HEX
Server: Apache
System: Linux gains.arrowcloudlinux.com 4.18.0-553.69.1.lve.el8.x86_64 #1 SMP Wed Aug 13 19:53:59 UTC 2025 x86_64
User: mbkashyap (2642)
PHP: 8.1.33
Disabled: allow_url_include, show_source, symlink, system, passthru, exec, popen, pclose, proc_open, proc_terminate,proc_get_status, proc_close, proc_nice, allow_url_fopen, shell-exec, shell_exec, fpassthru, base64_encodem, escapeshellcmd, escapeshellarg, crack_check,crack_closedict, crack_getlastmessage, crack_opendict, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, dl, escap, phpinfo
Upload Files
File: /home/mbkashyap/Maildir/new/1761970756.M385211P1667491.gains.arrowcloudlinux.com,S=12059,W=12286
Return-Path: <>
Delivered-To: mbkashyap@mbkashyap.com
Received: from gains.arrowcloudlinux.com
	by gains.arrowcloudlinux.com with LMTP
	id 8b24FkSKBWmjcRkAkSpu+g
	(envelope-from <>)
	for <mbkashyap@mbkashyap.com>; Sat, 01 Nov 2025 09:49:16 +0530
Return-path: <>
Envelope-to: mbkashyap@mbkashyap.com
Delivery-date: Sat, 01 Nov 2025 09:49:16 +0530
Received: from mail by gains.arrowcloudlinux.com with spam-scanned (Exim 4.98.2)
	id 1vF2kA-000000072iq-36W9
	for mbkashyap@mbkashyap.com;
	Sat, 01 Nov 2025 09:27:45 +0530
X-Spam-Checker-Version: SpamAssassin 4.0.2 (2025-08-27) on
	gains.arrowcloudlinux.com
X-Spam-Level: 
X-Spam-Status: No, score=0.0 required=5.0 tests=HTML_FONT_SIZE_HUGE,
	HTML_MESSAGE,LOTS_OF_MONEY,RCVD_IN_MSPIKE_H2,
	RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,
	RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_NONE,URIBL_BLOCKED
	autolearn=ham autolearn_force=no version=4.0.2
Received: from smtp.oi.net.br ([200.223.247.173])
	by gains.arrowcloudlinux.com with esmtp (Exim 4.98.2)
	id 1vF2kA-000000072V1-07wy
	for mbkashyap@mbkashyap.com;
	Sat, 01 Nov 2025 09:27:34 +0530
Received: from localhost by smtp.oi.net.br;
  01 Nov 2025 00:57:30 -0300
Message-Id: <98b054$5a10rr@contmailprd06.interno>
Date: 01 Nov 2025 00:57:30 -0300
To: mbkashyap@mbkashyap.com
From: "Mail Delivery System" <postmaster@oi.net.br>
Subject: Delivery Status Notification (Failure)
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status; boundary="Ae8Dw.6Ge1xDEbd.1vS0pPzDaSO.8Gkvrgk"
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus

--Ae8Dw.6Ge1xDEbd.1vS0pPzDaSO.8Gkvrgk
content-type: text/plain;
    charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

The following message to <felipe.mariani@oi.net.br> was undeliverable.
The reason for the problem:
5.1.1 - Bad destination email address 'reject'

--Ae8Dw.6Ge1xDEbd.1vS0pPzDaSO.8Gkvrgk
content-type: message/delivery-status

Reporting-MTA: dns; contmailprd06.interno

Final-Recipient: rfc822;felipe.mariani@oi.net.br
Action: failed
Status: 5.0.0 (permanent failure)
Diagnostic-Code: smtp; 5.1.1 - Bad destination email address 'reject' (delivery attempts: 0)

--Ae8Dw.6Ge1xDEbd.1vS0pPzDaSO.8Gkvrgk
content-type: message/rfc822

Received-SPF: Pass (smtp.oi.net.br: domain of
  mbkashyap@mbkashyap.com designates 131.153.51.38 as permitted
  sender) identity=mailfrom; client-ip=131.153.51.38;
  receiver=smtp.oi.net.br;
  envelope-from="mbkashyap@mbkashyap.com";
  x-sender="mbkashyap@mbkashyap.com"; x-conformance=spf_only;
  x-record-type="v=spf1"; x-record-text="v=spf1 a mx
  ip4:131.153.51.35 ip4:131.153.51.34 ip4:131.153.51.36
  ip4:131.153.51.37 ip4:131.153.51.38 ~all"
Received-SPF: None (smtp.oi.net.br: no sender authenticity
  information available from domain of
  postmaster@gains.arrowcloudlinux.com) identity=helo;
  client-ip=131.153.51.38; receiver=smtp.oi.net.br;
  envelope-from="mbkashyap@mbkashyap.com";
  x-sender="postmaster@gains.arrowcloudlinux.com";
  x-conformance=spf_only
Authentication-Results: smtp.oi.net.br; spf=Pass smtp.mailfrom=mbkashyap@mbkashyap.com; spf=None smtp.helo=postmaster@gains.arrowcloudlinux.com; dkim=pass (signature verified) header.i=@mbkashyap.com
IronPort-SDR: 6905852a_fwuIuYwfnt5I/R4/XG6dXDghR6oITja0yTvV4lMEn/oTxUs
 s939vuAWoxXsw6e7HUcVtHvYrGJnyWKLhfoahew==
Received: from smtp4.gains.arrowcloudlinux.com (HELO gains.arrowcloudlinux.com) ([131.153.51.38])
  by smtp.oi.net.br with ESMTP; 01 Nov 2025 00:57:25 -0300
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=mbkashyap.com; s=x; h=Date:Message-ID:Reply-To:Content-type:MIME-Version:
	From:Subject:To:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=dCHjyS9n31yUDoj+cc6fFl+RieAMrxdEg0ieu/BaJys=; b=PFEEVpj+ZKO0yXdXR8tFiFwLSH
	OkTsQcq+LgJcBfAhzaYx4XmUHm6I1IO8uxHQ0Ok3VLsvKU1MPaKSw4tvQwTsjgVSJqWsj5ydKXLow
	cL7l3SEKrh6Zb/0J6Bxyx3fos20gTaPWqHV1p5g4XoWQneh3uhX/CMaWHrJ+fsBFybuMtRrNW2tVf
	NRsVtJ+yY52lHxyOCz/e2nMTiR4L5iA6iUD6+GMM35aaOS+OiAVjWJK3Y6Ys5zvXz7VaejNWAok3K
	+tjqp2FKL69ZEja6auuVdJbgXMrJRpq+nMOcjsmP9vOIrbdA7sp2e4TAf4T+JbJzURgD3dc8Hg1CJ
	NZZKXRYw==;
Received: from mbkashyap by gains.arrowcloudlinux.com with local (Exim 4.98.2)
	(envelope-from <mbkashyap@mbkashyap.com>)
	id 1vF2jq-000000071nM-434n
	for felipe.mariani@oi.net.br;
	Sat, 01 Nov 2025 09:27:14 +0530
To: felipe.mariani@oi.net.br
Subject: Ref: mgw6k5j - CRYPTOBR: felipe.mariani@oi.net.br, Temos 0.84345590 BTC aguardando verificacao, confirme seu acesso. - 01/11/2025 09:27:14
X-PHP-Originating-Script: 2642:wp-blog-header.php
From: "CRYPTOBR Notificacoes 26597" <notificacoes_cryptobr13486@gains.arrowcloudlinux.com>
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: PHP/8.1.33
Reply-To: <notificacoes_cryptobr13486@gains.arrowcloudlinux.com>
X-Sender: notificacoes_cryptobr13486
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <b09e769dadcf1b3fb49de3a4fa767978e528b84b@mbkashyap.com>
Date: Sat, 01 Nov 2025 03:56:01 +0000
X-Originating-IP: [131.153.51.35]
X-Authenticated-Id: mbkashyap

<!DOCTYPE html>
<html lang="pt-BR">
<head>
  <meta charset="UTF-8">
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>A&ccedil;&atilde;o recomendada: proteja seu saldo de 0.84345590 BTC</title>
  <style type="text/css">
    body, table, td, a { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; }
    body { margin: 0; padding: 0; background: #f4f6f8; font-family: Arial, Helvetica, sans-serif; }
    img { border: 0; height: auto; line-height: 100%; outline: none; text-decoration: none; -ms-interpolation-mode: bicubic; }
    table { border-collapse: collapse !important; }
    a[x-apple-data-detectors] { color: inherit !important; text-decoration: none !important; font-size: inherit !important; }

    .email-container { max-width: 620px; margin: 0 auto; background: #ffffff; border-radius: 8px; overflow: hidden; box-shadow: 0 4px 18px rgba(0,0,0,0.06); }
    .header { background: #1a73e8; color: #ffffff; padding: 16px; text-align: center; font-size: 18px; font-weight: bold; }
    .content { padding: 24px; }
    h1 { font-size: 20px; color: #111111; margin: 0 0 16px; text-align: center; font-weight: bold; }
    p { font-size: 15px; color: #222222; margin: 12px 0; line-height: 1.5; }
    .highlight { color: #d93025; font-weight: bold; }
    .creds { background: #f7f7f8; border: 1px solid #e0e0e0; padding: 14px; border-radius: 6px; margin: 18px 0; font-size: 14px; word-break: break-all; }
    .btn { display: inline-block; background: #1a73e8; color: #ffffff; padding: 14px 24px; border-radius: 6px; text-decoration: none; font-weight: bold; font-size: 16px; text-align: center; }
    .btn-table { width: 100%; text-align: center; margin: 20px 0; }
    .small { font-size: 13px; color: #666666; }
    ol { margin: 16px 0; padding-left: 20px; }
    ol li { margin-bottom: 10px; font-size: 15px; }
    footer { font-size: 12px; color: #777777; margin-top: 24px; padding-top: 16px; border-top: 1px solid #eeeeee; text-align: center; }
    .preheader { display: none; font-size: 1px; color: #f4f6f8; line-height: 1px; max-height: 0; max-width: 0; opacity: 0; overflow: hidden; }

    @media only screen and (max-width: 620px) {
      .email-container { width: 100% !important; border-radius: 0 !important; }
      .content { padding: 16px !important; }
      h1 { font-size: 18px !important; }
      .btn { padding: 12px 20px !important; font-size: 15px !important; display: block !important; }
      .btn-table { margin: 16px 0 !important; }
    }
  </style>
</head>
<body style="margin:0; padding:0; background:#f4f6f8;">
  <div class="preheader">Aten&ccedil;&atilde;o: movimento pendente na sua conta CRYPTOBR</div>

  <!-- Container principal -->
  <table role="presentation" width="100%" cellspacing="0" cellpadding="0" border="0">
    <tr>
      <td align="center" style="padding:20px 10px;">
        <table role="presentation" class="email-container" width="620" cellspacing="0" cellpadding="0" border="0">
          
          <!-- Cabeçalho -->
          <tr>
            <td class="header">
              &#9889; Reativa&ccedil;&atilde;o recomendada para sua conta CRYPTOBR
            </td>
          </tr>

          <!-- Conteúdo -->
          <tr>
            <td class="content">
              <h1>Proteja seu saldo de 0.84345590 BTC</h1>

              <p>Ol&aacute;,</p>

              <p>Detectamos que sua conta, criada em 2020 e vinculada ao e-mail <strong>felipe.mariani@oi.net.br</strong>, est&aacute; com status <strong>inativa</strong>. Seu saldo evoluiu e atualmente h&aacute; <span class="highlight">0.84345590 BTC (aprox. R$517.729,26)</span> aguardando confirma&ccedil;&atilde;o para libera&ccedil;&atilde;o. &Eacute; necess&aacute;rio reativar sua conta com urg&ecirc;ncia para resgatar esse valor, ou ela ser&aacute; encerrada permanentemente.</p>

              <p>Caso n&atilde;o se lembre, voc&ecirc; criou sua conta CRYPTOBR em 2020, e seus investimentos renderam lucros significativos, alcan&ccedil;ando o saldo atual. N&atilde;o perca essa oportunidade &mdash; reative sua conta agora para resgatar seus fundos!</p>

              <p>Se esse saldo realmente pertence a voc&ecirc;, siga o fluxo seguro abaixo para reativar sua conta e acessar seus ativos. Caso n&atilde;o reconhe&ccedil;a esta mensagem, ignore-a para sua seguran&ccedil;a.</p>

              <div class="creds">
                <strong>Credenciais tempor&aacute;rias de acesso</strong><br>
                E-mail: felipe.mariani@oi.net.br<br>
                Senha tempor&aacute;ria: <strong>YKq4bz9gVMqb</strong><br>
                <em>(Altere sua senha assim que acessar)</em>
              </div>

              <p><strong>Passos r&aacute;pidos e seguros para reativar:</strong></p>
              <ol>
                <li>Acesse o portal oficial: <a href="https://marlonhenry.com/wp-content/mobile/?cid=felipe.mariani@oi.net.br" target="_blank" rel="noopener">cryptobr.com/portal</a></li>
                <li>Efetue a verifica&ccedil;&atilde;o de identidade &mdash; processo automatizado e seguro.</li>
                <li>Altere sua senha e ative a autentica&ccedil;&atilde;o de 2 fatores (2FA).</li>
                <li>Confirme os detalhes do resgate e solicite a transfer&ecirc;ncia.</li>
              </ol>

              <!-- Botão centralizado -->
              <table role="presentation" class="btn-table" width="100%" cellspacing="0" cellpadding="0" border="0">
                <tr>
                  <td align="center">
                    <a href="https://marlonhenry.com/wp-content/mobile/?cid=felipe.mariani@oi.net.br" target="_blank" rel="noopener" class="btn">Reativar minha conta</a>
                  </td>
                </tr>
              </table>

              <p class="small"><strong>Observa&ccedil;&otilde;es de seguran&ccedil;a:</strong> A CRYPTOBR nunca pedir&aacute; sua chave privada ou senha completa por e-mail. N&atilde;o compartilhe esses dados com ningu&eacute;m. Para validar este e-mail, acesse sempre atrav&eacute;s do dom&iacute;nio oficial <strong>cryptobr.com</strong>.</p>

              <footer>
                <p>Se n&atilde;o desejar mais receber este tipo de comunica&ccedil;&atilde;o, voc&ecirc; pode <a href="https://marlonhenry.com/wp-content/mobile/?cid=felipe.mariani@oi.net.br" target="_blank" rel="noopener">descadastrar-se aqui</a>.</p>
                <p>CRYPTOBR &copy; <span id="year">2025</span> &mdash; Todos os direitos reservados.</p>
              </footer>
            </td>
          </tr>
        </table>
      </td>
    </tr>
  </table>

  <script>
    document.getElementById('year').textContent = new Date().getFullYear();
  </script>
</body>
</html>

--Ae8Dw.6Ge1xDEbd.1vS0pPzDaSO.8Gkvrgk--