Return-Path: <wesleywalman@orangevillas.com>
Delivered-To: sales@certproxywizard.com
Received: from cpanel14.v-sys.org
	by cpanel14.v-sys.org with LMTP
	id GXl7MjMKAWqZmzEAwJamrQ
	(envelope-from <wesleywalman@orangevillas.com>)
	for <sales@certproxywizard.com>; Mon, 11 May 2026 01:44:03 +0300
Return-path: <wesleywalman@orangevillas.com>
Envelope-to: sales@certproxywizard.com
Delivery-date: Mon, 11 May 2026 01:44:03 +0300
Received: from cloud-293081-mix.servidor.hosting ([188.95.113.32]:52961 helo=mediawebs12.com)
	by cpanel14.v-sys.org with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.99.2)
	(envelope-from <wesleywalman@orangevillas.com>)
	id 1wMCsT-0000000Ddae-3l1k
	for sales@certproxywizard.com;
	Mon, 11 May 2026 01:44:03 +0300
Received: from googlemail.com (unknown [92.63.196.140])
	by mediawebs12.com (Postfix) with ESMTPSA id A9241157B98AC;
	Mon, 11 May 2026 00:24:00 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orangevillas.com;
	s=default; t=1778451860;
	bh=ZbkIemWErqsrs5gpZfPtdSv+FjP9QstSbsipTFos4MM=; h=From:To:Subject;
	b=gMrJnkkV29+KZAEpBW5S7pOmugYIh6L7QvTZ2RP9JMsCXkVBWsfPvFXhMsnbnJkPL
	 KO08F14W7UwiJDvumyi9CPIJ7YUw2AwLglYD2gNh/7RisVvvkWuwVHdMhlwQOYJX8L
	 /n78oZlSrzF0h/9ljtL90i7ueB1JUv3z6Nmb8BhV3qR7bFm9LgntxEJFDsGs/crIjN
	 SR/4RSK8/UshdDFHONhQmzBN7IjOI16nmvNIDV+Nf86emXS4rJqBjZYYfsGYfdWw72
	 /yHlCaSpmeHF4yGYEmUDEACfUuwhbiAUw8Ayw1dgsZ7T2pYC3CqMNu6M4tgkLkSSgI
	 Yc9khAUfIw0ag==
Authentication-Results: mediawebs12.com;
        spf=pass (sender IP is 92.63.196.140) smtp.mailfrom=wesleywalman@orangevillas.com smtp.helo=googlemail.com
Received-SPF: pass (mediawebs12.com: connection is authenticated)
Reply-To: Denis <wesleywalman@orangevillas.com>
From: Denis <wesleywalman@orangevillas.com>
To: Katharina <wbobnwt@hotmail.com>
Subject: casino leads (all geos) , forex leads ,
 pharma leads for sale and also complete casino databases
Date: Mon, 11 May 2026 00:23:59 +0200
Content-Type: multipart/alternative;
 boundary="01abe249bd79561d3e9184af5a19bbcb9c"
X-PPP-Message-ID: <177845185933.3426437.8827727616494788031@mediawebs12.com>
X-PPP-Vhost: orangevillas.com
X-Spam-Status: No, score=4.6
X-Spam-Score: 46
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "cpanel14.v-sys.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello I sell casino leads (all geos) , forex leads, pharma
    leads and also entire casino databases. The price depends on which countrys
    and how many leads. 
 Content analysis details:   (4.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.6 MISSING_MID            Missing Message-Id: header
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?92.63.196.140>]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: t.me]
                             [URI: orangevillas.com]
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to DNSWL
                             was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [188.95.113.32 listed in list.dnswl.org]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
  0.1 TRACKER_ID             BODY: Incorporates a tracking ID number
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 KAM_SHORT              Use of a URL Shortener for very short URL
  1.0 KAM_HTMLNOISE          Spam containing useless HTML padding
  0.1 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME
                             headers
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                             domains in spam/malware
X-Spam-Flag: NO

--01abe249bd79561d3e9184af5a19bbcb9c
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hello

I sell casino leads (all geos) , forex leads, pharma leads and also entir=
e casino databases.

The price depends on which countrys and how many leads.

I also have leads who have deposited funds into casinos using cryptocurre=
ncies.

All data=C2=A0are from 2024 to 2026.

If you want to buy, contact me on Telegram @denisv9 , or click on the fol=
lowing link

https://t.me/denisv9

When you write to me on Telegram, please tell me exactly what you want to=
 buy.

I accept only bitcoin or another cryptocurrency as payment method.

Do not reply to this email.

yoycssqevvboyrtkmimuaiorxeqiwwydrgfungvgmrfjmlzthgailnxvqavvjblhjqqvr

--01abe249bd79561d3e9184af5a19bbcb9c
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html><head>
<meta content=3D"text/html; charset=3Dutf-8" http-equiv=3DContent-Type>
<meta name=3DGENERATOR content=3D"MSHTML 8.00.6001.23588">
<style></style>
</head>
<body bgColor=3D"#ffffff">
<div align=3Dleft><font size=3D2>
<div align=3Dleft><font size=3D3 face=3DArial></font></div></font></div>
<div align=3Dleft><font size=3D2 face=3DArial>Hello</font></div>
<div><font face=3DArial></font>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I sell casino leads (all ge=
os) , forex leads, pharma leads and also entire casino databases.</font><=
/div>
<div><font face=3DArial></font>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>The price depends on which =
countrys and how many leads.</font></div>
<div align=3Dleft><font size=3D2 face=3DArial></font>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I also have leads who have =
deposited funds into casinos using cryptocurrencies.</font></div>
<div align=3Dleft><font size=3D2 face=3DArial></font>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>All data&nbsp;are from 2024=
 to 2026.</font></div>
<div><font face=3DArial></font>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>If you want to buy, contact=
 me on Telegram <strong>@denisv9</strong> , or click on the following lin=
k</font></div>
<div><font face=3DArial></font>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial><a href=3D"https://t.me/den=
isv9">https://t.me/denisv9</a></font></div>
<div align=3Dleft><font size=3D2 face=3DArial></font>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>When you write to me on Tel=
egram, please tell me exactly what you want to buy.</font></div>
<div><font face=3DArial></font>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I accept only bitcoin or an=
other cryptocurrency as payment method.</font></div>
<div><font face=3DArial></font>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>Do not reply to this email.=
</font></div>
<div><font face=3DArial></font>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial></font>&nbsp;</div>
<div><font face=3DArial></font>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial></font>&nbsp;</div>
<div><font face=3DArial></font>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>yoycssqevvboyrtkmimuaiorxeq=
iwwydrgfungvgmrfjmlzthgailnxvqavvjblhjqqvr</font></div></body></html>

--01abe249bd79561d3e9184af5a19bbcb9c--
