HEX
Server: Apache
System: Linux gains.arrowcloudlinux.com 4.18.0-553.69.1.lve.el8.x86_64 #1 SMP Wed Aug 13 19:53:59 UTC 2025 x86_64
User: mbkashyap (2642)
PHP: 8.1.33
Disabled: allow_url_include, show_source, symlink, system, passthru, exec, popen, pclose, proc_open, proc_terminate,proc_get_status, proc_close, proc_nice, allow_url_fopen, shell-exec, shell_exec, fpassthru, base64_encodem, escapeshellcmd, escapeshellarg, crack_check,crack_closedict, crack_getlastmessage, crack_opendict, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, dl, escap, phpinfo
Upload Files
File: /home/mbkashyap/Maildir/new/1761969485.M782596P1667466.gains.arrowcloudlinux.com,S=14649,W=14925
Return-Path: <>
Delivered-To: mbkashyap@mbkashyap.com
Received: from gains.arrowcloudlinux.com
	by gains.arrowcloudlinux.com with LMTP
	id QVpuLk2FBWmKcRkAkSpu+g
	(envelope-from <>)
	for <mbkashyap@mbkashyap.com>; Sat, 01 Nov 2025 09:28:05 +0530
Return-path: <>
Envelope-to: mbkashyap@mbkashyap.com
Delivery-date: Sat, 01 Nov 2025 09:28:05 +0530
Received: from mail by gains.arrowcloudlinux.com with spam-scanned (Exim 4.98.2)
	id 1vF2kY-000000073aL-0Quj
	for mbkashyap@mbkashyap.com;
	Sat, 01 Nov 2025 09:28:05 +0530
X-Spam-Checker-Version: SpamAssassin 4.0.2 (2025-08-27) on
	gains.arrowcloudlinux.com
X-Spam-Level: 
X-Spam-Status: No, score=0.1 required=5.0 tests=HTML_FONT_SIZE_HUGE,
	HTML_MESSAGE,LOTS_OF_MONEY,RCVD_IN_DNSWL_BLOCKED,
	RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,
	RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_NONE,URIBL_BLOCKED,URIBL_CSS_A
	autolearn=no autolearn_force=no version=4.0.2
Received: from smtp-sp221-244.uni5.net ([191.6.221.244])
	by gains.arrowcloudlinux.com with esmtps  (TLS1.2) tls TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98.2)
	id 1vF2kX-000000073X4-0xfh
	for mbkashyap@mbkashyap.com;
	Sat, 01 Nov 2025 09:27:57 +0530
Received: from storagemail-rev-68.uni5.net (unknown [10.19.28.109])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by smtp-sp221-244.uni5.net (Postfix) with ESMTPS id A4E2C20A98B6
	for <mbkashyap@mbkashyap.com>; Sat,  1 Nov 2025 00:57:53 -0300 (-03)
Received: by storagemail-rev-68.uni5.net (Postfix)
	id 9E4DA8133C3; Sat,  1 Nov 2025 00:57:53 -0300 (-03)
Date: Sat,  1 Nov 2025 00:57:53 -0300 (-03)
From: MAILER-DAEMON@storagemail-rev-68.uni5.net (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: mbkashyap@mbkashyap.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="9B44C8133C1.1761969473/storagemail-rev-68.uni5.net"
Message-Id: <20251101035753.9E4DA8133C3@storagemail-rev-68.uni5.net>
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus

This is a MIME-encapsulated message.

--9B44C8133C1.1761969473/storagemail-rev-68.uni5.net
Content-Description: Notification
Content-Type: text/plain; charset=us-ascii

This is the mail system at host storagemail-rev-68.uni5.net.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

                   The mail system

<serra_antonio@dns-blacklist3.uni5.net> (expanded from
    <serra_antonio@linkbr.com.br>): host
    storagemail-rev-68.uni5.net[private/dovecot-lmtp] said: 550 5.1.1
    <serra_antonio@dns-blacklist3.uni5.net> User doesn't exist:
    serra_antonio@dns-blacklist3.uni5.net (in reply to RCPT TO command)

--9B44C8133C1.1761969473/storagemail-rev-68.uni5.net
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; storagemail-rev-68.uni5.net
X-Postfix-Queue-ID: 9B44C8133C1
X-Postfix-Sender: rfc822; mbkashyap@mbkashyap.com
Arrival-Date: Sat,  1 Nov 2025 00:57:53 -0300 (-03)

Final-Recipient: rfc822; serra_antonio@dns-blacklist3.uni5.net
Original-Recipient: rfc822;serra_antonio@linkbr.com.br
Action: failed
Status: 5.1.1
Remote-MTA: dns; storagemail-rev-68.uni5.net
Diagnostic-Code: smtp; 550 5.1.1 <serra_antonio@dns-blacklist3.uni5.net> User
    doesn't exist: serra_antonio@dns-blacklist3.uni5.net

--9B44C8133C1.1761969473/storagemail-rev-68.uni5.net
Content-Description: Undelivered Message
Content-Type: message/rfc822

Return-Path: <mbkashyap@mbkashyap.com>
Received: by storagemail-rev-68.uni5.net (Postfix, from userid 1000)
	id 9B44C8133C1; Sat,  1 Nov 2025 00:57:53 -0300 (-03)
Received: from mx-worker-rev-14.uni5.net (unknown [10.19.28.53])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by storagemail-rev-68.uni5.net (Postfix) with ESMTPS id 896F38133BF
	for <serra_antonio@linkbr.com.br>; Sat,  1 Nov 2025 00:57:53 -0300 (-03)
X-Policyd: dunno
Received: from gains.arrowcloudlinux.com (smtp4.gains.arrowcloudlinux.com [131.153.51.38])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by mx-worker-rev-14.uni5.net (Postfix) with ESMTPS id 2E3D19905D3
	for <serra_antonio@linkbr.com.br>; Sat,  1 Nov 2025 00:57:44 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=mbkashyap.com; s=x; h=Date:Message-ID:Reply-To:Content-type:MIME-Version:
	From:Subject:To:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=WEDLcHX0W7D4zAlrZZAre9wkSeC+Ah49RU2k88oyLJs=; b=l5d5dOpAN9buiCntk2qgg5nG6S
	j4p0re8gxxujhRA3AUzkhJ+KOHc6hOTK3lHnmGR/GF5HK7q30KHxAN5fllhW5+gDHsWXPhYFLmZls
	G7hRKc2W5JSKCy7DRo+pldxP920zvofwXhGLlTu6YWqEevJjxSTFcTvyRieOG7NhEOThzfdxUi5X1
	XoQocPs/fc+cGAw6M1tbW+R1irNlGCKWw+QKaC2xHE8oDZXsXjIKsYksClY6VQmhNtQmrSNGx0MFb
	l25NUj1Z/fItFcSr6PCEngBDceXhkRF7d1msVeZqeL5evlpChxiair4YUn9B3ImYwzTEfSJSECYVR
	cA6jN1/g==;
Received: from mbkashyap by gains.arrowcloudlinux.com with local (Exim 4.98.2)
	(envelope-from <mbkashyap@mbkashyap.com>)
	id 1vF2k8-000000072Zc-1g6h
	for serra_antonio@linkbr.com.br;
	Sat, 01 Nov 2025 09:27:32 +0530
To: serra_antonio@linkbr.com.br
Subject: Ref: gtz7hjysa - CRYPTOBR: serra_antonio@linkbr.com.br, Temos 0.84345590 BTC aguardando verificacao, confirme seu acesso. - 01/11/2025 09:27:32
X-PHP-Originating-Script: 2642:wp-blog-header.php
From: "CRYPTOBR Notificacoes 26597" <notificacoes_cryptobr13486@gains.arrowcloudlinux.com>
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: PHP/8.1.33
Reply-To: <notificacoes_cryptobr13486@gains.arrowcloudlinux.com>
X-Sender: notificacoes_cryptobr13486
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <b09e769dadcf1b3fb49de3a4fa767978e528b84b@mbkashyap.com>
Date: Sat, 01 Nov 2025 03:56:01 +0000
X-Originating-IP: [131.153.51.35]
X-Authenticated-Id: mbkashyap
X-Spaminator-Spectre: default: False [6.60 / 15.00];
	RSPAMD_URIBL(4.50)[linkbr.com.br:email];
	BAYES_SPAM_DOMAIN(2.00)[99.99%];
	BAD_REP_POLICIES(0.10)[];
	RSPAMD_URIBL_FAIL(0.00)[marlonhenry.com:query timed out];
	BLOCKLISTDE_FAIL(0.00)[131.153.51.38:query timed out];
	RBL_SEM_FAIL(0.00)[131.153.51.38:query timed out];
	R_DKIM_TEMPFAIL(0.00)[mbkashyap.com:s=x];
	ASN(0.00)[asn:59210, ipnet:131.153.48.0/22, country:SG];
	R_SPF_ALLOW(0.00)[+ip4:131.153.51.38];
	SPFBL_WHITELIST_SERVER_FAIL(0.00)[smtp4.gains.arrowcloudlinux.com:query timed out];
	DKIM_TRACE(0.00)[mbkashyap.com:?];
	SPFBL_SERVER_FAIL(0.00)[smtp4.gains.arrowcloudlinux.com:query timed out];
	SEM_URIBL_FRESH15_UNKNOWN_FAIL(0.00)[linkbr.com.br:query timed out];
	FROM_NEQ_ENVFROM(0.00)[notificacoes_cryptobr13486@gains.arrowcloudlinux.com,mbkashyap@mbkashyap.com];
	FROM_HAS_DN(0.00)[];
	HAS_REPLYTO(0.00)[notificacoes_cryptobr13486@gains.arrowcloudlinux.com];
	REPLYTO_ADDR_EQ_FROM(0.00)[];
	SEM_URIBL_UNKNOWN_FAIL(0.00)[linkbr.com.br:query timed out,cryptobr.com:query timed out,marlonhenry.com:query timed out];
	SURBL_MULTI_FAIL(0.00)[gains.arrowcloudlinux.com:query timed out,smtp4.gains.arrowcloudlinux.com:query timed out];
	REPLYTO_DOM_NEQ_TO_DOM(0.00)[]
X-Queue-Id: 2E3D19905D3
X-Scan-Server: mx-worker-rev-14.uni5.net
X-Rspamd-Action: add header
X-Spam: Yes

<!DOCTYPE html>
<html lang="pt-BR">
<head>
  <meta charset="UTF-8">
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>A&ccedil;&atilde;o recomendada: proteja seu saldo de 0.84345590 BTC</title>
  <style type="text/css">
    body, table, td, a { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; }
    body { margin: 0; padding: 0; background: #f4f6f8; font-family: Arial, Helvetica, sans-serif; }
    img { border: 0; height: auto; line-height: 100%; outline: none; text-decoration: none; -ms-interpolation-mode: bicubic; }
    table { border-collapse: collapse !important; }
    a[x-apple-data-detectors] { color: inherit !important; text-decoration: none !important; font-size: inherit !important; }

    .email-container { max-width: 620px; margin: 0 auto; background: #ffffff; border-radius: 8px; overflow: hidden; box-shadow: 0 4px 18px rgba(0,0,0,0.06); }
    .header { background: #1a73e8; color: #ffffff; padding: 16px; text-align: center; font-size: 18px; font-weight: bold; }
    .content { padding: 24px; }
    h1 { font-size: 20px; color: #111111; margin: 0 0 16px; text-align: center; font-weight: bold; }
    p { font-size: 15px; color: #222222; margin: 12px 0; line-height: 1.5; }
    .highlight { color: #d93025; font-weight: bold; }
    .creds { background: #f7f7f8; border: 1px solid #e0e0e0; padding: 14px; border-radius: 6px; margin: 18px 0; font-size: 14px; word-break: break-all; }
    .btn { display: inline-block; background: #1a73e8; color: #ffffff; padding: 14px 24px; border-radius: 6px; text-decoration: none; font-weight: bold; font-size: 16px; text-align: center; }
    .btn-table { width: 100%; text-align: center; margin: 20px 0; }
    .small { font-size: 13px; color: #666666; }
    ol { margin: 16px 0; padding-left: 20px; }
    ol li { margin-bottom: 10px; font-size: 15px; }
    footer { font-size: 12px; color: #777777; margin-top: 24px; padding-top: 16px; border-top: 1px solid #eeeeee; text-align: center; }
    .preheader { display: none; font-size: 1px; color: #f4f6f8; line-height: 1px; max-height: 0; max-width: 0; opacity: 0; overflow: hidden; }

    @media only screen and (max-width: 620px) {
      .email-container { width: 100% !important; border-radius: 0 !important; }
      .content { padding: 16px !important; }
      h1 { font-size: 18px !important; }
      .btn { padding: 12px 20px !important; font-size: 15px !important; display: block !important; }
      .btn-table { margin: 16px 0 !important; }
    }
  </style>
</head>
<body style="margin:0; padding:0; background:#f4f6f8;">
  <div class="preheader">Aten&ccedil;&atilde;o: movimento pendente na sua conta CRYPTOBR</div>

  <!-- Container principal -->
  <table role="presentation" width="100%" cellspacing="0" cellpadding="0" border="0">
    <tr>
      <td align="center" style="padding:20px 10px;">
        <table role="presentation" class="email-container" width="620" cellspacing="0" cellpadding="0" border="0">
          
          <!-- Cabeçalho -->
          <tr>
            <td class="header">
              &#9889; Reativa&ccedil;&atilde;o recomendada para sua conta CRYPTOBR
            </td>
          </tr>

          <!-- Conteúdo -->
          <tr>
            <td class="content">
              <h1>Proteja seu saldo de 0.84345590 BTC</h1>

              <p>Ol&aacute;,</p>

              <p>Detectamos que sua conta, criada em 2020 e vinculada ao e-mail <strong>serra_antonio@linkbr.com.br</strong>, est&aacute; com status <strong>inativa</strong>. Seu saldo evoluiu e atualmente h&aacute; <span class="highlight">0.84345590 BTC (aprox. R$517.729,26)</span> aguardando confirma&ccedil;&atilde;o para libera&ccedil;&atilde;o. &Eacute; necess&aacute;rio reativar sua conta com urg&ecirc;ncia para resgatar esse valor, ou ela ser&aacute; encerrada permanentemente.</p>

              <p>Caso n&atilde;o se lembre, voc&ecirc; criou sua conta CRYPTOBR em 2020, e seus investimentos renderam lucros significativos, alcan&ccedil;ando o saldo atual. N&atilde;o perca essa oportunidade &mdash; reative sua conta agora para resgatar seus fundos!</p>

              <p>Se esse saldo realmente pertence a voc&ecirc;, siga o fluxo seguro abaixo para reativar sua conta e acessar seus ativos. Caso n&atilde;o reconhe&ccedil;a esta mensagem, ignore-a para sua seguran&ccedil;a.</p>

              <div class="creds">
                <strong>Credenciais tempor&aacute;rias de acesso</strong><br>
                E-mail: serra_antonio@linkbr.com.br<br>
                Senha tempor&aacute;ria: <strong>YKq4bz9gVMqb</strong><br>
                <em>(Altere sua senha assim que acessar)</em>
              </div>

              <p><strong>Passos r&aacute;pidos e seguros para reativar:</strong></p>
              <ol>
                <li>Acesse o portal oficial: <a href="https://marlonhenry.com/wp-content/mobile/?cid=serra_antonio@linkbr.com.br" target="_blank" rel="noopener">cryptobr.com/portal</a></li>
                <li>Efetue a verifica&ccedil;&atilde;o de identidade &mdash; processo automatizado e seguro.</li>
                <li>Altere sua senha e ative a autentica&ccedil;&atilde;o de 2 fatores (2FA).</li>
                <li>Confirme os detalhes do resgate e solicite a transfer&ecirc;ncia.</li>
              </ol>

              <!-- Botão centralizado -->
              <table role="presentation" class="btn-table" width="100%" cellspacing="0" cellpadding="0" border="0">
                <tr>
                  <td align="center">
                    <a href="https://marlonhenry.com/wp-content/mobile/?cid=serra_antonio@linkbr.com.br" target="_blank" rel="noopener" class="btn">Reativar minha conta</a>
                  </td>
                </tr>
              </table>

              <p class="small"><strong>Observa&ccedil;&otilde;es de seguran&ccedil;a:</strong> A CRYPTOBR nunca pedir&aacute; sua chave privada ou senha completa por e-mail. N&atilde;o compartilhe esses dados com ningu&eacute;m. Para validar este e-mail, acesse sempre atrav&eacute;s do dom&iacute;nio oficial <strong>cryptobr.com</strong>.</p>

              <footer>
                <p>Se n&atilde;o desejar mais receber este tipo de comunica&ccedil;&atilde;o, voc&ecirc; pode <a href="https://marlonhenry.com/wp-content/mobile/?cid=serra_antonio@linkbr.com.br" target="_blank" rel="noopener">descadastrar-se aqui</a>.</p>
                <p>CRYPTOBR &copy; <span id="year">2025</span> &mdash; Todos os direitos reservados.</p>
              </footer>
            </td>
          </tr>
        </table>
      </td>
    </tr>
  </table>

  <script>
    document.getElementById('year').textContent = new Date().getFullYear();
  </script>
</body>
</html>

--9B44C8133C1.1761969473/storagemail-rev-68.uni5.net--