I don't think the IPs matter it's MS365, so they're public info anyway:
MIME-Version: 1.0
Received: from SA0PR02MB7179.namprd02.prod.outlook.com (2603:10b6:806:e6::20)
by PH0PR02MB8455.namprd02.prod.outlook.com with HTTPS; Wed, 6 Aug 2025
14:34:35 +0000
Received: from CH3PR02MB9115.namprd02.prod.outlook.com (2603:10b6:610:147::21)
by SA0PR02MB7179.namprd02.prod.outlook.com (2603:10b6:806:e6::20) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9009.14; Wed, 6 Aug
2025 14:34:32 +0000
Received: from CH3PR02MB9115.namprd02.prod.outlook.com
([fe80::66a8:eb34:e5ec:74cb]) by CH3PR02MB9115.namprd02.prod.outlook.com
([fe80::66a8:eb34:e5ec:74cb%5]) with mapi id 15.20.8989.020; Wed, 6 Aug 2025
14:34:32 +0000
From: Submitting User <subuser@company.com>
To: DistributionList <DList@company.com>
CC: ColabUser <ColabUser@company.com>
Subject: RUSH: IDs & Badges
Thread-Topic: RUSH: IDs & Badges
Thread-Index: AdwG3e9Qx6a6qz16T4227aIONlGOww==
Importance: high
X-Priority: 1
Date: Wed, 6 Aug 2025 09:34:31 -0500
Message-ID:
<CH3PR02MB911565BD31D6CA04C2F46764832DA@CH3PR02MB9115.namprd02.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Exchange-Organization-AuthAs: Internal
X-MS-Exchange-Organization-AuthMechanism: 04
X-MS-Exchange-Organization-AuthSource: CH3PR02MB9115.namprd02.prod.outlook.com
X-MS-Has-Attach: yes
X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply
X-MS-Exchange-Organization-Network-Message-Id:
d7279e05-ab3a-4491-3cc1-08ddd4f65ba0
X-MS-Exchange-Organization-SCL: 1
X-MS-TNEF-Correlator:
X-MS-Exchange-Organization-RecordReviewCfmType: 0
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic:
CH3PR02MB9115:EE_|SA0PR02MB7179:EE_|PH0PR02MB8455:EE_
x-ms-exchange-crosstenant-originalarrivaltime: 06 Aug 2025 14:34:32.0256 (UTC)
x-ms-exchange-crosstenant-fromentityheader: Hosted
x-ms-exchange-crosstenant-id: b24f6ba3-6871-40a6-8f60-0b88b6780800
x-ms-exchange-transport-crosstenantheadersstamped: SA0PR02MB7179
x-ms-exchange-crosstenant-network-message-id:
d7279e05-ab3a-4491-3cc1-08ddd4f65ba0
authentication-results: dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=sscok.edu;
x-forefront-antispam-report:
CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CH3PR02MB9115.namprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(8096899003)(41050700001);DIR:INT;
x-ms-office365-filtering-correlation-id: d7279e05-ab3a-4491-3cc1-08ddd4f65ba0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|8096899003|41050700001;
x-ms-exchange-crosstenant-mailboxtype: HOSTED
x-ms-exchange-crosstenant-userprincipalname:
MPhC9cI6a+exgwrzlLk0CMjfNQwZBPLa4EopG1MKabgfSFOBhOiMjec6rek53CrjNpecBoL2our0UF3hXmysbg==
x-ms-exchange-crosstenant-authsource: CH3PR02MB9115.namprd02.prod.outlook.com
x-ms-exchange-crosstenant-authas: Internal
x-ms-exchange-transport-endtoendlatency: 00:00:03.5801050
x-ms-exchange-processed-by-bccfoldering: 15.20.9009.009
X-Microsoft-Antispam-Mailbox-Delivery:
ucf:0;jmr:0;auth:0;dest:I;ENG:(910005)(944506478)(944626604)(920097)(425001)(930097)(140003);
X-Microsoft-Antispam-Message-Info:
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
Content-Type: multipart/related;
boundary="_002_CH3PR02MB911565BD31D6CA04C2F46764832DACH3PR02MB9115namp_";
type="text/html"
The distribution list includes me and the other techs as well as the actual OSTicket email address, Exchange (online) copies all of the users in the list, but of course the original TO: is the distribution list