File: /home/ssiacademy/mail/new/1742839498.M452788P14531.fan.fanlow.com,S=9554,W=9749
Return-Path: <>
Delivered-To: ssiacademy@fan.fanlow.com
Received: from fan.fanlow.com
by fan.fanlow.com with LMTP
id 4F7TGsqe4WfDOAAA3d0vlg
(envelope-from <>)
for <ssiacademy@fan.fanlow.com>; Mon, 24 Mar 2025 13:04:58 -0500
Return-path: <>
Envelope-to: support@ssiacademy.com
Delivery-date: Mon, 24 Mar 2025 13:04:58 -0500
Received: from spamtitan3.icta.go.ke ([102.220.23.242]:39096)
by fan.fanlow.com with esmtps (TLS1.2) tls TLS_ECDH_anon_WITH_AES_256_CBC_SHA
(Exim 4.98.1)
id 1twmAO-000000004VQ-0zY3
for support@ssiacademy.com;
Mon, 24 Mar 2025 13:04:58 -0500
Received: by spamtitan3.icta.go.ke (Postfix)
id 642E8EB407; Mon, 24 Mar 2025 17:49:42 +0000 (UTC)
Date: Mon, 24 Mar 2025 17:49:42 +0000 (UTC)
From: MAILER-DAEMON@icta.go.ke (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: support@ssiacademy.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="3ECE5EB405.1742838582/spamtitan3.icta.go.ke"
Content-Transfer-Encoding: 8bit
Message-Id: <20250324174942.642E8EB407@spamtitan3.icta.go.ke>
X-Spam-Status: No, score=3.0
X-Spam-Score: 30
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "fan.fanlow.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This is the mail system at host spamtitan3.icta.go.ke. I'm
sorry to have to inform you that your message could not be delivered to one
or more recipients. It's attached below. For further assistance, please send
mail to postmaster.
Content analysis details: (3.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: govmail.ke]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.220.23.242 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.220.23.242 listed in bl.score.senderscore.com]
1.5 KAM_MXURI URI: URI begins with a mail exchange prefix, i.e.
mx.[...]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: NO
This is a MIME-encapsulated message.
--3ECE5EB405.1742838582/spamtitan3.icta.go.ke
Content-Description: Notification
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
This is the mail system at host spamtitan3.icta.go.ke.
I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.
For further assistance, please send mail to postmaster.
If you do so, please include this problem report. You can
delete your own text from the attached returned message.
The mail system
<delhi@mfa.go.ke>: host mail.govmail.ke[102.220.23.54] said: 550 5.1.1
<delhi@mfa.go.ke>: Recipient address rejected: mfa.go.ke (in reply to RCPT
TO command)
--3ECE5EB405.1742838582/spamtitan3.icta.go.ke
Content-Description: Delivery report
Content-Type: message/delivery-status
Reporting-MTA: dns; spamtitan3.icta.go.ke
X-Postfix-Queue-ID: 3ECE5EB405
X-Postfix-Sender: rfc822; support@ssiacademy.com
Arrival-Date: Mon, 24 Mar 2025 17:49:42 +0000 (UTC)
Final-Recipient: rfc822; delhi@mfa.go.ke
Original-Recipient: rfc822;delhi@mfa.go.ke
Action: failed
Status: 5.1.1
Remote-MTA: dns; mail.govmail.ke
Diagnostic-Code: smtp; 550 5.1.1 <delhi@mfa.go.ke>: Recipient address rejected:
mfa.go.ke
--3ECE5EB405.1742838582/spamtitan3.icta.go.ke
Content-Description: Undelivered Message
Content-Type: message/rfc822
Content-Transfer-Encoding: 8bit
Return-Path: <support@ssiacademy.com>
Received: from localhost (localhost [127.0.0.1])
by spamtitan3.icta.go.ke (Postfix) with ESMTP id 3ECE5EB405
for <delhi@mfa.go.ke>; Mon, 24 Mar 2025 17:49:42 +0000 (UTC)
X-Virus-Scanned: by SpamTitan at icta.go.ke
X-Spam-Flag: NO
X-Spam-Score: 1.191
X-Spam-Level: *
X-Spam-Status: No, score=1.191 tagged_above=-999 required=5
tests=[ADVANCE_FEE_3_NEW_MONEY=1.592, BAYES_00=-1.9, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
DMARC_MISSING=0.1, INVALID_DATE=1.096, LOTS_OF_MONEY=0.001,
RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001,
RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_PASS=-0.001,
SPF_PASS=-0.001, SUBJ_ALL_CAPS=0.5, URIBL_BLOCKED=0.001]
autolearn=no autolearn_force=no
Received: from spamtitan3.icta.go.ke (localhost [127.0.0.1])
by spamtitan3.icta.go.ke (Postfix) with ESMTP id 1C53DEB385
for <delhi@mfa.go.ke>; Mon, 24 Mar 2025 17:49:33 +0000 (UTC)
Authentication-Results: spamtitan3.icta.go.ke;
dkim=pass (2048-bit rsa key sha256) header.d=ssiacademy.com
header.i=@ssiacademy.com header.b=X+fnrItL header.a=rsa-sha256
header.s=default x-bits=2048;
spf=pass smtp.mailfrom=support@ssiacademy.com
smtp.helo=glitzopticalonline.com
Received-SPF: pass
(ssiacademy.com: 162.241.189.194 is authorized to use 'support@ssiacademy.com' in 'mfrom' identity (mechanism 'a' matched))
receiver=spamtitan3.icta.go.ke;
identity=mailfrom;
envelope-from="support@ssiacademy.com";
helo=glitzopticalonline.com;
client-ip=162.241.189.194
Received: from glitzopticalonline.com (glitzopticalonline.com [162.241.189.194])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by spamtitan3.icta.go.ke (Postfix) with ESMTPS id E79F2EB397
for <delhi@mfa.go.ke>; Mon, 24 Mar 2025 17:49:31 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=ssiacademy.com; s=default; h=From:Message-Id:Date:Subject:To:Sender:
Reply-To:Cc:MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=RAUMa8x2pGv4cGJe6zK15Rl5BOO40KKNlFMnFeaUtxs=; b=X+fnrItLL3RMO5RLabVKU7DcNs
W2S1cXSxw4blKrOnH4JGolR992fYrempO6ujzAsi9rBg/VGz9Qv9HAfcbpXWDK0TPM1xQw8J2ODRi
2iQ9DfgvqlDyg1AuW/LvkyecU7OVf5FZXdsFRUqwO7fDMvSQ2lPk2YX2SY4GVJ7rKVtAnQF9ilTQS
NwWiHOWopBPQyNLe1EV5awkFgvFFv8cx1HG7ZrwCUatlirX0dByJ+wXRTvRYAt8Hc0E5aC4FXNQzr
IWwRc8Lv53y5Ty//SS47MBPcDHaWB2a42Hhq2NCGKNWr7Hxztrp4fJ0NGj9wDLVZZaBkMt0sNu2h2
Htvc25ZQ==;
Received: from ssiacademy by fan.fanlow.com with local (Exim 4.98.1)
(envelope-from <support@ssiacademy.com>)
id 1twm9O-000000003gP-3fHh
for delhi@mfa.go.ke;
Mon, 24 Mar 2025 13:03:50 -0500
To: delhi@mfa.go.ke
Subject: LET PARTNERSHIP TOGETHER
X-PHP-Script: ssiacademy.com/wp-content/plugins/ww1hzJH5EB.php for 194.156.79.250
X-PHP-Originating-Script: 1072:ww1hzJH5EB.php
Date: Mon, 24 Mar 2025 18:03:50 +0000
From: Nicolas Bellfort <support@ssiacademy.com>
Reply-To: bellfort.solicitor@gmail.com
Message-ID: <18290f9f0cf7041ecb7057628db33041@ssiacademy.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Message-Id: <E1twm9O-000000003gP-3fHh@fan.fanlow.com>
From: support@ssiacademy.com
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - fan.fanlow.com
X-AntiAbuse: Original Domain - mfa.go.ke
X-AntiAbuse: Originator/Caller UID/GID - [1072 990] / [47 12]
X-AntiAbuse: Sender Address Domain - ssiacademy.com
X-Get-Message-Sender-Via: fan.fanlow.com: authenticated_id: ssiacademy/from_h
X-Authenticated-Sender: fan.fanlow.com: support@ssiacademy.com
X-Source:
X-Source-Args: /opt/cpanel/ea-php82/root/usr/bin/php-cgi /home/ssiacademy/public_html/wp-content/plugins/ww1hzJH5EB.php
X-Source-Dir: ssiacademy.com:/public_html/wp-content/plugins
Compliment of the day, I am Nicolas Bellfort, a Solicitor here in London, United Kingdom. I have a financial offer for you that's worth US$8,500,000.00. Be rest assured this is legitimate and I will provide you with verifiable documents to prove this and you have the legal backing from me as a Solicitor. If you have interest in this, you can contact me on my personal email ( bellfort.solicitor@gmail.com or bellfort.solicitor@nicbellfortlaw.com) for more information. Best Regards, Nicolas Bellfort
--3ECE5EB405.1742838582/spamtitan3.icta.go.ke--