Return-Path: <contact@motionstudio.online>
Delivered-To: info@egst.co.za
Received: from belanet.dedicated.co.za
	by belanet.dedicated.co.za with LMTP
	id OBP5GpyOUmM6dwIAnfvoAw
	(envelope-from <contact@motionstudio.online>)
	for <info@egst.co.za>; Fri, 21 Oct 2022 14:20:44 +0200
Return-path: <contact@motionstudio.online>
Envelope-to: info@egst.co.za
Delivery-date: Fri, 21 Oct 2022 14:20:44 +0200
Received: from motionstudio.online ([5.61.41.131]:46479)
	by belanet.dedicated.co.za with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.95)
	(envelope-from <contact@motionstudio.online>)
	id 1olr0v-0004ff-PL
	for info@egst.co.za;
	Fri, 21 Oct 2022 14:20:44 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=mail; d=motionstudio.online;
 h=Content-Type:MIME-Version:Date:Subject:From:Reply-To:Message-ID:To;
 i=contact@motionstudio.online;
 bh=iWSXH/dxIaY2R9naZz4WhY77KHZCOWtwHHbEoSJaHb4=;
 b=oDU+eEEzUyLBtl1ak0A6wQ27iV/ShKOY8K8tS/IQf7kHotsFwwEdeCIZ5jUavf8OhTgdR6BKXsjs
   FX9pptY3PTJdl56yX5qwyOKhdsZmfsPUSiiUqMDM/VATGOC34oY/afQqbA2xGdCszY0TfmGTaUcp
   eS3dArw2u+R+fEF2ip4=
Content-Type: multipart/alternative; boundary="------------090500050903000602090901"
MIME-Version: 1.0
Date: Fri, 21 Oct 2022 20:19:56 +0800
Subject: Domain : egst.co.za has been Expired.
From: Afrihost <contact@motionstudio.online>
Reply-To: Afrihost <contact@motionstudio.online>
X-FBL: 1_128_658_0_696E666F40656773742E636F2E7A61
Message-ID: <NDE2NDIZ.NJIXOTM3NW.65805810211419202256624081109@motionstudio.online>
To: "egst.co.za" <info@egst.co.za>
X-Spam-Status: No, score=3.8
X-Spam-Score: 38
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "belanet.dedicated.co.za",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello, Domain : egst.co.za has been Expired. Simply click
   on the button below to Pay your invoice(s). Remember, you can manage your
   payment details, view invoices, access your account history and make account
    payments in the My Billing section o [...] 
 Content analysis details:   (3.8 points, 4.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: motionstudio.online]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  2.0 PDS_OTHER_BAD_TLD      Untrustworthy TLDs
                             [URI: motionstudio.online (online)]
  0.0 HTML_IMAGE_RATIO_04    BODY: HTML has a low ratio of text to image
                             area
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
  0.0 FROM_SUSPICIOUS_NTLD   From abused NTLD
X-Spam-Flag: NO

--------------090500050903000602090901
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=utf-8; format=flowed
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--------------090500050903000602090901
Content-Type: multipart/related; boundary="------------070003020601010009040801"

--------------070003020601010009040801
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64

[encoded data, 12766 characters]

--------------070003020601010009040801
Content-Type: image/png; name="C:\ProgramData\G-Lock Software\EasyMail7\Data\Temp Edit\20221021140407008\content\mail
 (1).png"
Content-Disposition: inline; filename="mail (1).png"
Content-Transfer-Encoding: base64
Content-ID: <CID-2cc4c328-3e2d-4718-8f8d-1ba106c74586>

[encoded data, 5313 characters]
B/mdJMqWAAAAAElFTkSuQmCC

--------------070003020601010009040801
Content-Type: image/png; name="C:\ProgramData\G-Lock Software\EasyMail7\Data\Temp Edit\20221021140407008\content\mail.png"
Content-Disposition: inline; filename="mail.png"
Content-Transfer-Encoding: base64
Content-ID: <CID-0889c638-b9a3-4872-839f-aed29368d150>

[encoded data, 9317 characters]

--------------070003020601010009040801--

--------------090500050903000602090901--

