Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id VWdOHeAeBGpWRgAAyTkJsw (envelope-from ) for ; Wed, 13 May 2026 00:49:04 -0600 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Wed, 13 May 2026 00:49:04 -0600 Received: from smtp001.autonetic.com ([103.80.159.45]:49068) by server.rnv.kpw.mybluehostin.me with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.99.1) (envelope-from ) id 1wN2yP-000000003R5-2Fz5 for info@behniwalgroup.com; Wed, 13 May 2026 00:21:41 -0600 Received: from mailserver2.alphacloud.in (unknown [172.16.16.75]) by smtp001.autonetic.com (Postfix) with SMTP id B9FFF3C3555; Mon, 11 May 2026 18:58:39 +0000 (UTC) Received: from googlemail.com (89-67-37-8.dynamic.play.pl [89.67.37.8]) by mailserver2.alphacloud.in with ESMTPSA (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256) ; Tue, 12 May 2026 00:28:38 +0530 Message-ID: <4B77243D-5F3D-412C-A74F-52C1DDCA7FD4@mailserver2.alphacloud.in> MessageID: <6A90A804F7240B473100388C0FDCA87DC904@marybsoln.com> Reply-To: Denis From: Denis To: Sarah Date: Mon, 11 May 2026 20:58:03 +0200 Organization: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="a2c9802bdf1b313f5cf6ba4d09cc610a8029" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: X-Mailer: Wireshark 3.2.0 (Linux) X-Spam-Status: Yes, score=16.7 X-Spam-Score: 167 X-Spam-Bar: ++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello I sell casino leads (all geos) , forex leads, pharma leads and also entire casino databases. The price depends on which countrys and how many leads. Content analysis details: (16.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: t.me] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=akshat.bhatnagar%40marybsoln.com;ip=103.80.159.45;r=server.rnv.kpw.mybluehostin.me] 0.1 TRACKER_ID BODY: Incorporates a tracking ID number 0.0 HTML_MESSAGE BODY: HTML included in message 2.0 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/) 1.0 KAM_HTMLNOISE Spam containing useless HTML padding 0.0 KAM_SHORT Use of a URL Shortener for very short URL 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 1.0 MSGID_HDR_MALF Has invalid message ID header 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and the domain has a DMARC reject policy 2.5 BITCOIN_XPRIO Bitcoin + priority X-Spam-Flag: YES Subject: casino leads (all geos) , forex leads , pharma leads for sale and also complete casino databases --a2c9802bdf1b313f5cf6ba4d09cc610a8029 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello I sell casino leads (all geos) , forex leads, pharma leads and also entir= e casino databases. The price depends on which countrys and how many leads. I also have leads who have deposited funds into casinos using cryptocurre= ncies. All data=C2=A0are from 2024 to 2026. If you want to buy, contact me on Telegram @denisv9 , or click on the fol= lowing link https://t.me/denisv9 When you write to me on Telegram, please tell me exactly what you want to= buy. I accept only bitcoin or another cryptocurrency as payment method. Do not reply to this email. njrhvmrkiqizubrwsayrtyhklrufklsdjnblixyqxeblcjojfr --a2c9802bdf1b313f5cf6ba4d09cc610a8029 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable
Hello
 
I sell casino leads (all ge= os) , forex leads, pharma leads and also entire casino databases.<= /div>
 
The price depends on which = countrys and how many leads.
 
I also have leads who have = deposited funds into casinos using cryptocurrencies.
 
All data are from 2024= to 2026.
 
If you want to buy, contact= me on Telegram @denisv9 , or click on the following lin= k
 
 
When you write to me on Tel= egram, please tell me exactly what you want to buy.
 
I accept only bitcoin or an= other cryptocurrency as payment method.
 
Do not reply to this email.=
 
 
 
 
 
njrhvmrkiqizubrwsayrtyhklru= fklsdjnblixyqxeblcjojfr
--a2c9802bdf1b313f5cf6ba4d09cc610a8029--