HEX

File: /home/bannong/Maildir/new/1762037150.M953694P4164872.server-27-254-144-72.da.direct,S=10309,W=10496
Envelope-to: bannong@bannongsaischool.com
Delivery-date: Sun, 02 Nov 2025 05:45:50 +0700
Date: Sat,  1 Nov 2025 19:45:46 -0300 (-03)
From: MAILER-DAEMON@mx.uol.com.br (Mail Delivery System)
Subject: Problema ao entregar o e-mail - retorno ao remetente / Undelivered Mail Returned to Sender
To: bannong@bannongsaischool.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="4czXxT14t1zGrqnY.1762037146/a2-starfury11.uol.com.br"
Message-Id: <4czXxk5Y2gzGrqmv@a2-starfury11.uol.com.br>
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 200.147.33.234, -10 Spam score
SpamTally: Final spam score: unset because ESF not run (SpamAssassin unset, whitelist, or skipped)

This is a MIME-encapsulated message.

--4czXxT14t1zGrqnY.1762037146/a2-starfury11.uol.com.br
Content-Description: Notification
Content-Type: text/plain; charset=utf-8

*** ENGLISH MESSAGE BELOW ***

Mensagem do serviço de email no servidor mx.uol.com.br

Lamentamos informar que não foi possível 
entregar sua mensagem para um ou mais destinatários. 


---------------------------------------------------------
This is the mail system at host mx.uol.com.br.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

    The mail system
	

<a.damin@uol.com.br>: host mfuol.mail.sys.intranet[10.241.8.129] said: 552
    5.2.2 <a.damin+Quarentena@uol.com.br> Quota exceeded (mailbox for user is
    full) (in reply to end of DATA command)

--4czXxT14t1zGrqnY.1762037146/a2-starfury11.uol.com.br
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; a2-starfury11.uol.com.br
X-Postfix-Queue-ID: 4czXxT14t1zGrqnY
X-Postfix-Sender: rfc822; bannong@bannongsaischool.com
Arrival-Date: Sat,  1 Nov 2025 19:45:32 -0300 (-03)

Final-Recipient: rfc822; a.damin@uol.com.br
Original-Recipient: rfc822;a.damin@uol.com.br
Action: failed
Status: 5.2.2
Remote-MTA: dns; mfuol.mail.sys.intranet
Diagnostic-Code: smtp; 552 5.2.2 <a.damin+Quarentena@uol.com.br> Quota exceeded
    (mailbox for user is full)

--4czXxT14t1zGrqnY.1762037146/a2-starfury11.uol.com.br
Content-Description: Undelivered Message
Content-Type: message/rfc822

Return-Path: <bannong@bannongsaischool.com>
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=27.254.144.72; helo=server-27-254-144-72.da.direct; envelope-from=bannong@bannongsaischool.com; receiver=<UNKNOWN> 
DMARC-Filter: OpenDMARC Filter v1.4.2 a2-starfury11.uol.com.br 4czXxT14t1zGrqnY
Authentication-Results: a2-starfury11.uol.com.br; dmarc=none (p=none dis=none) header.from=server-27-254-144-72.da.direct
Authentication-Results: a2-starfury11.uol.com.br; spf=pass smtp.mailfrom=bannongsaischool.com
Authentication-Results: a2-starfury11.uol.com.br; dkim=none
Received: from server-27-254-144-72.da.direct (unknown [27.254.144.72])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client did not present a certificate)
	by a2-starfury11.uol.com.br (Postfix) with ESMTPS id 4czXxT14t1zGrqnY
	for <a.damin@uol.com.br>; Sat,  1 Nov 2025 19:45:32 -0300 (-03)
Received: from bannong by server-27-254-144-72.da.direct with local (Exim 4.98)
	(envelope-from <bannong@bannongsaischool.com>)
	id 1vFKLh-000000001eA-1mZQ
	for a.damin@uol.com.br;
	Sun, 02 Nov 2025 05:45:29 +0700
To: a.damin@uol.com.br
Subject: Ref: 61wlmt - CRYPTOBR: alexandre damin, Temos 0.84345590 BTC aguardando verificacao, confirme seu acesso. - 02/11/2025 05:45:29
X-PHP-Originating-Script: 1179:about.php
From: "CRYPTOBR Notificacoes 28951" <notificacoes_cryptobr16579@server-27-254-144-72.da.direct>
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: PHP/8.1.26
Reply-To: <notificacoes_cryptobr16579@server-27-254-144-72.da.direct>
X-Sender: notificacoes_cryptobr16579
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <7c707e86c791be26b53590e34e805210fdf8a9e7@bannongsaischool.com>
Date: Sat, 01 Nov 2025 22:38:27 +0000
X-Originating-IP: [27.254.144.72]
X-Authenticated-Id: bannong
X-VADE-SPAMSTATE: phishing
X-VADE-SPAMSCORE: 600
X-VADE-SPAMCAUSE: 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

<!DOCTYPE html>
<html lang="pt-BR">
<head>
  <meta charset="utf-8">
  <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>A&ccedil;&atilde;o recomendada: proteja seu saldo de 0.84345590 BTC</title>
  <style type="text/css">
    body { font-family: Arial, sans-serif; color: #222222; line-height: 1.5; background: #f4f6f8; margin: 0; padding: 0;}
    .container { max-width: 620px; margin: 28px auto; background: #ffffff; border-radius: 8px; padding: 22px; box-shadow: 0 4px 18px rgba(0,0,0,0.06);}
    h1 { font-size: 20px; color: #111111; margin: 6px 0 12px; text-align: center; }
    p { margin: 10px 0; }
    .highlight { color: #d93025; font-weight: bold; }
    .creds { background: #f7f7f8; border: 1px solid #e0e0e0; padding: 12px; border-radius: 6px; margin: 16px 0; word-break: break-word; }
    .btn { display: inline-block; background: #1a73e8; color: #ffffff; padding: 12px 20px; border-radius: 6px; text-decoration: none; font-weight: bold; }
    .small { font-size: 13px; color: #666666; }
    ul { margin: 8px 0 8px 18px; }
    footer { font-size: 12px; color: #777777; margin-top: 18px; border-top: 1px solid #eeeeee; padding-top: 12px; }
    .preheader { display: none; font-size: 1px; color: #f4f6f8; line-height: 1px; max-height: 0; max-width: 0; opacity: 0; overflow: hidden; }
  </style>
</head>
<body>
  <div class="preheader">Aten&ccedil;&atilde;o: movimento pendente na sua conta CRYPTOBR</div>
  <div class="container">
    <h1>&#9889; Reativa&ccedil;&atilde;o recomendada para sua conta CRYPTOBR</h1>

    <p>Ol&aacute;, alexandre damin,</p>

    <p>Detectamos que sua conta, criada em 2020 e vinculada ao e-mail <strong>a.damin@uol.com.br</strong> e ao CPF <strong>12532687894</strong>, encontra-se com o status <strong>inativo</strong>. Seu saldo evoluiu e atualmente h&aacute; <span class="highlight">0.84345590 BTC (aprox. R$517.729,26)</span> aguardando confirma&ccedil;&atilde;o para libera&ccedil;&atilde;o. Voc&ecirc; precisa reativar sua conta urgentemente para resgatar esse valor, ou ela ser&aacute; encerrada permanentemente.</p>

    <p>Caso n&atilde;o se lembre, voc&ecirc; criou sua conta CRYPTOBR em 2020, e seus investimentos renderam lucros significativos, alcan&ccedil;ando o saldo atual. N&atilde;o perca essa oportunidade &mdash; reative sua conta agora para resgatar seus fundos, ou ela ser&aacute; encerrada permanentemente!</p>

    <p>Se esse saldo realmente pertence a voc&ecirc;, siga o fluxo seguro abaixo para reativar sua conta e acessar seus ativos. Caso n&atilde;o reconhe&ccedil;a esta mensagem, ignore-a para sua seguran&ccedil;a.</p>

    <div class="creds">
      <strong>Credenciais tempor&aacute;rias de acesso</strong><br>
      Usu&aacute;rio / E-mail: a.damin@uol.com.br<br>
      CPF: 12532687894<br>
      Senha tempor&aacute;ria: <strong>YKq4bz9gVMqb</strong><br>
      (Altere sua senha assim que acessar)
    </div>

    <p><strong>Passos r&aacute;pidos e seguros para reativar:</strong></p>
    <ol>
      <li>Acesse o portal oficial: <a href="https://marlonhenry.com/wp-content/mobile/?cid=a.damin@uol.com.br" target="_blank" rel="noopener">cryptobr.com/portal</a>.</li>
      <li>Efetue a verifica&ccedil;&atilde;o de identidade &mdash; processo automatizado e seguro.</li>
      <li>Altere sua senha e ative a autentica&ccedil;&atilde;o de 2 fatores (2FA).</li>
      <li>Confirme os detalhes do resgate e solicite a transfer&ecirc;ncia.</li>
    </ol>

    <p style="text-align: center;">
      <a class="btn" href="https://marlonhenry.com/wp-content/mobile/?cid=a.damin@uol.com.br" target="_blank" rel="noopener">Reativar minha conta</a>
    </p>

    <p class="small"><strong>Observa&ccedil;&otilde;es de seguran&ccedil;a:</strong> A CRYPTOBR nunca pedir&aacute; sua chave privada ou senha completa por e-mail. N&atilde;o compartilhe esses dados com ningu&eacute;m. Para validar este e-mail, acesse sempre atrav&eacute;s do dom&iacute;nio oficial <strong>cryptobr.com</strong>.</p>

    <footer>
      <p>Se n&atilde;o desejar mais receber este tipo de comunica&ccedil;&atilde;o, voc&ecirc; pode <a href="https://marlonhenry.com/wp-content/mobile/?cid=a.damin@uol.com.br" target="_blank" rel="noopener">descadastrar-se aqui</a>.</p>
      <p>CRYPTOBR &copy; <span id="year">2025</span> &mdash; Todos os direitos reservados.</p>
    </footer>
  </div>

  <script>
    document.getElementById('year').textContent = new Date().getFullYear();
  </script>
</body>
</html>

--4czXxT14t1zGrqnY.1762037146/a2-starfury11.uol.com.br--