjzP20WXKxAolmE2quxo4BBtrk+QVAMdHkqIHVyZL19FNfFO7ncCYqdw== Arc-Message-Signature[:] i=3; a=rsa-sha256; c=relaxed/relaxed; d=microsoft[.]com; s=arcselector9901; h=From[:]Date[:]Subject[:]Message-ID[:]Content-Type[:]MIME-Version[:]X-MS-Exchange-AntiSpam-MessageData-ChunkCount[:]X-MS-Exchange-AntiSpam-MessageData-0[:]X-MS-Exchange-AntiSpam-MessageData-1; bh=aNW9UAeyuGz4OJIwY7vl6d65efv3S79bzoGJC+39Etk=; b=glW8LRrowmogQ2Xvzr8IYtwjzBvWuL0V2F3c/i09h5LsIWEyLFAv1KtXKrwlko5gXrvFydefA2S5aussdHYf1NGvDTGx4iRi1XdNy4MTAFMvoQ0RUtizlt6Y/cZHxXSaKQJzaP76eUcMbwrjFmIQGUaP/QBdjlzXcDr1q3l6Eb0rHWj45OnYfXm5R2W08GNy+HIqhPS3Ns4dD/6PWqLY9F1sDRLhZkAmpHAAG1M/EN25r1ljS9b56249b7mptyW2GVDwwFhNNFeAzBdzJHUG1lNhfDasXvdh3uo1a1dJnSK27wa96SLBeaaD21tVTLhDilDQ0OFXU/CWBsv1V8uOiA== Arc-Message-Signature[:] i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft[.]com; s=arcselector9901; h=From[:]Date[:]Subject[:]Message-ID[:]Content-Type[:]MIME-Version[:]X-MS-Exchange-AntiSpam-MessageData-ChunkCount[:]X-MS-Exchange-AntiSpam-MessageData-0[:]X-MS-Exchange-AntiSpam-MessageData-1; bh=aNW9UAeyuGz4OJIwY7vl6d65efv3S79bzoGJC+39Etk=; b=F/CJPtd0ORxji78TyAh1oSvLnJWx6Um3U/t87oybj1lfeTTIfz5ZmThGDuYgrNyBbw16vs/d4Pe9lus99T1o6bbhQ7bwgQPG9AKRHs2OAj4UcVgP1uexBNkyd0IkjsDk/htnaa9tP7R5IcmcYkOTh7g1ai2iBRpbrTRjgrD/VPF4GYon/VNvRhmHRSBh4v+No5PrTP4ppyOiYyfVVqwOZVqZBS1oDOujNdIDFQEEEg7VuPPu4zN03OdKlenpwx4ml+zj5nsNs3N6Dc+E+XmTYVOuSWIZ+Fy1FnYuyFj6o+SaJOw8s8vIw5DE7YA2xcQa1+3Ed/GX112qCCZUD1W0qw== Arc-Message-Signature[:] i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft[.]com; s=arcselector9901; h=From[:]Date[:]Subject[:]Message-ID[:]Content-Type[:]MIME-Version[:]X-MS-Exchange-AntiSpam-MessageData-ChunkCount[:]X-MS-Exchange-AntiSpam-MessageData-0[:]X-MS-Exchange-AntiSpam-MessageData-1; bh=aNW9UAeyuGz4OJIwY7vl6d65efv3S79bzoGJC+39Etk=; b=dtdGhIeAwEfPhS1f41eqq80XamNxzD6sDshw9OJW2kYpMldVeYUTzF+wjwfPaVLLPgPlAMQwAR8/23k2L47uD7S1fMFsH8XrZHy56GPanC5Wyc4bOFZOaQ7yNDYBQT386a1Xy8C+nMK6cq+BBGlBSVO2g0uiz6ftJ4BcAZ6Q0ydNZG6TQ2kxprHctpbw0TJx0/4gxrWHJMjRt9m5WNla/NlR5DxMOR0HL9b4U1adYPmsC8zsmpK[//]KFcd5koc9pKvbC6+dKInqWSA5pUuUdPmvVKRrw23FOv3lgtFR3d3obcnK1jlCmZ8HC0PnJYJf5qKbbCIYhHrecohlRU9bxbJA== Arc-Authentication-Results[:] i=3; mx[.]microsoft[.]com 1; spf=pass (sender ip is 40[.]107[.]6[.]126) smtp[.]rcpttodomain=radissonhotels[.]com smtp[.]mailfrom=ewc[.]edu[.]za; dmarc=bestguesspass action=none header[.]from=ewc[.]edu[.]za; dkim=pass (signature was verified) header[.]d=ekurhuleniwestcollege[.]onmicrosoft[.]com; dkim=pass (signature was verified) header[.]d=ekurhuleniwestcollege[.]onmicrosoft[.]com; dkim=pass (signature was verified) header[.]d=mail-dkim-us-west-2[.]prod[.]hydra[.]sophos[.]com; arc=pass (0 oda=1 ltdi=1 spf=[1,1,smtp[.]mailfrom=ewc[.]edu[.]za] dkim=[1,1,header[.]d=ewc[.]edu[.]za] dmarc=[1,1,header[.]from=ewc[.]edu[.]za]) Arc-Authentication-Results[:] i=2; mx[.]microsoft[.]com 1; spf=fail (sender ip is 198[.]154[.]181[.]226) smtp[.]rcpttodomain=radissonhotels[.]com smtp[.]mailfrom=ewc[.]edu[.]za; dmarc=none action=none header[.]from=ewc[.]edu[.]za; dkim=pass (signature was verified) header[.]d=ekurhuleniwestcollege[.]onmicrosoft[.]com; dkim=pass (signature was verified) header[.]d=mail-dkim-us-west-2[.]prod[.]hydra[.]sophos[.]com; arc=pass (0 oda=1 ltdi=1 spf=[1,1,smtp[.]mailfrom=ewc[.]edu[.]za] dkim=[1,1,header[.]d=ewc[.]edu[.]za] dmarc=[1,1,header[.]from=ewc[.]edu[.]za]) Arc-Authentication-Results[:] i=1; mx[.]microsoft[.]com 1; spf=pass smtp[.]mailfrom=ewc[.]edu[.]za; dmarc=pass action=none header[.]from=ewc[.]edu[.]za; dkim=pass header[.]d=ewc[.]edu[.]za; arc=none Authentication-Results[:] spf=pass (sender IP is 40[.]107[.]6[.]126) smtp[.]mailfrom=EWC[.]edu[.]za; dkim=pass (signature was verified) header[.]d=EkurhuleniWestCollege[.]onmicrosoft[.]com;dkim=pass (signature was verified) header[.]d=EkurhuleniWestCollege[.]onmicrosoft[.]com;dkim=pass (signature was verified) header[.]d=mail-dkim-us-west-2[.]prod[.]hydra[.]sophos[.]com;dmarc=bestguesspass action=none header[.]from=EWC[.]edu[.]za;compauth=pass reason=109 Received-Spf[:] Pass (protection[.]outlook[.]com[:] domain of EWC[.]edu[.]za designates 40[.]107[.]6[.]126 as permitted sender) receiver=protection[.]outlook[.]com; client-ip=40[.]107[.]6[.]126; helo=EUR04-DB3-obe[.]outbound[.]protection[.]outlook[.]com; pr=C Received-Spf[:] Fail (protection[.]outlook[.]com[:] domain of ewc[.]edu[.]za does not designate 198[.]154[.]181[.]226 as permitted sender) receiver=protection[.]outlook[.]com; client-ip=198[.]154[.]181[.]226; helo=mfod-usw2[.]prod[.]hydra[.]sophos[.]com; X-Tm-Mail-Received-Time[:] 1712244591[.]667000 X-Tm-Mail-Uuid[:] 9427c1cc-77bf-43eb-b637-ab5708905c37 Dkim-Signature[:] v=1; a=rsa-sha256; c=relaxed/relaxed; d=EkurhuleniWestCollege[.]onmicrosoft[.]com; s=selector2-EkurhuleniWestCollege-onmicrosoft-com; h=From[:]Date[:]Subject[:]Message-ID[:]Content-Type[:]MIME-Version[:]X-MS-Exchange-SenderADCheck; bh=aNW9UAeyuGz4OJIwY7vl6d65efv3S79bzoGJC+39Etk=; b=oiM2yOMKxSOjvS/BnK9BAduYhie3WceDA0td883VKP0EMlpWwaDGap1uhcE8hD7BUmqhn7oGwM5y4T8TLTmd92IoUIRNGR5TnqC5IfpBuhIGD/uSGMp0PCwHMpUW+FWl1FlFo8H7cHs1xc2FvkRTm+WnS6WsftKD15VWgYzTR1Q= Dkim-Signature[:] v=1; a=rsa-sha256; c=relaxed/relaxed; d=EkurhuleniWestCollege[.]onmicrosoft[.]com; s=selector2-EkurhuleniWestCollege-onmicrosoft-com; h=From[:]Date[:]Subject[:]Message-ID[:]Content-Type[:]MIME-Version[:]X-MS-Exchange-SenderADCheck; bh=aNW9UAeyuGz4OJIwY7vl6d65efv3S79bzoGJC+39Etk=; b=oiM2yOMKxSOjvS/BnK9BAduYhie3WceDA0td883VKP0EMlpWwaDGap1uhcE8hD7BUmqhn7oGwM5y4T8TLTmd92IoUIRNGR5TnqC5IfpBuhIGD/uSGMp0PCwHMpUW+FWl1FlFo8H7cHs1xc2FvkRTm+WnS6WsftKD15VWgYzTR1Q= Dkim-Signature[:] v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1712244534; s=v1; d=mail-dkim-us-west-2[.]prod[.]hydra[.]sophos[.]com; h=Content-Type[:]Date[:]Subject[:]To[:]From; bh=aNW9UAeyuGz4OJIwY7vl6d65efv3S79bzoGJC+39Etk=; b=cXVMQXbrBvGlqYWCOPMTVZO/bkNfRrAXLkyuqgyBdDVnZpgwU+nYnZtrYMF1YFjD B47M57lSsyabzDJssviI0HLa6BAFlGA1rTusQkSZg4Ap/COdz+k7gKdGAatiYZGT7xN zEtepMzMtyX/kqnPfwH2L1h+COBG0YXH+gN47pygpJAmSTwwGskgY3TRlfkmyKZzaAi 5txL3MoplWfg8AxGpllHF0mAcX9BwssOemAmUGouUwMMjdvYUEcaF4lc9SxYE8QWg5r Fq5s4cGDta+li9GNwcGgGbQGpVn7YfMjhB8fuP2frXgUUufZ1pQ+sC2hgYdcOH6XA3n /k7RQUv4FA== X-Ms-Exchange-Authentication-Results[:] spf=fail (sender IP is 198[.]154[.]181[.]226) smtp[.]mailfrom=ewc[.]edu[.]za; dkim=pass (signature was verified) header[.]d=EkurhuleniWestCollege[.]onmicrosoft[.]com;dmarc=none action=none header[.]from=EWC[.]edu[.]za; X-Sophos-Product-Type[:] Mailflow X-Sophos-Email-Id[:] ca7a7555cf8a44b0badbedfa8e7cff5d From[:] Mbali Mtembu <Mbalim@EWC[.]edu[.]za> To[:] account1@ewc[.]edu[.]za Subject[:] =?UTF-8?B?UHJvZm9ybWEg?= Thread-Topic[:] Proforma Thread-Index[:] AQHahqPj6Qp2vAAoSEWcFsVanRVscg== Date[:] Thu, 4 Apr 2024 15[:]28[:]54 +0000 Message-Id[:] <DB8P193MB0757D912682A986C61D3FEC6E23C2@DB8P193MB0757[.]EURP193[.]PROD[.]OUTLOOK[.]COM> Accept-Language[:] en-US Content-Language[:] en-US X-Ms-Traffictypediagnostic[:] DB8P193MB0757[:]EE_|DB8P193MB0776[:]EE_|AMS0EPF000001AA[:]EE_|DB9P193MB1436[:]EE_|BN1PEPF0000468D[:]EE_|SA0PR05MB8879[:]EE_|DM6PR05MB5674[:]EE_ X-Ms-Exchange-Senderadcheck[:] 1 X-Ms-Exchange-Antispam-Relay[:] 0 X-Microsoft-Antispam-Untrusted[:] BCL[:]0; X-Microsoft-Antispam-Untrusted[:] BCL[:]0; X-Microsoft-Antispam-Message-Info-Original[:] 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 X-Microsoft-Antispam-Message-Info-Original[:] 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 X-Forefront-Antispam-Report-Untrusted[:] CIP[:]255[.]255[.]255[.]255; CTRY[:]; LANG[:]en; SCL[:]1; SRV[:]; IPV[:]NLI; SFV[:]NSPM; H[:]DB8P193MB0757[.]EURP193[.]PROD[.]OUTLOOK[.]COM; PTR[:]; CAT[:]NONE; SFS[:](13230031)(366007)(7416005)(376005)(1800799015)(41320700004)(17680700008); DIR[:]OUT; SFP[:]1501; X-Forefront-Antispam-Report-Untrusted[:] CIP[:]198[.]154[.]181[.]226;CTRY[:]US;LANG[:]en;SCL[:]1;SRV[:];IPV[:]NLI;SFV[:]NSPM;H[:]mfod-usw2[.]prod[.]hydra[.]sophos[.]com;PTR[:]mfod-usw2[.]prod[.]hydra[.]sophos[.]com;CAT[:]NONE;SFS[:](13230031)(376005)(36860700004)(82310400014)(41320700004)(1800799015);DIR[:]OUT;SFP[:]1102; Content-Type[:] multipart/mixed; boundary="----sinikael-?=_1-17122447561890[.]4964418050279711" MIME-Version[:] 1[.]0 X-Ms-Exchange-Transport-Crosstenantheadersstamped[:] DB8P193MB0776 X-Ms-Exchange-Transport-Crosstenantheadersstamped[:] DB9P193MB1436 X-Ms-Exchange-Transport-Crosstenantheadersstamped[:] SA0PR05MB8879 X-Sophos-Email[:] [us-west-2] Antispam-Engine[:] 5[.]1[.]4[.]1, AntispamData[:] 2024[.]4[.]4[.]150920 X-Lased-Spamprobability[:] 0[.]085099 X-Lased-Hits[:] BODYTEXTH_SIZE_10000_LESS 0[.]000000, BODYTEXTP_SIZE_3000_LESS 0[.]000000, BODYTEXTP_SIZE_400_LESS 0[.]000000, BODY_SIZE_3000_3999 0[.]000000, BODY_SIZE_5000_LESS 0[.]000000, BODY_SIZE_7000_LESS 0[.]000000, DKIM_SIGNATURE 0[.]000000, FRAUD_ATTACH 0[.]050000, FROM_SAME_AS_TO_DOMAIN 0[.]000000, HREF_LABEL_TEXT_NO_URI 0[.]000000, HREF_LABEL_TEXT_ONLY 0[.]000000, HTML_70_90 0[.]100000, INVOICE_ATTACHMENT_CTA_URI 0[.]000000, NO_FUR_HEADER 0[.]000000, OBFUSCATION 0[.]000000, OUTBOUND 0[.]000000, OUTBOUND_SOPHOS 0[.]000000, SINGLE_HREF_LABEL_PHISH_HI 0[.]000000, SINGLE_HREF_LABEL_PHISH_MED 0[.]000000, SINGLE_HREF_URI_IN_BODY 0[.]000000, SINGLE_HREF_URI_WITH_EMAIL 0[.]000000, SINGLE_URI_IN_BODY 0[.]000000, SUBJ_1WORD 0[.]100000, TEXT_DIRECTION 0[.]000000, TEXT_DIR_LTR_ONLY 0[.]000000, TO_NAME_IS_ADDY 0[.]000000, URI_WITH_PATH_ONLY 0[.]000000, __ANY_URI 0[.]000000, __ARCAUTH_DKIM_PASSED 0[.]000000, __ARCAUTH_DMARC_PASSED 0[.]000000, __ARCAUTH_PASSED 0[.]000000, __ARC_SEAL_MICROSOFT 0[.]000000, __ARC_SIGNATURE_MICROSOFT 0[.]000000, __ATTACHMENT_PHRASE 0[.]000000, __ATTACH_CTE_QUOTED_PRINTABLE 0[.]000000, __BODY_NO_MAILTO 0[.]000000, __BULK_NEGATE 0[.]000000, __CP_URI_IN_BODY 0[.]000000, __CT 0[.]000000, __CTYPE_HAS_BOUNDARY 0[.]000000, __CTYPE_MULTIPART 0[.]000000, __CTYPE_MULTIPART_ALT 0[.]000000, __DQ_NEG_DOMAIN 0[.]000000, __DQ_NEG_HEUR 0[.]000000, __DQ_NEG_IP 0[.]000000, __FILESHARE_PHRASE 0[.]000000, __FRAUD_COMMON 0[.]000000, __FRAUD_PAPERWORK 0[.]000000, __FROM_ADDY_STARTS_UC 0[.]000000, __FROM_DOMAIN_IN_ANY_TO1 0[.]000000, __FROM_DOMAIN_IN_RCPT 0[.]000000, __FROM_DOMAIN_MIXED_CASE 0[.]000000, __FROM_DOMAIN_NOT_IN_BODY 0[.]000000, __FROM_NAME_NOT_IN_BODY 0[.]000000, __FUR_RDNS_SOPHOS 0[.]000000, __HAS_FROM 0[.]000000, __HAS_HTML 0[.]000000, __HAS_MSGID 0[.]000000, __HAS_X_FF_ASR 0[.]000000, __HAS_X_FF_ASR_CAT 0[.]000000, __HAS_X_FF_ASR_SFV 0[.]000000, __HIDDEN_HTML_CONTENT 0[.]000000, __HREF_LABEL_PHISH 0[.]000000, __HREF_LABEL_TEXT 0[.]000000, __HTML_AHREF_TAG 0[.]000000, __HTML_ATTR_DIR 0[.]000000, __HTML_BOLD 0[.]000000, __HTML_DIR_LTR 0[.]000000, __HTML_TAG_DIV 0[.]000000, __HTTPS_URI 0[.]000000, __INVOICE_MULTILINGUAL 0[.]000000, __JSON_HAS_SCHEMA_VERSION 0[.]000000, __JSON_HAS_TRACKING_ID 0[.]000000, __MIME_HTML 0[.]000000, __MIME_TEXT_H 0[.]000000, __MIME_TEXT_H1 0[.]000000, __MIME_TEXT_H2 0[.]000000, __MIME_TEXT_P 0[.]000000, __MIME_TEXT_P1 0[.]000000, __MIME_TEXT_P2 0[.]000000, __MIME_VERSION 0[.]000000, __MSGID_32_64_CAPS 0[.]000000, __MULTIPLE_URI_TEXT 0[.]000000, __OUTBOUND_SOPHOS_FUR 0[.]000000, __OUTBOUND_SOPHOS_FUR_IP 0[.]000000, __OUTBOUND_SOPHOS_FUR_RDNS 0[.]000000, __PART_TYPE_HTML 0[.]000000, __SANE_MSGID 0[.]000000, __SINGLE_URI_MPART_BOTH 0[.]000000, __STYLE_RATWARE_NEG 0[.]000000, __STYLE_TAG 0[.]000000, __SUBJ_SHORT 0[.]000000, __TAG_EXISTS_HTML 0[.]000000, __TEXT_DIR_LTR 0[.]000000, __TO_DOMAIN_IN_FROM 0[.]000000, __TO_HOST_IN_FROM 0[.]000000, __TO_MALFORMED_2 0[.]000000, __TO_NAME 0[.]000000, __TO_NO_NAME 0[.]000000, __URI_CTA_NOT_DOCUSIGN2 0[.]000000, __URI_EMAIL_IN_QUERY 0[.]000000, __URI_IN_BODY 0[.]000000, __URI_MAILTO 0[.]000000, __URI_NOT_IMG 0[.]000000, __URI_NS 0[.]000000, __URI_WITH_PATH 0[.]000000, __X_FF_ASR_SCL_NSP 0[.]000000, __X_FF_ASR_SFV_NSPM 0[.]000000 X-Lased-Impersonation[:] False X-Lased-Spam[:] NonSpam X-Sophos-Mailflow-Processing-Id[:] d839129669df4cc68fac484b9e6c3875 X-Sophos-Mh-Mail-Info-Key[:] NFY5UVhYMEZsaHoyMEc0LTE3Mi4xNy4wLjE3MQ== X-Eopattributedmessage[:] 1 X-Ms-Exchange-Transport-Crosstenantheadersstripped[:] AMS0EPF000001AA[.]eurprd05[.]prod[.]outlook[.]com X-Ms-Exchange-Transport-Crosstenantheadersstripped[:] BN1PEPF0000468D[.]namprd05[.]prod[.]outlook[.]com X-Ms-Office365-Filtering-Correlation-Id[:] 796e38e9-db71-4d63-e759-08dc54bc4c68 "x-Ms-Exchange-Organization-Skipsafeattachmentprocessing"[:] 1 "x-Ms-Exchange-Organization-Bypassclutter"[:] "true" X-Tm-Received-Spf[:] Pass (domain of Mbalim@EWC[.]edu[.]za designates 40[.]107[.]6[.]126 as permitted sender) client-ip=40[.]107[.]6[.]126; envelope-from=Mbalim@EWC[.]edu[.]za; helo=eur04-db3-obe[.]outbound[.]protection[.]outlook[.]com X-Tm-Authentication-Results[:] spf=pass (sender IP address[:] 40[.]107[.]6[.]126) smtp[.]mailfrom=ewc[.]edu[.]za; dkim=none (no processed signatures) header[.]d=none; dmarc=pass action=no records header[.]from=ewc[.]edu[.]za; arc=none X-Tm-As-Ers[:] 40[.]107[.]6[.]126-127[.]5[.]21[.]1 X-Tmase-Version[:] StarCloud-1[.]3-9[.]1[.]1015-28298[.]000 X-Tmase-Result[:] 10--15[.]515100-10[.]000000 X-Tmase-Matchedrid[:] OCVV42VlYrW/mHJYmCg5QUkU8FyBiYUi2ebHr1N1QfFLNIpLhW/9pXly VyY9blzycUf9IlMx9/qxfhoVgAwhg2txVUHuXeM7NEorIK7MJ8qp0LbUi4tp6NzCG84uGgPgVSP DvQYo7Cl0pRQwwYloMYtozUB7oVBXG6vAF77GsJY/rTBBLbNXldrec01W6Rwtmez0VeM+EIl66l HQ6iQi1XtwXnzlX4kZ7hzwMwStqTsy2otbqJoBau2DPz5Kf83AUOOsc/slMqNEKZlqWQag3rR/n 6g6hoGK8EIeh4mcjKHRcH+pqIdu3Z0s9apb6qH5o8THzYakUYS0eRJHknlKSRugHm8DEKOGwqMZ FCdDzWF7VwKZtIquQVvIId8M26gTq0GV2m/ysO4KmuYPDBejspGVTeIwn9IlLRtwOjyP9FfA931 +mNd9sFPQ/IGe82LtWLAmmsEiLin0Jy+NVgqP6nQ0tlhyXGTx2G3fnC9ruJKhh/rWvOgat37cGd 19dSFd X-Tmase-Snap-Result[:] 1[.]821001[.]0001-0-1-22[:]0,33[:]0,34[:]0-0 X-Tmase-Xgencloud[:] 9ab49b40-97e0-4f21-bbeb-14957b0f6e77-0-0-200-0 X-Tm-Addin-Auth[:] 9+DUWrwMcKnB8ReKyXAFnLrtrkA0CL7zdMMCzQXkQM9rZYqzbOYgH6m02E1 7j8drQlGBTXYE8OeuOpA9ZJuHNWsQhfrEfPQFqQQkomhimP8WlROwK0VTI1jDDhqGvbsxkfVjOR Ei3lmnDPsNAkoTDX0TPJMO18hViMmOcaRczZddXXStbEmWSTsVLj306IHFbjyzCUC3nsJeZePWi qqD4ER2qA/cnuF+kjqxJO1k9QGLkcFRCbfPObYsWbN8oSiSFFpQaEJhxvRszNJpMn2PcDxm3ZOb uPdVDWBWBebYmOuc3+VZmj6/VkGySP3HZBPEusVdCQwuQow7k9adLAssng==[.]YiZEOsLCHDX4aX XJKcekN+KzCERaAnnUwZNvbWWtpCqwJB3k89iDJFspuF4rS2TFzyOUyXJ4xhHtzlHkHAb3brbH6 foHf02PuIvYdG4ERkH4C2Bv1rjBEv7GCxuWOTo5zx2Pn6xUo43HJ8fRZoyQfvdkB3kXpVzrcPXP FCwyjXYWEZ8MmA6nF9G22LBNA5Z0dsReAyfyjWYE6bXxivNhP9Y8qIgQKsbgWa37z0SGFDoAAN4 EXxnshDrWKPo4Bzodje+GaCGPiljGHOW5+cMqRw9XCJc140XMhd3EeRJauqEVtt2g8JiF3JkfFy Ov4WI+rg1+h3Ch+PiK9CvIJRrOmg== X-Tm-Addin-Productcode[:] EMS X-Tm-Deliver-Signature[:] 26305303300307340D33B4602D7C9F5C Return-Path[:] Mbalim@EWC[.]edu[.]za X-Ms-Exchange-Organization-Expirationstarttime[:] 04 Apr 2024 15[:]31[:]29[.]2296 (UTC) X-Ms-Exchange-Organization-Expirationstarttimereason[:] OriginalSubmit X-Ms-Exchange-Organization-Expirationinterval[:] 1[:]00[:]00[:]00[.]0000000 X-Ms-Exchange-Organization-Expirationintervalreason[:] OriginalSubmit X-Ms-Exchange-Organization-Network-Message-Id[:] 796e38e9-db71-4d63-e759-08dc54bc4c68 X-Eoptenantattributedmessage[:] 1e69e311-af1f-4162-b24e-16bb3f962d34[:]0 X-Ms-Exchange-Organization-Messagedirectionality[:] Incoming X-Ms-Exchange-Skiplistedinternetsender[:] ip=[40[.]107[.]6[.]126];domain=EUR04-DB3-obe[.]outbound[.]protection[.]outlook[.]com X-Ms-Exchange-Externaloriginalinternetsender[:] ip=[40[.]107[.]6[.]126];domain=EUR04-DB3-obe[.]outbound[.]protection[.]outlook[.]com X-Ms-Publictraffictype[:] Email X-Ms-Exchange-Organization-Authsource[:] BN1PEPF0000468D[.]namprd05[.]prod[.]outlook[.]com X-Ms-Exchange-Organization-Authas[:] Anonymous X-Ms-Office365-Filtering-Correlation-Id-Prvs[:] 6891891a-0a10-4159-23e8-08dc54bc114d X-Ms-Exchange-Organization-Scl[:] 1 X-Microsoft-Antispam[:] BCL[:]0; X-Forefront-Antispam-Report[:] CIP[:]18[.]185[.]115[.]175;CTRY[:]IE;LANG[:]en;SCL[:]1;SRV[:];IPV[:]NLI;SFV[:]NSPM;H[:]EUR04-DB3-obe[.]outbound[.]protection[.]outlook[.]com;PTR[:]mail-db3eur04on2126[.]outbound[.]protection[.]outlook[.]com;CAT[:]NONE;SFS[:](13230031)(82310400014);DIR[:]INB; X-Ms-Exchange-Crosstenant-Originalarrivaltime[:] 04 Apr 2024 15[:]31[:]28[.]9171 (UTC) X-Ms-Exchange-Crosstenant-Network-Message-Id[:] 796e38e9-db71-4d63-e759-08dc54bc4c68 X-Ms-Exchange-Crosstenant-Id[:] 1e69e311-af1f-4162-b24e-16bb3f962d34 X-Ms-Exchange-Crosstenant-Authsource[:] BN1PEPF0000468D[.]namprd05[.]prod[.]outlook[.]com X-Ms-Exchange-Crosstenant-Authas[:] Anonymous X-Ms-Exchange-Crosstenant-Fromentityheader[:] Internet X-Ms-Exchange-Transport-Endtoendlatency[:] 00[:]00[:]07[.]3056056 X-Ms-Exchange-Processed-By-Bccfoldering[:] 15[.]20[.]7409[.]037 X-Microsoft-Antispam-Mailbox-Delivery[:] ucf[:]0;jmr[:]0;auth[:]0;dest[:]I;ENG[:](910001)(944506478)(944626604)(920097)(930097)(140003); X-Microsoft-Antispam-Message-Info[:] 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 Content-Transfer-Encoding[:] 7bit

Sharing

Copy URL Twitter E-mail

General

Target

http://Received: from SA0PR05MB8879.namprd05.prod.outlook.com (2603:10b6:806:153::16) by DM6PR05MB5674.namprd05.prod.outlook.com with HTTPS; Thu, 4 Apr 2024 15:31:36 +0000 Received: from BN9PR03CA0476.namprd03.prod.outlook.com (2603:10b6:408:139::31) by SA0PR05MB8879.namprd05.prod.outlook.com (2603:10b6:806:153::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.46; Thu, 4 Apr 2024 15:31:29 +0000 Received: from BN1PEPF0000468D.namprd05.prod.outlook.com (2603:10b6:408:139:cafe::4c) by BN9PR03CA0476.outlook.office365.com (2603:10b6:408:139::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.46 via Frontend Transport; Thu, 4 Apr 2024 15:31:29 +0000 Received: from inpost.tmes.trendmicro.eu (18.185.115.175) by BN1PEPF0000468D.mail.protection.outlook.com (10.167.243.138) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.7452.22 via Frontend Transport; Thu, 4 Apr 2024 15:31:28 +0000 Received: from 40.107.6.126_.trendmicro.com (unknown [172.21.192.213]) by inpost.tmes.trendmicro.eu (Postfix) with SMTP id F31721001D876 for <[email protected]>; Thu, 4 Apr 2024 15:31:27 +0000 (UTC) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (unknown [40.107.6.126]) by inpre01.tmes.trendmicro.eu (Trend Micro Email Security) with ESMTPS id A2FEB1001B0D8 for <[email protected]>; Thu, 4 Apr 2024 15:29:51 +0000 (UTC) Received: from AS8PR04CA0049.eurprd04.prod.outlook.com (2603:10a6:20b:312::24) by DB9P193MB1436.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:2a5::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.46; Thu, 4 Apr 2024 15:29:50 +0000 Received: from AMS0EPF000001AA.eurprd05.prod.outlook.com (2603:10a6:20b:312:cafe::cf) by AS8PR04CA0049.outlook.office365.com (2603:10a6:20b:312::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.46 via Frontend Transport; Thu, 4 Apr 2024 15:29:50 +0000 Received: from mfod-usw2.prod.hydra.sophos.com (198.154.181.226) by AMS0EPF000001AA.mail.protection.outlook.com (10.167.16.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7452.22 via Frontend Transport; Thu, 4 Apr 2024 15:29:49 +0000 Received: from ip-172-17-0-171.us-west-2.compute.internal (ip-172-17-0-171.us-west-2.compute.internal [127.0.0.1]) by mfod-usw2.prod.hydra.sophos.com (Postfix) with ESMTP id 4V9QXX0Flhz20G4 for <[email protected]>; Thu, 4 Apr 2024 15:29:48 +0000 (UTC) Received: from EUR03-DBA-obe.outbound.protection.outlook.com (mail-dbaeur03lp2169.outbound.protection.outlook.com [104.47.51.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mf-outbound-us-west-2.prod.hydra.sophos.com (Postfix) with ESMTPS id 4V9QWY2QBSzPjdl; Thu, 4 Apr 2024 15:28:57 +0000 (UTC) Received: from DB8P193MB0757.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:145::10) by DB8P193MB0776.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:150::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.46; Thu, 4 Apr 2024 15:28:54 +0000 Received: from DB8P193MB0757.EURP193.PROD.OUTLOOK.COM ([fe80::208e:71f4:3b0f:dfd]) by DB8P193MB0757.EURP193.PROD.OUTLOOK.COM ([fe80::208e:71f4:3b0f:dfd%4]) with mapi id 15.20.7409.042; Thu, 4 Apr 2024 15:28:54 +0000 Arc-Seal: i=3; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass; b=KJvnowdey2gdbvDSS6wRo7sK6OwMBuNC5tvnUELiiz8263y6jIDEB82vWgZOimmi6U3V+nsiTQ/0ZPgXIXEAQsJqBlGaYdAIQvj0B0t3Pzk/mx+f15S3UqafptsVzlhIQYsq792VbJ9cAG2BB/L1Al2Sx+hfxLpWI40fcb8OCFO5cCNmNPipdxU1gBcF8XplVUIOPBIurpDTg6tT/9hGDk/yAWEryWGAdpi162pofyP9IbNMd0Uhxn1XmEHXQthWjI5yRtAolgxmSeVxHBpCK+br1nn1rOeXvOXbMT9toTxIa2XGMXEa8ibORmfQqcwJb/suXK37dl9bu7782auG0w== Arc-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass; b=lyR0ifb0PWXrzaIuzp+jdvwImbmp2kBgitOEYKsKRY6FNkNfKD94k0QIX62P4Q/ymLDqPeHPO7/d/+Tzdyf3osqGVdPDolRr48Olu5CcrY19YL2Py3Bkd0EAkxTyyr3zlAcsWbEMmzF4+2srEYC/sP9P8xaU/G2uW3SEvA/L0Q97xjCqWJ2epp2RONDE8Ft7OAcoU1m4D4+oy8L+lZcqexay32gesTfn0UdAPWiY3kjJ3whs5K+YihVGLZlgdHJEW4Jev0vQRvvJRqGYzvR71YJ5D9g8D+a9a8Qe/TIwFHPmQY8AqkZqSKzeO2+LEKdNh98/wydLOX1FEIV728Vyeg== Arc-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Givbtv+o1KM2XZPO3j2rAdYzi48bberFkL3l55rusn17TQPRCSvVyeKq8H2Itb4uTPraQNvTuvjqaOuykjMyqgb/ZEQ3qiwzBO+5PieW+vgDVRy1qNx+fnSW83LgMQ7fio9uagELotmBROsjpa1bv7YjM/zX5DkBGYOtr30j9oJk08+nsyP6pxLufFGvEdJ3ltqiNkDfhd+ZlUjPnUnG5eZFjKRfyT9WbYLXp3YFIbDLxiMcBnrN7lfWB4oIx4sutPSZYpzQUYwAdnbroywDktmUtMIauhrjzP20WXKxAolmE2quxo4BBtrk+QVAMdHkqIHVyZL19FNfFO7ncCYqdw== Arc-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=aNW9UAeyuGz4OJIwY7vl6d65efv3S79bzoGJC+39Etk=; b=glW8LRrowmogQ2Xvzr8IYtwjzBvWuL0V2F3c/i09h5LsIWEyLFAv1KtXKrwlko5gXrvFydefA2S5aussdHYf1NGvDTGx4iRi1XdNy4MTAFMvoQ0RUtizlt6Y/cZHxXSaKQJzaP76eUcMbwrjFmIQGUaP/QBdjlzXcDr1q3l6Eb0rHWj45OnYfXm5R2W08GNy+HIqhPS3Ns4dD/6PWqLY9F1sDRLhZkAmpHAAG1M/EN25r1ljS9b56249b7mptyW2GVDwwFhNNFeAzBdzJHUG1lNhfDasXvdh3uo1a1dJnSK27wa96SLBeaaD21tVTLhDilDQ0OFXU/CWBsv1V8uOiA== Arc-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=aNW9UAeyuGz4OJIwY7vl6d65efv3S79bzoGJC+39Etk=; b=F/CJPtd0ORxji78TyAh1oSvLnJWx6Um3U/t87oybj1lfeTTIfz5ZmThGDuYgrNyBbw16vs/d4Pe9lus99T1o6bbhQ7bwgQPG9AKRHs2OAj4UcVgP1uexBNkyd0IkjsDk/htnaa9tP7R5IcmcYkOTh7g1ai2iBRpbrTRjgrD/VPF4GYon/VNvRhmHRSBh4v+No5PrTP4ppyOiYyfVVqwOZVqZBS1oDOujNdIDFQEEEg7VuPPu4zN03OdKlenpwx4ml+zj5nsNs3N6Dc+E+XmTYVOuSWIZ+Fy1FnYuyFj6o+SaJOw8s8vIw5DE7YA2xcQa1+3Ed/GX112qCCZUD1W0qw== Arc-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=aNW9UAeyuGz4OJIwY7vl6d65efv3S79bzoGJC+39Etk=; b=dtdGhIeAwEfPhS1f41eqq80XamNxzD6sDshw9OJW2kYpMldVeYUTzF+wjwfPaVLLPgPlAMQwAR8/23k2L47uD7S1fMFsH8XrZHy56GPanC5Wyc4bOFZOaQ7yNDYBQT386a1Xy8C+nMK6cq+BBGlBSVO2g0uiz6ftJ4BcAZ6Q0ydNZG6TQ2kxprHctpbw0TJx0/4gxrWHJMjRt9m5WNla/NlR5DxMOR0HL9b4U1adYPmsC8zsmpK//KFcd5koc9pKvbC6+dKInqWSA5pUuUdPmvVKRrw23FOv3lgtFR3d3obcnK1jlCmZ8HC0PnJYJf5qKbbCIYhHrecohlRU9bxbJA== Arc-Authentication-Results: i=3; mx.microsoft.com 1; spf=pass (sender ip is 40.107.6.126) smtp.rcpttodomain=radissonhotels.com smtp.mailfrom=ewc.edu.za; dmarc=bestguesspass action=none header.from=ewc.edu.za; dkim=pass (signature was verified) header.d=ekurhuleniwestcollege.onmicrosoft.com; dkim=pass (signature was verified) header.d=ekurhuleniwestcollege.onmicrosoft.com; dkim=pass (signature was verified) header.d=mail-dkim-us-west-2.prod.hydra.sophos.com; arc=pass (0 oda=1 ltdi=1 spf=[1,1,smtp.mailfrom=ewc.edu.za] dkim=[1,1,header.d=ewc.edu.za] dmarc=[1,1,header.from=ewc.edu.za]) Arc-Authentication-Results: i=2; mx.microsoft.com 1; spf=fail (sender ip is 198.154.181.226) smtp.rcpttodomain=radissonhotels.com smtp.mailfrom=ewc.edu.za; dmarc=none action=none header.from=ewc.edu.za; dkim=pass (signature was verified) header.d=ekurhuleniwestcollege.onmicrosoft.com; dkim=pass (signature was verified) header.d=mail-dkim-us-west-2.prod.hydra.sophos.com; arc=pass (0 oda=1 ltdi=1 spf=[1,1,smtp.mailfrom=ewc.edu.za] dkim=[1,1,header.d=ewc.edu.za] dmarc=[1,1,header.from=ewc.edu.za]) Arc-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ewc.edu.za; dmarc=pass action=none header.from=ewc.edu.za; dkim=pass header.d=ewc.edu.za; arc=none Authentication-Results: spf=pass (sender IP is 40.107.6.126) smtp.mailfrom=EWC.edu.za; dkim=pass (signature was verified) header.d=EkurhuleniWestCollege.onmicrosoft.com;dkim=pass (signature was verified) header.d=EkurhuleniWestCollege.onmicrosoft.com;dkim=pass (signature was verified) header.d=mail-dkim-us-west-2.prod.hydra.sophos.com;dmarc=bestguesspass action=none header.from=EWC.edu.za;compauth=pass reason=109 Received-Spf: Pass (protection.outlook.com: domain of EWC.edu.za designates 40.107.6.126 as permitted sender) receiver=protection.outlook.com; client-ip=40.107.6.126; helo=EUR04-DB3-obe.outbound.protection.outlook.com; pr=C Received-Spf: Fail (protection.outlook.com: domain of ewc.edu.za does not designate 198.154.181.226 as permitted sender) receiver=protection.outlook.com; client-ip=198.154.181.226; helo=mfod-usw2.prod.hydra.sophos.com; X-Tm-Mail-Received-Time: 1712244591.667000 X-Tm-Mail-Uuid: 9427c1cc-77bf-43eb-b637-ab5708905c37 Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=EkurhuleniWestCollege.onmicrosoft.com; s=selector2-EkurhuleniWestCollege-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aNW9UAeyuGz4OJIwY7vl6d65efv3S79bzoGJC+39Etk=; b=oiM2yOMKxSOjvS/BnK9BAduYhie3WceDA0td883VKP0EMlpWwaDGap1uhcE8hD7BUmqhn7oGwM5y4T8TLTmd92IoUIRNGR5TnqC5IfpBuhIGD/uSGMp0PCwHMpUW+FWl1FlFo8H7cHs1xc2FvkRTm+WnS6WsftKD15VWgYzTR1Q= Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=EkurhuleniWestCollege.onmicrosoft.com; s=selector2-EkurhuleniWestCollege-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aNW9UAeyuGz4OJIwY7vl6d65efv3S79bzoGJC+39Etk=; b=oiM2yOMKxSOjvS/BnK9BAduYhie3WceDA0td883VKP0EMlpWwaDGap1uhcE8hD7BUmqhn7oGwM5y4T8TLTmd92IoUIRNGR5TnqC5IfpBuhIGD/uSGMp0PCwHMpUW+FWl1FlFo8H7cHs1xc2FvkRTm+WnS6WsftKD15VWgYzTR1Q= Dkim-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1712244534; s=v1; d=mail-dkim-us-west-2.prod.hydra.sophos.com; h=Content-Type:Date:Subject:To:From; bh=aNW9UAeyuGz4OJIwY7vl6d65efv3S79bzoGJC+39Etk=; b=cXVMQXbrBvGlqYWCOPMTVZO/bkNfRrAXLkyuqgyBdDVnZpgwU+nYnZtrYMF1YFjD B47M57lSsyabzDJssviI0HLa6BAFlGA1rTusQkSZg4Ap/COdz+k7gKdGAatiYZGT7xN zEtepMzMtyX/kqnPfwH2L1h+COBG0YXH+gN47pygpJAmSTwwGskgY3TRlfkmyKZzaAi 5txL3MoplWfg8AxGpllHF0mAcX9BwssOemAmUGouUwMMjdvYUEcaF4lc9SxYE8QWg5r Fq5s4cGDta+li9GNwcGgGbQGpVn7YfMjhB8fuP2frXgUUufZ1pQ+sC2hgYdcOH6XA3n /k7RQUv4FA== X-Ms-Exchange-Authentication-Results: spf=fail (sender IP is 198.154.181.226) smtp.mailfrom=ewc.edu.za; dkim=pass (signature was verified) header.d=EkurhuleniWestCollege.onmicrosoft.com;dmarc=none action=none header.from=EWC.edu.za; X-Sophos-Product-Type: Mailflow X-Sophos-Email-Id: ca7a7555cf8a44b0badbedfa8e7cff5d From: Mbali Mtembu <[email protected]> To: [email protected] Subject: =?UTF-8?B?UHJvZm9ybWEg?= Thread-Topic: Proforma Thread-Index: AQHahqPj6Qp2vAAoSEWcFsVanRVscg== Date: Thu, 4 Apr 2024 15:28:54 +0000 Message-Id: <DB8P193MB0757D912682A986C61D3FEC6E23C2@DB8P193MB0757.EURP193.PROD.OUTLOOK.COM> Accept-Language: en-US Content-Language: en-US X-Ms-Traffictypediagnostic: DB8P193MB0757:EE_|DB8P193MB0776:EE_|AMS0EPF000001AA:EE_|DB9P193MB1436:EE_|BN1PEPF0000468D:EE_|SA0PR05MB8879:EE_|DM6PR05MB5674:EE_ X-Ms-Exchange-Senderadcheck: 1 X-Ms-Exchange-Antispam-Relay: 0 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: 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 X-Microsoft-Antispam-Message-Info-Original: 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 X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB8P193MB0757.EURP193.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230031)(366007)(7416005)(376005)(1800799015)(41320700004)(17680700008); DIR:OUT; SFP:1501; X-Forefront-Antispam-Report-Untrusted: CIP:198.154.181.226;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mfod-usw2.prod.hydra.sophos.com;PTR:mfod-usw2.prod.hydra.sophos.com;CAT:NONE;SFS:(13230031)(376005)(36860700004)(82310400014)(41320700004)(1800799015);DIR:OUT;SFP:1102; Content-Type: multipart/mixed; boundary="----sinikael-?=_1-17122447561890.4964418050279711" MIME-Version: 1.0 X-Ms-Exchange-Transport-Crosstenantheadersstamped: DB8P193MB0776 X-Ms-Exchange-Transport-Crosstenantheadersstamped: DB9P193MB1436 X-Ms-Exchange-Transport-Crosstenantheadersstamped: SA0PR05MB8879 X-Sophos-Email: [us-west-2] Antispam-Engine: 5.1.4.1, AntispamData: 2024.4.4.150920 X-Lased-Spamprobability: 0.085099 X-Lased-Hits: BODYTEXTH_SIZE_10000_LESS 0.000000, BODYTEXTP_SIZE_3000_LESS 0.000000, BODYTEXTP_SIZE_400_LESS 0.000000, BODY_SIZE_3000_3999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, DKIM_SIGNATURE 0.000000, FRAUD_ATTACH 0.050000, FROM_SAME_AS_TO_DOMAIN 0.000000, HREF_LABEL_TEXT_NO_URI 0.000000, HREF_LABEL_TEXT_ONLY 0.000000, HTML_70_90 0.100000, INVOICE_ATTACHMENT_CTA_URI 0.000000, NO_FUR_HEADER 0.000000, OBFUSCATION 0.000000, OUTBOUND 0.000000, OUTBOUND_SOPHOS 0.000000, SINGLE_HREF_LABEL_PHISH_HI 0.000000, SINGLE_HREF_LABEL_PHISH_MED 0.000000, SINGLE_HREF_URI_IN_BODY 0.000000, SINGLE_HREF_URI_WITH_EMAIL 0.000000, SINGLE_URI_IN_BODY 0.000000, SUBJ_1WORD 0.100000, TEXT_DIRECTION 0.000000, TEXT_DIR_LTR_ONLY 0.000000, TO_NAME_IS_ADDY 0.000000, URI_WITH_PATH_ONLY 0.000000, __ANY_URI 0.000000, __ARCAUTH_DKIM_PASSED 0.000000, __ARCAUTH_DMARC_PASSED 0.000000, __ARCAUTH_PASSED 0.000000, __ARC_SEAL_MICROSOFT 0.000000, __ARC_SIGNATURE_MICROSOFT 0.000000, __ATTACHMENT_PHRASE 0.000000, __ATTACH_CTE_QUOTED_PRINTABLE 0.000000, __BODY_NO_MAILTO 0.000000, __BULK_NEGATE 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTYPE_HAS_BOUNDARY 0.000000, __CTYPE_MULTIPART 0.000000, __CTYPE_MULTIPART_ALT 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FILESHARE_PHRASE 0.000000, __FRAUD_COMMON 0.000000, __FRAUD_PAPERWORK 0.000000, __FROM_ADDY_STARTS_UC 0.000000, __FROM_DOMAIN_IN_ANY_TO1 0.000000, __FROM_DOMAIN_IN_RCPT 0.000000, __FROM_DOMAIN_MIXED_CASE 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_RDNS_SOPHOS 0.000000, __HAS_FROM 0.000000, __HAS_HTML 0.000000, __HAS_MSGID 0.000000, __HAS_X_FF_ASR 0.000000, __HAS_X_FF_ASR_CAT 0.000000, __HAS_X_FF_ASR_SFV 0.000000, __HIDDEN_HTML_CONTENT 0.000000, __HREF_LABEL_PHISH 0.000000, __HREF_LABEL_TEXT 0.000000, __HTML_AHREF_TAG 0.000000, __HTML_ATTR_DIR 0.000000, __HTML_BOLD 0.000000, __HTML_DIR_LTR 0.000000, __HTML_TAG_DIV 0.000000, __HTTPS_URI 0.000000, __INVOICE_MULTILINGUAL 0.000000, __JSON_HAS_SCHEMA_VERSION 0.000000, __JSON_HAS_TRACKING_ID 0.000000, __MIME_HTML 0.000000, __MIME_TEXT_H 0.000000, __MIME_TEXT_H1 0.000000, __MIME_TEXT_H2 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_TEXT_P2 0.000000, __MIME_VERSION 0.000000, __MSGID_32_64_CAPS 0.000000, __MULTIPLE_URI_TEXT 0.000000, __OUTBOUND_SOPHOS_FUR 0.000000, __OUTBOUND_SOPHOS_FUR_IP 0.000000, __OUTBOUND_SOPHOS_FUR_RDNS 0.000000, __PART_TYPE_HTML 0.000000, __SANE_MSGID 0.000000, __SINGLE_URI_MPART_BOTH 0.000000, __STYLE_RATWARE_NEG 0.000000, __STYLE_TAG 0.000000, __SUBJ_SHORT 0.000000, __TAG_EXISTS_HTML 0.000000, __TEXT_DIR_LTR 0.000000, __TO_DOMAIN_IN_FROM 0.000000, __TO_HOST_IN_FROM 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NO_NAME 0.000000, __URI_CTA_NOT_DOCUSIGN2 0.000000, __URI_EMAIL_IN_QUERY 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NS 0.000000, __URI_WITH_PATH 0.000000, __X_FF_ASR_SCL_NSP 0.000000, __X_FF_ASR_SFV_NSPM 0.000000 X-Lased-Impersonation: False X-Lased-Spam: NonSpam X-Sophos-Mailflow-Processing-Id: d839129669df4cc68fac484b9e6c3875 X-Sophos-Mh-Mail-Info-Key: NFY5UVhYMEZsaHoyMEc0LTE3Mi4xNy4wLjE3MQ== X-Eopattributedmessage: 1 X-Ms-Exchange-Transport-Crosstenantheadersstripped: AMS0EPF000001AA.eurprd05.prod.outlook.com X-Ms-Exchange-Transport-Crosstenantheadersstripped: BN1PEPF0000468D.namprd05.prod.outlook.com X-Ms-Office365-Filtering-Correlation-Id: 796e38e9-db71-4d63-e759-08dc54bc4c68 "x-Ms-Exchange-Organization-Skipsafeattachmentprocessing": 1 "x-Ms-Exchange-Organization-Bypassclutter": "true" X-Tm-Received-Spf: Pass (domain of [email protected] designates 40.107.6.126 as permitted sender) client-ip=40.107.6.126; [email protected]; helo=eur04-db3-obe.outbound.protection.outlook.com X-Tm-Authentication-Results: spf=pass (sender IP address: 40.107.6.126) smtp.mailfrom=ewc.edu.za; dkim=none (no processed signatures) header.d=none; dmarc=pass action=no records header.from=ewc.edu.za; arc=none X-Tm-As-Ers: 40.107.6.126-127.5.21.1 X-Tmase-Version: StarCloud-1.3-9.1.1015-28298.000 X-Tmase-Result: 10--15.515100-10.000000 X-Tmase-Matchedrid: OCVV42VlYrW/mHJYmCg5QUkU8FyBiYUi2ebHr1N1QfFLNIpLhW/9pXly VyY9blzycUf9IlMx9/qxfhoVgAwhg2txVUHuXeM7NEorIK7MJ8qp0LbUi4tp6NzCG84uGgPgVSP DvQYo7Cl0pRQwwYloMYtozUB7oVBXG6vAF77GsJY/rTBBLbNXldrec01W6Rwtmez0VeM+EIl66l HQ6iQi1XtwXnzlX4kZ7hzwMwStqTsy2otbqJoBau2DPz5Kf83AUOOsc/slMqNEKZlqWQag3rR/n 6g6hoGK8EIeh4mcjKHRcH+pqIdu3Z0s9apb6qH5o8THzYakUYS0eRJHknlKSRugHm8DEKOGwqMZ FCdDzWF7VwKZtIquQVvIId8M26gTq0GV2m/ysO4KmuYPDBejspGVTeIwn9IlLRtwOjyP9FfA931 +mNd9sFPQ/IGe82LtWLAmmsEiLin0Jy+NVgqP6nQ0tlhyXGTx2G3fnC9ruJKhh/rWvOgat37cGd 19dSFd X-Tmase-Snap-Result: 1.821001.0001-0-1-22:0,33:0,34:0-0 X-Tmase-Xgencloud: 9ab49b40-97e0-4f21-bbeb-14957b0f6e77-0-0-200-0 X-Tm-Addin-Auth: 9+DUWrwMcKnB8ReKyXAFnLrtrkA0CL7zdMMCzQXkQM9rZYqzbOYgH6m02E1 7j8drQlGBTXYE8OeuOpA9ZJuHNWsQhfrEfPQFqQQkomhimP8WlROwK0VTI1jDDhqGvbsxkfVjOR Ei3lmnDPsNAkoTDX0TPJMO18hViMmOcaRczZddXXStbEmWSTsVLj306IHFbjyzCUC3nsJeZePWi qqD4ER2qA/cnuF+kjqxJO1k9QGLkcFRCbfPObYsWbN8oSiSFFpQaEJhxvRszNJpMn2PcDxm3ZOb uPdVDWBWBebYmOuc3+VZmj6/VkGySP3HZBPEusVdCQwuQow7k9adLAssng==.YiZEOsLCHDX4aX XJKcekN+KzCERaAnnUwZNvbWWtpCqwJB3k89iDJFspuF4rS2TFzyOUyXJ4xhHtzlHkHAb3brbH6 foHf02PuIvYdG4ERkH4C2Bv1rjBEv7GCxuWOTo5zx2Pn6xUo43HJ8fRZoyQfvdkB3kXpVzrcPXP FCwyjXYWEZ8MmA6nF9G22LBNA5Z0dsReAyfyjWYE6bXxivNhP9Y8qIgQKsbgWa37z0SGFDoAAN4 EXxnshDrWKPo4Bzodje+GaCGPiljGHOW5+cMqRw9XCJc140XMhd3EeRJauqEVtt2g8JiF3JkfFy Ov4WI+rg1+h3Ch+PiK9CvIJRrOmg== X-Tm-Addin-Productcode: EMS X-Tm-Deliver-Signature: 26305303300307340D33B4602D7C9F5C Return-Path: [email protected] X-Ms-Exchange-Organization-Expirationstarttime: 04 Apr 2024 15:31:29.2296 (UTC) X-Ms-Exchange-Organization-Expirationstarttimereason: OriginalSubmit X-Ms-Exchange-Organization-Expirationinterval: 1:00:00:00.0000000 X-Ms-Exchange-Organization-Expirationintervalreason: OriginalSubmit X-Ms-Exchange-Organization-Network-Message-Id: 796e38e9-db71-4d63-e759-08dc54bc4c68 X-Eoptenantattributedmessage: 1e69e311-af1f-4162-b24e-16bb3f962d34:0 X-Ms-Exchange-Organization-Messagedirectionality: Incoming X-Ms-Exchange-Skiplistedinternetsender: ip=[40.107.6.126];domain=EUR04-DB3-obe.outbound.protection.outlook.com X-Ms-Exchange-Externaloriginalinternetsender: ip=[40.107.6.126];domain=EUR04-DB3-obe.outbound.protection.outlook.com X-Ms-Publictraffictype: Email X-Ms-Exchange-Organization-Authsource: BN1PEPF0000468D.namprd05.prod.outlook.com X-Ms-Exchange-Organization-Authas: Anonymous X-Ms-Office365-Filtering-Correlation-Id-Prvs: 6891891a-0a10-4159-23e8-08dc54bc114d X-Ms-Exchange-Organization-Scl: 1 X-Microsoft-Antispam: BCL:0; X-Forefront-Antispam-Report: CIP:18.185.115.175;CTRY:IE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:EUR04-DB3-obe.outbound.protection.outlook.com;PTR:mail-db3eur04on2126.outbound.protection.outlook.com;CAT:NONE;SFS:(13230031)(82310400014);DIR:INB; X-Ms-Exchange-Crosstenant-Originalarrivaltime: 04 Apr 2024 15:31:28.9171 (UTC) X-Ms-Exchange-Crosstenant-Network-Message-Id: 796e38e9-db71-4d63-e759-08dc54bc4c68 X-Ms-Exchange-Crosstenant-Id: 1e69e311-af1f-4162-b24e-16bb3f962d34 X-Ms-Exchange-Crosstenant-Authsource: BN1PEPF0000468D.namprd05.prod.outlook.com X-Ms-Exchange-Crosstenant-Authas: Anonymous X-Ms-Exchange-Crosstenant-Fromentityheader: Internet X-Ms-Exchange-Transport-Endtoendlatency: 00:00:07.3056056 X-Ms-Exchange-Processed-By-Bccfoldering: 15.20.7409.037 X-Microsoft-Antispam-Mailbox-Delivery: ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097)(140003); X-Microsoft-Antispam-Message-Info: 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 Content-Transfer-Encoding: 7bit

Sharing

General

Malware Config

Signatures

Files