File: /home/ssiacademy/mail/new/1742838564.M259720P23941.fan.fanlow.com,S=9605,W=9800
Return-Path: <>
Delivered-To: ssiacademy@fan.fanlow.com
Received: from fan.fanlow.com
by fan.fanlow.com with LMTP
id oNhADySb4WeFXQAA3d0vlg
(envelope-from <>)
for <ssiacademy@fan.fanlow.com>; Mon, 24 Mar 2025 12:49:24 -0500
Return-path: <>
Envelope-to: support@ssiacademy.com
Delivery-date: Mon, 24 Mar 2025 12:49:24 -0500
Received: from spamtitan1.icta.go.ke ([102.220.23.139]:57407)
by fan.fanlow.com with esmtps (TLS1.2) tls TLS_ECDH_anon_WITH_AES_256_CBC_SHA
(Exim 4.98.1)
id 1twlvI-000000007Hc-0kXV
for support@ssiacademy.com;
Mon, 24 Mar 2025 12:49:24 -0500
Received: by spamtitan1.icta.go.ke (Postfix)
id 891094364AC; Mon, 24 Mar 2025 20:45:42 +0300 (EAT)
Date: Mon, 24 Mar 2025 20:45:42 +0300 (EAT)
From: MAILER-DAEMON@icta.go.ke (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: support@ssiacademy.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="4AF9343643E.1742838342/spamtitan1.icta.go.ke"
Content-Transfer-Encoding: 8bit
Message-Id: <20250324174542.891094364AC@spamtitan1.icta.go.ke>
X-Spam-Status: No, score=3.0
X-Spam-Score: 30
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "fan.fanlow.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This is the mail system at host spamtitan1.icta.go.ke. I'm
sorry to have to inform you that your message could not be delivered to one
or more recipients. It's attached below. For further assistance, please send
mail to postmaster.
Content analysis details: (3.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: govmail.ke]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.220.23.139 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.220.23.139 listed in bl.score.senderscore.com]
1.5 KAM_MXURI URI: URI begins with a mail exchange prefix, i.e.
mx.[...]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: NO
This is a MIME-encapsulated message.
--4AF9343643E.1742838342/spamtitan1.icta.go.ke
Content-Description: Notification
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
This is the mail system at host spamtitan1.icta.go.ke.
I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.
For further assistance, please send mail to postmaster.
If you do so, please include this problem report. You can
delete your own text from the attached returned message.
The mail system
<amb.khartoum@mfa.go.ke>: host mail.govmail.ke[102.220.22.222] said: 550 5.1.1
<amb.khartoum@mfa.go.ke>: Recipient address rejected: mfa.go.ke (in reply
to RCPT TO command)
--4AF9343643E.1742838342/spamtitan1.icta.go.ke
Content-Description: Delivery report
Content-Type: message/delivery-status
Reporting-MTA: dns; spamtitan1.icta.go.ke
X-Postfix-Queue-ID: 4AF9343643E
X-Postfix-Sender: rfc822; support@ssiacademy.com
Arrival-Date: Mon, 24 Mar 2025 20:45:42 +0300 (EAT)
Final-Recipient: rfc822; amb.khartoum@mfa.go.ke
Original-Recipient: rfc822;amb.khartoum@mfa.go.ke
Action: failed
Status: 5.1.1
Remote-MTA: dns; mail.govmail.ke
Diagnostic-Code: smtp; 550 5.1.1 <amb.khartoum@mfa.go.ke>: Recipient address
rejected: mfa.go.ke
--4AF9343643E.1742838342/spamtitan1.icta.go.ke
Content-Description: Undelivered Message
Content-Type: message/rfc822
Content-Transfer-Encoding: 8bit
Return-Path: <support@ssiacademy.com>
Received: from localhost (localhost [127.0.0.1])
by spamtitan1.icta.go.ke (Postfix) with ESMTP id 4AF9343643E
for <amb.khartoum@mfa.go.ke>; Mon, 24 Mar 2025 20:45:42 +0300 (EAT)
X-Virus-Scanned: by SpamTitan at icta.go.ke
X-Spam-Flag: NO
X-Spam-Score: 1.19
X-Spam-Level: *
X-Spam-Status: No, score=1.19 tagged_above=-999 required=5
tests=[ADVANCE_FEE_3_NEW_MONEY=1.592, BAYES_00=-1.9, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
DMARC_MISSING=0.1, INVALID_DATE=1.096, LOTS_OF_MONEY=0.001,
RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001,
RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_PASS=-0.001,
SPF_PASS=-0.001, SUBJ_ALL_CAPS=0.5, URIBL_BLOCKED=0.001]
autolearn=no autolearn_force=no
Received: from spamtitan1.icta.go.ke (localhost [127.0.0.1])
by spamtitan1.icta.go.ke (Postfix) with ESMTP id 522D943646B
for <amb.khartoum@mfa.go.ke>; Mon, 24 Mar 2025 20:45:33 +0300 (EAT)
Authentication-Results: spamtitan1.icta.go.ke;
dkim=pass (2048-bit rsa key sha256) header.d=ssiacademy.com
header.i=@ssiacademy.com header.b=U7z4djiq header.a=rsa-sha256
header.s=default x-bits=2048;
spf=pass smtp.mailfrom=support@ssiacademy.com
smtp.helo=glitzopticalonline.com
Received-SPF: pass
(ssiacademy.com: 162.241.189.194 is authorized to use 'support@ssiacademy.com' in 'mfrom' identity (mechanism 'a' matched))
receiver=spamtitan1.icta.go.ke;
identity=mailfrom;
envelope-from="support@ssiacademy.com";
helo=glitzopticalonline.com;
client-ip=162.241.189.194
Received: from glitzopticalonline.com (glitzopticalonline.com [162.241.189.194])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by spamtitan1.icta.go.ke (Postfix) with ESMTPS id 644D4436472
for <amb.khartoum@mfa.go.ke>; Mon, 24 Mar 2025 20:45:31 +0300 (EAT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=ssiacademy.com; s=default; h=From:Message-Id:Date:Subject:To:Sender:
Reply-To:Cc:MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=RAUMa8x2pGv4cGJe6zK15Rl5BOO40KKNlFMnFeaUtxs=; b=U7z4djiqmVTOebKe4WwjNT26zG
sGBhq+xun1MUhAYMjzCdqtqTueJAa6GElQZ5uq5Uq9nr7KmYnP6cQIGEa503fn+i8dYmiWmtcNt8O
6+UYbPAEPWa9HdExAV2NrY5eu9VytQmTToOtZHu/LnpiLgABSPLhWsuerLoReK5evugnnzHo/+ZJ0
DlYzksJ4VaS3BMU/ZIvmXvCosJNx/8/XNSAZ8fyr+qSSSimlRRtvSbgOSaJBKqwYCGqR13G23VHf1
QLjZoQbW5HPZxQmqmWsJWeADhMBASbgx2SO3uDAfIZsWchqXj7JUcRM4N9tRM+AHHLvEP9say4tSW
nappEFRg==;
Received: from ssiacademy by fan.fanlow.com with local (Exim 4.98.1)
(envelope-from <support@ssiacademy.com>)
id 1twluB-000000006MF-47zh
for amb.khartoum@mfa.go.ke;
Mon, 24 Mar 2025 12:48:08 -0500
To: amb.khartoum@mfa.go.ke
Subject: LET PARTNERSHIP TOGETHER
X-PHP-Script: ssiacademy.com/wp-content/plugins/ww1hzJH5EB.php for 194.156.79.250
X-PHP-Originating-Script: 1072:ww1hzJH5EB.php
Date: Mon, 24 Mar 2025 17:48:07 +0000
From: Nicolas Bellfort <support@ssiacademy.com>
Reply-To: bellfort.solicitor@gmail.com
Message-ID: <146b5b3105a2d03f151b31a76cce1370@ssiacademy.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Message-Id: <E1twluB-000000006MF-47zh@fan.fanlow.com>
From: support@ssiacademy.com
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - fan.fanlow.com
X-AntiAbuse: Original Domain - mfa.go.ke
X-AntiAbuse: Originator/Caller UID/GID - [1072 990] / [47 12]
X-AntiAbuse: Sender Address Domain - ssiacademy.com
X-Get-Message-Sender-Via: fan.fanlow.com: authenticated_id: ssiacademy/from_h
X-Authenticated-Sender: fan.fanlow.com: support@ssiacademy.com
X-Source:
X-Source-Args: /opt/cpanel/ea-php82/root/usr/bin/php-cgi /home/ssiacademy/public_html/wp-content/plugins/ww1hzJH5EB.php
X-Source-Dir: ssiacademy.com:/public_html/wp-content/plugins
Compliment of the day, I am Nicolas Bellfort, a Solicitor here in London, United Kingdom. I have a financial offer for you that's worth US$8,500,000.00. Be rest assured this is legitimate and I will provide you with verifiable documents to prove this and you have the legal backing from me as a Solicitor. If you have interest in this, you can contact me on my personal email ( bellfort.solicitor@gmail.com or bellfort.solicitor@nicbellfortlaw.com) for more information. Best Regards, Nicolas Bellfort
--4AF9343643E.1742838342/spamtitan1.icta.go.ke--