File: /home/ssiacademy/mail/new/1742838560.M604238P23941.fan.fanlow.com,S=9564,W=9759
Return-Path: <>
Delivered-To: ssiacademy@fan.fanlow.com
Received: from fan.fanlow.com
by fan.fanlow.com with LMTP
id OELQIyCb4WeFXQAA3d0vlg
(envelope-from <>)
for <ssiacademy@fan.fanlow.com>; Mon, 24 Mar 2025 12:49:20 -0500
Return-path: <>
Envelope-to: support@ssiacademy.com
Delivery-date: Mon, 24 Mar 2025 12:49:20 -0500
Received: from spamtitan1.icta.go.ke ([102.220.23.139]:57404)
by fan.fanlow.com with esmtps (TLS1.2) tls TLS_ECDH_anon_WITH_AES_256_CBC_SHA
(Exim 4.98.1)
id 1twlvF-000000007HL-388l
for support@ssiacademy.com;
Mon, 24 Mar 2025 12:49:20 -0500
Received: by spamtitan1.icta.go.ke (Postfix)
id 6965D43646B; Mon, 24 Mar 2025 20:45:42 +0300 (EAT)
Date: Mon, 24 Mar 2025 20:45:42 +0300 (EAT)
From: MAILER-DAEMON@icta.go.ke (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: support@ssiacademy.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="2D4374362BB.1742838342/spamtitan1.icta.go.ke"
Content-Transfer-Encoding: 8bit
Message-Id: <20250324174542.6965D43646B@spamtitan1.icta.go.ke>
X-Spam-Status: No, score=3.0
X-Spam-Score: 30
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "fan.fanlow.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This is the mail system at host spamtitan1.icta.go.ke. I'm
sorry to have to inform you that your message could not be delivered to one
or more recipients. It's attached below. For further assistance, please send
mail to postmaster.
Content analysis details: (3.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: govmail.ke]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.220.23.139 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.220.23.139 listed in bl.score.senderscore.com]
1.5 KAM_MXURI URI: URI begins with a mail exchange prefix, i.e.
mx.[...]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: NO
This is a MIME-encapsulated message.
--2D4374362BB.1742838342/spamtitan1.icta.go.ke
Content-Description: Notification
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
This is the mail system at host spamtitan1.icta.go.ke.
I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.
For further assistance, please send mail to postmaster.
If you do so, please include this problem report. You can
delete your own text from the attached returned message.
The mail system
<amb.rome@mfa.go.ke>: host mail.govmail.ke[102.220.23.54] said: 550 5.1.1
<amb.rome@mfa.go.ke>: Recipient address rejected: mfa.go.ke (in reply to
RCPT TO command)
--2D4374362BB.1742838342/spamtitan1.icta.go.ke
Content-Description: Delivery report
Content-Type: message/delivery-status
Reporting-MTA: dns; spamtitan1.icta.go.ke
X-Postfix-Queue-ID: 2D4374362BB
X-Postfix-Sender: rfc822; support@ssiacademy.com
Arrival-Date: Mon, 24 Mar 2025 20:45:42 +0300 (EAT)
Final-Recipient: rfc822; amb.rome@mfa.go.ke
Original-Recipient: rfc822;amb.rome@mfa.go.ke
Action: failed
Status: 5.1.1
Remote-MTA: dns; mail.govmail.ke
Diagnostic-Code: smtp; 550 5.1.1 <amb.rome@mfa.go.ke>: Recipient address
rejected: mfa.go.ke
--2D4374362BB.1742838342/spamtitan1.icta.go.ke
Content-Description: Undelivered Message
Content-Type: message/rfc822
Content-Transfer-Encoding: 8bit
Return-Path: <support@ssiacademy.com>
Received: from localhost (localhost [127.0.0.1])
by spamtitan1.icta.go.ke (Postfix) with ESMTP id 2D4374362BB
for <amb.rome@mfa.go.ke>; Mon, 24 Mar 2025 20:45:42 +0300 (EAT)
X-Virus-Scanned: by SpamTitan at icta.go.ke
X-Spam-Flag: NO
X-Spam-Score: 1.19
X-Spam-Level: *
X-Spam-Status: No, score=1.19 tagged_above=-999 required=5
tests=[ADVANCE_FEE_3_NEW_MONEY=1.592, BAYES_00=-1.9, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
DMARC_MISSING=0.1, INVALID_DATE=1.096, LOTS_OF_MONEY=0.001,
RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001,
RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_PASS=-0.001,
SPF_PASS=-0.001, SUBJ_ALL_CAPS=0.5, URIBL_BLOCKED=0.001]
autolearn=no autolearn_force=no
Received: from spamtitan1.icta.go.ke (localhost [127.0.0.1])
by spamtitan1.icta.go.ke (Postfix) with ESMTP id 20C41436466
for <amb.rome@mfa.go.ke>; Mon, 24 Mar 2025 20:45:33 +0300 (EAT)
Authentication-Results: spamtitan1.icta.go.ke;
dkim=pass (2048-bit rsa key sha256) header.d=ssiacademy.com
header.i=@ssiacademy.com header.b=P8GgKgal header.a=rsa-sha256
header.s=default x-bits=2048;
spf=pass smtp.mailfrom=support@ssiacademy.com
smtp.helo=glitzopticalonline.com
Received-SPF: pass
(ssiacademy.com: 162.241.189.194 is authorized to use 'support@ssiacademy.com' in 'mfrom' identity (mechanism 'a' matched))
receiver=spamtitan1.icta.go.ke;
identity=mailfrom;
envelope-from="support@ssiacademy.com";
helo=glitzopticalonline.com;
client-ip=162.241.189.194
Received: from glitzopticalonline.com (glitzopticalonline.com [162.241.189.194])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by spamtitan1.icta.go.ke (Postfix) with ESMTPS id 346B2436476
for <amb.rome@mfa.go.ke>; Mon, 24 Mar 2025 20:45:32 +0300 (EAT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=ssiacademy.com; s=default; h=From:Message-Id:Date:Subject:To:Sender:
Reply-To:Cc:MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=RAUMa8x2pGv4cGJe6zK15Rl5BOO40KKNlFMnFeaUtxs=; b=P8GgKgalX0T0Oie/eJO1Od37fp
AwWP+miZPihOwtYoGtOqZF596RXqM6bMQ4G5LQl3WVVZTIfpq6eL7L7foZWSexGiT2JjesKoDUmVs
jTjCMSwBnHnuTzPm6Q3zv5WD7Le/Iop3WsUrBXECI0y5K1UXQ97BBQ8ARoEMx1L1DvGWHDGBi4eCh
HlwilV/lGkMhQ6gG+94S/ferlAdCSo8Pp8NuUze4yCNxxdYEJLd+U3JWBr44gPmgceH54t5OUkLlL
VEnhSoxnL5OppwmYNb8ybLzmi2bumjirutIfdHtXtu55YpEXO165qN2EjmcAIwG4cpubmksWRs2Nw
Qeziqpwg==;
Received: from ssiacademy by fan.fanlow.com with local (Exim 4.98.1)
(envelope-from <support@ssiacademy.com>)
id 1twluC-000000006Og-3m9b
for amb.rome@mfa.go.ke;
Mon, 24 Mar 2025 12:48:09 -0500
To: amb.rome@mfa.go.ke
Subject: LET PARTNERSHIP TOGETHER
X-PHP-Script: ssiacademy.com/wp-content/plugins/ww1hzJH5EB.php for 194.156.79.250
X-PHP-Originating-Script: 1072:ww1hzJH5EB.php
Date: Mon, 24 Mar 2025 17:48:08 +0000
From: Nicolas Bellfort <support@ssiacademy.com>
Reply-To: bellfort.solicitor@gmail.com
Message-ID: <f54703a48fc9d4bbca7b7bac37a1f816@ssiacademy.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Message-Id: <E1twluC-000000006Og-3m9b@fan.fanlow.com>
From: support@ssiacademy.com
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - fan.fanlow.com
X-AntiAbuse: Original Domain - mfa.go.ke
X-AntiAbuse: Originator/Caller UID/GID - [1072 990] / [47 12]
X-AntiAbuse: Sender Address Domain - ssiacademy.com
X-Get-Message-Sender-Via: fan.fanlow.com: authenticated_id: ssiacademy/from_h
X-Authenticated-Sender: fan.fanlow.com: support@ssiacademy.com
X-Source:
X-Source-Args: /opt/cpanel/ea-php82/root/usr/bin/php-cgi /home/ssiacademy/public_html/wp-content/plugins/ww1hzJH5EB.php
X-Source-Dir: ssiacademy.com:/public_html/wp-content/plugins
Compliment of the day, I am Nicolas Bellfort, a Solicitor here in London, United Kingdom. I have a financial offer for you that's worth US$8,500,000.00. Be rest assured this is legitimate and I will provide you with verifiable documents to prove this and you have the legal backing from me as a Solicitor. If you have interest in this, you can contact me on my personal email ( bellfort.solicitor@gmail.com or bellfort.solicitor@nicbellfortlaw.com) for more information. Best Regards, Nicolas Bellfort
--2D4374362BB.1742838342/spamtitan1.icta.go.ke--