Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id KWLIJyWfLmoGbwAAyTkJsw (envelope-from ) for ; Sun, 14 Jun 2026 06:31:33 -0600 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Sun, 14 Jun 2026 06:31:33 -0600 Received: from [160.250.133.232] (port=52525 helo=treasury.gov) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.99.4) (envelope-from ) id 1wYjzv-000000007NQ-19RZ for info@behniwalgroup.com; Sun, 14 Jun 2026 06:31:33 -0600 Reply-To: wallaceg33544@gmail.com From: George Wallace. To: info@behniwalgroup.com Date: 14 Jun 2026 19:30:49 +0700 Message-ID: <20260614193049.87CD8AEC962D9757@treasury.gov> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=23.8 X-Spam-Score: 238 X-Spam-Bar: +++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello, Good Day We are pleased to inform you that your total payment entitlement has been cleared and approved to be released to you finally through our foreign payment centers in Canada and Philippin [...] Content analysis details: (23.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [160.250.133.232 listed in psbl.surriel.com] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [wallaceg33544[at]gmail.com] 4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=treasury.gov;ip=160.250.133.232;r=server.rnv.kpw.mybluehostin.me] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=signature%40treasury.gov;ip=160.250.133.232;r=server.rnv.kpw.mybluehostin.me] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and the domain has a DMARC reject policy 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 1.0 FROM_GOV_SPOOF From Government domain but matches SPOOFED 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 1.0 FROM_GOV_REPLYTO_FREEMAIL From Government domain but ReplyTo is FREEMAIL X-Spam-Flag: YES Subject: Payment Approval ( Signature Request )

Hello,
Good Day
We are pleased to inform you that your total pay= ment entitlement has been cleared and approved to be released to you finall= y through our foreign payment centers in Canada and Philippines. Consequent= ly, You are expected to travel to these two payment centers to formalize an= d finalize the process of this funds payments release to you.
Firstly, You will be traveling to Canada to sign the relevant payment relea= se documents, which you will travel to Philippines with to present to the p= aying officials in Philippines for the eventual release of your payment and= subsequent transfer of your entire funds to your designated Bank account/s= =2E
Furthermore, to enable this process to achieve its full objective, Our offi= cials in Canada will buy some gift items, such as male and female clothing = capable of enticing our other officials at the payment/transfer center in P= hilippines. You will carry these gift items and the signed documents = with you to Philippines to present to the officials there as tips in order = to compel them to ascribe to your payment all priority attention it deserve= s. Of course, this singular action will ensure=20 that not only you receive your payment certainly but also first before any = other beneficiary.
A capable financial expert has been contacted to assist us with the provisi= on of all the necessary financial assistance by paying for your tickets thr= oughout this journey, your hotel accommodation both in Canada and Philippin= es. You shall also be given some money to serve as your feeding and other e= xpenses once you arrive in Canada and another money given to you for your e= xpenses on arrival in Philippines.
PLEASE NOTE THAT YOU ARE NOT GOING TO ADVANCE OR PAY ANY MONEY UPFRONT ALL = THROUGH THIS EXERCISE. Your only contribution is to accept travel and all y= our travel expenses shall be taken care of by us. Secondly, accept to sign = the documents in Canada and travel with the same documents and the purchase= d gift items to Philippines for the final endorsement and transfer of your = payment. Also note that the money for the purchase of these gift items shal= l be borne by us and handled by our officials in=20 Canada.
The entire journey will take you between 8 to 10 days to conclud= e. Therefore, you should prepare yourself for this number of days.
Final= ly, should you accept to make this trip, I urge you to contact your local t= raveling agency to inquire if you need a VISA to Canada and Philippin= es, so that you can apply for it immediately to save time.
Do not hesita= te to ask me questions if need be.
Best Regards
George Wallace.