Return-Path: <arno@gmail.com>
Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me
Received: from server.rnv.kpw.mybluehostin.me
	by server.rnv.kpw.mybluehostin.me with LMTP
	id zYHuNdA9rGmocwAAyTkJsw
	(envelope-from <arno@gmail.com>)
	for <behniwal+spam@server.rnv.kpw.mybluehostin.me>; Sat, 07 Mar 2026 08:01:36 -0700
Return-path: <arno@gmail.com>
Envelope-to: info@behniwalgroup.com
Delivery-date: Sat, 07 Mar 2026 08:01:36 -0700
Received: from [218.235.37.18] (port=43728 helo=imsva.sindoh.com)
	by server.rnv.kpw.mybluehostin.me with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.95)
	(envelope-from <arno@gmail.com>)
	id 1vyt9r-0007g1-Ni
	for info@behniwalgroup.com;
	Sat, 07 Mar 2026 08:01:36 -0700
Received: from imsva.sindoh.com (unknown [127.0.0.1])
	by IMSVA (Postfix) with ESMTP id 23CCDF122A;
	Sat,  7 Mar 2026 21:31:38 +0900 (KST)
Received: from imsva.sindoh.com (unknown [127.0.0.1])
	by IMSVA (Postfix) with ESMTP id 58292E8BD0;
	Sat,  7 Mar 2026 20:59:31 +0900 (KST)
Received: from User (unknown [104.37.168.104])
	by imsva.sindoh.com (Postfix) with SMTP;
	Sat,  7 Mar 2026 20:59:31 +0900 (KST)
Reply-To: <daehinkearno@gmail.com>
From: "Arno Daehnke"<arno@gmail.com>
Date: Sat, 7 Mar 2026 03:59:37 -0800
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20260307115931.58292E8BD0@imsva.sindoh.com>
To: undisclosed-recipients:;
X-TM-AS-GCONF: 00
X-TM-AS-Product-Ver: IMSVA-9.1.0.1960-9.0.0.1006-29802.001
X-TMASE-Version: IMSVA-9.1.0.1960-9.0.1006-29802.001
X-TMASE-Result: 11-67.121200-10.000000
X-TMASE-MatchedRID: vewQ6k4XI8WzmLHFStfaBOkCJxGMLs8mb6EYaazttROCTD4qhRoHJi9I
	dj3aHfwHPfbYQY+kbWU+tmCyKY3x4rF6nptaEfP/bMGKOuLn5FVYyD1iQkQMTC196sn93sBvloD
	ZjuswVRvLklO6ONXqaq5tje7r67gaIU+ehk8XygeHZXNSWjgdUwfC7Z8SbSIYVz8J52OVy+Sghj
	PLvdXt2clRfAuX28ADCK/yqMB3A/AlaCaMlD35S3Y+p3RAnPX04a4MVZt+6xJ0kxer8Y5d18fMz
	1fBzoBri3TM4HSbYDFS95NA5WVuBUNG48ubo9kb4yhsfWHTXOKuP3jhainBqpi9eh/QNsz3zlvm
	13Bv+kAlt3ERkatgM1ohaTOJIG46XjASuXbGkhnDguUBa3ISJSumR6ASKoJU3IgLHZk2PXh71Aq
	C2aZPsRp58Z3+DN4tulg5qgA9VouF9CTrZFon9JFfT5L0OWU/SPGU0mZY1TibKItl61J/ycnjLT
	A/UDoAWova0TD7myATe/wRfDNpSP1syDeRKTnocq0DFm1syL3XLGt5l8zWpbDSA3Huj9W053avr
	rKQ/VMOAs27BykZugtuKBGekqUpI/NGWt0UYPBQjdoW0vJRoZDHGzoHG+mr5eKz3hJ9gjx2Rqjc
	ZEltLiblKAjfk9pO
X-TMASE-SNAP-Result: Not scanned
X-Spam-Status: Yes, score=74.0
X-Spam-Score: 740
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello Dear Firstly, I must solicit your confidence in this
    transaction; this is by virtue of its nature as being completely confidential.
    Though I know that a transaction of this magnitude will make one apprehen
    [...] 
 Content analysis details:   (74.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  0.0 NSL_RCVD_FROM_USER     Received from User
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?218.235.37.18>]
  1.2 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [218.235.37.18 listed in bl.score.senderscore.com]
  0.9 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [218.235.37.18 listed in sa-trusted.bondedsender.org]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [arno[at]gmail.com]
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                              CUSTOM_MED
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received'
                             headers
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  1.4 HK_SCAM                No description available.
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 T_SHARE_50_50          Share the money 50/50
  1.9 FROM_MISSP_USER        From misspaced, from "User"
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  3.4 MSOE_MID_WRONG_CASE    No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.5 FROM_MISSP_XPRIO       Misspaced FROM + X-Priority
  2.2 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  3.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  0.8 FROM_MISSP_TO_UNDISC   From misspaced, To undisclosed
  2.7 UNDISC_FREEM           Undisclosed recipients + freemail reply-to
  0.0 MONEY_FROM_MISSP       Lots of money and misspaced From
  6.0 KAM_INVEST             Investment Scams
  1.3 MONEY_NOHTML           Lots of money in plain text
  1.1 FSL_BULK_SIG           Bulk signature with no Unsubscribe
   10 KAM_BENEFICIARY        Beneficiary scams
  1.7 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  2.0 FROM_MISSPACED         From: missing whitespace
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain
                             different freemails
  0.5 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  0.0 T_MONEY_PERCENT        X% of a lot of money for you
  1.0 XFER_LOTSA_MONEY       Transfer a lot of money
  1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing
                             list
  0.3 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
  2.0 SPOOFED_FREEMAIL       No description available.
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  1.0 SPOOF_GMAIL_MID        From Gmail but it doesn't seem to be...
  2.5 SPOOFED_FREEM_REPTO    Forged freemail sender with freemail
                             reply-to
  1.5 FROM_MISSP_FREEMAIL    From misspaced + freemail provider
  1.1 MONEY_FRAUD_8          Lots of money and very many fraud phrases
  3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
  3.0 UNDISC_MONEY           Undisclosed recipients + money/fraud signs
X-Spam-Flag: YES
Subject:    Hi

Hello Dear

Firstly, I must solicit your confidence in this transaction; this is by virtue of its nature as being completely confidential. Though I know that a transaction of this magnitude will make one apprehensive and worried, I am assuring you that all will be well at the end of the day.

Let me start by first introducing myself properly to you. It may be surprising to you to receive this letter from me since there was no previous correspondence between us.

My name is Mr. Arno Daehnke and my purpose of searching for you and contacting you is for you to help me secure the funds that were left behind many years ago here at STANDARD BANK South Africa by my late client. My client has no traceable next of kin who can take over and did not update his WILL before his demise, none of his extended family is aware of this particular deposit. I will use my office to place you as the next of kin to the deceased customer if you agree, we will share the fund 50/50%. because THE AMOUNT I FIND IN THAT ACCOUNT IS R85,000,000.00 (eighty-five million rand) = 4,815,000.00 USD (Four Million, eight hundred and fifteen thousand united states dollars) and I am going to move the entire total amount I find in that account (R85,000,000.00) into your bank account, which we will share 50/50%.

All I require from you is your honest cooperation to enable us to achieve this transaction. There is nothing to worry about; I shall provide you the deposit documents and other appropriate legal backup documents, as I intend a business partnership venture with you. The intended transaction will be executed under a legitimate arrangement that will protect you from any influence of the law.

However, if this business proposition offends your moral ethics, do accept my sincere apology but if you wish to achieve this goal with me, I request you forward your personal details to my private email address arnnodaihnike@gmail.com to enable me to contact you for further discussion. I would also request that you send me your most confidential phone number for further communication

Regards,
Mr. Arno Daehnke.
Chief Finance and Value Management Officer, SBG and SBSA
