HEX
Server: Apache
System: Linux gains.arrowcloudlinux.com 4.18.0-553.69.1.lve.el8.x86_64 #1 SMP Wed Aug 13 19:53:59 UTC 2025 x86_64
User: mbkashyap (2642)
PHP: 8.1.33
Disabled: allow_url_include, show_source, symlink, system, passthru, exec, popen, pclose, proc_open, proc_terminate,proc_get_status, proc_close, proc_nice, allow_url_fopen, shell-exec, shell_exec, fpassthru, base64_encodem, escapeshellcmd, escapeshellarg, crack_check,crack_closedict, crack_getlastmessage, crack_opendict, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, dl, escap, phpinfo
Upload Files
File: /home/mbkashyap/Maildir/new/1761969381.M661403P1665129.gains.arrowcloudlinux.com,S=16600,W=16968
Return-Path: <>
Delivered-To: mbkashyap@mbkashyap.com
Received: from gains.arrowcloudlinux.com
	by gains.arrowcloudlinux.com with LMTP
	id sRErJ+WEBWlpaBkAkSpu+g
	(envelope-from <>)
	for <mbkashyap@mbkashyap.com>; Sat, 01 Nov 2025 09:26:21 +0530
Return-path: <>
Envelope-to: mbkashyap@mbkashyap.com
Delivery-date: Sat, 01 Nov 2025 09:26:21 +0530
Received: from mail by gains.arrowcloudlinux.com with spam-scanned (Exim 4.98.2)
	id 1vF2iw-00000006z4U-0lMt
	for mbkashyap@mbkashyap.com;
	Sat, 01 Nov 2025 09:26:21 +0530
X-Spam-Checker-Version: SpamAssassin 4.0.2 (2025-08-27) on
	gains.arrowcloudlinux.com
X-Spam-Level: 
X-Spam-Status: No, score=0.6 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,FREEMAIL_FROM,LOTS_OF_MONEY,MONEY_NOHTML,
	RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,
	RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,
	RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_NONE,URIBL_BLOCKED,URIBL_CSS_A
	autolearn=no autolearn_force=no version=4.0.2
Received: from mail-pl1-f193.google.com ([209.85.214.193])
	by gains.arrowcloudlinux.com with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98.2)
	id 1vF2iv-00000006yzx-3NJd
	for mbkashyap@mbkashyap.com;
	Sat, 01 Nov 2025 09:26:18 +0530
Received: by mail-pl1-f193.google.com with SMTP id d9443c01a7336-29555415c5fso4656255ad.1
        for <mbkashyap@mbkashyap.com>; Fri, 31 Oct 2025 20:56:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=googlemail.com; s=20230601; t=1761969376; x=1762574176; darn=mbkashyap.com;
        h=content-transfer-encoding:in-reply-to:references:subject:from:date
         :message-id:auto-submitted:to:mime-version:from:to:cc:subject:date
         :message-id:reply-to;
        bh=EF/+1hpOC5Is7aWPC4Xu7O93CV2nNQHglLh9/PuxE/8=;
        b=cshVjGBmqQnTM+1fBNM3gECryFw9zJb//IcR5rO/uiMumeANm/rIN87O5IPuJCHsTs
         g58WW3PH5NEhM1Y0ByTl9HX5DfljB1ZRsH/XHplliDY/V1YM6MlaT09FhzrobmWmAqow
         T6Ah7CusVBbdW1f4W1BtOQ4fU7+Nri8tG0u2AkIPxuDRUyZPatUpZmdj9u+7sdbZgYuK
         Iq2Xe38QqM2j6UE/H6lF3G2MXCA0ANENRbXlQ/op31KBUNSx6K34FXIRCYHV0JLtuA3P
         ukVA6F8Z4XA97eR95NJiibub+h8Nbz/LUR97o8VxSBWCGypVhZe/ySAagotpTe7iqIVT
         T72A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1761969376; x=1762574176;
        h=content-transfer-encoding:in-reply-to:references:subject:from:date
         :message-id:auto-submitted:to:mime-version:x-gm-message-state:from
         :to:cc:subject:date:message-id:reply-to;
        bh=EF/+1hpOC5Is7aWPC4Xu7O93CV2nNQHglLh9/PuxE/8=;
        b=nD+Xnpc0icmsfaHfeUt+bQoRq1Zasa+GYa7Pu9wZwKPmx5Tf8dr8fb9Rt7dT0d89a5
         uGCodCPlla2rAOwA5VfbioG91UQUdSHxm4+tohHItL2+PulHwew4ylzXhTu++7+g4HO2
         uEFDZ2cKBwIJ/UTg8+RLihO/a+TbtwRxBVDd78EABpvz7qaY18H7XxLLPCj+SLTtr+GO
         OKLQ5AFaxV6bb3XvoBWASWeJqQOLb29ttuu85tdA2ipmcThTM2hyoqiVIyS1eVWD8vnF
         06IwxjB2aiMcvMH3IrgKdAUHTHW44aN4StK8XnMB1xyIMvr2ufC0lBME2ZtiKhcdm9dS
         BD4A==
X-Gm-Message-State: AOJu0Yxn3RbPAWMPbYuBGxmsvWxIwXvVKa/iuX9vJMEBQ5q13UmSOlQp
	4NCNb0ZAv1EEWdiGIWn9VBK3TzgGMFZ6h9wkWwdSEXPXAksuufIZaw5BO0Wxm7pB9ftfPrVshL3
	PGO2Kd73Ti/o+/wwe4rOAywlBIrC38jP8fq15FH0c4W2nFkAYtSAe1guHnQ==
X-Google-Smtp-Source: AGHT+IEho50vb5clFTayAgVl1UxeRiP+vtzlDgEd5vHG+oG/42vqUy54Yf7mERdEscUEz2CDElhgoeYx8spnbJl8MqZyB2Vw9WYkVSs=
X-Received: by 2002:a17:902:da87:b0:290:c94b:8381 with SMTP id d9443c01a7336-2951a3905e9mr66139575ad.7.1761969376554;
        Fri, 31 Oct 2025 20:56:16 -0700 (PDT)
MIME-Version: 1.0
To: mbkashyap@mbkashyap.com
Received: by 2002:a17:902:da87:b0:290:c94b:8381 with SMTP id
 d9443c01a7336-2951a3905e9mr68718795ad.7; Fri, 31 Oct 2025 20:56:16 -0700 (PDT)
Auto-Submitted: auto-replied
Message-ID: <690584e0.170a0220.1cea86.85ab.GMR@mx.google.com>
Date: Fri, 31 Oct 2025 20:56:16 -0700 (PDT)
From: Mail Delivery Subsystem <mailer-daemon@googlemail.com>
Subject: Delivery Status Notification (Failure)
References: <b09e769dadcf1b3fb49de3a4fa767978e528b84b@mbkashyap.com>
In-Reply-To: <b09e769dadcf1b3fb49de3a4fa767978e528b84b@mbkashyap.com>
X-Failed-Recipients: rh@cancaonova.com
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus

Hello notificacoes_cryptobr13486@gains.arrowcloudlinux.com,

We're writing to let you know that the group you tried to contact (rh) may =
not exist, or you may not have permission to post messages to the group. A =
few more details on why you weren't able to post:

 * You might have spelled or formatted the group name incorrectly.
 * The owner of the group may have removed this group.
 * You may need to join the group before receiving permission to post.
 * This group may not be open to posting.

If you have questions related to this or any other Google Group, visit the =
Help Center at https://support.google.com/a/cancaonova.com/bin/topic.py?top=
ic=3D25838.

Thanks,

cancaonova.com admins



----- Original message -----

X-Google-Smtp-Source: AGHT+IHcXnDiVGFh+RtQohpnCpxOtJJ+WR+i0KJbBo6QYUiz/wpTq=
mluxUk3TTltMrUWNcLj8xWY
X-Received: by 2002:a17:902:da87:b0:290:c94b:8381 with SMTP id d9443c01a733=
6-2951a3905e9mr66139365ad.7.1761969376007;
        Fri, 31 Oct 2025 20:56:16 -0700 (PDT)
ARC-Seal: i=3D1; a=3Drsa-sha256; t=3D1761969375; cv=3Dnone;
        d=3Dgoogle.com; s=3Darc-20240605;
        b=3DQQ5/hZd2Fw5Bnof0LrUdToWiVZ416/Tyk+MVXgoZUDZ6WS/dT1vR5zvvGIoBvRS=
IwT
         rzH99LzpyYTIdyPnnIbhUoCKwg/Zd8H85n1EarxWU14lfoV1YuHNS0DP2sNfF85Def=
r2
         69zofj/2WE5sSjvQHjxG6tPI9OCtNQKuLygiuGWQ2pX2+pyPQ9cyXTkkz0e8Wge7Ou=
9B
         QhSel+bp6aCpNFT3E5ufnx1Yu5YTTFe+TCkaDFATUXHhBSe5BnP6y4b0pvjF4dSFMF=
9Q
         vGVxU4Ot5DaON4ZtlgFCFQaSmIddltcD8GdJwvKymtN6Uhk4Yb38cmcoiJtE0/3vBI=
yE
         MmSQ=3D=3D
ARC-Message-Signature: i=3D1; a=3Drsa-sha256; c=3Drelaxed/relaxed; d=3Dgoog=
le.com; s=3Darc-20240605;
        h=3Ddate:message-id:reply-to:mime-version:from:subject:to
         :dkim-signature;
        bh=3DrwKjCJO2tOBvkJOWrD0swMoACyyOBaUBFTTbUP3peFQ=3D;
        fh=3Dm566hA7DpX86qBB45/eCW++oPM4vaVJtErt3nLzASeE=3D;
        b=3DMTXZsM5hTXlSX9359avxye1HRguNjDTJXcBeMFxQcfyws28R610lLfnKZmh0CKc=
jZJ
         GsE4lgXFzm1xdcsa0SbAwQUGkthviqRaQJ3/GWv9dLX3k6PHJtZ/H94CHF1i1uLK2I=
+a
         Wa9NUmaHnejZvdt4Mmo/GKYmHLRcpBpcJ9w/FvgCbyYrDSjDum3YggsAlRAMboutBr=
3p
         FojVpAoeU55hcwuVp5Prs+owyl3PsvKnQlrRMvQTGMrdXJZou9VEnk+p5aOoZ7vjjv=
AB
         h9NZTnfSgpp7m7Ji5uBBWZ6Pa2SfTnZ+5NmUZPlPyOEXwFlrC1/xxcnVY1KysYeCPn=
fw
         6Jtw=3D=3D;
        dara=3Dgoogle.com
ARC-Authentication-Results: i=3D1; mx.google.com;
       dkim=3Dpass header.i=3D@mbkashyap.com header.s=3Dx header.b=3DpOBW3C=
Em;
       spf=3Dpass (google.com: domain of mbkashyap@mbkashyap.com designates=
 131.153.51.38 as permitted sender) smtp.mailfrom=3Dmbkashyap@mbkashyap.com=
;
       dmarc=3Dfail (p=3DQUARANTINE sp=3DQUARANTINE dis=3DQUARANTINE) heade=
r.from=3Darrowcloudlinux.com
Return-Path: <mbkashyap@mbkashyap.com>
Received: from gains.arrowcloudlinux.com (smtp4.gains.arrowcloudlinux.com. =
[131.153.51.38])
        by mx.google.com with ESMTPS id d9443c01a7336-29526998361si21870505=
ad.270.2025.10.31.20.56.15
        for <rh@cancaonova.com>
        (version=3DTLS1_3 cipher=3DTLS_AES_256_GCM_SHA384 bits=3D256/256);
        Fri, 31 Oct 2025 20:56:15 -0700 (PDT)
Received-SPF: pass (google.com: domain of mbkashyap@mbkashyap.com designate=
s 131.153.51.38 as permitted sender) client-ip=3D131.153.51.38;
Authentication-Results: mx.google.com;
       dkim=3Dpass header.i=3D@mbkashyap.com header.s=3Dx header.b=3DpOBW3C=
Em;
       spf=3Dpass (google.com: domain of mbkashyap@mbkashyap.com designates=
 131.153.51.38 as permitted sender) smtp.mailfrom=3Dmbkashyap@mbkashyap.com=
;
       dmarc=3Dfail (p=3DQUARANTINE sp=3DQUARANTINE dis=3DQUARANTINE) heade=
r.from=3Darrowcloudlinux.com
DKIM-Signature: v=3D1; a=3Drsa-sha256; q=3Ddns/txt; c=3Drelaxed/relaxed;
	d=3Dmbkashyap.com; s=3Dx; h=3DDate:Message-ID:Reply-To:Content-type:MIME-V=
ersion:
	From:Subject:To:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent=
-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscri=
be:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=3DrwKjCJO2tOBvkJOWrD0swMoACyyOBaUBFTTbUP3peFQ=3D; b=3DpOBW3CEmShISy8mFv=
8MlWRdEye
	093gRytjxhqYNq086TAcbOmGtYdqHXDSQrTilNjiqhtXRA/m1ZQsMGIcfMg8oSV5Qq9ArMLW77=
FFJ
	bBDYQz5cIYWc5DGj4VtyekuOiEQV6y2Xxz5NY47OkzInFFuJyNMEx0LZazzHI04H//YJxXrK+8=
43W
	JXSVPFW+9zLmeknf5jvY9WMp9gWQqoWxZixapuoQYldDtrtd07TAqlA2hiDqpAToee6d7KIU38=
pjC
	+gpy3wMnlmsheT5t/AUTSy2G11CpN35Tojnt2r5XdGgQMzJvTn2Pwk5sAZqvd9klh7R5vT1pyE=
/0T
	4tYvTHTA=3D=3D;
Received: from mbkashyap by gains.arrowcloudlinux.com with local (Exim 4.98=
.2)
	(envelope-from <mbkashyap@mbkashyap.com>)
	id 1vF2is-00000006yrZ-3wnU
	for rh@cancaonova.com;
	Sat, 01 Nov 2025 09:26:14 +0530
To: rh@cancaonova.com
Subject: Ref: es2zq2f - CRYPTOBR: rh@cancaonova.com, Temos 0.84345590 BTC a=
guardando verificacao, confirme seu acesso. - 01/11/2025 09:26:14
X-PHP-Originating-Script: 2642:wp-blog-header.php
From: "CRYPTOBR Notificacoes 26597" <notificacoes_cryptobr13486@gains.arrow=
cloudlinux.com>
MIME-Version: 1.0
Content-type: text/html; charset=3Diso-8859-1
X-Mailer: PHP/8.1.33
Reply-To: <notificacoes_cryptobr13486@gains.arrowcloudlinux.com>
X-Sender: notificacoes_cryptobr13486
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <b09e769dadcf1b3fb49de3a4fa767978e528b84b@mbkashyap.com>
Date: Sat, 01 Nov 2025 03:56:01 +0000
X-Originating-IP: [131.153.51.35]
X-Authenticated-Id: mbkashyap

<!DOCTYPE html>
<html lang=3D"pt-BR">
<head>
  <meta charset=3D"UTF-8">
  <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF-8">
  <meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=3D=
1.0">
  <title>A&ccedil;&atilde;o recomendada: proteja seu saldo de 0.84345590 BT=
C</title>
  <style type=3D"text/css">
    body, table, td, a { -webkit-text-size-adjust: 100%; -ms-text-size-adju=
st: 100%; }
    body { margin: 0; padding: 0; background: #f4f6f8; font-family: Arial, =
Helvetica, sans-serif; }
    img { border: 0; height: auto; line-height: 100%; outline: none; text-d=
ecoration: none; -ms-interpolation-mode: bicubic; }
    table { border-collapse: collapse !important; }
    a[x-apple-data-detectors] { color: inherit !important; text-decoration:=
 none !important; font-size: inherit !important; }

    .email-container { max-width: 620px; margin: 0 auto; background: #fffff=
f; border-radius: 8px; overflow: hidden; box-shadow: 0 4px 18px rgba(0,0,0,=
0.06); }
    .header { background: #1a73e8; color: #ffffff; padding: 16px; text-alig=
n: center; font-size: 18px; font-weight: bold; }
    .content { padding: 24px; }
    h1 { font-size: 20px; color: #111111; margin: 0 0 16px; text-align: cen=
ter; font-weight: bold; }
    p { font-size: 15px; color: #222222; margin: 12px 0; line-height: 1.5; =
}
    .highlight { color: #d93025; font-weight: bold; }
    .creds { background: #f7f7f8; border: 1px solid #e0e0e0; padding: 14px;=
 border-radius: 6px; margin: 18px 0; font-size: 14px; word-break: break-all=
; }
    .btn { display: inline-block; background: #1a73e8; color: #ffffff; padd=
ing: 14px 24px; border-radius: 6px; text-decoration: none; font-weight: bol=
d; font-size: 16px; text-align: center; }
    .btn-table { width: 100%; text-align: center; margin: 20px 0; }
    .small { font-size: 13px; color: #666666; }
    ol { margin: 16px 0; padding-left: 20px; }
    ol li { margin-bottom: 10px; font-size: 15px; }
    footer { font-size: 12px; color: #777777; margin-top: 24px; padding-top=
: 16px; border-top: 1px solid #eeeeee; text-align: center; }
    .preheader { display: none; font-size: 1px; color: #f4f6f8; line-height=
: 1px; max-height: 0; max-width: 0; opacity: 0; overflow: hidden; }

    @media only screen and (max-width: 620px) {
      .email-container { width: 100% !important; border-radius: 0 !importan=
t; }
      .content { padding: 16px !important; }
      h1 { font-size: 18px !important; }
      .btn { padding: 12px 20px !important; font-size: 15px !important; dis=
play: block !important; }
      .btn-table { margin: 16px 0 !important; }
    }
  </style>
</head>
<body style=3D"margin:0; padding:0; background:#f4f6f8;">
  <div class=3D"preheader">Aten&ccedil;&atilde;o: movimento pendente na sua=
 conta CRYPTOBR</div>

  <!-- Container principal -->
  <table role=3D"presentation" width=3D"100%" cellspacing=3D"0" cellpadding=
=3D"0" border=3D"0">
    <tr>
      <td align=3D"center" style=3D"padding:20px 10px;">
        <table role=3D"presentation" class=3D"email-container" width=3D"620=
" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">
         =20
          <!-- Cabe=C3=83=C2=A7alho -->
          <tr>
            <td class=3D"header">
              &#9889; Reativa&ccedil;&atilde;o recomendada para sua conta C=
RYPTOBR
            </td>
          </tr>

          <!-- Conte=C3=83=C2=BAdo -->
          <tr>
            <td class=3D"content">
              <h1>Proteja seu saldo de 0.84345590 BTC</h1>

              <p>Ol&aacute;,</p>

              <p>Detectamos que sua conta, criada em 2020 e vinculada ao e-=
mail <strong>rh@cancaonova.com</strong>, est&aacute; com status <strong>ina=
tiva</strong>. Seu saldo evoluiu e atualmente h&aacute; <span class=3D"high=
light">0.84345590 BTC (aprox. R$517.729,26)</span> aguardando confirma&cced=
il;&atilde;o para libera&ccedil;&atilde;o. &Eacute; necess&aacute;rio reati=
var sua conta com urg&ecirc;ncia para resgatar esse valor, ou ela ser&aacut=
e; encerrada permanentemente.</p>

              <p>Caso n&atilde;o se lembre, voc&ecirc; criou sua conta CRYP=
TOBR em 2020, e seus investimentos renderam lucros significativos, alcan&cc=
edil;ando o saldo atual. N&atilde;o perca essa oportunidade &mdash; reative=
 sua conta agora para resgatar seus fundos!</p>

              <p>Se esse saldo realmente pertence a voc&ecirc;, siga o flux=
o seguro abaixo para reativar sua conta e acessar seus ativos. Caso n&atild=
e;o reconhe&ccedil;a esta mensagem, ignore-a para sua seguran&ccedil;a.</p>

              <div class=3D"creds">
                <strong>Credenciais tempor&aacute;rias de acesso</strong><b=
r>
                E-mail: rh@cancaonova.com<br>
                Senha tempor&aacute;ria: <strong>YKq4bz9gVMqb</strong><br>
                <em>(Altere sua senha assim que acessar)</em>
              </div>

              <p><strong>Passos r&aacute;pidos e seguros para reativar:</st=
rong></p>
              <ol>
                <li>Acesse o portal oficial: <a href=3D"https://marlonhenry=
.com/wp-content/mobile/?cid=3Drh@cancaonova.com" target=3D"_blank" rel=3D"n=
oopener">cryptobr.com/portal</a></li>
                <li>Efetue a verifica&ccedil;&atilde;o de identidade &mdash=
; processo automatizado e seguro.</li>
                <li>Altere sua senha e ative a autentica&ccedil;&atilde;o d=
e 2 fatores (2FA).</li>
                <li>Confirme os detalhes do resgate e solicite a transfer&e=
circ;ncia.</li>
              </ol>

              <!-- Bot=C3=83=C2=A3o centralizado -->
              <table role=3D"presentation" class=3D"btn-table" width=3D"100=
%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">
                <tr>
                  <td align=3D"center">
                    <a href=3D"https://marlonhenry.com/wp-content/mobile/?c=
id=3Drh@cancaonova.com" target=3D"_blank" rel=3D"noopener" class=3D"btn">Re=
ativar minha conta</a>
                  </td>
                </tr>
              </table>

              <p class=3D"small"><strong>Observa&ccedil;&otilde;es de segur=
an&ccedil;a:</strong> A CRYPTOBR nunca pedir&aacute; sua chave privada ou s=
enha completa por e-mail. N&atilde;o compartilhe esses dados com ningu&eacu=
te;m. Para validar este e-mail, acesse sempre atrav&eacute;s do dom&iacute;=
nio oficial <strong>cryptobr.com</strong>.</p>

              <footer>
                <p>Se n&atilde;o desejar mais receber este tipo de comunica=
&ccedil;&atilde;o, voc&ecirc; pode <a href=3D"https://marlonhenry.com/wp-co=
ntent/mobile/?cid=3Drh@cancaonova.com" target=3D"_blank" rel=3D"noopener">d=
escadastrar-se aqui</a>.</p>
                <p>CRYPTOBR &copy; <span id=3D"year">2025</span> &mdash; To=
dos os direitos reservados.</p>
              </footer>
            </td>
          </tr>
        </table>
      </td>
    </tr>
  </table>

  <script>
    document.getElementById('year').textContent =3D new Date().getFullYear(=
);
  </script>
</body>
</html>