Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id xH9VNICy3WiicwAAyTkJsw (envelope-from ) for ; Wed, 01 Oct 2025 17:00:16 -0600 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Wed, 01 Oct 2025 17:00:16 -0600 Received: from [86.54.42.197] (port=50025 helo=gmail.com) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.95) (envelope-from ) id 1v45nz-0007gi-1E for info@behniwalgroup.com; Wed, 01 Oct 2025 17:00:16 -0600 Reply-To: gukwesi1973@gmail.com From: kkkwesi23@gmail.com To: info@behniwalgroup.com Date: 02 Oct 2025 00:59:33 +0200 Message-ID: <20251002005932.E0DF695927E5A982@gmail.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0012_AB51F9BE.1D7F6EE3" X-Spam-Status: Yes, score=35.4 X-Spam-Score: 354 X-Spam-Bar: +++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Future Partner, 　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　 Good day, I know this email will come as a surprise, but I need to co [...] Content analysis details: (35.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [kkkwesi23[at]gmail.com] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [86.54.42.197 listed in psbl.surriel.com] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [86.54.42.197 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [86.54.42.197 listed in bl.score.senderscore.com] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [gukwesi1973[at]gmail.com] 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers 0.5 SUBJ_ALL_CAPS Subject is all capitals 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit [kkkwesi23[at]gmail.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 LOTS_OF_MONEY Huge... sums of money 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 6.0 KAM_INVEST Investment Scams 0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 T_MONEY_PERCENT X% of a lot of money for you 6.0 KAM_BENEFICIARYLOW Beneficiary scams (Lower Confidence) 0.0 SPOOFED_FREEMAIL No description available. 1.5 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be... 2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 2.9 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money X-Spam-Flag: YES Subject: BUSINESS PARTNERSHIP ------=_NextPart_000_0012_AB51F9BE.1D7F6EE3 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Future Partner, =E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3= =80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80= =80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80= =E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3= =80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80 Good day, I know this email will come as a surprise, but I need=20 to contact you because of the urgency and confidentiality of this=20 business transaction. I am the Chief Account Officer of Ghana=20 Gold. I have a deal here in my office, and I need a foreign=20 partner to execute it with my colleague and me. We over-invoiced=20 a contract payment valued at US$100 million. We awarded contracts=20 for the supply and maintenance of all the Gold field and mining=20 equipment for the national gold mines to some foreign contractors=20 valued at US$5 billion, which we over-invoiced by US$100 million=20 in addition to the total contract sum. Most contractors have been paid, and the remaining contractors=E2=80=99=20 payments are currently being processed for payment. With that, my=20 colleague and I have decided to include you among these remaining=20 contractors to process the sum of US$100 million in your company=20 or in your name to claim it for our mutual benefit. I am writing=20 to inform you that you have been selected as the subcontractor to=20 supply heavy mining equipment for the recent overhauling of the=20 refineries and mining sites, valued at US$100 million. I will advise you to furnish me with your personal information,=20 including your cell phone number and the name of your company=20 with address, to enable me to register it with our corporate=20 affairs commission in charge of allied and companies registration=20 as an indigenous company. Any foreign company must be registered in this country. Also,=20 with your acceptance to execute this business with me, I need to=20 be sure of your confidentiality regarding the conclusion of this=20 deal. you will be given 30% of the total amount, while my=20 colleague and I will take 70% once the money gets into your=20 company account in your country. Also, with my position here, I=20 can officially arrange with you to lift 140 or 200 Kilograms of=20 gold per month by getting a one-year or two-year Gold allocation=20 contract in your name and company name, whether you are here or=20 not. With this, we can make more money from the Gold lifting here=20 in Ghana. I will detail more on this once I get your response. Thank you, and hope to hear from you as soon as possible. Send me=20 your cell phone number or Email to call you for more details. Best Regards Guma Kwesi ------=_NextPart_000_0012_AB51F9BE.1D7F6EE3 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

------=_NextPart_000_0012_AB51F9BE.1D7F6EE3--