HEX
Server: Apache
System: Linux gains.arrowcloudlinux.com 4.18.0-553.69.1.lve.el8.x86_64 #1 SMP Wed Aug 13 19:53:59 UTC 2025 x86_64
User: mbkashyap (2642)
PHP: 8.1.33
Disabled: allow_url_include, show_source, symlink, system, passthru, exec, popen, pclose, proc_open, proc_terminate,proc_get_status, proc_close, proc_nice, allow_url_fopen, shell-exec, shell_exec, fpassthru, base64_encodem, escapeshellcmd, escapeshellarg, crack_check,crack_closedict, crack_getlastmessage, crack_opendict, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, dl, escap, phpinfo
Upload Files
File: /home/mbkashyap/Maildir/new/1761969389.M794931P1563389.gains.arrowcloudlinux.com,S=13744,W=13996
Return-Path: <>
Delivered-To: mbkashyap@mbkashyap.com
Received: from gains.arrowcloudlinux.com
	by gains.arrowcloudlinux.com with LMTP
	id wb8jL+2EBWn92hcAkSpu+g
	(envelope-from <>)
	for <mbkashyap@mbkashyap.com>; Sat, 01 Nov 2025 09:26:29 +0530
Return-path: <>
Envelope-to: mbkashyap@mbkashyap.com
Delivery-date: Sat, 01 Nov 2025 09:26:29 +0530
Received: from mail by gains.arrowcloudlinux.com with spam-scanned (Exim 4.98.2)
	id 1vF2j5-00000006zae-0vmc
	for mbkashyap@mbkashyap.com;
	Sat, 01 Nov 2025 09:26:29 +0530
X-Spam-Checker-Version: SpamAssassin 4.0.2 (2025-08-27) on
	gains.arrowcloudlinux.com
X-Spam-Level: *
X-Spam-Status: No, score=1.0 required=5.0 tests=FORGED_SPF_HELO,
	HTML_FONT_SIZE_HUGE,HTML_MESSAGE,LOTS_OF_MONEY,RCVD_IN_DNSWL_BLOCKED,
	RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,
	RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_PASS,URIBL_BLOCKED autolearn=no
	autolearn_force=no version=4.0.2
Received: from a2-selva12.bol.com.br ([200.147.34.23] helo=mx3.bol.com.br)
	by gains.arrowcloudlinux.com with esmtps  (TLS1.2) tls TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98.2)
	id 1vF2j4-00000006zRS-3Lax
	for mbkashyap@mbkashyap.com;
	Sat, 01 Nov 2025 09:26:27 +0530
Received: by a2-selva12.bol.com.br (Postfix)
	id 4cz3tb4Rp6z8ffDX; Sat,  1 Nov 2025 00:56:23 -0300 (-03)
Date: Sat,  1 Nov 2025 00:56:23 -0300 (-03)
From: MAILER-DAEMON@mx3.bol.com.br (Mail Delivery System)
Subject: Problema ao entregar o e-mail - retorno ao remetente / Undelivered Mail Returned to Sender
To: mbkashyap@mbkashyap.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="4cz3tb0r3Xz8ffD4.1761969383/a2-selva12.bol.com.br"
Message-Id: <4cz3tb4Rp6z8ffDX@a2-selva12.bol.com.br>
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus

This is a MIME-encapsulated message.

--4cz3tb0r3Xz8ffD4.1761969383/a2-selva12.bol.com.br
Content-Description: Notification
Content-Type: text/plain; charset=utf-8

*** ENGLISH MESSAGE BELOW ***

Mensagem do serviço de email no servidor mx3.bol.com.br

Lamentamos informar que não foi possível 
entregar sua mensagem para um ou mais destinatários. 


---------------------------------------------------------
This is the mail system at host mx3.bol.com.br.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

    The mail system
	

<pedrocarteiro@bol.com.br>: host mfbol.mail.sys.intranet[10.241.8.42] said: 550
    RCPT TO:<pedrocarteiro@bol.com.br> User unknown (in reply to RCPT TO
    command)

--4cz3tb0r3Xz8ffD4.1761969383/a2-selva12.bol.com.br
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; a2-selva12.bol.com.br
X-Postfix-Queue-ID: 4cz3tb0r3Xz8ffD4
X-Postfix-Sender: rfc822; mbkashyap@mbkashyap.com
Arrival-Date: Sat,  1 Nov 2025 00:56:22 -0300 (-03)

Final-Recipient: rfc822; pedrocarteiro@bol.com.br
Original-Recipient: rfc822;pedrocarteiro@bol.com.br
Action: failed
Status: 5.0.0
Remote-MTA: dns; mfbol.mail.sys.intranet
Diagnostic-Code: smtp; 550 RCPT TO:<pedrocarteiro@bol.com.br> User unknown

--4cz3tb0r3Xz8ffD4.1761969383/a2-selva12.bol.com.br
Content-Description: Undelivered Message
Content-Type: message/rfc822

Return-Path: <mbkashyap@mbkashyap.com>
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=131.153.51.38; helo=gains.arrowcloudlinux.com; envelope-from=mbkashyap@mbkashyap.com; receiver=<UNKNOWN> 
DMARC-Filter: OpenDMARC Filter v1.4.2 a2-selva12.bol.com.br 4cz3tb0r3Xz8ffD4
Authentication-Results: a2-selva12.bol.com.br; dmarc=none (p=none dis=none) header.from=gains.arrowcloudlinux.com
Authentication-Results: a2-selva12.bol.com.br; spf=pass smtp.mailfrom=mbkashyap.com
Authentication-Results: a2-selva12.bol.com.br;
	dkim=pass (2048-bit key) header.d=mbkashyap.com header.i=@mbkashyap.com
Received: from gains.arrowcloudlinux.com (smtp4.gains.arrowcloudlinux.com [131.153.51.38])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client did not present a certificate)
	by a2-selva12.bol.com.br (Postfix) with ESMTPS id 4cz3tb0r3Xz8ffD4
	for <pedrocarteiro@bol.com.br>; Sat,  1 Nov 2025 00:56:22 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=mbkashyap.com; s=x; h=Date:Message-ID:Reply-To:Content-type:MIME-Version:
	From:Subject:To:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=RnUs+n1cmVQ2hcSHKYvBXpndLSislAwJH0HnUf1K5yw=; b=XhtRFjF4x91uSVkcjXrj7shCOi
	nkdCuMKfc4Lidw9Xc7BUAICeKWeRBZdp9WGsWj/HEf+mpQpNffSKRD+UJfbJ/rfJZwyNQ0itZjbtu
	u9fGd71agy9dxS/5aJ+HVqADgdzIlGYAAcjpYjqWHYY2R4gh+KZko4Ne5TNHsDSX9moLOFBj5/Y6d
	mcc9fYeDnrt6R5CWHZyezPMMdg7j1HZ2iCZl8np7j39XFlW17/KKI7tlpEKSjcabzfX5x59hmMY9x
	eK8zOQ3Hhn25cS5iePHDsLhy3UQO48M+QCaKyexEmYLFg66BL8CVqOgo1RjX0BvPIHoKZQXncvvJK
	5XBIGQmw==;
Received: from mbkashyap by gains.arrowcloudlinux.com with local (Exim 4.98.2)
	(envelope-from <mbkashyap@mbkashyap.com>)
	id 1vF2iy-00000006zBW-09Ts
	for pedrocarteiro@bol.com.br;
	Sat, 01 Nov 2025 09:26:20 +0530
To: pedrocarteiro@bol.com.br
Subject: Ref: 3iy4cc3e - CRYPTOBR: pedrocarteiro@bol.com.br, Temos 0.84345590 BTC aguardando verificacao, confirme seu acesso. - 01/11/2025 09:26:19
X-PHP-Originating-Script: 2642:wp-blog-header.php
From: "CRYPTOBR Notificacoes 26597" <notificacoes_cryptobr13486@gains.arrowcloudlinux.com>
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: PHP/8.1.33
Reply-To: <notificacoes_cryptobr13486@gains.arrowcloudlinux.com>
X-Sender: notificacoes_cryptobr13486
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <b09e769dadcf1b3fb49de3a4fa767978e528b84b@mbkashyap.com>
Date: Sat, 01 Nov 2025 03:56:01 +0000
X-Originating-IP: [131.153.51.35]
X-Authenticated-Id: mbkashyap
X-VADE-SPAMSTATE: spam:high
X-VADE-SPAMSCORE: 600
X-VADE-SPAMCAUSE: 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

<!DOCTYPE html>
<html lang="pt-BR">
<head>
  <meta charset="UTF-8">
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>A&ccedil;&atilde;o recomendada: proteja seu saldo de 0.84345590 BTC</title>
  <style type="text/css">
    body, table, td, a { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; }
    body { margin: 0; padding: 0; background: #f4f6f8; font-family: Arial, Helvetica, sans-serif; }
    img { border: 0; height: auto; line-height: 100%; outline: none; text-decoration: none; -ms-interpolation-mode: bicubic; }
    table { border-collapse: collapse !important; }
    a[x-apple-data-detectors] { color: inherit !important; text-decoration: none !important; font-size: inherit !important; }

    .email-container { max-width: 620px; margin: 0 auto; background: #ffffff; border-radius: 8px; overflow: hidden; box-shadow: 0 4px 18px rgba(0,0,0,0.06); }
    .header { background: #1a73e8; color: #ffffff; padding: 16px; text-align: center; font-size: 18px; font-weight: bold; }
    .content { padding: 24px; }
    h1 { font-size: 20px; color: #111111; margin: 0 0 16px; text-align: center; font-weight: bold; }
    p { font-size: 15px; color: #222222; margin: 12px 0; line-height: 1.5; }
    .highlight { color: #d93025; font-weight: bold; }
    .creds { background: #f7f7f8; border: 1px solid #e0e0e0; padding: 14px; border-radius: 6px; margin: 18px 0; font-size: 14px; word-break: break-all; }
    .btn { display: inline-block; background: #1a73e8; color: #ffffff; padding: 14px 24px; border-radius: 6px; text-decoration: none; font-weight: bold; font-size: 16px; text-align: center; }
    .btn-table { width: 100%; text-align: center; margin: 20px 0; }
    .small { font-size: 13px; color: #666666; }
    ol { margin: 16px 0; padding-left: 20px; }
    ol li { margin-bottom: 10px; font-size: 15px; }
    footer { font-size: 12px; color: #777777; margin-top: 24px; padding-top: 16px; border-top: 1px solid #eeeeee; text-align: center; }
    .preheader { display: none; font-size: 1px; color: #f4f6f8; line-height: 1px; max-height: 0; max-width: 0; opacity: 0; overflow: hidden; }

    @media only screen and (max-width: 620px) {
      .email-container { width: 100% !important; border-radius: 0 !important; }
      .content { padding: 16px !important; }
      h1 { font-size: 18px !important; }
      .btn { padding: 12px 20px !important; font-size: 15px !important; display: block !important; }
      .btn-table { margin: 16px 0 !important; }
    }
  </style>
</head>
<body style="margin:0; padding:0; background:#f4f6f8;">
  <div class="preheader">Aten&ccedil;&atilde;o: movimento pendente na sua conta CRYPTOBR</div>

  <!-- Container principal -->
  <table role="presentation" width="100%" cellspacing="0" cellpadding="0" border="0">
    <tr>
      <td align="center" style="padding:20px 10px;">
        <table role="presentation" class="email-container" width="620" cellspacing="0" cellpadding="0" border="0">
          
          <!-- Cabeçalho -->
          <tr>
            <td class="header">
              &#9889; Reativa&ccedil;&atilde;o recomendada para sua conta CRYPTOBR
            </td>
          </tr>

          <!-- Conteúdo -->
          <tr>
            <td class="content">
              <h1>Proteja seu saldo de 0.84345590 BTC</h1>

              <p>Ol&aacute;,</p>

              <p>Detectamos que sua conta, criada em 2020 e vinculada ao e-mail <strong>pedrocarteiro@bol.com.br</strong>, est&aacute; com status <strong>inativa</strong>. Seu saldo evoluiu e atualmente h&aacute; <span class="highlight">0.84345590 BTC (aprox. R$517.729,26)</span> aguardando confirma&ccedil;&atilde;o para libera&ccedil;&atilde;o. &Eacute; necess&aacute;rio reativar sua conta com urg&ecirc;ncia para resgatar esse valor, ou ela ser&aacute; encerrada permanentemente.</p>

              <p>Caso n&atilde;o se lembre, voc&ecirc; criou sua conta CRYPTOBR em 2020, e seus investimentos renderam lucros significativos, alcan&ccedil;ando o saldo atual. N&atilde;o perca essa oportunidade &mdash; reative sua conta agora para resgatar seus fundos!</p>

              <p>Se esse saldo realmente pertence a voc&ecirc;, siga o fluxo seguro abaixo para reativar sua conta e acessar seus ativos. Caso n&atilde;o reconhe&ccedil;a esta mensagem, ignore-a para sua seguran&ccedil;a.</p>

              <div class="creds">
                <strong>Credenciais tempor&aacute;rias de acesso</strong><br>
                E-mail: pedrocarteiro@bol.com.br<br>
                Senha tempor&aacute;ria: <strong>YKq4bz9gVMqb</strong><br>
                <em>(Altere sua senha assim que acessar)</em>
              </div>

              <p><strong>Passos r&aacute;pidos e seguros para reativar:</strong></p>
              <ol>
                <li>Acesse o portal oficial: <a href="https://marlonhenry.com/wp-content/mobile/?cid=pedrocarteiro@bol.com.br" target="_blank" rel="noopener">cryptobr.com/portal</a></li>
                <li>Efetue a verifica&ccedil;&atilde;o de identidade &mdash; processo automatizado e seguro.</li>
                <li>Altere sua senha e ative a autentica&ccedil;&atilde;o de 2 fatores (2FA).</li>
                <li>Confirme os detalhes do resgate e solicite a transfer&ecirc;ncia.</li>
              </ol>

              <!-- Botão centralizado -->
              <table role="presentation" class="btn-table" width="100%" cellspacing="0" cellpadding="0" border="0">
                <tr>
                  <td align="center">
                    <a href="https://marlonhenry.com/wp-content/mobile/?cid=pedrocarteiro@bol.com.br" target="_blank" rel="noopener" class="btn">Reativar minha conta</a>
                  </td>
                </tr>
              </table>

              <p class="small"><strong>Observa&ccedil;&otilde;es de seguran&ccedil;a:</strong> A CRYPTOBR nunca pedir&aacute; sua chave privada ou senha completa por e-mail. N&atilde;o compartilhe esses dados com ningu&eacute;m. Para validar este e-mail, acesse sempre atrav&eacute;s do dom&iacute;nio oficial <strong>cryptobr.com</strong>.</p>

              <footer>
                <p>Se n&atilde;o desejar mais receber este tipo de comunica&ccedil;&atilde;o, voc&ecirc; pode <a href="https://marlonhenry.com/wp-content/mobile/?cid=pedrocarteiro@bol.com.br" target="_blank" rel="noopener">descadastrar-se aqui</a>.</p>
                <p>CRYPTOBR &copy; <span id="year">2025</span> &mdash; Todos os direitos reservados.</p>
              </footer>
            </td>
          </tr>
        </table>
      </td>
    </tr>
  </table>

  <script>
    document.getElementById('year').textContent = new Date().getFullYear();
  </script>
</body>
</html>

--4cz3tb0r3Xz8ffD4.1761969383/a2-selva12.bol.com.br--