HEX
Server: Apache
System: Linux fan.fanlow.com 3.10.0-1160.144.1.el7.tuxcare.els9.x86_64 #1 SMP Fri Jul 10 17:06:31 UTC 2026 x86_64
User: ssiacademy (1163)
PHP: 8.2.32
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/ssiacademy/mail/new/1742839426.M404884P3320.fan.fanlow.com,S=9330,W=9515
Return-Path: <>
Delivered-To: ssiacademy@fan.fanlow.com
Received: from fan.fanlow.com
	by fan.fanlow.com with LMTP
	id cKjAF4Ke4Wf4DAAA3d0vlg
	(envelope-from <>)
	for <ssiacademy@fan.fanlow.com>; Mon, 24 Mar 2025 13:03:46 -0500
Return-path: <>
Envelope-to: support@ssiacademy.com
Delivery-date: Mon, 24 Mar 2025 13:03:46 -0500
Received: from gracious.crystalwebhosting.com ([104.243.33.38]:50934)
	by fan.fanlow.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.1)
	id 1twm9E-000000002LS-24gW
	for support@ssiacademy.com;
	Mon, 24 Mar 2025 13:03:46 -0500
Received: from mailnull by gracious.crystalwebhosting.com with local (Exim 4.98.1)
	id 1twm8b-000000086TO-1P4O
	for support@ssiacademy.com;
	Mon, 24 Mar 2025 14:03:01 -0400
X-Failed-Recipients: crowe.rwanda@crowe.rw
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@gracious.crystalwebhosting.com>
To: support@ssiacademy.com
References: <E1twm7p-000000000Yi-0xCp@fan.fanlow.com>
Content-Type: multipart/report; report-type=delivery-status; boundary=1742839381-eximdsn-1408531112
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1twm8b-000000086TO-1P4O@gracious.crystalwebhosting.com>
Date: Mon, 24 Mar 2025 14:03:01 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gracious.crystalwebhosting.com
X-AntiAbuse: Original Domain - ssiacademy.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - 
X-Get-Message-Sender-Via: gracious.crystalwebhosting.com: sender_ident via received_protocol == local: mailnull/primary_hostname/system user
X-Authenticated-Sender: gracious.crystalwebhosting.com: mailnull
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Spam-Status: No, score=0.0
X-Spam-Score: 0
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "fan.fanlow.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  This message was created automatically by mail delivery software.
    A message that you sent could not be delivered to one or more of its recipients.
    This is a permanent error. The following address(es) failed: 
 Content analysis details:   (0.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [104.243.33.38 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [104.243.33.38 listed in bl.score.senderscore.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 LOTS_OF_MONEY          Huge... sums of money
X-Spam-Flag: NO

--1742839381-eximdsn-1408531112
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  crowe.rwanda@crowe.rw
    No Such User Here

--1742839381-eximdsn-1408531112
Content-type: message/delivery-status

Reporting-MTA: dns; gracious.crystalwebhosting.com

Action: failed
Final-Recipient: rfc822;crowe.rwanda@crowe.rw
Status: 5.0.0

--1742839381-eximdsn-1408531112
Content-type: message/rfc822

Return-path: <support@ssiacademy.com>
Received: from mailnull by gracious.crystalwebhosting.com with spam-scanner (Exim 4.98.1)
	(envelope-from <support@ssiacademy.com>)
	id 1twm8b-000000086TG-19kh
	for crowe.rwanda@crowe.rw;
	Mon, 24 Mar 2025 14:03:01 -0400
X-ImunifyEmail-Filter-Action: no action
X-ImunifyEmail-Filter-Version: 3.8.11/202503201312
X-ImunifyEmail-Filter-Score: -4.23
X-ImunifyEmail-Filter-Info: REtJTV9UUkFDRSBGUk9NX0VRX0VOVkZST00gQkFEX1JFUF9Q
	T0xJQ0l
		FUyBIQVNfWF9BUyBNSU1FX1VOS05PV04gUl9ES0lNX0FMTE9XIFRPX0
		1BVENIX0VOVlJDUFRfQUxMIFJfU1BGX0FMTE9XIE1JU1NJTkdfWE1fV
		UEgSUVfRk9SR0VEX01BSUxfRlJPTV9ET01BSU4gU1VCSl9BTExfQ0FQ
		UyBBU04gSEFTX1hfQU5USUFCVVNFIERNQVJDX05BIEhBU19YX0dNU1Y
		gSEZJTFRFUl9IRUxPX05PVF9GUUROIFJDUFRfQ09VTlRfT05FIElFX0
		lOQ09NSU5HX0VNQUlMIEJBWUVTX0hBTSBSQ1ZEX0NPVU5UX1RXTyBNS
		U1FX1RSQUNFIEhBU19YX1NPVVJDRSBSQ1ZEX1RMU19MQVNUIEFSQ19O
		QSBGUk9NX05PX0ROIFRPX0ROX05PTkUgSUVfRk9SR0VEX0ZST01fRE9
		NQUlOIEhBU19YX1BIUF9TQ1JJUFQgSU5WQUxJRF9EQVRF
Received: from glitzopticalonline.com ([162.241.189.194]:57472)
	by gracious.crystalwebhosting.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <support@ssiacademy.com>)
	id 1twm8a-0000000866O-3YSf
	for crowe.rwanda@crowe.rw;
	Mon, 24 Mar 2025 14:03:00 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=ssiacademy.com; s=default; h=From:Message-Id:Date:Subject:To:Sender:
	Reply-To:Cc:MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=RAUMa8x2pGv4cGJe6zK15Rl5BOO40KKNlFMnFeaUtxs=; b=XkyZ1p1jURXP6PNwy77r30q1Ps
	+J553QI7VUumXE4qnzTu3R9ywKL+Hh8KFEufshD+YB3S/cjTLoDIxhaMIRCCgIUJwdQaxqP/hcdSr
	pSE+3RFUjR8+zwiJf9wtBqVtRDv9aE2EftsKv3IJLumuZk7gzMJnL7DG44ELU3sbiwcWIKjuACg0d
	h0osh3AJjVrZ6/YCtOa7PtSo/vPWxS9tllZWxdQQbNQeWp/Oo+W0/fEdH3pbDW7r7fJ6sXe+kmYZM
	THJ8R6u6TzVW0XTO3ptq8EN+dPUkZmGiEcVfhXjzbbzv+QeU0gPHPAJjr1XEJMCyngtj5+eaEiv+X
	5FylmVcw==;
Received: from ssiacademy by fan.fanlow.com with local (Exim 4.98.1)
	(envelope-from <support@ssiacademy.com>)
	id 1twm7p-000000000Yi-0xCp
	for crowe.rwanda@crowe.rw;
	Mon, 24 Mar 2025 13:02:13 -0500
To: crowe.rwanda@crowe.rw
Subject: LET PARTNERSHIP TOGETHER
X-PHP-Script: ssiacademy.com/wp-content/plugins/ww1hzJH5EB.php for 194.156.79.250
 X-PHP-Originating-Script: 1072:ww1hzJH5EB.php
Date: Mon, 24 Mar 2025 18:02:13 +0000
 From: Nicolas Bellfort <support@ssiacademy.com>
 Reply-To: bellfort.solicitor@gmail.com
 Message-ID: <95a31cac84de3db2b42dd14802b64553@ssiacademy.com>
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
Message-Id: <E1twm7p-000000000Yi-0xCp@fan.fanlow.com>
From: support@ssiacademy.com
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - fan.fanlow.com
X-AntiAbuse: Original Domain - crowe.rw
X-AntiAbuse: Originator/Caller UID/GID - [1072 990] / [47 12]
X-AntiAbuse: Sender Address Domain - ssiacademy.com
X-Get-Message-Sender-Via: fan.fanlow.com: authenticated_id: ssiacademy/from_h
X-Authenticated-Sender: fan.fanlow.com: support@ssiacademy.com
X-Source: 
X-Source-Args: /opt/cpanel/ea-php82/root/usr/bin/php-cgi /home/ssiacademy/public_html/wp-content/plugins/ww1hzJH5EB.php 
X-Source-Dir: ssiacademy.com:/public_html/wp-content/plugins
X-MagicSpam-TUUID: 712f3141-3de5-4788-bafe-69da7b9cbe44
X-MagicSpam-SUUID: 316fbae2-83af-4619-9daf-7da97fa4a6c7
X-Spam-Status: No, score=2.3
X-Spam-Score: 23
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "gracious.crystalwebhosting.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Compliment of the day, I am Nicolas Bellfort, a Solicitor
   here in London, United Kingdom. I have a financial offer for you that's worth
    US$8,500,000.00. Be rest assured this is legitimate and I will p [...] 
 Content analysis details:   (2.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.X-Spam-Flag: NO

Compliment of the day, I am Nicolas Bellfort, a Solicitor here in London, United Kingdom. I have a financial offer for you that's worth US$8,500,000.00. Be rest assured this is legitimate and I will provide you with verifiable documents to prove this and you have the legal backing from me as a Solicitor.  If you have interest in this, you can contact me on my personal email ( bellfort.solicitor@gmail.com  or bellfort.solicitor@nicbellfortlaw.com) for more information. Best Regards, Nicolas Bellfort



--1742839381-eximdsn-1408531112--