| Server IP : 66.29.132.122 / Your IP : 3.17.179.199 Web Server : LiteSpeed System : Linux business142.web-hosting.com 4.18.0-553.lve.el8.x86_64 #1 SMP Mon May 27 15:27:34 UTC 2024 x86_64 User : admazpex ( 531) PHP Version : 7.2.34 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /home/admazpex/mail/.master@admin_admarooc_com/new/ |
Upload File : |
Return-Path: <>
Delivered-To: master@admin.admarooc.com
Received: from business142.web-hosting.com
by business142.web-hosting.com with LMTP
id rdLoNQJ2sWbiNREAq/Tvug
(envelope-from <>)
for <master@admin.admarooc.com>; Mon, 05 Aug 2024 21:01:54 -0400
Return-path: <>
Envelope-to: master@admin.admarooc.com
Delivery-date: Mon, 05 Aug 2024 21:01:54 -0400
Received: from mail-sg3sgp01olkn2094.outbound.protection.outlook.com ([40.92.240.94]:62721 helo=SGP01-SG3-obe.outbound.protection.outlook.com)
by business142.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
id 1sb8aC-004ivX-15
for master@admin.admarooc.com;
Mon, 05 Aug 2024 21:01:54 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=TnmkVNY0TWNWHtSi3nsHgTSeYflKq6V1fzkwY/ZgrmNCQZVUPcoi/kJJMSgc+rBgeIcZVsGQzKGDp8K3kerN+GSx0KsuONA6wAz3z/yQWDdj++WxSE07Sch6sP3rfVpg4v17yCpi242xJqLqgjcf6OemLC0zRdEkGA4n5fUBm7SUsBEnyZQqBfZJi/7K74uAJpS8nRxg5F1pQCPKqjgrguqJOukHdEly4Lb5GdWdZvHzjcaMqIC9sE6wVLovaAaF09OQYzjy46MHjoIDUsn7Cz1LFZYB2oaF2cxvIepKzEIYLPhJ8IUbHFp+Vsy0vfzMCqcSC2wAUc1baFdwuxhpQg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=LvWumc8M/zMpW2CM4NTXyR7bA1ArFVUglZDze2e2x40=;
b=c7D1dGea8JzPoLgpakU3YO7Bsvmd+3V+UToNDIt09a84c6XKlOVeD76FYIGUptQuNkiKPewIKCDigS+JlsJklgqOeJJO2QZyTEx30I0N2xQFQdSC/ooU7PfORPf6huAJ75qDkXx3d6J+GNhwKCfGdR3cNume991teR6l3DVvpoSz+npWDv5HjVJZc16NjnSxEgtYCu6UQU3kaPMJwuK/DrPxVmmsCWmcp9Cakr8aMwkyGr62GTQqWEAa3U9IorHpTsHfetJAOU+7xmPl5EtI2SIzpMd4ZYMQCimUqHEdo1FmU57B4zdwvV7mD+vzx7u/TTsj4kEoBiZ3nXgY/ppH9w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
MIME-Version: 1.0
From: <postmaster@outlook.com>
To: <master@admin.admarooc.com>
Date: Tue, 6 Aug 2024 01:01:04 +0000
Content-Type: multipart/report; report-type=delivery-status;
boundary="5b5de68f-7af6-4d3d-9d76-6d13dff0fbd9"
X-MS-Exchange-Message-Is-Ndr:
Content-Language: en-US
Message-ID:
<0da653cf-5a4a-46d5-b50b-7e68c7e69d44@SIYP274MB0390.SGPP274.PROD.OUTLOOK.COM>
In-Reply-To: <45UU680IRNU4.16RVIYPU234F1@admarooc.com>
References: <45UU680IRNU4.16RVIYPU234F1@admarooc.com>
Subject: Undeliverable: Urgent: suspicious activity on your wallet detected
Auto-Submitted: auto-replied
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: SIYP274MB0390:EE_
X-Microsoft-Antispam:
BCL:0;ARA:14566002|12050799009|461199028|6092099012|8060799006|4302099013|3412199025|440099028|56899033|1602099012;
X-Microsoft-Antispam-Message-Info:
=?us-ascii?Q?C3Z6yowQNW4SsMlwFkUaH4gd8mt1yqyPmlmKPwYbmyAZYyiypTr0CyuGYKbS?=
=?us-ascii?Q?QA1SZK7BSztLkxX3d9b9DlOcPoQRW09f7CPcq8au2AGmT4j4bY2ia3HyVeL7?=
=?us-ascii?Q?6kpjHWrTkGmleI5q7xy6U+czfvjkpJOyyK/sQ0molV/68M1CRolEU0FPqChH?=
=?us-ascii?Q?MEh4DIN00fRK50Fy906EcARKEPCi++WLj8GpZQxhLxq4abv8kbso4Y5s3D3T?=
=?us-ascii?Q?b1IuGszfWRXRdBClJTglOhp1dhLe+tzLYkV96yydEWmP0xTKL/ZeKTCsng2v?=
=?us-ascii?Q?uCboWsPNK06/KDx9UQOQsLA2XAU/Fr2SslYVGteC7HJPKsBEIQZqLqTaD9J8?=
=?us-ascii?Q?EEDP7qmLC+lbPLeeDhzJLhloUmlscF+S03xnq0bSE4C/DRSGP+KzTCY4cNrM?=
=?us-ascii?Q?FjgE5am+z5VmDuqoKcnfy3YU5A7F1XAiw3bN71RyPmr6g5x2DTlvv6j9reqT?=
=?us-ascii?Q?BuglnryFBNwRCH83zereS0pZEpnLTG2GtCnPFPrtqpr/EVKRTdgIMfbuEtKE?=
=?us-ascii?Q?DOHSjabI9/r9/fqsRY1/c42VttIL+ySwrd62bUn0K5etPyLOQagQBAFLCIsu?=
=?us-ascii?Q?smGFkbmittu5EZu7zT0+5Q50g35pGvXu6qDc3j+7QSBIFntVHNBHAt7nSyAq?=
=?us-ascii?Q?lvDBrpB2UkqJ8t/hkQCmzy9NJf0bajQRM2FltId1sBf2xrokVsXSmjuig1OS?=
=?us-ascii?Q?5dzTf0H3PC2rN6EKHQz0pW0J+LIIFgaobu/XgDkkY16zKpHAHh/rOp8hVFOF?=
=?us-ascii?Q?5RIXN9rWPZ+6tdcuWDoONiSy6kQRAgcjywHQ9os62MUFIaWmN609dLwgdhMP?=
=?us-ascii?Q?M18f0U/kskULcqHObOFYIj+fROGnXhYR0a6UAcx+i0OLaAW/Qx3+jZj9sZUa?=
=?us-ascii?Q?EQU5ngRJqeGKg6lNWBpGN0uw4nWncIW0GzQpEYKIIqFqNSJuUhvw5Cf+xiyr?=
=?us-ascii?Q?c9OLaoNuZAbTqF+ddpUxCSoeJhjxrbFlw1aZsCVFcPmGymhrMlqcaz/1blFD?=
=?us-ascii?Q?FBckX9x0hz4M3qaJzKda4D6/qWhF9L0LcTI4s4sff6OEvpAziZkcs9Q111/T?=
=?us-ascii?Q?EURSnUj9wgeDWO6eAaYQXUIOuYvpng6I40zYUmDtLVLp/fC3dx4Jyggwc9ak?=
=?us-ascii?Q?6OExACxwZvx35sYT5otjrBVaRPy4E6XAG1lM8QIvMCei6dWVrmKCn6jpMYPk?=
=?us-ascii?Q?EiZKz74e7euuYDnNl/27pHuFWyRmuyGZb/AzFcTyldDD0ovt4j6kJaDZmN/j?=
=?us-ascii?Q?cTk2lh9R+R7sms1xEEvh9LP1LpR9KufEPRObHPVPFyKrlGir0wGto5XZ2vk7?=
=?us-ascii?Q?RNCmdUYK9RBSjWzGqrm44R1RhoiHdvL6f/Qf4WCYWv3D63B8VxPywdY4At4w?=
=?us-ascii?Q?yiw5djs=3D?=
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
/wKE2yoZlwogt0vod4IO/NUf1rULrprealwiLPiVhxfjKD/uwJ0l04esNqrJRJ4pYCDVetunSIYWZvEFb5UHcWW3CersMqL77DWepFicGPjPlyysv4n/cGdsJVe3BH6mpRcBEMr/df1ppbUbzXotk06e/VVa9fGTTtbxATG0o4jWw0tn1b/jVhcp1Cauo9MH
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Aug 2024 01:01:04.7207
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-AuthSource: SIYP274MB0390.SGPP274.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-Network-Message-Id:
cbd2852e-a48f-45c5-4269-08dcb5b33f66
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SIYP274MB0390
X-Spam-Status: No, score=1.3
X-Spam-Score: 13
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "business142.web-hosting.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Delivery has failed to these recipients or groups: ang@hotmail.com<mailto:ang@hotmail.com>
A communication failure occurred during the delivery of this message. Please
try to resend the message later. If the problem continues, contact your email
admin [...]
Content analysis details: (1.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: andconnect.com.br]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[40.92.240.94 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[40.92.240.94 listed in sa-accredit.habeas.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
Colors in HTML
1.0 FORGED_SPF_HELO No description available.
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
X-Spam-Flag: NO
--5b5de68f-7af6-4d3d-9d76-6d13dff0fbd9
Content-Type: multipart/alternative; differences=Content-Type;
boundary="c8fa60f5-9727-4bdb-85a6-4621cdf93bfe"
--c8fa60f5-9727-4bdb-85a6-4621cdf93bfe
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Delivery has failed to these recipients or groups:
ang@hotmail.com<mailto:ang@hotmail.com>
A communication failure occurred during the delivery of this message. Pleas=
e try to resend the message later. If the problem continues, contact your e=
mail admin.
Diagnostic information for administrators:
Generating server: SIYP274MB0390.SGPP274.PROD.OUTLOOK.COM
ang@hotmail.com
Remote server returned '550 5.5.0 Requested action not taken: mailbox unava=
ilable.'
Original message headers:
Received: from SGXP274CA0017.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:b8::29) =
by
SIYP274MB0390.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:212::5) with Microsoft
SMTP Server (version=3DTLS1_2, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA=
384) id
15.20.7828.27; Tue, 6 Aug 2024 01:01:03 +0000
Received: from SG1PEPF000082E5.apcprd02.prod.outlook.com
(2603:1096:4:b8:cafe::13) by SGXP274CA0017.outlook.office365.com
(2603:1096:4:b8::29) with Microsoft SMTP Server (version=3DTLS1_2,
cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7828.27 via Front=
end
Transport; Tue, 6 Aug 2024 01:01:03 +0000
Authentication-Results: spf=3Dpass (sender IP is 66.29.132.122)
smtp.mailfrom=3Dadmin.admarooc.com; dkim=3Dpass (signature was verified)
header.d=3Dadmin.admarooc.com;dmarc=3Dbestguesspass action=3Dnone
header.from=3Dadmin.admarooc.com;
Received-SPF: Pass (protection.outlook.com: domain of admin.admarooc.com
designates 66.29.132.122 as permitted sender)
receiver=3Dprotection.outlook.com; client-ip=3D66.29.132.122;
helo=3Dbusiness142-4.web-hosting.com; pr=3DC
Received: from business142-4.web-hosting.com (66.29.132.122) by
SG1PEPF000082E5.mail.protection.outlook.com (10.167.240.8) with Microsoft
SMTP Server (version=3DTLS1_3, cipher=3DTLS_AES_256_GCM_SHA384) id 15.20.7=
849.8
via Frontend Transport; Tue, 6 Aug 2024 01:01:03 +0000
X-IncomingTopHeaderMarker: OriginalChecksum:6E285EE12F3B2AE0E683589758C9C64=
3F04091D2D2D5937727891BC5BC035D05;UpperCasedChecksum:196DA6B375F9E7FDD76C90=
59E6F4AA75427FEE5DFC27EEF8194BA411C2CD5E2E;SizeAsReceived:2098;Count:21
DKIM-Signature: v=3D1; a=3Drsa-sha256; q=3Ddns/txt; c=3Drelaxed/relaxed;
d=3Dadmin.admarooc.com; s=3Ddefault; h=3DContent-Type:MIME-Version:=
Sender:To:
Message-Id:Subject:Date:From:Reply-To:Cc:Content-Transfer-Encoding:=
Content-ID
:Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-T=
o:
Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:List-Hel=
p:
List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=3DpU3X/f88DPfzV4/VwPMpz/kTwJVZY0MzDY9Hw5Z1GeI=3D; b=3DSU3Sy51T5D=
UobWH7Qb4C3zjyiD
a7dAI0qzu+dckuUBfzDobNKsJ5Vs1mvcuAX5FfB4qorBz5n+PQXD3WoyF8SHhLnUhiO=
MCax0D33QY
77fNbtqv2VDk0Bf1sF61pRV8v29yeBJSHo1MU306vTaWUsAKHv0f5zHhjCIpQhwAbAY=
H+3UBOrTc8
0W0P5RwPPnU6iv2g4LbgTHkzKiDeZfLCAM8fNCjlJhDGyQYyQIifiViZcxVsOa3lSy6=
m2oNu8EQVn
5SWeWKQ4G9o2QG4MYDUy2dPuEE7CtzqKd4ebvTU3qcZ6LW1hIk4itzq76l/l7V+WQEY=
8o4OTGSY6s
beipFM2g=3D=3D;
Received: from [199.116.118.225] (port=3D52911 helo=3DDESKTOP-FLI84VB)
by business142.web-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE=
_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <master@admin.admarooc.com>)
id 1sb8ZQ-004ijH-2X
for ang@hotmail.com;
Mon, 05 Aug 2024 21:01:00 -0400
From: Coinbase Wallet <master@admin.admarooc.com>
Date: Tue, 06 Aug 2024 03:00:59 +0200
Subject: Urgent: suspicious activity on your wallet detected
Message-ID: <45UU680IRNU4.16RVIYPU234F1@admarooc.com>
To: ang@hotmail.com
Sender: master@admin.admarooc.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=3D"=3D-6KqmIwwuQ8O9EdQbcBtwPA=
=3D=3D"
X-AntiAbuse: This header was added to track abuse, please include it with a=
ny abuse report
X-AntiAbuse: Primary Hostname - business142.web-hosting.com
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - admin.admarooc.com
X-Get-Message-Sender-Via: business142.web-hosting.com: authenticated_id: ma=
ster@admin.admarooc.com
X-Authenticated-Sender: business142.web-hosting.com: master@admin.admarooc.=
com
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
X-IncomingHeaderCount: 21
Return-Path: master@admin.admarooc.com
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: SG1PEPF000082E5:EE_|SIYP274MB0390:EE_
X-MS-Office365-Filtering-Correlation-Id: 7b0c53d7-8908-4370-9ed2-08dcb5b33e=
a8
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 66.29.132.122
X-SID-PRA: MASTER@ADMIN.ADMAROOC.COM
X-SID-Result: PASS
X-Microsoft-Antispam:
BCL:0;ARA:1444111002|32000799015|461199028|1680799051|9000799047|25=
00799015|69000799015|51300799018|9400799024|4302099013|3412199025|440099028=
|1360799030|1370799030|1380799030|1602099012;
X-Microsoft-Antispam-Message-Info:
=3D?us-ascii?Q?3qyIAqYoY9j3LZr1ymJcPWZg47/n/IPFtE6JsAddg7hrfOsuKG90=
8pL1R9qS?=3D
=3D?us-ascii?Q?MWRHB88u2p4N/e3nbd8f0Lsc6/ZH9NsXUx1M4EFRDpFrDWb/48tnyq0zxIH=
g?=3D
=3D?us-ascii?Q?vXsjMnFrMWyuOjkfqcUjcoQT9+0GG2Huan7Naa25uW6+c7Dr9kSz496IFk4=
j?=3D
=3D?us-ascii?Q?KqEWyk4MHbMT8OjAoesTuGeXQtzdITbNH+Lg1EdDEkrZKqGag+giZUy1bis=
o?=3D
=3D?us-ascii?Q?d24dpSVpY2QbN8hlyFPhqGNoqOGU0nf8KTsGLgZ/DIVYsQ6Oh8AKOoFJ+a8=
A?=3D
=3D?us-ascii?Q?4i/+44CPnkS8eGt/K4Z+5xIXUYoOzrYSza7o1AknIMjmpHZmXfNCvtqWELt=
n?=3D
=3D?us-ascii?Q?HVS7b+jXG0R+NjUPCDOl37XJmqHUdANNzIUG9K0k0zP0hfKkLvkJxtQqN7R=
w?=3D
=3D?us-ascii?Q?JPoZkz08r7ao+AiN8pGIvGzBwSaV8YDI1NYQBPUVHuBnSQeV+J5OlKbdMjt=
a?=3D
=3D?us-ascii?Q?y2kanP+9EYW5FR2IRQYb8xIda7VNI4JHbWBMh7TKxkD71imGdQmc8zsu1qp=
e?=3D
=3D?us-ascii?Q?gDNqTpax753+YJaJWHP84iWjp2GlcYjFNf22dusCKqIHOj3eLTOhA/6SdzV=
G?=3D
=3D?us-ascii?Q?3MQ8QjrHgmM5J45IvWYJ7/nPGxJIuxGsvICfXe57mBPJq+Bdkvmlt2KWtyc=
K?=3D
=3D?us-ascii?Q?kensQSiu0f7apmOiH9d7HPVrdLPzZnRea9wPh13FElQB/AvYdjJA7ujCJv5=
z?=3D
=3D?us-ascii?Q?Dps54/UVoWF5onyLyH0GnejKn7THY0FenTdjL5Qw1iiIUm0hlHu2UlFFZU/=
1?=3D
=3D?us-ascii?Q?OsRv6yVqKPGxHrV+9QTpcVavCSkp8KJcP4Qzaq2mbjFBNzR9r9+utDV21Ru=
t?=3D
=3D?us-ascii?Q?oDc7KGn1FuEt/JkgvYsxy7fYeMOfckhY3gokrTKh/BgqDTzlgofIcKgQZiS=
A?=3D
=3D?us-ascii?Q?kGQYH1dQKmNARQzdvfqKaDpuBJKJp+Jyrde+6Sx+ordizNPH7c9AeEmSreS=
5?=3D
=3D?us-ascii?Q?eLC5H9v9jjH6CByy7/bJwHADIVEcuo+AIVU1Mr7sEQ5PyAWqlGjRLXAffp4=
W?=3D
=3D?us-ascii?Q?X4CdVVYGeZh10btUO41UurLORfEqajdrmmEa9O3iGnrbvOvaCBuh0CrnFEa=
P?=3D
=3D?us-ascii?Q?HrQGdIqDx8PyFaW8QvtPdaCkyuJ95shuhVMdKzZhu/tLDJ9krhWXO0gjU6R=
z?=3D
=3D?us-ascii?Q?WU+tQz+W8Hrbt2MQh+MlnK3xheamUsxMKswCzonrsd+VoQt/VMDiPoiqNpP=
h?=3D
=3D?us-ascii?Q?x5N04aa3atGBpe2LWl3rD9aF5conQOWqmLu/doAyZ/F8QLe15pcgp79drmh=
U?=3D
=3D?us-ascii?Q?KZXQGrITeMOZy8xTo++JaKvmVBKGQNfqGX5TmP1FsaHsGmQmM8KuSx1h55f=
E?=3D
=3D?us-ascii?Q?eJzPkH0+0eZwY8OufhOWJIFu2+jDtLdz1cPKadOKAu0MpNDcmf//JKUC20h=
h?=3D
=3D?us-ascii?Q?AOZeQUNlitv1WxxTxIlLcdSQ5aLiUuHG9eg90LqARfuSnowFXbkNVxHvzWC=
K?=3D
=3D?us-ascii?Q?IcDEq4xEVb+RLGP52cFlCuQrXWzx9pqIUu3V/gpawP6hTpJp2dKXfxJ/o75=
/?=3D
=3D?us-ascii?Q?lUOkLquGhQbmLhJUoi1TsRBt06Aawx4E9F21lxu1rOHROzGgl6hBNvSeMxW=
5?=3D
=3D?us-ascii?Q?7xBasUbly4su9qqgPiMJPOaq8cG0uAWGn2LDuszI?=3D
--c8fa60f5-9727-4bdb-85a6-4621cdf93bfe
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html>
<Head></head><body>
<p><b><font color=3D"#000066" size=3D"3" face=3D"Arial">Delivery has failed=
to these recipients or groups:</font></b></p>
<font color=3D"#000000" size=3D"2" face=3D"Tahoma"><p><a href=3D"mailto:ang=
@hotmail.com">ang@hotmail.com</a><br>
</font>
<font color=3D"#000000" size=3D"3" face=3D"Arial">A communication failure o=
ccurred during the delivery of this message. Please try to resend the messa=
ge later. If the problem continues, contact your email admin.<br>
</font>
<font color=3D"#000000" size=3D"2" face=3D"Tahoma"><br>
</p>
</font>
<br><br><br><br><br><br>
<font color=3D"#808080" size=3D"2" face=3D"Tahoma"><p><b>Diagnostic informa=
tion for administrators:</b></p>
<p>Generating server: SIYP274MB0390.SGPP274.PROD.OUTLOOK.COM<br>
</p>
<p>ang@hotmail.com<br>
Remote server returned '550 5.5.0 Requested action not taken: mailbox unav=
ailable.'<br>
</p>
<p>Original message headers:</p>
<pre>Received: from SGXP274CA0017.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:b8:=
:29) by
SIYP274MB0390.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:212::5) with Microsoft
SMTP Server (version=3DTLS1_2, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA=
384) id
15.20.7828.27; Tue, 6 Aug 2024 01:01:03 +0000
Received: from SG1PEPF000082E5.apcprd02.prod.outlook.com
(2603:1096:4:b8:cafe::13) by SGXP274CA0017.outlook.office365.com
(2603:1096:4:b8::29) with Microsoft SMTP Server (version=3DTLS1_2,
cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7828.27 via Front=
end
Transport; Tue, 6 Aug 2024 01:01:03 +0000
Authentication-Results: spf=3Dpass (sender IP is 66.29.132.122)
smtp.mailfrom=3Dadmin.admarooc.com; dkim=3Dpass (signature was verified)
header.d=3Dadmin.admarooc.com;dmarc=3Dbestguesspass action=3Dnone
header.from=3Dadmin.admarooc.com;
Received-SPF: Pass (protection.outlook.com: domain of admin.admarooc.com
designates 66.29.132.122 as permitted sender)
receiver=3Dprotection.outlook.com; client-ip=3D66.29.132.122;
helo=3Dbusiness142-4.web-hosting.com; pr=3DC
Received: from business142-4.web-hosting.com (66.29.132.122) by
SG1PEPF000082E5.mail.protection.outlook.com (10.167.240.8) with Microsoft
SMTP Server (version=3DTLS1_3, cipher=3DTLS_AES_256_GCM_SHA384) id 15.20.7=
849.8
via Frontend Transport; Tue, 6 Aug 2024 01:01:03 +0000
X-IncomingTopHeaderMarker: OriginalChecksum:6E285EE12F3B2AE0E683589758C9C64=
3F04091D2D2D5937727891BC5BC035D05;UpperCasedChecksum:196DA6B375F9E7FDD76C90=
59E6F4AA75427FEE5DFC27EEF8194BA411C2CD5E2E;SizeAsReceived:2098;Count:21
DKIM-Signature: v=3D1; a=3Drsa-sha256; q=3Ddns/txt; c=3Drelaxed/relaxed;
d=3Dadmin.admarooc.com; s=3Ddefault; h=3DContent-Type:MIME-Version:Sender:=
To:
Message-Id:Subject:Date:From:Reply-To:Cc:Content-Transfer-Encoding:Content=
-ID
:Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:
Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:
List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=3DpU3X/f88DPfzV4/VwPMpz/kTwJVZY0MzDY9Hw5Z1GeI=3D; b=3DSU3Sy51T5DUobWH7Q=
b4C3zjyiD
a7dAI0qzu+dckuUBfzDobNKsJ5Vs1mvcuAX5FfB4qorBz5n+PQXD3WoyF8SHhLnUhiOMCax0D3=
3QY
77fNbtqv2VDk0Bf1sF61pRV8v29yeBJSHo1MU306vTaWUsAKHv0f5zHhjCIpQhwAbAYH+3UBOr=
Tc8
0W0P5RwPPnU6iv2g4LbgTHkzKiDeZfLCAM8fNCjlJhDGyQYyQIifiViZcxVsOa3lSy6m2oNu8E=
QVn
5SWeWKQ4G9o2QG4MYDUy2dPuEE7CtzqKd4ebvTU3qcZ6LW1hIk4itzq76l/l7V+WQEY8o4OTGS=
Y6s
beipFM2g=3D=3D;
Received: from [199.116.118.225] (port=3D52911 helo=3DDESKTOP-FLI84VB)
by business142.web-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WI=
TH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <master@admin.admarooc.com>)
id 1sb8ZQ-004ijH-2X
for ang@hotmail.com;
Mon, 05 Aug 2024 21:01:00 -0400
From: Coinbase Wallet <master@admin.admarooc.com>
Date: Tue, 06 Aug 2024 03:00:59 +0200
Subject: Urgent: suspicious activity on your wallet detected
Message-ID: <45UU680IRNU4.16RVIYPU234F1@admarooc.com>
To: ang@hotmail.com
Sender: master@admin.admarooc.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=3D"=3D-6KqmIwwuQ8O9EdQbc=
BtwPA=3D=3D"
X-AntiAbuse: This header was added to track abuse, please include it with a=
ny abuse report
X-AntiAbuse: Primary Hostname - business142.web-hosting.com
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - admin.admarooc.com
X-Get-Message-Sender-Via: business142.web-hosting.com: authenticated_id: ma=
ster@admin.admarooc.com
X-Authenticated-Sender: business142.web-hosting.com: master@admin.admarooc.=
com
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
X-IncomingHeaderCount: 21
Return-Path: master@admin.admarooc.com
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: SG1PEPF000082E5:EE_|SIYP274MB0390:EE_
X-MS-Office365-Filtering-Correlation-Id: 7b0c53d7-8908-4370-9ed2-08dcb5b33e=
a8
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 66.29.132.122
X-SID-PRA: MASTER@ADMIN.ADMAROOC.COM
X-SID-Result: PASS
X-Microsoft-Antispam:
BCL:0;ARA:1444111002|32000799015|461199028|1680799051|9000799047|250079901=
5|69000799015|51300799018|9400799024|4302099013|3412199025|440099028|136079=
9030|1370799030|1380799030|1602099012;
X-Microsoft-Antispam-Message-Info:
=3D?us-ascii?Q?3qyIAqYoY9j3LZr1ymJcPWZg47/n/IPFtE6JsAddg7hrfOsuKG908pL1R9q=
S?=3D
=3D?us-ascii?Q?MWRHB88u2p4N/e3nbd8f0Lsc6/ZH9NsXUx1M4EFRDpFrDWb/48tnyq0zxIH=
g?=3D
=3D?us-ascii?Q?vXsjMnFrMWyuOjkfqcUjcoQT9+0GG2Huan7Naa25uW6+c7Dr9kSz496IFk4=
j?=3D
=3D?us-ascii?Q?KqEWyk4MHbMT8OjAoesTuGeXQtzdITbNH+Lg1EdDEkrZKqGag+giZUy1bis=
o?=3D
=3D?us-ascii?Q?d24dpSVpY2QbN8hlyFPhqGNoqOGU0nf8KTsGLgZ/DIVYsQ6Oh8AKOoFJ+a8=
A?=3D
=3D?us-ascii?Q?4i/+44CPnkS8eGt/K4Z+5xIXUYoOzrYSza7o1AknIMjmpHZmXfNCvtqWELt=
n?=3D
=3D?us-ascii?Q?HVS7b+jXG0R+NjUPCDOl37XJmqHUdANNzIUG9K0k0zP0hfKkLvkJxtQqN7R=
w?=3D
=3D?us-ascii?Q?JPoZkz08r7ao+AiN8pGIvGzBwSaV8YDI1NYQBPUVHuBnSQeV+J5OlKbdMjt=
a?=3D
=3D?us-ascii?Q?y2kanP+9EYW5FR2IRQYb8xIda7VNI4JHbWBMh7TKxkD71imGdQmc8zsu1qp=
e?=3D
=3D?us-ascii?Q?gDNqTpax753+YJaJWHP84iWjp2GlcYjFNf22dusCKqIHOj3eLTOhA/6SdzV=
G?=3D
=3D?us-ascii?Q?3MQ8QjrHgmM5J45IvWYJ7/nPGxJIuxGsvICfXe57mBPJq+Bdkvmlt2KWtyc=
K?=3D
=3D?us-ascii?Q?kensQSiu0f7apmOiH9d7HPVrdLPzZnRea9wPh13FElQB/AvYdjJA7ujCJv5=
z?=3D
=3D?us-ascii?Q?Dps54/UVoWF5onyLyH0GnejKn7THY0FenTdjL5Qw1iiIUm0hlHu2UlFFZU/=
1?=3D
=3D?us-ascii?Q?OsRv6yVqKPGxHrV+9QTpcVavCSkp8KJcP4Qzaq2mbjFBNzR9r9+utDV21Ru=
t?=3D
=3D?us-ascii?Q?oDc7KGn1FuEt/JkgvYsxy7fYeMOfckhY3gokrTKh/BgqDTzlgofIcKgQZiS=
A?=3D
=3D?us-ascii?Q?kGQYH1dQKmNARQzdvfqKaDpuBJKJp+Jyrde+6Sx+ordizNPH7c9AeEmSreS=
5?=3D
=3D?us-ascii?Q?eLC5H9v9jjH6CByy7/bJwHADIVEcuo+AIVU1Mr7sEQ5PyAWqlGjRLXAffp4=
W?=3D
=3D?us-ascii?Q?X4CdVVYGeZh10btUO41UurLORfEqajdrmmEa9O3iGnrbvOvaCBuh0CrnFEa=
P?=3D
=3D?us-ascii?Q?HrQGdIqDx8PyFaW8QvtPdaCkyuJ95shuhVMdKzZhu/tLDJ9krhWXO0gjU6R=
z?=3D
=3D?us-ascii?Q?WU+tQz+W8Hrbt2MQh+MlnK3xheamUsxMKswCzonrsd+VoQt/VMDiPoiqNpP=
h?=3D
=3D?us-ascii?Q?x5N04aa3atGBpe2LWl3rD9aF5conQOWqmLu/doAyZ/F8QLe15pcgp79drmh=
U?=3D
=3D?us-ascii?Q?KZXQGrITeMOZy8xTo++JaKvmVBKGQNfqGX5TmP1FsaHsGmQmM8KuSx1h55f=
E?=3D
=3D?us-ascii?Q?eJzPkH0+0eZwY8OufhOWJIFu2+jDtLdz1cPKadOKAu0MpNDcmf//JKUC20h=
h?=3D
=3D?us-ascii?Q?AOZeQUNlitv1WxxTxIlLcdSQ5aLiUuHG9eg90LqARfuSnowFXbkNVxHvzWC=
K?=3D
=3D?us-ascii?Q?IcDEq4xEVb+RLGP52cFlCuQrXWzx9pqIUu3V/gpawP6hTpJp2dKXfxJ/o75=
/?=3D
=3D?us-ascii?Q?lUOkLquGhQbmLhJUoi1TsRBt06Aawx4E9F21lxu1rOHROzGgl6hBNvSeMxW=
5?=3D
=3D?us-ascii?Q?7xBasUbly4su9qqgPiMJPOaq8cG0uAWGn2LDuszI?=3D
</pre>
</font>
</body>
</html>=
--c8fa60f5-9727-4bdb-85a6-4621cdf93bfe--
--5b5de68f-7af6-4d3d-9d76-6d13dff0fbd9
Content-Type: message/delivery-status
Reporting-MTA: dns;SIYP274MB0390.SGPP274.PROD.OUTLOOK.COM
Received-From-MTA: dns;business142-4.web-hosting.com
Arrival-Date: Tue, 6 Aug 2024 01:01:03 +0000
Final-Recipient: rfc822;ang@hotmail.com
Action: failed
Status: 5.5.0
Diagnostic-Code: smtp;550 5.5.0 Requested action not taken: mailbox unavailable.
--5b5de68f-7af6-4d3d-9d76-6d13dff0fbd9
Content-Type: message/rfc822
Received: from SGXP274CA0017.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:b8::29) by
SIYP274MB0390.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:212::5) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.7828.27; Tue, 6 Aug 2024 01:01:03 +0000
Received: from SG1PEPF000082E5.apcprd02.prod.outlook.com
(2603:1096:4:b8:cafe::13) by SGXP274CA0017.outlook.office365.com
(2603:1096:4:b8::29) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7828.27 via Frontend
Transport; Tue, 6 Aug 2024 01:01:03 +0000
Authentication-Results: spf=pass (sender IP is 66.29.132.122)
smtp.mailfrom=admin.admarooc.com; dkim=pass (signature was verified)
header.d=admin.admarooc.com;dmarc=bestguesspass action=none
header.from=admin.admarooc.com;
Received-SPF: Pass (protection.outlook.com: domain of admin.admarooc.com
designates 66.29.132.122 as permitted sender)
receiver=protection.outlook.com; client-ip=66.29.132.122;
helo=business142-4.web-hosting.com; pr=C
Received: from business142-4.web-hosting.com (66.29.132.122) by
SG1PEPF000082E5.mail.protection.outlook.com (10.167.240.8) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.7849.8
via Frontend Transport; Tue, 6 Aug 2024 01:01:03 +0000
X-IncomingTopHeaderMarker: OriginalChecksum:6E285EE12F3B2AE0E683589758C9C643F04091D2D2D5937727891BC5BC035D05;UpperCasedChecksum:196DA6B375F9E7FDD76C9059E6F4AA75427FEE5DFC27EEF8194BA411C2CD5E2E;SizeAsReceived:2098;Count:21
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=admin.admarooc.com; s=default; h=Content-Type:MIME-Version:Sender:To:
Message-Id:Subject:Date:From:Reply-To:Cc:Content-Transfer-Encoding:Content-ID
:Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:
Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:
List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=pU3X/f88DPfzV4/VwPMpz/kTwJVZY0MzDY9Hw5Z1GeI=; b=SU3Sy51T5DUobWH7Qb4C3zjyiD
a7dAI0qzu+dckuUBfzDobNKsJ5Vs1mvcuAX5FfB4qorBz5n+PQXD3WoyF8SHhLnUhiOMCax0D33QY
77fNbtqv2VDk0Bf1sF61pRV8v29yeBJSHo1MU306vTaWUsAKHv0f5zHhjCIpQhwAbAYH+3UBOrTc8
0W0P5RwPPnU6iv2g4LbgTHkzKiDeZfLCAM8fNCjlJhDGyQYyQIifiViZcxVsOa3lSy6m2oNu8EQVn
5SWeWKQ4G9o2QG4MYDUy2dPuEE7CtzqKd4ebvTU3qcZ6LW1hIk4itzq76l/l7V+WQEY8o4OTGSY6s
beipFM2g==;
Received: from [199.116.118.225] (port=52911 helo=DESKTOP-FLI84VB)
by business142.web-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <master@admin.admarooc.com>)
id 1sb8ZQ-004ijH-2X
for ang@hotmail.com;
Mon, 05 Aug 2024 21:01:00 -0400
From: Coinbase Wallet <master@admin.admarooc.com>
Date: Tue, 06 Aug 2024 03:00:59 +0200
Subject: Urgent: suspicious activity on your wallet detected
Message-ID: <45UU680IRNU4.16RVIYPU234F1@admarooc.com>
To: ang@hotmail.com
Sender: master@admin.admarooc.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=-6KqmIwwuQ8O9EdQbcBtwPA=="
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - business142.web-hosting.com
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - admin.admarooc.com
X-Get-Message-Sender-Via: business142.web-hosting.com: authenticated_id: master@admin.admarooc.com
X-Authenticated-Sender: business142.web-hosting.com: master@admin.admarooc.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
X-IncomingHeaderCount: 21
Return-Path: master@admin.admarooc.com
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: SG1PEPF000082E5:EE_|SIYP274MB0390:EE_
X-MS-Office365-Filtering-Correlation-Id: 7b0c53d7-8908-4370-9ed2-08dcb5b33ea8
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 66.29.132.122
X-SID-PRA: MASTER@ADMIN.ADMAROOC.COM
X-SID-Result: PASS
X-Microsoft-Antispam:
BCL:0;ARA:1444111002|32000799015|461199028|1680799051|9000799047|2500799015|69000799015|51300799018|9400799024|4302099013|3412199025|440099028|1360799030|1370799030|1380799030|1602099012;
X-Microsoft-Antispam-Message-Info:
=?us-ascii?Q?3qyIAqYoY9j3LZr1ymJcPWZg47/n/IPFtE6JsAddg7hrfOsuKG908pL1R9qS?=
=?us-ascii?Q?MWRHB88u2p4N/e3nbd8f0Lsc6/ZH9NsXUx1M4EFRDpFrDWb/48tnyq0zxIHg?=
=?us-ascii?Q?vXsjMnFrMWyuOjkfqcUjcoQT9+0GG2Huan7Naa25uW6+c7Dr9kSz496IFk4j?=
=?us-ascii?Q?KqEWyk4MHbMT8OjAoesTuGeXQtzdITbNH+Lg1EdDEkrZKqGag+giZUy1biso?=
=?us-ascii?Q?d24dpSVpY2QbN8hlyFPhqGNoqOGU0nf8KTsGLgZ/DIVYsQ6Oh8AKOoFJ+a8A?=
=?us-ascii?Q?4i/+44CPnkS8eGt/K4Z+5xIXUYoOzrYSza7o1AknIMjmpHZmXfNCvtqWELtn?=
=?us-ascii?Q?HVS7b+jXG0R+NjUPCDOl37XJmqHUdANNzIUG9K0k0zP0hfKkLvkJxtQqN7Rw?=
=?us-ascii?Q?JPoZkz08r7ao+AiN8pGIvGzBwSaV8YDI1NYQBPUVHuBnSQeV+J5OlKbdMjta?=
=?us-ascii?Q?y2kanP+9EYW5FR2IRQYb8xIda7VNI4JHbWBMh7TKxkD71imGdQmc8zsu1qpe?=
=?us-ascii?Q?gDNqTpax753+YJaJWHP84iWjp2GlcYjFNf22dusCKqIHOj3eLTOhA/6SdzVG?=
=?us-ascii?Q?3MQ8QjrHgmM5J45IvWYJ7/nPGxJIuxGsvICfXe57mBPJq+Bdkvmlt2KWtycK?=
=?us-ascii?Q?kensQSiu0f7apmOiH9d7HPVrdLPzZnRea9wPh13FElQB/AvYdjJA7ujCJv5z?=
=?us-ascii?Q?Dps54/UVoWF5onyLyH0GnejKn7THY0FenTdjL5Qw1iiIUm0hlHu2UlFFZU/1?=
=?us-ascii?Q?OsRv6yVqKPGxHrV+9QTpcVavCSkp8KJcP4Qzaq2mbjFBNzR9r9+utDV21Rut?=
=?us-ascii?Q?oDc7KGn1FuEt/JkgvYsxy7fYeMOfckhY3gokrTKh/BgqDTzlgofIcKgQZiSA?=
=?us-ascii?Q?kGQYH1dQKmNARQzdvfqKaDpuBJKJp+Jyrde+6Sx+ordizNPH7c9AeEmSreS5?=
=?us-ascii?Q?eLC5H9v9jjH6CByy7/bJwHADIVEcuo+AIVU1Mr7sEQ5PyAWqlGjRLXAffp4W?=
=?us-ascii?Q?X4CdVVYGeZh10btUO41UurLORfEqajdrmmEa9O3iGnrbvOvaCBuh0CrnFEaP?=
=?us-ascii?Q?HrQGdIqDx8PyFaW8QvtPdaCkyuJ95shuhVMdKzZhu/tLDJ9krhWXO0gjU6Rz?=
=?us-ascii?Q?WU+tQz+W8Hrbt2MQh+MlnK3xheamUsxMKswCzonrsd+VoQt/VMDiPoiqNpPh?=
=?us-ascii?Q?x5N04aa3atGBpe2LWl3rD9aF5conQOWqmLu/doAyZ/F8QLe15pcgp79drmhU?=
=?us-ascii?Q?KZXQGrITeMOZy8xTo++JaKvmVBKGQNfqGX5TmP1FsaHsGmQmM8KuSx1h55fE?=
=?us-ascii?Q?eJzPkH0+0eZwY8OufhOWJIFu2+jDtLdz1cPKadOKAu0MpNDcmf//JKUC20hh?=
=?us-ascii?Q?AOZeQUNlitv1WxxTxIlLcdSQ5aLiUuHG9eg90LqARfuSnowFXbkNVxHvzWCK?=
=?us-ascii?Q?IcDEq4xEVb+RLGP52cFlCuQrXWzx9pqIUu3V/gpawP6hTpJp2dKXfxJ/o75/?=
=?us-ascii?Q?lUOkLquGhQbmLhJUoi1TsRBt06Aawx4E9F21lxu1rOHROzGgl6hBNvSeMxW5?=
=?us-ascii?Q?7xBasUbly4su9qqgPiMJPOaq8cG0uAWGn2LDuszI?=
--=-6KqmIwwuQ8O9EdQbcBtwPA==
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Verify your wallet
Dear Valued Customer,
We have detected suspicious activity on your wallet that requires your imme=
diate attention to prevent potential loss of funds. To ensure the security =
of your wallet and protect your assets, we urgently need you to verify your=
wallet.
Suspicious Activity Details:
Your Coinbase Wallet has been linked to an unknown exchange on the followin=
g device. Please review the details below to confirm this was you:
Date & Time of Authorization: Sunday, 4 August 2024 (GMT-4) =C2=A09:15=E2=
=80=AFam
Authorization Country: Washington, DC, USA
Device Type: IPHONE 13 PRO
IP Address: 173.166.164.121
Immediate Action Required:
Your prompt action is essential to safeguard your funds and prevent unautho=
rized access. Please follow the steps below:
Review Details: Check the authorization details provided above.
Verify Your Wallet: If this was not you, immediately verify your wallet to =
prevent any unauthorized access. Click here to verify your wallet
Secure Your Account: Change your password and enable two-factor authenticat=
ion if you haven't already done so.
Failure to act immediately may result in the permanent loss of your assets.
Thank you for your cooperation and swift action in addressing this critical=
matter.
Best regards,Coinbase
Verify Your Wallet
If you did not sign up for this account you can ignore this email and the a=
ccount will be deleted.
Get the latest Coinbase App for your phone
Terms of Service
=C2=A9 Coinbase 2024 Coinbase Bermuda Service Limited Park Place, 55 Par La=
Ville Road, Hamilton, HM11 Bermuda=
--=-6KqmIwwuQ8O9EdQbcBtwPA==
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
<div>
<div class=3D"rps_db21">
<div>
<table id=3D"x_main" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadd=
ing=3D"0">
<tbody>
<tr>
<td style=3D"background: #0052FF; padding: 0 15px;" align=3D"center" valign=
=3D"top" bgcolor=3D"#0052FF">
<table class=3D"x_innermain" style=3D"margin: 0 auto; table-layout: fixed; =
border-collapse: collapse!important; max-width: 600px;" border=3D"0" width=3D=
"100%" cellspacing=3D"0" cellpadding=3D"0" align=3D"center">
<tbody>
<tr>
<td align=3D"center" valign=3D"top" width=3D"100%">
<table class=3D"x_logo" border=3D"0" width=3D"100%" cellspacing=3D"0" cellp=
adding=3D"0">
<tbody>
<tr>
<td style=3D"padding: 30px 0;" align=3D"center" valign=3D"top"><img src=3D"=
https://static-assets.coinbase.com/email/coinbase-transactional-wordmark-wh=
ite.png" alt=3D"Coinbase" width=3D"150" data-imagetype=3D"External" /></td>
</tr>
</tbody>
</table>
<table style=3D"border-radius: 4px; box-shadow: 0 2px 8px rgba(0,0,0,0.05);=
" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" bgcolor=3D=
"#ffffff">
<tbody>
<tr>
<td height=3D"40">=C2=A0</td>
</tr>
<tr style=3D"font-family: -apple-system,BlinkMacSystemFont,'Segoe UI','Robo=
to','Oxygen','Ubuntu','Cantarell','Fira Sans','Droid Sans','Helvetica Neue'=
,sans-serif; color: #4e5c6e; font-size: 14px; line-height: 20px; margin-top=
: 20px;">
<td class=3D"x_content" style=3D"padding-left: 40px; padding-right: 40px;" =
colspan=3D"2" align=3D"center" valign=3D"top">
<table style=3D"height: 435px;" border=3D"0" width=3D"100%" cellspacing=3D"=
0" cellpadding=3D"0" bgcolor=3D"#ffffff">
<tbody>
<tr style=3D"height: 84px;">
<td style=3D"height: 84px;" colspan=3D"2" align=3D"center" valign=3D"bottom=
"><img src=3D"https://www.coinbase.com/assets/app/icon_email-e8c6b940e8f3ec=
61dcd56b60c27daed1a6f8b169d73d9e79b8999ff54092a111.png" alt=3D"" width=3D"8=
0" data-imagetype=3D"External" /></td>
</tr>
<tr style=3D"height: 20px;">
<td style=3D"height: 20px;" height=3D"20">=C2=A0</td>
</tr>
<tr style=3D"height: 24px;">
<td style=3D"height: 24px;" align=3D"center">
<h1 style=3D"color: #48545d; font-size: 22px; line-height: 24px; margin-bot=
tom: 0; margin-top: 0; font-weight: 400;">Verify your wallet</h1>
</td>
</tr>
<tr style=3D"height: 24px;">
<td style=3D"height: 24px;" height=3D"24">=C2=A0</td>
</tr>
<tr style=3D"height: 20px;">
<td style=3D"height: 20px;" bgcolor=3D"#DAE1E9" height=3D"1">=C2=A0</td>
</tr>
<tr style=3D"height: 24px;">
<td style=3D"height: 24px;" height=3D"24">=C2=A0</td>
</tr>
<tr style=3D"height: 48px;">
<td style=3D"height: 48px;" align=3D"center">
<p style=3D"text-align: left;">Dear Valued Customer,</p>
<p style=3D"text-align: left;">We have detected suspicious activity on your=
wallet that requires your immediate attention to prevent potential loss of=
funds. To ensure the security of your wallet and protect your assets, we u=
rgently need you to verify your wallet.</p>
<h3 style=3D"text-align: left;">Suspicious Activity Details:</h3>
<p style=3D"text-align: left;">Your Coinbase Wallet has been linked to an u=
nknown exchange on the following device. Please review the details below to=
confirm this was you:</p>
<ul style=3D"text-align: left;">
<li><strong>Date & Time of Authorization:</strong> Sunday, 4 August 202=
4 (GMT-4) =C2=A09:15=E2=80=AFam</li>
<li><strong>Authorization Country:</strong> <span class=3D"vk_gy vk_sh">Was=
hington, DC, USA </span></li>
<li><strong>Device Type:</strong> IPHONE 13 PRO</li>
<li><strong>IP Address:</strong> 173.166.164.121</li>
</ul>
<h3 style=3D"text-align: left;">Immediate Action Required:</h3>
<p style=3D"text-align: left;">Your prompt action is essential to safeguard=
your funds and prevent unauthorized access. Please follow the steps below:=
</p>
<ol style=3D"text-align: left;">
<li><strong>Review Details:</strong> Check the authorization details provid=
ed above.</li>
<li><strong>Verify Your Wallet:</strong> If this was not you, immediately v=
erify your wallet to prevent any unauthorized access. <a href=3D"https://cb=
sbirango.net">Click here to verify your wallet</a></li>
<li><strong>Secure Your Account:</strong> Change your password and enable t=
wo-factor authentication if you haven't already done so.</li>
</ol>
<p style=3D"text-align: left;">Failure to act immediately may result in the=
permanent loss of your assets.</p>
<p style=3D"text-align: left;">Thank you for your cooperation and swift act=
ion in addressing this critical matter.</p>
<p style=3D"text-align: left;">Best regards,<br />Coinbase</p>
</td>
</tr>
<tr style=3D"height: 20px;">
<td style=3D"height: 20px;" height=3D"20">=C2=A0</td>
</tr>
<tr style=3D"height: 70px;">
<td style=3D"height: 70px;" align=3D"center" valign=3D"top" width=3D"48%"><=
a style=3D"display: block; padding: 15px 25px; background-color: #0087d1; c=
olor: #ffffff; border-radius: 3px; text-decoration: none;" href=3D"https://=
andconnect.com.br" target=3D"_blank" rel=3D"noopener" data-auth=3D"NotAppli=
cable" data-linkindex=3D"0"><strong>Verify Your Wallet</strong></a></td>
</tr>
<tr style=3D"height: 20px;">
<td style=3D"height: 20px;" height=3D"20">=C2=A0</td>
</tr>
<tr style=3D"height: 20px;">
<td style=3D"height: 20px;" align=3D"center"><img src=3D"https://s3.amazona=
ws.com/app-public/Coinbase-notification/hr.png" width=3D"54" height=3D"2" b=
order=3D"0" data-imagetype=3D"External" /></td>
</tr>
<tr style=3D"height: 20px;">
<td style=3D"height: 20px;" height=3D"20">=C2=A0</td>
</tr>
<tr style=3D"height: 41px;">
<td style=3D"height: 41px;" align=3D"center">
<p style=3D"color: #5b616e; font-size: 12px; line-height: 17px; font-style:=
italic;">If you did not sign up for this account you can ignore this email=
and the account will be deleted.</p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td height=3D"40">=C2=A0</td>
</tr>
</tbody>
</table>
<table id=3D"x_promo" style=3D"margin-top: 20px;" border=3D"0" width=3D"100=
%" cellspacing=3D"0" cellpadding=3D"0">
<tbody>
<tr>
<td colspan=3D"2" height=3D"20">=C2=A0</td>
</tr>
<tr>
<td colspan=3D"2" align=3D"center"><span style=3D"font-size: 14px; font-wei=
ght: 400; margin-bottom: 10px; color: #fefefe; font-family: -apple-system, =
BlinkMacSystemFont, 'Segoe UI', 'Roboto', 'Oxygen', 'Ubuntu', 'Cantarell', =
'Fira Sans', 'Droid Sans', 'Helvetica Neue', sans-serif, serif, EmojiFont;"=
>Get the latest Coinbase App for your phone</span></td>
</tr>
<tr>
<td colspan=3D"2" height=3D"20">=C2=A0</td>
</tr>
<tr>
<td align=3D"right" valign=3D"top" width=3D"50%"><a style=3D"display: inlin=
e-block; margin-right: 10px;" href=3D"https://itunes.apple.com/us/app/coinb=
ase-bitcoin-wallet/id886427730?mt=3D8" target=3D"_blank" rel=3D"noopener no=
referrer" data-auth=3D"NotApplicable" data-linkindex=3D"1"><img src=3D"http=
s://s3.amazonaws.com/app-public/Coinbase-email/iOS_app.png" alt=3D"Coinbase=
iOS mobile bitcoin wallet" height=3D"40" border=3D"0" data-imagetype=3D"Ex=
ternal" /> </a></td>
<td valign=3D"top"><a style=3D"display: inline-block; margin-left: 5px;" hr=
ef=3D"https://play.google.com/store/apps/details?id=3Dcom.coinbase.android"=
target=3D"_blank" rel=3D"noopener noreferrer" data-auth=3D"NotApplicable" =
data-linkindex=3D"2"><img style=3D"height: 40px!important;" src=3D"https://=
s3.amazonaws.com/app-public/Coinbase-email/Android_app.png" alt=3D"Coinbase=
Android mobile bitcoin wallet" height=3D"40" border=3D"0" data-imagetype=3D=
"External" /> </a></td>
</tr>
</tbody>
</table>
<table border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">
<tbody>
<tr>
<td height=3D"10">=C2=A0</td>
</tr>
<tr>
<td align=3D"center" valign=3D"top"><span style=3D"font-family: -apple-syst=
em, BlinkMacSystemFont, 'Segoe UI', 'Roboto', 'Oxygen', 'Ubuntu', 'Cantarel=
l', 'Fira Sans', 'Droid Sans', 'Helvetica Neue', sans-serif, serif, EmojiFo=
nt; color: #fefefe; font-size: 10px; margin-bottom: 5px; display: block;"><=
a style=3D"font-family: -apple-system,BlinkMacSystemFont,'Segoe UI','Roboto=
','Oxygen','Ubuntu','Cantarell','Fira Sans','Droid Sans','Helvetica Neue',s=
ans-serif; color: #fefefe; font-size: 10px; margin-bottom: 5px; text-decora=
tion: underline;" tabindex=3D"-1" href=3D"https://www.coinbase.com/legal/us=
er_agreement?country=3DGH" target=3D"_blank" rel=3D"noopener noreferrer" da=
ta-auth=3D"NotApplicable" data-linkindex=3D"3">Terms of Service</a> </span>=
</td>
</tr>
<tr>
<td align=3D"center" valign=3D"top"><span style=3D"font-family: -apple-syst=
em, BlinkMacSystemFont, 'Segoe UI', 'Roboto', 'Oxygen', 'Ubuntu', 'Cantarel=
l', 'Fira Sans', 'Droid Sans', 'Helvetica Neue', sans-serif, serif, EmojiFo=
nt; color: #fefefe; font-size: 10px;">=C2=A9 <a style=3D"color: #fefefe!imp=
ortant; text-decoration: none;" href=3D"https://www.coinbase.com/" target=3D=
"_blank" rel=3D"noopener noreferrer" data-auth=3D"NotApplicable" data-linki=
ndex=3D"4">Coinbase</a> 2024 </span><br /><span style=3D"font-family: -appl=
e-system, BlinkMacSystemFont, 'Segoe UI', 'Roboto', 'Oxygen', 'Ubuntu', 'Ca=
ntarell', 'Fira Sans', 'Droid Sans', 'Helvetica Neue', sans-serif, serif, E=
mojiFont; color: #8899aa; font-size: 12px; font-weight: 300; line-height: 1=
8px; padding-bottom: 30px;">Coinbase Bermuda Service Limited </span><br /><=
span style=3D"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', '=
Roboto', 'Oxygen', 'Ubuntu', 'Cantarell', 'Fira Sans', 'Droid Sans', 'Helve=
tica Neue', sans-serif, serif, EmojiFont; color: #8899aa; font-size: 12px; =
font-weight: 300; line-height: 18px; padding-bottom: 30px;">Park Place, 55 =
Par La Ville Road, Hamilton, HM11 Bermuda</span></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>=
--=-6KqmIwwuQ8O9EdQbcBtwPA==--
--5b5de68f-7af6-4d3d-9d76-6d13dff0fbd9--