Return-Path: <signature@treasury.gov>
Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me
Received: from server.rnv.kpw.mybluehostin.me
	by server.rnv.kpw.mybluehostin.me with LMTP
	id 8ueRBsPdM2rITgAAyTkJsw
	(envelope-from <signature@treasury.gov>)
	for <behniwal+spam@server.rnv.kpw.mybluehostin.me>; Thu, 18 Jun 2026 06:00:03 -0600
Return-path: <signature@treasury.gov>
Envelope-to: info@behniwalgroup.com
Delivery-date: Thu, 18 Jun 2026 06:00:03 -0600
Received: from [160.250.133.232] (port=59482 helo=treasury.gov)
	by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.99.4)
	(envelope-from <signature@treasury.gov>)
	id 1waBPc-000000005D1-2EBk
	for info@behniwalgroup.com;
	Thu, 18 Jun 2026 06:00:03 -0600
Reply-To: wallaceg33544@gmail.com
From: George Wallace. <signature@treasury.gov>
To: info@behniwalgroup.com
Date: 18 Jun 2026 18:59:09 +0700
Message-ID: <20260618185909.57DCD0A275149733@treasury.gov>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=23.8
X-Spam-Score: 238
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Attention: Sir. We are pleased to inform you that your total
    payment entitlement has been cleared and approved to be released to you finally
    through our foreign payment centers in Canada and Philippines. Consequently
    [...] 
 Content analysis details:   (23.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [160.250.133.232 listed in psbl.surriel.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
             [Blocked - see <https://www.spamcop.net/bl.shtml?160.250.133.232>]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [wallaceg33544[at]gmail.com]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=treasury.gov;ip=160.250.133.232;r=server.rnv.kpw.mybluehostin.me]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=signature%40treasury.gov;ip=160.250.133.232;r=server.rnv.kpw.mybluehostin.me]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  3.0 KAM_DMARC_REJECT       DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC reject
                             policy
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.0 FROM_GOV_SPOOF         From Government domain but matches SPOOFED
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
                             only
  1.0 FROM_GOV_REPLYTO_FREEMAIL From Government domain but ReplyTo is
                             FREEMAIL
X-Spam-Flag: YES
Subject:    Payment Approval ( Signature Request )

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">

<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.9600.17037"></HEAD>
<body style=3D"MARGIN: 0.5em">
<P>Attention: Sir.</P>
<P>We are pleased to inform you that your total payment entitlement has bee=
n cleared and approved to be released to you finally through our foreign pa=
yment centers in Canada and Philippines. Consequently, you are expected to =
travel to these two payment centers to formalize and finalize the process o=
f this fund's payments release to you.</P>
<P>Firstly, you will be traveling to Canada to sign the relevant payment re=
lease documents, which you will travel to the Philippines with to present t=
o the paying officials in Philippines for the eventual release of your paym=
ent and subsequent transfer of your entire funds to your designated Bank ac=
count/s.</P>
<P>A capable financial expert has been contacted to assist us with the prov=
ision of all the necessary financial assistance by paying for your tickets =
throughout this journey, your hotel accommodation both in Canada and Philip=
pines. You shall also be given some money to serve as your feeding and othe=
r expenses once you arrive in Canada and another money given to you for you=
r expenses on arrival in the Philippines.</P>
<P>PLEASE NOTE THAT YOU ARE NOT GOING TO ADVANCE OR PAY ANY MONEY UPFRONT A=
LL THROUGH THIS EXERCISE. Your only contribution is to accept travel, and a=
ll your travel expenses shall be taken care of by us. Secondly, accept to s=
ign the documents in Canada and travel with the same documents and the purc=
hased gift souvenir to the Philippines for the final endorsement and transf=
er of your payment. </P>
<P>The entire journey will take you between&nbsp; 6 to 7 days to conclude. =
Therefore, you should prepare yourself for this number of days.</P>
<P>Finally, should you accept to make this trip, I urge you to contact your=
 local traveling agency to inquire if you need a VISA to Canada and the Phi=
lippines, so that you can apply for it immediately to save time.</P>
<P>Do not hesitate to ask me questions if need be.</P>
<P>Best Regards<BR>George Wallace.</P></BODY></HTML>
