File: /home/w3com/mail/.info@w3_com_py/new/1779151055.M713653P588614.mail.yayogua.com.py,S=4808,W=4921
Return-Path: <khalti.sindhuli@worldlink.com.np>
Delivered-To: info@w3.com.py
Received: from mail.yayogua.com.py
by mail.yayogua.com.py with LMTP
id UAcFKc+wC2pG+wgA1a8lTA
(envelope-from <khalti.sindhuli@worldlink.com.np>)
for <info@w3.com.py>; Tue, 19 May 2026 00:37:35 +0000
Return-path: <khalti.sindhuli@worldlink.com.np>
Envelope-to: info@w3.com.py
Delivery-date: Tue, 19 May 2026 00:37:35 +0000
Received: from mx-01.wlink.com.np ([202.166.193.125]:23816 helo=mx-01-114.wlink.com.np)
by mail.yayogua.com.py with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.2)
(envelope-from <khalti.sindhuli@worldlink.com.np>)
id 1wP8Sk-00000002T3Y-0H3k
for info@w3.com.py;
Tue, 19 May 2026 00:37:35 +0000
Received: from mx-01.wlink.com.np (localhost [127.0.0.1])
by mx-01.wlink.com.np (Postfix) with ESMTP id 3FAFCEBCE5;
Tue, 19 May 2026 06:21:47 +0545 (+0545)
Received: from localhost (localhost [127.0.0.1])
by mx-01.wlink.com.np (Postfix) with ESMTP id CD7BFEBCD0;
Tue, 19 May 2026 06:21:46 +0545 (+0545)
X-Virus-Scanned: by SpamTitan at wlink.com.np
Received: from mx-01.wlink.com.np (localhost [127.0.0.1])
by mx-01.wlink.com.np (Postfix) with ESMTP id 4EFF8EBCB6;
Tue, 19 May 2026 06:21:41 +0545 (+0545)
Authentication-Results: mx-01.wlink.com.np;
x-trusted-ip=pass
Received: from mail.worldlink.com.np (mail1.worldlink.com.np [10.21.7.148])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by mx-01.wlink.com.np (Postfix) with ESMTPS id 003B3EB143;
Tue, 19 May 2026 06:21:39 +0545 (+0545)
Received: from googlemail.com (202.79.32.107) by mail1.worldlink.com.np
(10.21.7.148) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.858.5; Tue, 19 May 2026
06:21:06 +0545
Reply-To: Denis <khalti.sindhuli@worldlink.com.np>
From: Denis <khalti.sindhuli@worldlink.com.np>
MessageID: <CFDFFEEEDFBCEFF@vgfc>
Subject: casino leads (depositors) , forex leads , pharma leads for sale
To: Maurice <rsbvegfu@hotmail.com>
Date: Tue, 19 May 2026 02:36:03 +0200
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Priority: 3
Message-ID: <71e6437f-b67d-4add-aef0-af964360afe3@mail1.worldlink.com.np>
X-Originating-IP: [202.79.32.107]
X-ClientProxiedBy: mail2.worldlink.com.np (10.12.7.32) To
mail1.worldlink.com.np (10.21.7.148)
X-Spam-Status: No, score=4.4
X-Spam-Score: 44
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "mail.yayogua.com.py",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello I sell casino leads (all geos) , forex leads (all geos)
, pharma leads (drug buyers online). I also have leads who have deposited
funds into casinos using cryptocurrencies.
Content analysis details: (4.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: t.me]
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL
was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
for more information.
[202.166.193.125 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4998]
0.1 TRACKER_ID BODY: Incorporates a tracking ID number
2.5 BITCOIN_XPRIO Bitcoin + priority
1.0 MSGID_HDR_MALF Has invalid message ID header
X-Spam-Flag: NO
Hello
I sell casino leads (all geos) , forex leads (all geos) , pharma leads (d=
rug buyers online).
I also have leads who have deposited funds into casinos using cryptocurre=
ncies.
All data are from 2024 to 2026.
If you want to buy, contact me on Telegram @denisv9 , or click on the fol=
lowing link
https://t.me/denisv9
When you write to me on Telegram, please tell me exactly what you want to=
buy.
I accept only bitcoin or another cryptocurrency as payment method.
Do not reply to this email.
zxktjnikdrrijqlbbvcnnztbapwkflbbjkgqhlaswqcxeqxexxlvapjrvm