Return-Path: <alex@iimas.unam.mx>
Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me
Received: from server.rnv.kpw.mybluehostin.me
	by server.rnv.kpw.mybluehostin.me with LMTP
	id 6kieH/jGCGdXQQAAyTkJsw
	(envelope-from <alex@iimas.unam.mx>)
	for <behniwal+spam@server.rnv.kpw.mybluehostin.me>; Fri, 11 Oct 2024 00:34:32 -0600
Return-path: <alex@iimas.unam.mx>
Envelope-to: info@behniwalgroup.com
Delivery-date: Fri, 11 Oct 2024 00:34:32 -0600
Received: from correo.iimas.unam.mx ([132.248.51.186]:37844)
	by server.rnv.kpw.mybluehostin.me with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.95)
	(envelope-from <alex@iimas.unam.mx>)
	id 1sz9EN-0004KS-9e
	for info@behniwalgroup.com;
	Fri, 11 Oct 2024 00:34:32 -0600
Received: from localhost (localhost [127.0.0.1])
	by correo.iimas.unam.mx (Postfix) with ESMTP id 93606A895D6;
	Thu, 10 Oct 2024 22:35:47 -0600 (CST)
Received: from correo.iimas.unam.mx ([127.0.0.1])
 by localhost (correo.iimas.unam.mx [127.0.0.1]) (amavis, port 10032)
 with ESMTP id H_PkZO-5TdGY; Thu, 10 Oct 2024 22:35:47 -0600 (CST)
Received: from localhost (localhost [127.0.0.1])
	by correo.iimas.unam.mx (Postfix) with ESMTP id DEC46A895DA;
	Thu, 10 Oct 2024 22:35:46 -0600 (CST)
DKIM-Filter: OpenDKIM Filter v2.10.3 correo.iimas.unam.mx DEC46A895DA
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iimas.unam.mx;
	s=B1643772-EC95-11EE-970E-80A2B4F74FDF; t=1728621347;
	bh=LmKJ8TY3me2SAejDGZTWcA5fQSN5qPD/Sze4vI6SljQ=;
	h=From:Date:MIME-Version:Message-Id;
	b=kym9b4e9USohUuMwRiJU7E3YVT2xTaAbjf0A8cPURI6c5jTQTQ2EYwjP0f/BNjPgL
	 fMNCcoNuTbyA7ralm4Jom42NnlbZ8klRZ5DujntXrjsdZ8k8Crol+uSDOsRWi7Rx2b
	 BY1Zla5KcZmLnbgLaYLi/8a7bp+ReD5SESQDtHEmBC3e8iFc8GzZSYXKx+KloLtDCg
	 8ZAWJ5+q7mbyr0L/fcS4eBq/VxQ85rX9WqD05jDWsNMSYb34jmOsKj1/A2WBg6y40W
	 Rwux7BkWfUPnx84jxQEbpH9i9+pOiDPO7i8BzKd9F4DpF1YUd3Isg6dF+ShDlUUMjV
	 IMnOP0Tquuo5w==
X-Virus-Scanned: amavis at iimas.unam.mx
Received: from correo.iimas.unam.mx ([127.0.0.1])
 by localhost (correo.iimas.unam.mx [127.0.0.1]) (amavis, port 10026)
 with ESMTP id b5m57w_2xTX8; Thu, 10 Oct 2024 22:35:46 -0600 (CST)
Received: from User (unknown [10.1.1.1])
	by correo.iimas.unam.mx (Postfix) with SMTP id 3B643192B3A7;
	Thu, 10 Oct 2024 22:35:35 -0600 (CST)
Reply-To: <alexkuffour879@gmail.com>
From: "Alex Kuffour."<alex@iimas.unam.mx>
Date: Fri, 11 Oct 2024 07:35:46 +0300
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20241011043536.3B643192B3A7@correo.iimas.unam.mx>
X-Spam-Status: Yes, score=20.3
X-Spam-Score: 203
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Greetings, I am contacting you after making official enquiries
    at the foreign trade office of the Chambers of Commerce here in Johannesburg,
    South Africa. I haven’t disclosed the nature of my intention to anyone [...]
    
 Content analysis details:   (20.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: unam.mx]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [132.248.51.186 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [132.248.51.186 listed in bl.score.senderscore.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [alexkuffour879[at]gmail.com]
  1.2 MISSING_HEADERS        Missing To: header
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.3 CTE_8BIT_MISMATCH      Header says 7bits but body disagrees
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  1.9 REPLYTO_WITHOUT_TO_CC  No description available.
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  3.4 MSOE_MID_WRONG_CASE    No description available.
  1.6 MONEY_NOHTML           Lots of money in plain text
  2.5 KAM_NIGERIAN           Nigerian Scam and Variants
  0.0 MONEY_FROM_MISSP       Lots of money and misspaced From
  0.0 FROM_MISSPACED         From: missing whitespace
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.6 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  0.0 XFER_LOTSA_MONEY       Transfer a lot of money
  0.0 T_MONEY_PERCENT        X% of a lot of money for you
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  0.0 MONEY_FRAUD_8          Lots of money and very many fraud phrases
  3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:    Hi

Greetings,

I am contacting you after making official enquiries at the foreign trade office of the Chambers of Commerce here in Johannesburg, South Africa. I haven’t disclosed the nature of my intention to anyone due to the sensitive and confidential nature of the project involved which is my need for assistance in profiling some investment funds and transfer of said funds to your country.

I must plead for your confidence and confidentiality and if it so happens that you are unable to assist in this project, I would crave your indulgence and ask that you do not divulge this to any other third party and ignore this email. I am constrained to issue more details about this mutually beneficial financial project until I get your positive response by email.

The fund in question $47,000,000.00 (Forty-Seven Million USD) accrued from an over-inflated contract executed by foreign contractors through our connections and the over-invoiced amount is waiting to be remitted from a commercial bank here in South Africa. By virtue of my position as a senior civil servant I cannot acquire this money in my name due to the fact that I am bound by the Civil Service Code of Ethics which bars me from operating bank accounts outside of our shores. On the other hand, it is not safe to keep the funds here due to security reasons; hence my need to source for an overseas silent partner to facilitate the transfer of these funds for our mutual benefit.

My proposal is that after you receive the funds, it would be shared as follows: 30% to you as commission for your co-operation and assistance in facilitating the transfer, while the remaining 70% belongs to me. You will be free to take out your commission immediately after the money is credited to your account in your country. Since our objective is to invest the money in a foreign country, it would be appreciated if you could also help us with advice and direction on investing into profitable ventures in your country.

What we need to do is give you an approval from the ministry and you will email the approval to the paying bank to facilitate the processing and transfer of the contract funds into any of your nominated bank accounts. If you are interested and capable, I request you forward your personal details to enable me to contact you for further discussion. I would also request that you send me your most confidential phone number for further communication too.

Respectfully,

Alex Kuffour
