Return-Path: <contact@imcgroup.com>
Delivered-To: info@egst.co.za
Received: from belanet.dedicated.co.za
	by belanet.dedicated.co.za with LMTP
	id mNM2EpU2M2OgdwAAnfvoAw
	(envelope-from <contact@imcgroup.com>)
	for <info@egst.co.za>; Tue, 27 Sep 2022 19:44:53 +0200
Return-path: <contact@imcgroup.com>
Envelope-to: info@egst.co.za
Delivery-date: Tue, 27 Sep 2022 19:44:53 +0200
Received: from imcgroup.com ([88.214.58.27]:57512)
	by belanet.dedicated.co.za with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.95)
	(envelope-from <contact@imcgroup.com>)
	id 1odEdO-00077p-Ow
	for info@egst.co.za;
	Tue, 27 Sep 2022 19:44:53 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=mail; d=imcgroup.com;
 h=Content-Type:MIME-Version:Date:Subject:From:Reply-To:Message-ID:To;
 i=contact@imcgroup.com;
 bh=QxvLYvwBIdRI2ZV88AGlcgmcXeHoQnW2zhG/MTFSDJ0=;
 b=M1qnkK3wN6YfY3Bje+rHMj4ni0HgQ7FwmK4BscZCHmnZ3s02fbLBc662ITocfns7dVLVDgYdM5Nv
   032XUiaAcsgIHtkiAE7BnzgUIadDCCNa1egErwKQAwZ6SExZ+42Agk0SQQ4HRr7mqBzDj80lG8Ic
   Dw/6LUiXs1yUGL9wxEvR6WfkCtP9Ibk1xMV0iX/6mP7uFZsJzijnToGnnDbIiGVf2n8+QEo5LWkU
   QLUKaw2F2bxYOICrRbkc0HksBZIRsQmahLIQ2zZOkGO0XVcao+bS8cFOojDwSVW4Uw+a6aWHR4tR
   vRFK3UdKEVlCEeBlMXmzCe069qp3oL3KKsthlw==
Content-Type: multipart/alternative; boundary="------------030904000405010900020601"
MIME-Version: 1.0
Date: Tue, 27 Sep 2022 14:13:58 +0800
Subject: You Domain : egst.co.za Expired
From: "Afrihost Client Services" <contact@imcgroup.com>
Reply-To: "Afrihost Client Services" <contact@imcgroup.com>
X-FBL: 1_95_597_0_696E666F40656773742E636F2E7A61
Message-ID: <NDMXOTAX.NJK4NJMYNQ.59753409271413202258264825718@imcgroup.com>
To: "egst.co.za" <info@egst.co.za>
X-Spam-Status: No, score=2.5
X-Spam-Score: 25
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "belanet.dedicated.co.za",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello, You Domain : egst.co.za Expired. Simply click on the
    button below to Pay your invoice(s). Remember, you can manage your payment
    details, view invoices, access your account history and make account payments
    in the My Billing section o [...] 
 Content analysis details:   (2.5 points, 4.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: imcgroup.com]
  0.1 URIBL_SBL_A            Contains URL's A record listed in the Spamhaus SBL
                             blocklist
                             [URIs: imcgroup.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  1.1 DATE_IN_PAST_06_12     Date: is 6 to 12 hours before Received: date
  1.1 DKIM_ADSP_ALL          No valid author signature, domain signs all mail
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
  0.0 HTML_IMAGE_RATIO_04    BODY: HTML has a low ratio of text to image
                             area
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
X-Spam-Flag: NO

--------------030904000405010900020601
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=utf-8; format=flowed
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--------------030904000405010900020601
Content-Type: multipart/related; boundary="------------030507050305020001080102"

--------------030507050305020001080102
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64

[encoded data, 12705 characters]
dj4gCjwvZGl2PiAKPC9ib2R5PiAKPC9odG1sPg==

--------------030507050305020001080102
Content-Type: image/png; name="C:\ProgramData\G-Lock Software\EasyMail7\Data\Temp Edit\20220927132514874\content\mail
 (1).png"
Content-Disposition: inline; filename="mail (1).png"
Content-Transfer-Encoding: base64
Content-ID: <CID-6ff1cf57-c4cb-4686-8bbb-95b52908a2fd>

[encoded data, 5313 characters]
B/mdJMqWAAAAAElFTkSuQmCC

--------------030507050305020001080102
Content-Type: image/png; name="C:\ProgramData\G-Lock Software\EasyMail7\Data\Temp Edit\20220927132514874\content\mail.png"
Content-Disposition: inline; filename="mail.png"
Content-Transfer-Encoding: base64
Content-ID: <CID-22280b93-fe59-4187-bf1b-ef862562d3b7>

[encoded data, 9317 characters]

--------------030507050305020001080102--

--------------030904000405010900020601--

