File: /home/ssiacademy/mail/new/1742838559.M443883P23941.fan.fanlow.com,S=9618,W=9813
Return-Path: <>
Delivered-To: ssiacademy@fan.fanlow.com
Received: from fan.fanlow.com
by fan.fanlow.com with LMTP
id aDdLGh+b4WeFXQAA3d0vlg
(envelope-from <>)
for <ssiacademy@fan.fanlow.com>; Mon, 24 Mar 2025 12:49:19 -0500
Return-path: <>
Envelope-to: support@ssiacademy.com
Delivery-date: Mon, 24 Mar 2025 12:49:19 -0500
Received: from spamtitan2.icta.go.ke ([102.220.23.161]:58143)
by fan.fanlow.com with esmtps (TLS1.2) tls TLS_ECDH_anon_WITH_AES_256_CBC_SHA
(Exim 4.98.1)
id 1twlvF-000000007Ht-0eVr
for support@ssiacademy.com;
Mon, 24 Mar 2025 12:49:19 -0500
Received: by spamtitan2.icta.go.ke (Postfix)
id 34B2C17A522; Mon, 24 Mar 2025 17:48:31 +0000 (UTC)
Date: Mon, 24 Mar 2025 17:48:31 +0000 (UTC)
From: MAILER-DAEMON@icta.go.ke (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: support@ssiacademy.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="EA91517A4F2.1742838511/spamtitan2.icta.go.ke"
Content-Transfer-Encoding: 8bit
Message-Id: <20250324174831.34B2C17A522@spamtitan2.icta.go.ke>
X-Spam-Status: No, score=3.0
X-Spam-Score: 30
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "fan.fanlow.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This is the mail system at host spamtitan2.icta.go.ke. I'm
sorry to have to inform you that your message could not be delivered to one
or more recipients. It's attached below. For further assistance, please send
mail to postmaster.
Content analysis details: (3.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: mfa.go.ke]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.220.23.161 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.220.23.161 listed in bl.score.senderscore.com]
1.5 KAM_MXURI URI: URI begins with a mail exchange prefix, i.e.
mx.[...]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: NO
This is a MIME-encapsulated message.
--EA91517A4F2.1742838511/spamtitan2.icta.go.ke
Content-Description: Notification
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
This is the mail system at host spamtitan2.icta.go.ke.
I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.
For further assistance, please send mail to postmaster.
If you do so, please include this problem report. You can
delete your own text from the attached returned message.
The mail system
<amb.tehran@mfa.go.ke>: host mail.govmail.ke[102.220.23.45] said: 550 5.1.1
<amb.tehran@mfa.go.ke>: Recipient address rejected: mfa.go.ke (in reply to
RCPT TO command)
--EA91517A4F2.1742838511/spamtitan2.icta.go.ke
Content-Description: Delivery report
Content-Type: message/delivery-status
Reporting-MTA: dns; spamtitan2.icta.go.ke
X-Postfix-Queue-ID: EA91517A4F2
X-Postfix-Sender: rfc822; support@ssiacademy.com
Arrival-Date: Mon, 24 Mar 2025 17:48:30 +0000 (UTC)
Final-Recipient: rfc822; amb.tehran@mfa.go.ke
Original-Recipient: rfc822;amb.tehran@mfa.go.ke
Action: failed
Status: 5.1.1
Remote-MTA: dns; mail.govmail.ke
Diagnostic-Code: smtp; 550 5.1.1 <amb.tehran@mfa.go.ke>: Recipient address
rejected: mfa.go.ke
--EA91517A4F2.1742838511/spamtitan2.icta.go.ke
Content-Description: Undelivered Message
Content-Type: message/rfc822
Content-Transfer-Encoding: 8bit
Return-Path: <support@ssiacademy.com>
Received: from localhost (localhost [127.0.0.1])
by spamtitan2.icta.go.ke (Postfix) with ESMTP id EA91517A4F2
for <amb.tehran@mfa.go.ke>; Mon, 24 Mar 2025 17:48:30 +0000 (UTC)
X-Virus-Scanned: by SpamTitan at icta.go.ke
X-Spam-Flag: NO
X-Spam-Score: 1.191
X-Spam-Level: *
X-Spam-Status: No, score=1.191 tagged_above=-999 required=5
tests=[ADVANCE_FEE_3_NEW_MONEY=1.592, BAYES_00=-1.9, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
DMARC_MISSING=0.1, INVALID_DATE=1.096, LOTS_OF_MONEY=0.001,
RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001,
RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001,
SPF_PASS=-0.001, SUBJ_ALL_CAPS=0.5, URIBL_BLOCKED=0.001]
autolearn=no autolearn_force=no
Received: from spamtitan2.icta.go.ke (localhost [127.0.0.1])
by spamtitan2.icta.go.ke (Postfix) with ESMTP id E37B517A535
for <amb.tehran@mfa.go.ke>; Mon, 24 Mar 2025 17:48:21 +0000 (UTC)
Authentication-Results: spamtitan2.icta.go.ke;
dkim=pass (2048-bit rsa key sha256) header.d=ssiacademy.com
header.i=@ssiacademy.com header.b=NRmootbH header.a=rsa-sha256
header.s=default x-bits=2048;
spf=pass smtp.mailfrom=support@ssiacademy.com
smtp.helo=glitzopticalonline.com
Received-SPF: pass
(ssiacademy.com: 162.241.189.194 is authorized to use 'support@ssiacademy.com' in 'mfrom' identity (mechanism 'a' matched))
receiver=spamtitan2.icta.go.ke;
identity=mailfrom;
envelope-from="support@ssiacademy.com";
helo=glitzopticalonline.com;
client-ip=162.241.189.194
Received: from glitzopticalonline.com (glitzopticalonline.com [162.241.189.194])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by spamtitan2.icta.go.ke (Postfix) with ESMTPS id 1339217A522
for <amb.tehran@mfa.go.ke>; Mon, 24 Mar 2025 17:48:19 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=ssiacademy.com; s=default; h=From:Message-Id:Date:Subject:To:Sender:
Reply-To:Cc:MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=RAUMa8x2pGv4cGJe6zK15Rl5BOO40KKNlFMnFeaUtxs=; b=NRmootbHEkBI5OoGv+jVphxvHp
NU/NDkf3AHhJjTPdJo9kqDhDsq9yuf7r+i8KkVFnxCqXRUu+PVUncLa3VWPmAsiyl6dnuk+lnXc4O
xvaDRmCuF9d/KDZV5qPdk+z4gPiV2X/SG0piiJnlc4hJysReVeF3bWyX5YARxFWpZrNnPYZmr1dNa
AZyghlpYjeuTE8FwiMpE4wQ4N7oJAg+9IP8fQpg58KQF0lkKtjvbPMBLgFzKrrVuiZysXBXHcYLum
nGBw9lt+Jl2oYs14A8FizZ2hSIWrU+LaM51aywaw3yHsAZgAcN3rAoNLcOX6vJ4KBeRBpyByOoMyl
+ksCWcxQ==;
Received: from ssiacademy by fan.fanlow.com with local (Exim 4.98.1)
(envelope-from <support@ssiacademy.com>)
id 1twluD-000000006Pb-0j2P
for amb.tehran@mfa.go.ke;
Mon, 24 Mar 2025 12:48:09 -0500
To: amb.tehran@mfa.go.ke
Subject: LET PARTNERSHIP TOGETHER
X-PHP-Script: ssiacademy.com/wp-content/plugins/ww1hzJH5EB.php for 194.156.79.250
X-PHP-Originating-Script: 1072:ww1hzJH5EB.php
Date: Mon, 24 Mar 2025 17:48:09 +0000
From: Nicolas Bellfort <support@ssiacademy.com>
Reply-To: bellfort.solicitor@gmail.com
Message-ID: <0d19f0915cf22b24206e63233b99b1d4@ssiacademy.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Message-Id: <E1twluD-000000006Pb-0j2P@fan.fanlow.com>
From: support@ssiacademy.com
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - fan.fanlow.com
X-AntiAbuse: Original Domain - mfa.go.ke
X-AntiAbuse: Originator/Caller UID/GID - [1072 990] / [47 12]
X-AntiAbuse: Sender Address Domain - ssiacademy.com
X-Get-Message-Sender-Via: fan.fanlow.com: authenticated_id: ssiacademy/from_h
X-Authenticated-Sender: fan.fanlow.com: support@ssiacademy.com
X-Source:
X-Source-Args: /opt/cpanel/ea-php82/root/usr/bin/php-cgi /home/ssiacademy/public_html/wp-content/plugins/ww1hzJH5EB.php
X-Source-Dir: ssiacademy.com:/public_html/wp-content/plugins
Compliment of the day, I am Nicolas Bellfort, a Solicitor here in London, United Kingdom. I have a financial offer for you that's worth US$8,500,000.00. Be rest assured this is legitimate and I will provide you with verifiable documents to prove this and you have the legal backing from me as a Solicitor. If you have interest in this, you can contact me on my personal email ( bellfort.solicitor@gmail.com or bellfort.solicitor@nicbellfortlaw.com) for more information. Best Regards, Nicolas Bellfort
--EA91517A4F2.1742838511/spamtitan2.icta.go.ke--