File: /home/ssiacademy/mail/new/1742839276.M586848P9732.fan.fanlow.com,S=9587,W=9782
Return-Path: <>
Delivered-To: ssiacademy@fan.fanlow.com
Received: from fan.fanlow.com
by fan.fanlow.com with LMTP
id uJ+8Iuyd4WcEJgAA3d0vlg
(envelope-from <>)
for <ssiacademy@fan.fanlow.com>; Mon, 24 Mar 2025 13:01:16 -0500
Return-path: <>
Envelope-to: support@ssiacademy.com
Delivery-date: Mon, 24 Mar 2025 13:01:16 -0500
Received: from spamtitan2.icta.go.ke ([102.220.23.161]:60190)
by fan.fanlow.com with esmtps (TLS1.2) tls TLS_ECDH_anon_WITH_AES_256_CBC_SHA
(Exim 4.98.1)
id 1twm6o-0000000059w-44w6
for support@ssiacademy.com;
Mon, 24 Mar 2025 13:01:16 -0500
Received: by spamtitan2.icta.go.ke (Postfix)
id 4678417A54F; Mon, 24 Mar 2025 18:00:28 +0000 (UTC)
Date: Mon, 24 Mar 2025 18:00:28 +0000 (UTC)
From: MAILER-DAEMON@icta.go.ke (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: support@ssiacademy.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="0B50617A550.1742839228/spamtitan2.icta.go.ke"
Content-Transfer-Encoding: 8bit
Message-Id: <20250324180028.4678417A54F@spamtitan2.icta.go.ke>
X-Spam-Status: No, score=3.0
X-Spam-Score: 30
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "fan.fanlow.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This is the mail system at host spamtitan2.icta.go.ke. I'm
sorry to have to inform you that your message could not be delivered to one
or more recipients. It's attached below. For further assistance, please send
mail to postmaster.
Content analysis details: (3.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: mfa.go.ke]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.220.23.161 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.220.23.161 listed in bl.score.senderscore.com]
1.5 KAM_MXURI URI: URI begins with a mail exchange prefix, i.e.
mx.[...]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: NO
This is a MIME-encapsulated message.
--0B50617A550.1742839228/spamtitan2.icta.go.ke
Content-Description: Notification
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
This is the mail system at host spamtitan2.icta.go.ke.
I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.
For further assistance, please send mail to postmaster.
If you do so, please include this problem report. You can
delete your own text from the attached returned message.
The mail system
<cg.dubai@mfa.go.ke>: host mail.govmail.ke[102.220.23.54] said: 550 5.1.1
<cg.dubai@mfa.go.ke>: Recipient address rejected: mfa.go.ke (in reply to
RCPT TO command)
--0B50617A550.1742839228/spamtitan2.icta.go.ke
Content-Description: Delivery report
Content-Type: message/delivery-status
Reporting-MTA: dns; spamtitan2.icta.go.ke
X-Postfix-Queue-ID: 0B50617A550
X-Postfix-Sender: rfc822; support@ssiacademy.com
Arrival-Date: Mon, 24 Mar 2025 18:00:28 +0000 (UTC)
Final-Recipient: rfc822; cg.dubai@mfa.go.ke
Original-Recipient: rfc822;cg.dubai@mfa.go.ke
Action: failed
Status: 5.1.1
Remote-MTA: dns; mail.govmail.ke
Diagnostic-Code: smtp; 550 5.1.1 <cg.dubai@mfa.go.ke>: Recipient address
rejected: mfa.go.ke
--0B50617A550.1742839228/spamtitan2.icta.go.ke
Content-Description: Undelivered Message
Content-Type: message/rfc822
Content-Transfer-Encoding: 8bit
Return-Path: <support@ssiacademy.com>
Received: from localhost (localhost [127.0.0.1])
by spamtitan2.icta.go.ke (Postfix) with ESMTP id 0B50617A550
for <cg.dubai@mfa.go.ke>; Mon, 24 Mar 2025 18:00:28 +0000 (UTC)
X-Virus-Scanned: by SpamTitan at icta.go.ke
X-Spam-Flag: NO
X-Spam-Score: 1.09
X-Spam-Level: *
X-Spam-Status: No, score=1.09 tagged_above=-999 required=5
tests=[ADVANCE_FEE_3_NEW_MONEY=1.592, BAYES_00=-1.9, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
DMARC_MISSING=0.1, INVALID_DATE=1.096, LOTS_OF_MONEY=0.001,
RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001,
RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001,
SPF_PASS=-0.001, ST_P0F_Linux=-0.1, SUBJ_ALL_CAPS=0.5,
URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from spamtitan2.icta.go.ke (localhost [127.0.0.1])
by spamtitan2.icta.go.ke (Postfix) with ESMTP id 0AEA417A52C
for <cg.dubai@mfa.go.ke>; Mon, 24 Mar 2025 18:00:19 +0000 (UTC)
Authentication-Results: spamtitan2.icta.go.ke;
dkim=pass (2048-bit rsa key sha256) header.d=ssiacademy.com
header.i=@ssiacademy.com header.b=e6lQwJ8D header.a=rsa-sha256
header.s=default x-bits=2048;
spf=pass smtp.mailfrom=support@ssiacademy.com
smtp.helo=glitzopticalonline.com
Received-SPF: pass
(ssiacademy.com: 162.241.189.194 is authorized to use 'support@ssiacademy.com' in 'mfrom' identity (mechanism 'a' matched))
receiver=spamtitan2.icta.go.ke;
identity=mailfrom;
envelope-from="support@ssiacademy.com";
helo=glitzopticalonline.com;
client-ip=162.241.189.194
Received: from glitzopticalonline.com (glitzopticalonline.com [162.241.189.194])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by spamtitan2.icta.go.ke (Postfix) with ESMTPS id B283417A54C
for <cg.dubai@mfa.go.ke>; Mon, 24 Mar 2025 18:00:18 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=ssiacademy.com; s=default; h=From:Message-Id:Date:Subject:To:Sender:
Reply-To:Cc:MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=RAUMa8x2pGv4cGJe6zK15Rl5BOO40KKNlFMnFeaUtxs=; b=e6lQwJ8DAirjzdmEAr/T9gnsZN
E22cd/Fo53XR7tdGAHT7f+nTvDTZgzai427wqi9JNe+bdnc79DwMK5lOJJZs2Mg8W8V8myr6z0P0q
hIFQ+U4p/bG2mZAwHXc/10vCX79pLdOIftcpSQ+jWIEH3ZkPCnE2nHWt3iwoOZZMZC7HMswZ88vNl
jYRO0fBssXn93kuLGqzEyK/FoAEtV0zoI2Dv4IH4xlXaeFP6hLFfNlK5CY1eIh30dLExcje2OpupS
BDTdyhpfTdCERVweJntxPh5mtQl1uZsaNbouCmB6c6sJgJBwaufBAXK5O02FZZIh6EqhET8jFz+yf
aIa3nDFg==;
Received: from ssiacademy by fan.fanlow.com with local (Exim 4.98.1)
(envelope-from <support@ssiacademy.com>)
id 1twm5r-000000004q4-1Ggo
for cg.dubai@mfa.go.ke;
Mon, 24 Mar 2025 13:00:11 -0500
To: cg.dubai@mfa.go.ke
Subject: LET PARTNERSHIP TOGETHER
X-PHP-Script: ssiacademy.com/wp-content/plugins/ww1hzJH5EB.php for 194.156.79.250
X-PHP-Originating-Script: 1072:ww1hzJH5EB.php
Date: Mon, 24 Mar 2025 18:00:11 +0000
From: Nicolas Bellfort <support@ssiacademy.com>
Reply-To: bellfort.solicitor@gmail.com
Message-ID: <31b232fed89bede6769b811b624a49bd@ssiacademy.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Message-Id: <E1twm5r-000000004q4-1Ggo@fan.fanlow.com>
From: support@ssiacademy.com
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - fan.fanlow.com
X-AntiAbuse: Original Domain - mfa.go.ke
X-AntiAbuse: Originator/Caller UID/GID - [1072 990] / [47 12]
X-AntiAbuse: Sender Address Domain - ssiacademy.com
X-Get-Message-Sender-Via: fan.fanlow.com: authenticated_id: ssiacademy/from_h
X-Authenticated-Sender: fan.fanlow.com: support@ssiacademy.com
X-Source:
X-Source-Args: /opt/cpanel/ea-php82/root/usr/bin/php-cgi /home/ssiacademy/public_html/wp-content/plugins/ww1hzJH5EB.php
X-Source-Dir: ssiacademy.com:/public_html/wp-content/plugins
Compliment of the day, I am Nicolas Bellfort, a Solicitor here in London, United Kingdom. I have a financial offer for you that's worth US$8,500,000.00. Be rest assured this is legitimate and I will provide you with verifiable documents to prove this and you have the legal backing from me as a Solicitor. If you have interest in this, you can contact me on my personal email ( bellfort.solicitor@gmail.com or bellfort.solicitor@nicbellfortlaw.com) for more information. Best Regards, Nicolas Bellfort
--0B50617A550.1742839228/spamtitan2.icta.go.ke--