Preview: 1778453043.M870105P3251097.cpanel14.v-sys.org,S=8165,W=8335
Size: 7.97 KB
/home/certprox/mail/.sales@certproxywizard_com/new/1778453043.M870105P3251097.cpanel14.v-sys.org,S=8165,W=8335
Return-Path: <wesleywalman@orangevillas.com>
Delivered-To: sales@certproxywizard.com
Received: from cpanel14.v-sys.org
by cpanel14.v-sys.org with LMTP
id GXl7MjMKAWqZmzEAwJamrQ
(envelope-from <wesleywalman@orangevillas.com>)
for <sales@certproxywizard.com>; Mon, 11 May 2026 01:44:03 +0300
Return-path: <wesleywalman@orangevillas.com>
Envelope-to: sales@certproxywizard.com
Delivery-date: Mon, 11 May 2026 01:44:03 +0300
Received: from cloud-293081-mix.servidor.hosting ([188.95.113.32]:52961 helo=mediawebs12.com)
by cpanel14.v-sys.org with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.2)
(envelope-from <wesleywalman@orangevillas.com>)
id 1wMCsT-0000000Ddae-3l1k
for sales@certproxywizard.com;
Mon, 11 May 2026 01:44:03 +0300
Received: from googlemail.com (unknown [92.63.196.140])
by mediawebs12.com (Postfix) with ESMTPSA id A9241157B98AC;
Mon, 11 May 2026 00:24:00 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orangevillas.com;
s=default; t=1778451860;
bh=ZbkIemWErqsrs5gpZfPtdSv+FjP9QstSbsipTFos4MM=; h=From:To:Subject;
b=gMrJnkkV29+KZAEpBW5S7pOmugYIh6L7QvTZ2RP9JMsCXkVBWsfPvFXhMsnbnJkPL
KO08F14W7UwiJDvumyi9CPIJ7YUw2AwLglYD2gNh/7RisVvvkWuwVHdMhlwQOYJX8L
/n78oZlSrzF0h/9ljtL90i7ueB1JUv3z6Nmb8BhV3qR7bFm9LgntxEJFDsGs/crIjN
SR/4RSK8/UshdDFHONhQmzBN7IjOI16nmvNIDV+Nf86emXS4rJqBjZYYfsGYfdWw72
/yHlCaSpmeHF4yGYEmUDEACfUuwhbiAUw8Ayw1dgsZ7T2pYC3CqMNu6M4tgkLkSSgI
Yc9khAUfIw0ag==
Authentication-Results: mediawebs12.com;
spf=pass (sender IP is 92.63.196.140) smtp.mailfrom=wesleywalman@orangevillas.com smtp.helo=googlemail.com
Received-SPF: pass (mediawebs12.com: connection is authenticated)
Reply-To: Denis <wesleywalman@orangevillas.com>
From: Denis <wesleywalman@orangevillas.com>
To: Katharina <wbobnwt@hotmail.com>
Subject: casino leads (all geos) , forex leads ,
pharma leads for sale and also complete casino databases
Date: Mon, 11 May 2026 00:23:59 +0200
Content-Type: multipart/alternative;
boundary="01abe249bd79561d3e9184af5a19bbcb9c"
X-PPP-Message-ID: <177845185933.3426437.8827727616494788031@mediawebs12.com>
X-PPP-Vhost: orangevillas.com
X-Spam-Status: No, score=4.6
X-Spam-Score: 46
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "cpanel14.v-sys.org",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello I sell casino leads (all geos) , forex leads, pharma
leads and also entire casino databases. The price depends on which countrys
and how many leads.
Content analysis details: (4.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.6 MISSING_MID Missing Message-Id: header
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?92.63.196.140>]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: t.me]
[URI: orangevillas.com]
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL
was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
for more information.
[188.95.113.32 listed in list.dnswl.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 TRACKER_ID BODY: Incorporates a tracking ID number
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 KAM_SHORT Use of a URL Shortener for very short URL
1.0 KAM_HTMLNOISE Spam containing useless HTML padding
0.1 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME
headers
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
X-Spam-Flag: NO
--01abe249bd79561d3e9184af5a19bbcb9c
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Hello
I sell casino leads (all geos) , forex leads, pharma leads and also entir=
e casino databases.
The price depends on which countrys and how many leads.
I also have leads who have deposited funds into casinos using cryptocurre=
ncies.
All data=C2=A0are from 2024 to 2026.
If you want to buy, contact me on Telegram @denisv9 , or click on the fol=
lowing link
https://t.me/denisv9
When you write to me on Telegram, please tell me exactly what you want to=
buy.
I accept only bitcoin or another cryptocurrency as payment method.
Do not reply to this email.
yoycssqevvboyrtkmimuaiorxeqiwwydrgfungvgmrfjmlzthgailnxvqavvjblhjqqvr
--01abe249bd79561d3e9184af5a19bbcb9c
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
<html><head>
<meta content=3D"text/html; charset=3Dutf-8" http-equiv=3DContent-Type>
<meta name=3DGENERATOR content=3D"MSHTML 8.00.6001.23588">
<style></style>
</head>
<body bgColor=3D"#ffffff">
<div align=3Dleft><font size=3D2>
<div align=3Dleft><font size=3D3 face=3DArial></font></div></font></div>
<div align=3Dleft><font size=3D2 face=3DArial>Hello</font></div>
<div><font face=3DArial></font> </div>
<div align=3Dleft><font size=3D2 face=3DArial>I sell casino leads (all ge=
os) , forex leads, pharma leads and also entire casino databases.</font><=
/div>
<div><font face=3DArial></font> </div>
<div align=3Dleft><font size=3D2 face=3DArial>The price depends on which =
countrys and how many leads.</font></div>
<div align=3Dleft><font size=3D2 face=3DArial></font> </div>
<div align=3Dleft><font size=3D2 face=3DArial>I also have leads who have =
deposited funds into casinos using cryptocurrencies.</font></div>
<div align=3Dleft><font size=3D2 face=3DArial></font> </div>
<div align=3Dleft><font size=3D2 face=3DArial>All data are from 2024=
to 2026.</font></div>
<div><font face=3DArial></font> </div>
<div align=3Dleft><font size=3D2 face=3DArial>If you want to buy, contact=
me on Telegram <strong>@denisv9</strong> , or click on the following lin=
k</font></div>
<div><font face=3DArial></font> </div>
<div align=3Dleft><font size=3D2 face=3DArial><a href=3D"https://t.me/den=
isv9">https://t.me/denisv9</a></font></div>
<div align=3Dleft><font size=3D2 face=3DArial></font> </div>
<div align=3Dleft><font size=3D2 face=3DArial>When you write to me on Tel=
egram, please tell me exactly what you want to buy.</font></div>
<div><font face=3DArial></font> </div>
<div align=3Dleft><font size=3D2 face=3DArial>I accept only bitcoin or an=
other cryptocurrency as payment method.</font></div>
<div><font face=3DArial></font> </div>
<div align=3Dleft><font size=3D2 face=3DArial>Do not reply to this email.=
</font></div>
<div><font face=3DArial></font> </div>
<div align=3Dleft><font size=3D2 face=3DArial></font> </div>
<div><font face=3DArial></font> </div>
<div align=3Dleft><font size=3D2 face=3DArial></font> </div>
<div><font face=3DArial></font> </div>
<div align=3Dleft><font size=3D2 face=3DArial>yoycssqevvboyrtkmimuaiorxeq=
iwwydrgfungvgmrfjmlzthgailnxvqavvjblhjqqvr</font></div></body></html>
--01abe249bd79561d3e9184af5a19bbcb9c--
Directory Contents
Dirs: 0 × Files: 154