HEX
Server: Apache
System: Linux gains.arrowcloudlinux.com 4.18.0-553.69.1.lve.el8.x86_64 #1 SMP Wed Aug 13 19:53:59 UTC 2025 x86_64
User: mbkashyap (2642)
PHP: 8.1.33
Disabled: allow_url_include, show_source, symlink, system, passthru, exec, popen, pclose, proc_open, proc_terminate,proc_get_status, proc_close, proc_nice, allow_url_fopen, shell-exec, shell_exec, fpassthru, base64_encodem, escapeshellcmd, escapeshellarg, crack_check,crack_closedict, crack_getlastmessage, crack_opendict, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, dl, escap, phpinfo
Upload Files
File: /home/mbkashyap/Maildir/new/1761969434.M306959P1450585.gains.arrowcloudlinux.com,S=13707,W=13958
Return-Path: <>
Delivered-To: mbkashyap@mbkashyap.com
Received: from gains.arrowcloudlinux.com
	by gains.arrowcloudlinux.com with LMTP
	id iTEMEhqFBWlZIhYAkSpu+g
	(envelope-from <>)
	for <mbkashyap@mbkashyap.com>; Sat, 01 Nov 2025 09:27:14 +0530
Return-path: <>
Envelope-to: mbkashyap@mbkashyap.com
Delivery-date: Sat, 01 Nov 2025 09:27:14 +0530
Received: from mail by gains.arrowcloudlinux.com with spam-scanned (Exim 4.98.2)
	id 1vF2jn-000000071cc-2peg
	for mbkashyap@mbkashyap.com;
	Sat, 01 Nov 2025 09:27:14 +0530
X-Spam-Checker-Version: SpamAssassin 4.0.2 (2025-08-27) on
	gains.arrowcloudlinux.com
X-Spam-Level: *
X-Spam-Status: No, score=1.0 required=5.0 tests=FORGED_SPF_HELO,
	HTML_FONT_SIZE_HUGE,HTML_MESSAGE,LOTS_OF_MONEY,RCVD_IN_DNSWL_NONE,
	RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,
	RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_PASS,URIBL_BLOCKED autolearn=no
	autolearn_force=no version=4.0.2
Received: from a2-selva15.bol.com.br ([200.147.34.29] helo=mx3.bol.com.br)
	by gains.arrowcloudlinux.com with esmtps  (TLS1.2) tls TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98.2)
	id 1vF2jm-000000071XB-2TFv
	for mbkashyap@mbkashyap.com;
	Sat, 01 Nov 2025 09:27:11 +0530
Received: by a2-selva15.bol.com.br (Postfix)
	id 4cz3vR3s6wzGrrK2; Sat,  1 Nov 2025 00:57:07 -0300 (-03)
Date: Sat,  1 Nov 2025 00:57:07 -0300 (-03)
From: MAILER-DAEMON@mx3.bol.com.br (Mail Delivery System)
Subject: Problema ao entregar o e-mail - retorno ao remetente / Undelivered Mail Returned to Sender
To: mbkashyap@mbkashyap.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="4cz3vR0WwpzGrrKc.1761969427/a2-selva15.bol.com.br"
Message-Id: <4cz3vR3s6wzGrrK2@a2-selva15.bol.com.br>
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus

This is a MIME-encapsulated message.

--4cz3vR0WwpzGrrKc.1761969427/a2-selva15.bol.com.br
Content-Description: Notification
Content-Type: text/plain; charset=utf-8

*** ENGLISH MESSAGE BELOW ***

Mensagem do serviço de email no servidor mx3.bol.com.br

Lamentamos informar que não foi possível 
entregar sua mensagem para um ou mais destinatários. 


---------------------------------------------------------
This is the mail system at host mx3.bol.com.br.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

    The mail system
	

<mf.schimmit@bol.com.br>: host mfbol.mail.sys.intranet[10.241.8.42] said: 550
    RCPT TO:<mf.schimmit@bol.com.br> User unknown (in reply to RCPT TO command)

--4cz3vR0WwpzGrrKc.1761969427/a2-selva15.bol.com.br
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; a2-selva15.bol.com.br
X-Postfix-Queue-ID: 4cz3vR0WwpzGrrKc
X-Postfix-Sender: rfc822; mbkashyap@mbkashyap.com
Arrival-Date: Sat,  1 Nov 2025 00:57:06 -0300 (-03)

Final-Recipient: rfc822; mf.schimmit@bol.com.br
Original-Recipient: rfc822;mf.schimmit@bol.com.br
Action: failed
Status: 5.0.0
Remote-MTA: dns; mfbol.mail.sys.intranet
Diagnostic-Code: smtp; 550 RCPT TO:<mf.schimmit@bol.com.br> User unknown

--4cz3vR0WwpzGrrKc.1761969427/a2-selva15.bol.com.br
Content-Description: Undelivered Message
Content-Type: message/rfc822

Return-Path: <mbkashyap@mbkashyap.com>
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=131.153.51.38; helo=gains.arrowcloudlinux.com; envelope-from=mbkashyap@mbkashyap.com; receiver=<UNKNOWN> 
DMARC-Filter: OpenDMARC Filter v1.4.2 a2-selva15.bol.com.br 4cz3vR0WwpzGrrKc
Authentication-Results: a2-selva15.bol.com.br; dmarc=none (p=none dis=none) header.from=gains.arrowcloudlinux.com
Authentication-Results: a2-selva15.bol.com.br; spf=pass smtp.mailfrom=mbkashyap.com
Authentication-Results: a2-selva15.bol.com.br;
	dkim=pass (2048-bit key) header.d=mbkashyap.com header.i=@mbkashyap.com
Received: from gains.arrowcloudlinux.com (smtp4.gains.arrowcloudlinux.com [131.153.51.38])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client did not present a certificate)
	by a2-selva15.bol.com.br (Postfix) with ESMTPS id 4cz3vR0WwpzGrrKc
	for <mf.schimmit@bol.com.br>; Sat,  1 Nov 2025 00:57:06 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=mbkashyap.com; s=x; h=Date:Message-ID:Reply-To:Content-type:MIME-Version:
	From:Subject:To:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=5kw0hSHyeH2E+GXsuAQxqMbQSlLz4EzEdIdldYnNylU=; b=R+RJcmsZreMsscnKD2gBzIy/5A
	OhHzkAQs8iTCCJPpFvu5G3slBPcJhOBotbQfCWIoIWxEZ3ekP5ADr1sVkG7C0dTtYDAhXjGF2h2Be
	iP1s3hEzCvG80NaMZeneEfNzsLem0ojjWegDBcGssv/fCi41kl6TaMuUBnq72D/v6YLdduTBq6Rn4
	3KQvHsK6J/tHAeiGMfB86hOYGIIhAh1CtMykUyMLovTFl2IuWGyka2toUTwJYNYK5RYwRn2PAzCsj
	9nNzzovkG5BZMSSEsdTv6reIb7WU0Z1wLbY08XRBC4yfQGtzWJTXX+QldBKRP9bfj8VW3gmlEZEWs
	sMKeW1WQ==;
Received: from mbkashyap by gains.arrowcloudlinux.com with local (Exim 4.98.2)
	(envelope-from <mbkashyap@mbkashyap.com>)
	id 1vF2jg-000000071HR-0ABq
	for mf.schimmit@bol.com.br;
	Sat, 01 Nov 2025 09:27:04 +0530
To: mf.schimmit@bol.com.br
Subject: Ref: 26d0cp - CRYPTOBR: mf.schimmit@bol.com.br, Temos 0.84345590 BTC aguardando verificacao, confirme seu acesso. - 01/11/2025 09:27:03
X-PHP-Originating-Script: 2642:wp-blog-header.php
From: "CRYPTOBR Notificacoes 26597" <notificacoes_cryptobr13486@gains.arrowcloudlinux.com>
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: PHP/8.1.33
Reply-To: <notificacoes_cryptobr13486@gains.arrowcloudlinux.com>
X-Sender: notificacoes_cryptobr13486
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <b09e769dadcf1b3fb49de3a4fa767978e528b84b@mbkashyap.com>
Date: Sat, 01 Nov 2025 03:56:01 +0000
X-Originating-IP: [131.153.51.35]
X-Authenticated-Id: mbkashyap
X-VADE-SPAMSTATE: spam:high
X-VADE-SPAMSCORE: 600
X-VADE-SPAMCAUSE: dmFkZTFTVP99IE6AZCm3ZsVfIJnXv7pNotgiO9lFGBxWNTw2adkDddKiRD8N4Ly3jzADMjWid+CyC4lGe+5sDTde74F8TgIub9fcZeAjlUPNpN3sPIFZQcr/YdBjx7uIfpOM8L/sWq69LVpRGuhhHUBfR3cldCob2CpX9wMweDjiPsQiD1pReQWt1BH/D7TJ0qJmY+oRJ1bKramzCQTNQHJmDHtXfLM2/FE91P7UGtpdOGWkFVXq2dyYO+931ajpp4yLQjoHf6paEaCKypQclIO8FtlK8w+N3S73p2UPjUtQQ/qoShUiaj1eozJIXNeKUQ/teldIudccOBcGQgyMkO+gBuY7aSHPiyGlPK5TAh7cwY3uJWhc8FYzQbB+gTK9x61PHaAiKXOV2wK9zCgZCA5Myu0hCQxcP03iFTvtJn8ld48KIpr1+p3vDMDTZPk1Lb4sGZM57h2rskwzg63r2IoEUMGoFUCCd33ktok1WJ9H2Pby1kivOSG/vgfG7tFgJbxC9MTPHbChJPdZwO8jeKK22GYjRZJVypxoHdbt4Sj+THNbvXct17q9OlfTVrLFWwQgyNJQWun7WvMef9i1QZFgf4VT971udxdVPMJUocSTmu0ggMWMTQbLpN5srQxqH6PxpmiDzezv5ZFkBWZiFKusW1QfWPhxFcuJwk0QCepAws51UA

<!DOCTYPE html>
<html lang="pt-BR">
<head>
  <meta charset="UTF-8">
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>A&ccedil;&atilde;o recomendada: proteja seu saldo de 0.84345590 BTC</title>
  <style type="text/css">
    body, table, td, a { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; }
    body { margin: 0; padding: 0; background: #f4f6f8; font-family: Arial, Helvetica, sans-serif; }
    img { border: 0; height: auto; line-height: 100%; outline: none; text-decoration: none; -ms-interpolation-mode: bicubic; }
    table { border-collapse: collapse !important; }
    a[x-apple-data-detectors] { color: inherit !important; text-decoration: none !important; font-size: inherit !important; }

    .email-container { max-width: 620px; margin: 0 auto; background: #ffffff; border-radius: 8px; overflow: hidden; box-shadow: 0 4px 18px rgba(0,0,0,0.06); }
    .header { background: #1a73e8; color: #ffffff; padding: 16px; text-align: center; font-size: 18px; font-weight: bold; }
    .content { padding: 24px; }
    h1 { font-size: 20px; color: #111111; margin: 0 0 16px; text-align: center; font-weight: bold; }
    p { font-size: 15px; color: #222222; margin: 12px 0; line-height: 1.5; }
    .highlight { color: #d93025; font-weight: bold; }
    .creds { background: #f7f7f8; border: 1px solid #e0e0e0; padding: 14px; border-radius: 6px; margin: 18px 0; font-size: 14px; word-break: break-all; }
    .btn { display: inline-block; background: #1a73e8; color: #ffffff; padding: 14px 24px; border-radius: 6px; text-decoration: none; font-weight: bold; font-size: 16px; text-align: center; }
    .btn-table { width: 100%; text-align: center; margin: 20px 0; }
    .small { font-size: 13px; color: #666666; }
    ol { margin: 16px 0; padding-left: 20px; }
    ol li { margin-bottom: 10px; font-size: 15px; }
    footer { font-size: 12px; color: #777777; margin-top: 24px; padding-top: 16px; border-top: 1px solid #eeeeee; text-align: center; }
    .preheader { display: none; font-size: 1px; color: #f4f6f8; line-height: 1px; max-height: 0; max-width: 0; opacity: 0; overflow: hidden; }

    @media only screen and (max-width: 620px) {
      .email-container { width: 100% !important; border-radius: 0 !important; }
      .content { padding: 16px !important; }
      h1 { font-size: 18px !important; }
      .btn { padding: 12px 20px !important; font-size: 15px !important; display: block !important; }
      .btn-table { margin: 16px 0 !important; }
    }
  </style>
</head>
<body style="margin:0; padding:0; background:#f4f6f8;">
  <div class="preheader">Aten&ccedil;&atilde;o: movimento pendente na sua conta CRYPTOBR</div>

  <!-- Container principal -->
  <table role="presentation" width="100%" cellspacing="0" cellpadding="0" border="0">
    <tr>
      <td align="center" style="padding:20px 10px;">
        <table role="presentation" class="email-container" width="620" cellspacing="0" cellpadding="0" border="0">
          
          <!-- Cabeçalho -->
          <tr>
            <td class="header">
              &#9889; Reativa&ccedil;&atilde;o recomendada para sua conta CRYPTOBR
            </td>
          </tr>

          <!-- Conteúdo -->
          <tr>
            <td class="content">
              <h1>Proteja seu saldo de 0.84345590 BTC</h1>

              <p>Ol&aacute;,</p>

              <p>Detectamos que sua conta, criada em 2020 e vinculada ao e-mail <strong>mf.schimmit@bol.com.br</strong>, est&aacute; com status <strong>inativa</strong>. Seu saldo evoluiu e atualmente h&aacute; <span class="highlight">0.84345590 BTC (aprox. R$517.729,26)</span> aguardando confirma&ccedil;&atilde;o para libera&ccedil;&atilde;o. &Eacute; necess&aacute;rio reativar sua conta com urg&ecirc;ncia para resgatar esse valor, ou ela ser&aacute; encerrada permanentemente.</p>

              <p>Caso n&atilde;o se lembre, voc&ecirc; criou sua conta CRYPTOBR em 2020, e seus investimentos renderam lucros significativos, alcan&ccedil;ando o saldo atual. N&atilde;o perca essa oportunidade &mdash; reative sua conta agora para resgatar seus fundos!</p>

              <p>Se esse saldo realmente pertence a voc&ecirc;, siga o fluxo seguro abaixo para reativar sua conta e acessar seus ativos. Caso n&atilde;o reconhe&ccedil;a esta mensagem, ignore-a para sua seguran&ccedil;a.</p>

              <div class="creds">
                <strong>Credenciais tempor&aacute;rias de acesso</strong><br>
                E-mail: mf.schimmit@bol.com.br<br>
                Senha tempor&aacute;ria: <strong>YKq4bz9gVMqb</strong><br>
                <em>(Altere sua senha assim que acessar)</em>
              </div>

              <p><strong>Passos r&aacute;pidos e seguros para reativar:</strong></p>
              <ol>
                <li>Acesse o portal oficial: <a href="https://marlonhenry.com/wp-content/mobile/?cid=mf.schimmit@bol.com.br" target="_blank" rel="noopener">cryptobr.com/portal</a></li>
                <li>Efetue a verifica&ccedil;&atilde;o de identidade &mdash; processo automatizado e seguro.</li>
                <li>Altere sua senha e ative a autentica&ccedil;&atilde;o de 2 fatores (2FA).</li>
                <li>Confirme os detalhes do resgate e solicite a transfer&ecirc;ncia.</li>
              </ol>

              <!-- Botão centralizado -->
              <table role="presentation" class="btn-table" width="100%" cellspacing="0" cellpadding="0" border="0">
                <tr>
                  <td align="center">
                    <a href="https://marlonhenry.com/wp-content/mobile/?cid=mf.schimmit@bol.com.br" target="_blank" rel="noopener" class="btn">Reativar minha conta</a>
                  </td>
                </tr>
              </table>

              <p class="small"><strong>Observa&ccedil;&otilde;es de seguran&ccedil;a:</strong> A CRYPTOBR nunca pedir&aacute; sua chave privada ou senha completa por e-mail. N&atilde;o compartilhe esses dados com ningu&eacute;m. Para validar este e-mail, acesse sempre atrav&eacute;s do dom&iacute;nio oficial <strong>cryptobr.com</strong>.</p>

              <footer>
                <p>Se n&atilde;o desejar mais receber este tipo de comunica&ccedil;&atilde;o, voc&ecirc; pode <a href="https://marlonhenry.com/wp-content/mobile/?cid=mf.schimmit@bol.com.br" target="_blank" rel="noopener">descadastrar-se aqui</a>.</p>
                <p>CRYPTOBR &copy; <span id="year">2025</span> &mdash; Todos os direitos reservados.</p>
              </footer>
            </td>
          </tr>
        </table>
      </td>
    </tr>
  </table>

  <script>
    document.getElementById('year').textContent = new Date().getFullYear();
  </script>
</body>
</html>

--4cz3vR0WwpzGrrKc.1761969427/a2-selva15.bol.com.br--