from mushawe.yoafrica.com ([196.44.176.11])
	by gwayi.yoafrica.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
	(Exim 4.90_1 (FreeBSD))
	(envelope-from <bounce+6a16c8.25cd7-dnsadmin=yoafrica.com@propertysend.com>)
	id 1gCqmR-0000Uc-Ij
	for dnsadmin@yoafrica.com; Wed, 17 Oct 2018 20:42:51 +0200

from mukosi.yoafrica.com ([196.44.176.140]:10495)
	by mushawe.yoafrica.com with esmtp (Exim 4.90_1)
	id 1gCqtX-0003mo-B5
	for dnsadmin@yoafrica.com; Wed, 17 Oct 2018 20:50:11 +0200

from localhost (localhost [127.0.0.1])
	by mukosi.yoafrica.com (Postfix) with ESMTP id 5DAD9D3DBF6
	for <dnsadmin@yoafrica.com>; Wed, 17 Oct 2018 20:43:32 +0200 (CAT)

Yes, score=15.691 tagged_above=-999 required=5
	tests=[BAYES_50=0.8, BOTNET=3.5, DKIM_ADSP_CUSTOM_MED=0.001,
	DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_EXTRA=1,
	FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001,
	FSL_HELO_FAKE=1.667, HEADER_FROM_DIFFERENT_DOMAINS=0.249,
	HTML_MESSAGE=0.001, KAM_INFOUSMEBIZ=0.75, LOTS_OF_MONEY=0.001,
	MIME_HTML_ONLY=0.723, NML_ADSP_CUSTOM_MED=0.9,
	RAZOR2_CF_RANGE_51_100=1.886, RAZOR2_CHECK=0.922,
	RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_SBL=0.141,
	SARE_HTML_MANY_BR05=0.5, SPF_PASS=-0.001, ST_P0F_Linux=-0.1,
	ST_RCVD_IN_HOSTKARMA_W=0.001, URIBL_DBL_SPAM=2.5]
	autolearn=spam autolearn_force=no

mukosi.yoafrica.com (amavisd-new);
	dkim=pass (1024-bit key) header.d=propertysend.com

from mukosi.yoafrica.com (localhost [127.0.0.1])
	by mukosi.yoafrica.com (Postfix) with ESMTP id ACBF1D3DBCD
	for <dnsadmin@yoafrica.com>; Wed, 17 Oct 2018 20:43:27 +0200 (CAT)

delayed 305 seconds at mukosi.yoafrica.com, Wed, 17 Oct 2018 20:43:26 CAT

pass (propertysend.com: Sender is authorized to use 'bounce+6a16c8.25cd7-dnsadmin=yoafrica.com@propertysend.com' in 'mfrom' identity (mechanism 'include:mailgun.org' matched)) receiver=mukosi; identity=mailfrom; envelope-from="bounce+6a16c8.25cd7-dnsadmin=yoafrica.com@propertysend.com"; helo=do159-90.mailgun.net; client-ip=192.237.159.90

from do159-90.mailgun.net (do159-90.mailgun.net [192.237.159.90])
	by mukosi.yoafrica.com (Postfix) with ESMTP id 26B0FD3DB87
	for <dnsadmin@yoafrica.com>; Wed, 17 Oct 2018 20:43:25 +0200 (CAT)

a=rsa-sha256; v=1; c=relaxed/relaxed; d=propertysend.com; q=dns/txt;
 s=krs; t=1539801763; h=Content-Transfer-Encoding: Content-Type:
 MIME-Version: Message-ID: Date: Subject: To: From: Sender;
 bh=5V6tKXvMiFFgQdvvxGlhluTbTEl5y20xQ6dBP0NgWog=; b=AiB8JwhT/2s02LE/ZURf0q8BEEF0yPKVQ85Qy5vFzUireq9c9gG38qa6+zimfv8K27+utJ70
 PgeuYjYMgzvosXIU8xk3cGwGym+CCCnqlXb3VedqG1QzF8kjhyd6qV0to+55A42hAQuV40Us
 mZGYiv65qfT8OLjejmkc+XT2OrU=

from gmail.com (Unknown [103.63.2.226])
 by mxa.mailgun.org with ESMTP id 5bc78171.7f3c88322330-smtp-out-n03;
 Wed, 17 Oct 2018 18:37:37 -0000 (UTC)

[ ** SPAM ** ]RE: Where to send your COMMISSION
	dnsadmin@yoafrica.com?

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">

<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 10.00.9200.22137"></HEAD>
<body style=3D"MARGIN: 0.5em">
<P>Dear dnsadmin,<SPAN style=3D"FONT-SIZE: medium; FONT-FAMILY: arial,helve=
tica,sans-serif"><FONT size=3D4><FONT color=3D#000000 size=3D2><FONT color=
=3D#000000 size=3D2><FONT color=3D#000000 size=3D2><SPAN style=3D"FONT-SIZE=
: 14px"><SPAN style=3D"FONT-FAMILY: arial,helvetica,sans-serif"><FONT size=
=3D3><SPAN style=3D"FONT-SIZE: 13px; FONT-FAMILY: tahoma,arial,helvetica,sa=
ns-serif"><SPAN style=3D"FONT-SIZE: 18px"><FONT color=3D#000000 size=3D2 fa=
ce=3DArial><FONT color=3D#000000 size=3D2 face=3DArial>
<FONT color=3D#000000 size=3D2 face=3DArial></P>
<DIV><SPAN style=3D"FONT-SIZE: 14px"><SPAN style=3D"FONT-FAMILY: arial,helv=
etica,sans-serif"><FONT size=3D2><STRONG>We have seen a pending commission =
in your account.<BR></STRONG></FONT></SPAN></SPAN><SPAN style=3D"FONT-SIZE:=
 14px"><SPAN style=3D"FONT-FAMILY: arial,helvetica,sans-serif"><FONT size=
=3D2><BR>Your Reference Transaction:<BR>Commission&nbsp;Date&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp; :&nbsp;September 1-30, 2018<BR>Ref.&nbsp;Number&nbsp;&nbsp;=
 : BR4597OO3211I5KS10<BR>Commission&nbsp;Amount&nbsp; : <STRONG>
USD 15,230.88</STRONG><BR>Payment Status : Pending<BR></FONT></SPAN></SPAN>=
<SPAN style=3D"FONT-SIZE: 14px"><SPAN style=3D"FONT-FAMILY: arial,helvetica=
,sans-serif"><FONT size=3D2><STRONG><BR><A href=3D"https://trulix.co/upgrad=
e/314941835433643" target=3D_blank data-saferedirecturl=3D"https://www.goog=
le.com/url?q=3Dhttp://migre.me/vw2CY&amp;source=3Dgmail&amp;ust=3D153984651=
6708000&amp;usg=3DAFQjCNFISA2tKYJAJufXTm0trwOzYNysAQ">&gt;&gt; View The Det=
ails Of This Payment Here</A></STRONG></FONT></SPAN></SPAN></DIV>
etica,sans-serif"><FONT size=3D2><BR>Should this not be you, please contact=
 us</FONT></SPAN></SPAN></DIV>
etica,sans-serif"><FONT size=3D2><STRONG><EM><BR>Kind Regards<BR>QCL Billin=
g&nbsp;Team</EM></STRONG></FONT></SPAN></SPAN></DIV>
etica,sans-serif"><FONT size=3D2><BR><BR><BR><BR><BR><BR><BR><BR><BR></FONT=
></SPAN></SPAN>&nbsp;</DIV></FONT></FONT></FONT></SPAN></SPAN></FONT></SPAN=
></SPAN></FONT></FONT></FONT></FONT></SPAN></BODY></HTML>

From bounce+6a16c8.25cd7-dnsadmin=yoafrica.com@propertysend.com Wed Oct 17 20:42:51 2018