Return-Path: <no-reply@noreply.profiforma.pt>
Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me
Received: from server.rnv.kpw.mybluehostin.me
	by server.rnv.kpw.mybluehostin.me with LMTP
	id WOnKJSXZ8GkPCQAAyTkJsw
	(envelope-from <no-reply@noreply.profiforma.pt>)
	for <behniwal+spam@server.rnv.kpw.mybluehostin.me>; Tue, 28 Apr 2026 09:58:29 -0600
Return-path: <no-reply@noreply.profiforma.pt>
Envelope-to: info@behniwalgroup.com
Delivery-date: Tue, 28 Apr 2026 09:58:29 -0600
Received: from mail-wm1-f98.google.com ([209.85.128.98]:51667)
	by server.rnv.kpw.mybluehostin.me with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.95)
	(envelope-from <no-reply@noreply.profiforma.pt>)
	id 1wHkpQ-0000cO-IH
	for info@behniwalgroup.com;
	Tue, 28 Apr 2026 09:58:29 -0600
Received: by mail-wm1-f98.google.com with SMTP id 5b1f17b1804b1-488b8bc6bc9so83861585e9.3
        for <info@behniwalgroup.com>; Tue, 28 Apr 2026 08:58:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=profiforma.pt; s=google; t=1777391867; x=1777996667; darn=behniwalgroup.com;
        h=content-transfer-encoding:mime-version:date:subject:to:from
         :reply-to:message-id:from:to:cc:subject:date:message-id:reply-to;
        bh=D3BTLuqxGYoLRJhgndMiyXuvt3bFO5rgTpyzza4o3QA=;
        b=o2h/KJl1MYmUljBqsv4jCUPVHiUafz/UMk6mfPQeaLtaBy6bhH1+ILHEELmf9ts4ho
         YRtEODnr1o6qE+YHV5U+EyelA0KZ2VutGyvrZ60f76DoSpE7MPZvFGrF/ULPrN+ivxqW
         VS03Mcl5uI/c1/naR7jkV+0ZFp/xs403/0w+phho4MRyo2SO0ADe3u8A8i+6ulreda6A
         Hv+dqcyBPT95syWOH1ocu9giIN9buXBCTU4K+TSA51ySQNi9nwuSpFkfiXSNnr2lGwYJ
         th9i9wiDJHfoHq1WIFGo6BB6TNQ6gVmBsF1KvnMoa30odFypY/qdb3q5dP5EbD1ywyW+
         yanw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20251104; t=1777391867; x=1777996667;
        h=content-transfer-encoding:mime-version:date:subject:to:from
         :reply-to:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject
         :date:message-id:reply-to;
        bh=D3BTLuqxGYoLRJhgndMiyXuvt3bFO5rgTpyzza4o3QA=;
        b=S6bLexqteU9jq/lRHeEdnyyjOSBrIClLCSzBDqwYJK25nKwQipBPCpbzbQDPUwZWb5
         RsKvrc+529KL94hEroeYAA30s8Di4hysAgQf91r8xLoymxxWI+BZLcmMNhpNPZ25gzlm
         Evd7Xeun5TOAML501j8gaR+xmOeobaozwNB0w4/MGfcRyjQYtVDJ1Q1AFn/jRg4AGJ56
         p7zVtlq+hn8X7/W9vyz5DMB7JLOonyfYRG6kkF1BLnwyg5qmQCsLmVPeY3qizBZPspwP
         FKJPhBPIEq7+P0bjvrYbbGbl6f0oi6w9wNxhmaD0w0sFGJDvKuHdwZNu35mpRowIgqK0
         b4JQ==
X-Forwarded-Encrypted: i=1; AFNElJ/inpi11p2DkXL640HOy90XGZb9lsGBSElcqngZ7Wg8MVas0Pv26wXuC/Ywhq+ZudENmNlE@behniwalgroup.com
X-Gm-Message-State: AOJu0Yxi7pSCGre38EyN8ajdWB7KI8hXy/FFC5NhFIlrTctmmke1Ebvz
	jbkM5iYKldnPaagsoT+jzRa0WnUq3bxiAIih49ZciMTNk4FsFx/WrARJy3/TWTQdfVDszIS4wzk
	BSRuvbnD/0kMe63I8+1uE69azC1UZTCYc6IcI
X-Gm-Gg: AeBDieuVT+V+hgN5BLigBu3Fp1h4VSGwxD//oE5zjj4vC3a4OWJImo7xcD9qGYJB0F6
	2NWUVHv9IG0yf5DM07MKp5X12AJNFTl97FdDV42docR7zWT+tez1/Si/WRff77bvBf6e0VjO2C5
	OjBFCJu5vFk0FNyOmhb5tE+JqAXsBj5ZcRmECED4OuAVqLXmZtt6zT4IDGtL9+8j/kxynYcQLmG
	r5PzEP1ZBfWhgYeMZMMlMj1AEP5C9lGWf0AC4QdpX75hDhwePdA9cL8cJPuqrnhXGvRAWXMCutl
	psEgbzsOerf2HE7QE9mL2LTfKOkLnVIiB8XB8oZAs7iFqCuZBKAklkvCjQbVdBGvOgAAEeWqL/l
	0I2xcbUSEorRjJ5lXiwbkXSVK8Z/Yd/LSnUo/x4/lahlaGZKSX2ngAe+Q31xfxy8jm10iNGu2nD
	HxpQ==
X-Received: by 2002:a05:600c:4593:b0:48a:599a:36fe with SMTP id 5b1f17b1804b1-48a77b1d78cmr58597085e9.24.1777391866703;
        Tue, 28 Apr 2026 08:57:46 -0700 (PDT)
Received: from plesk.profiforma.pt (109.86.195.35.bc.googleusercontent.com. [35.195.86.109])
        by smtp-relay.gmail.com with ESMTPS id ffacd0b85a97d-4463ce44a9dsm143415f8f.6.2026.04.28.08.57.46
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Tue, 28 Apr 2026 08:57:46 -0700 (PDT)
X-Relaying-Domain: profiforma.pt
Received: from hzbu (unknown [193.46.192.20])
	by plesk.profiforma.pt (Postfix) with ESMTPSA id 384F620A2BC6;
	Tue, 28 Apr 2026 16:57:27 +0100 (WEST)
Authentication-Results: servidor-profi-vm;
	spf=pass (sender IP is 193.46.192.20) smtp.mailfrom=no-reply@noreply.profiforma.pt smtp.helo=hzbu
Received-SPF: pass (servidor-profi-vm: connection is authenticated)
Message-ID: <6D97AF03F0230C4036BC8430B36010F295AF@noreply.profiforma.pt>
Reply-To: Paul Van <no-reply@noreply.profiforma.pt>
From: Paul Van <no-reply@noreply.profiforma.pt>
To: Paula <dexpfbn@hotmail.com>
Date: Tue, 28 Apr 2026 17:57:25 +0200
MIME-Version: 1.0
Content-Type: text/plain;
	format=flowed;
	charset="utf-8";
	reply-type=original
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 14.0.8117.416
X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8117.416
X-Spam-Status: Yes, score=9.2
X-Spam-Score: 92
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  hello i sell casino leads from almost every country (real
   databases) and i also sell two complete crypto online casino databases cryptofairplay
    and cryptorino and also the online casino 1win. each country has different
    number of records/leads, but each country costs $1000 
 Content analysis details:   (9.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: profiforma.pt]
  0.2 STOX_REPLY_TYPE        No description available.
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?193.46.192.20>]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=no-reply%40noreply.profiforma.pt;ip=209.85.128.98;r=server.rnv.kpw.mybluehostin.me]
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  1.9 STOX_REPLY_TYPE_WITHOUT_QUOTES No description available.
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.0 STATIC_XPRIO_OLE       Static RDNS + X-Priority + MIMEOLE
X-Spam-Flag: YES
Subject:    casino leads for sale and also complete casino bases

hello

i sell casino leads from almost every country (real databases) and i also=
 sell two complete crypto online casino databases cryptofairplay and cryp=
torino and also the online casino 1win.

each country has different number of records/leads, but each country cost=
s $1000

the price for the crypto casinos cryptofairplay and cryptorino is each $1=
500 and also the price for the complete 1win casino is $1500

if you are interested in buying the databases, contact me on Telegram at =
@emaildba

i accept only bitcoin or another cryptocurrency as payment method.









hiwyrgxzzerviivgquiprdjuikdhhuyvnfraccvmwrjtklj
jixvsabrwkoaiaoswscbyzhptexytebgydojqxlbyx
