Envelope-to: info@behniwalgroup.com
Delivery-date: Sun, 26 Oct 2025 11:05:25 -0600
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: info@behniwalgroup.com
From: "Themba Mthembu" <mthembb230@gmail.com>
Date: Sat, 25 Oct 2025 17:21:56 -0700
Reply-To: mthembb230@gmail.com
    
 Content analysis details:   (29.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 MILLION_USD            BODY: Talks about millions of dollars
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [mthembb230[at]gmail.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [41.173.199.74 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [41.173.199.74 listed in bl.score.senderscore.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received'
                             headers
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [mthembb230[at]gmail.com]
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                              CUSTOM_MED
  0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
                             in digit
                             [mthembb230[at]gmail.com]
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  6.0 KAM_INVEST             Investment Scams
   10 KAM_BENEFICIARY        Beneficiary scams
  0.6 MONEY_NOHTML           Lots of money in plain text
  2.5 KAM_NIGERIAN           Nigerian Scam and Variants
  1.0 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  0.1 MONEY_FROM_41          Lots of money from Africa
  0.0 T_MONEY_PERCENT        X% of a lot of money for you
  1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing
                             list
  0.0 SPOOFED_FREEMAIL       No description available.
  1.5 SPOOF_GMAIL_MID        From Gmail but it doesn't seem to be...
  0.0 MONEY_FRAUD_8          Lots of money and very many fraud phrases
  3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:    Good Day

Good Day

I am contacting you after making official enquiries at the foreign trade of=
fice of the Chambers of Commerce here in Johannesburg, South Africa. I have=
n't disclosed the nature of my intention to anyone due to the sensitive and=
 confidential nature of the project involved which is my need for assistanc=
e in profiling some investment funds and transfer of said funds to your cou=
ntry.

I must plead for your confidence and confidentiality and if it so happens t=
hat you are unable to assist in this project I would crave your indulgence =
and ask that you do not divulge this to any other third party and ignore th=
is email. I am constrained to issue more details about this mutually benefi=
cial financial project until I get your positive response by email.

The fund in question $40,000,000.00 (Forty Million USD) accrued from an ove=
r-inflated contract executed by foreign contractors through our connections=
 and the over invoiced amount is waiting to be remitted from a commercial b=
ank here in South Africa. By virtue of my position as a senior civil servan=
t I cannot acquire this money in my name due to the fact that I am bound by=
 the Civil Service Code of Ethics which bars me from operating bank account=
s outside of our shores. On the other hand it is not safe to keep the funds=
 here due to security reasons; hence my need to source for an overseas sile=
nt partner to facilitate the transfer of these funds for our mutual benefit.

My proposal is that after you receive the funds, it would be shared as foll=
ows: 30% to you as commission for your cooperation and assistance in facili=
tating the transfer, while the remaining 65% belongs to me. You will be fre=
e to take out your commission immediately after the money is credited to yo=
ur account in your country. Since our objective is to invest the money in a=
 foreign country, it would be appreciated if you could also help us with ad=
vice and direction on investing into profitable ventures in your country.

What we need to do is give you an approval from the ministry and you will e=
mail the approval to the paying bank to facilitate the processing and trans=
fer of the contract funds into any of your nominated bank accounts. If you =
are interested and capable, I request you forward your personal details to =
my private email address mthembb230@gmail.com to enable me to contact you f=
or further discussion. I would also request that you send me your most conf=
idential phone number for further communication too.

Respectfully,
Mr. Themba Mthembu
Email: mthembb230@gmail.com
https://www.kzndard.gov.za/
Director, Project Implementation and Audit Committee=20