/home/p1now/mail/.spam/new
NameSizeModeActions
1741750786.M257031P2427159.helium.myhosteddomain.com,S=4120,W=420441200640editdlrm
1747460014.M601334P248821.helium.myhosteddomain.com,S=6404,W=653064040640editdlrm
1747978335.M300536P2920701.helium.myhosteddomain.com,S=4258,W=434642580640editdlrm
1749178707.M395022P595062.helium.myhosteddomain.com,S=6610,W=675366100640editdlrm
1750732653.M372502P3863806.helium.myhosteddomain.com,S=6423,W=656564230640editdlrm
1752529545.M45123P63057.helium.myhosteddomain.com,S=6484,W=659464840640editdlrm
1752605055.M927443P414787.helium.myhosteddomain.com,S=4627,W=472246270640editdlrm
1752677927.M814751P773876.helium.myhosteddomain.com,S=11385,W=11596113850640editdlrm
1757347544.M670182P2630700.helium.myhosteddomain.com,S=6608,W=671866080640editdlrm
1757349158.M576488P2638402.helium.myhosteddomain.com,S=6875,W=702968750640editdlrm
1757471337.M90712P3292457.helium.myhosteddomain.com,S=6473,W=661564730640editdlrm
1757471678.M944364P3294125.helium.myhosteddomain.com,S=6713,W=686467130640editdlrm
1760576154.M272668P783819.helium.myhosteddomain.com,S=8400,W=846584000640editdlrm
1762445813.M737453P2310318.helium.myhosteddomain.com,S=3222,W=328832220640editdlrm
1764815467.M341743P1926075.helium.myhosteddomain.com,S=3019,W=307630190640editdlrm
1765369303.M454306P546587.helium.myhosteddomain.com,S=3067,W=312530670640editdlrm
1772582912.M2666P1177081.helium.myhosteddomain.com,S=4249,W=432342490640editdlrm
1772647717.M717548P1515940.helium.myhosteddomain.com,S=4548,W=462745480640editdlrm
1772779233.M183463P584711.helium.myhosteddomain.com,S=4709,W=479147090640editdlrm
1772844622.M877898P959660.helium.myhosteddomain.com,S=4248,W=432442480640editdlrm
1772910426.M688768P1290651.helium.myhosteddomain.com,S=5416,W=550654160640editdlrm
1772975021.M137559P1616370.helium.myhosteddomain.com,S=5762,W=585857620640editdlrm
1773102510.M377524P2299226.helium.myhosteddomain.com,S=5574,W=566755740640editdlrm
1773167516.M406905P2639467.helium.myhosteddomain.com,S=5289,W=537852890640editdlrm
1773232336.M504127P2972797.helium.myhosteddomain.com,S=5241,W=532952410640editdlrm
1773309134.M300488P3369829.helium.myhosteddomain.com,S=4255,W=434342550640editdlrm
1773362870.M709834P3696595.helium.myhosteddomain.com,S=5113,W=520051130640editdlrm
1773453625.M56857P4169256.helium.myhosteddomain.com,S=5294,W=538552940640editdlrm
1773518100.M378410P308920.helium.myhosteddomain.com,S=4613,W=469346130640editdlrm
1773582890.M260079P635662.helium.myhosteddomain.com,S=5698,W=579356980640editdlrm
1773712241.M947534P1305050.helium.myhosteddomain.com,S=5757,W=585657570640editdlrm
1773773517.M719449P1618454.helium.myhosteddomain.com,S=5640,W=573456400640editdlrm
1773836419.M478332P1931815.helium.myhosteddomain.com,S=5307,W=539753070640editdlrm
1773900687.M579545P2249193.helium.myhosteddomain.com,S=5724,W=582157240640editdlrm
1773965040.M400047P2576124.helium.myhosteddomain.com,S=5462,W=555554620640editdlrm
1774030479.M951046P2918809.helium.myhosteddomain.com,S=5129,W=521751290640editdlrm
1774095457.M68312P3259143.helium.myhosteddomain.com,S=4872,W=495648720640editdlrm
1774161093.M139048P3583581.helium.myhosteddomain.com,S=5725,W=582057250640editdlrm
1774280103.M316327P4194218.helium.myhosteddomain.com,S=4898,W=498248980640editdlrm
1774520064.M886858P1341045.helium.myhosteddomain.com,S=4637,W=472746370640editdlrm
1774618389.M644682P1900128.helium.myhosteddomain.com,S=8288,W=842982880640editdlrm
1774652074.M87808P2097546.helium.myhosteddomain.com,S=4376,W=446043760640editdlrm
1774790982.M418141P2833173.helium.myhosteddomain.com,S=4737,W=482947370640editdlrm
1777216803.M339358P805329.helium.myhosteddomain.com,S=4447,W=452944470640editdlrm
1777286698.M241359P957325.helium.myhosteddomain.com,S=4696,W=478246960640editdlrm
1782458988.M747999P2882422.helium.myhosteddomain.com,S=6395,W=650763950640editdlrm
1785740662.M897056P3021668.helium.myhosteddomain.com,S=12850,W=13053128500640editdlrm
1786031985.M992123P3914611.helium.myhosteddomain.com,S=6376,W=648863760640editdlrm
1786148601.M486171P76724.helium.myhosteddomain.com,S=13031,W=13237130310640editdlrm
1786460727.M459287P1019881.helium.myhosteddomain.com,S=16841,W=17111168410640editdlrm
1786791325.M832917P1912809.helium.myhosteddomain.com,S=5999,W=610659990640editdlrm
Edit: /home/p1now/mail/.spam/new/1757349158.M576488P2638402.helium.myhosteddomain.com,S=6875,W=7029 (6875B)
Return-Path: Delivered-To: p1now+spam@helium.myhosteddomain.com Received: from helium.myhosteddomain.com by helium.myhosteddomain.com with LMTP id uBxAIiYFv2hCQigAMXBWDg (envelope-from ) for ; Mon, 08 Sep 2025 12:32:38 -0400 Return-path: Envelope-to: info@p1now.com Delivery-date: Mon, 08 Sep 2025 12:32:38 -0400 Received: from [86.54.42.197] (port=63376 helo=treasury.gov) by helium.myhosteddomain.com with esmtp (Exim 4.98.2) (envelope-from ) id 1uvenF-0000000B4Ng-3SwS for info@p1now.com; Mon, 08 Sep 2025 12:32:38 -0400 Reply-To: george3x3wallace1@gmail.com From: George Wallace To: info@p1now.com Date: 08 Sep 2025 18:31:55 +0200 Message-ID: <20250908183154.45C6F99FD741C05F@treasury.gov> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=25.8 X-Spam-Score: 258 X-Spam-Bar: +++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "helium.myhosteddomain.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: New Page 3 Hello, Good Day Content analysis details: (25.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [86.54.42.197 listed in psbl.surriel.com] 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [86.54.42.197 listed in zen.spamhaus.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [86.54.42.197 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [86.54.42.197 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [86.54.42.197 listed in sa-accredit.habeas.com] 4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=treasury.gov;ip=86.54.42.197;r=helium.myhosteddomain.com] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=signature%40treasury.gov;ip=86.54.42.197;r=helium.myhosteddomain.com] 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and the domain has a DMARC reject policy 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [george3x3wallace1(at)gmail.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 1.0 FROM_GOV_SPOOF From Government domain but matches SPOOFED 1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.0 FROM_GOV_REPLYTO_FREEMAIL From Government domain but ReplyTo is FREEMAIL X-Spam-Flag: YES Subject: ***SPAM*** Payment Approval ( Signature Request ) New Page 3

Hello,
Good Day

We are pleased to inform you that your total payment entitlement has been= =20 cleared and approved to be released to you finally through our foreign paym= ent=20 centers in Canada and Japan. Consequently, You are expected to travel to th= ese=20 two payment centers to formalize and finalize the process of this funds pay= ments=20 release to you.

Firstly, You will be traveling to Canada to sign the relevant payment relea= se=20 documents, which you will travel to Japan with to present to the paying=20 officials in Japan for the eventual release of your payment and subsequent= =20 transfer of your entire funds to your designated Bank account/s.

Furthermore, to enable this process to achieve its full objective, A capabl= e=20 financial expert has been contacted to assist us with the provision of all = the=20 necessary financial assistance by paying for your tickets throughout this= =20 journey, your hotel accommodation both in Canada and Japan. You shall also = be=20 given some money to serve as your feeding and other expenses once you arriv= e in=20 Canada and another money given to you for your expenses on arrival in Japan= =2E

PLEASE NOTE THAT YOU ARE NOT GOING TO ADVANCE OR PAY ANY MONEY UPFRONT ALL= =20 THROUGH THIS EXERCISE. Your only contribution is to accept travel and all y= our=20 travel expenses shall be taken care of by us. Secondly, accept to sign the= =20 documents in Canada and travel with the same documents  to Japan for t= he final=20 endorsement and transfer of your payment.

The entire journey will take you between 8 to 10 days to conclude. Therefor= e,=20 you should prepare yourself for this number of days.

Finally, should you accept to make this trip, I urge you to contact your lo= cal=20 traveling agency to inquire if you need a VISA to Canada and Japan, so that= you=20 can apply for it immediately to save time.

Do not hesitate to ask me questions if need be.

Best Regards

George Wallace