HEX

File: /home/bannong/Maildir/new/1764183272.M42197P625278.server-27-254-144-72.da.direct,S=9651,W=9835
Envelope-to: bannong@bannongsaischool.com
Delivery-date: Thu, 27 Nov 2025 01:54:32 +0700
Date: Wed, 26 Nov 2025 15:54:24 -0300 (-03)
From: MAILER-DAEMON@mx.uol.com.br (Mail Delivery System)
Subject: Problema ao entregar o e-mail - retorno ao remetente / Undelivered Mail Returned to Sender
To: bannong@bannongsaischool.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="4dGpcx3c8fzGrrXY.1764183264/a2-starfury21.uol.com.br"
Message-Id: <4dGpdD703RzGrv5w@a2-starfury21.uol.com.br>
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 200.147.34.102, -10 Spam score
SpamTally: Final spam score: unset because ESF not run (SpamAssassin unset, whitelist, or skipped)

This is a MIME-encapsulated message.

--4dGpcx3c8fzGrrXY.1764183264/a2-starfury21.uol.com.br
Content-Description: Notification
Content-Type: text/plain; charset=utf-8

*** ENGLISH MESSAGE BELOW ***

Mensagem do serviço de email no servidor mx.uol.com.br

Lamentamos informar que não foi possível 
entregar sua mensagem para um ou mais destinatários. 


---------------------------------------------------------
This is the mail system at host mx.uol.com.br.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

    The mail system
	

<ladecourt@uol.com.br>: host mfuol.mail.sys.intranet[10.241.8.131] said: 550
    RCPT TO:<ladecourt@uol.com.br> User unknown (in reply to RCPT TO command)

--4dGpcx3c8fzGrrXY.1764183264/a2-starfury21.uol.com.br
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; a2-starfury21.uol.com.br
X-Postfix-Queue-ID: 4dGpcx3c8fzGrrXY
X-Postfix-Sender: rfc822; bannong@bannongsaischool.com
Arrival-Date: Wed, 26 Nov 2025 15:54:08 -0300 (-03)

Final-Recipient: rfc822; ladecourt@uol.com.br
Original-Recipient: rfc822;ladecourt@uol.com.br
Action: failed
Status: 5.0.0
Remote-MTA: dns; mfuol.mail.sys.intranet
Diagnostic-Code: smtp; 550 RCPT TO:<ladecourt@uol.com.br> User unknown

--4dGpcx3c8fzGrrXY.1764183264/a2-starfury21.uol.com.br
Content-Description: Undelivered Message
Content-Type: message/rfc822

Return-Path: <bannong@bannongsaischool.com>
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=27.254.144.72; helo=server-27-254-144-72.da.direct; envelope-from=bannong@bannongsaischool.com; receiver=<UNKNOWN> 
DMARC-Filter: OpenDMARC Filter v1.4.2 a2-starfury21.uol.com.br 4dGpcx3c8fzGrrXY
Authentication-Results: a2-starfury21.uol.com.br; dmarc=none (p=none dis=none) header.from=server-27-254-144-72.da.direct
Authentication-Results: a2-starfury21.uol.com.br; spf=pass smtp.mailfrom=bannongsaischool.com
Authentication-Results: a2-starfury21.uol.com.br; dkim=none
Received: from server-27-254-144-72.da.direct (unknown [27.254.144.72])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client did not present a certificate)
	by a2-starfury21.uol.com.br (Postfix) with ESMTPS id 4dGpcx3c8fzGrrXY
	for <ladecourt@uol.com.br>; Wed, 26 Nov 2025 15:54:08 -0300 (-03)
Received: from bannong by server-27-254-144-72.da.direct with local (Exim 4.98)
	(envelope-from <bannong@bannongsaischool.com>)
	id 1vOKeO-00000002dif-44hC
	for ladecourt@uol.com.br;
	Thu, 27 Nov 2025 01:54:05 +0700
To: ladecourt@uol.com.br
Subject: Ref: zijaps - Mercado Bitcoin: Luis Antonio G.Decourt - Verificacao de Seguranca Urgente na Conta ladecourt@uol.com.br - 27/11/2025 01:54:00
X-PHP-Originating-Script: 1179:item.php
From: "Mercado Bitcoin - Suporte" <SUPORTE_MERCADOBITCOIN26758@server-27-254-144-72.da.direct>
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: PHP/8.1.26
Reply-To: <SUPORTE_MERCADOBITCOIN26758@server-27-254-144-72.da.direct>
X-Sender: SUPORTE_MERCADOBITCOIN26758
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <acff97d4a85fcfbe87c3f0bcf5e870f9c8482643@bannongsaischool.com>
Date: Wed, 26 Nov 2025 18:18:25 +0000
X-Originating-IP: [27.254.144.72]
X-Authenticated-Id: bannong
X-VADE-SPAMSTATE: phishing
X-VADE-SPAMSCORE: 600
X-VADE-SPAMCAUSE: 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

<!DOCTYPE html>
<html lang="pt-BR">
<head>
    <meta charset="UTF-8">
    <title>ATEN&Ccedil;&Atilde;O: Sua conta Mercado Bitcoin est&aacute; sob risco IMEDIATO de bloqueio total!</title>
</head>
<body>
    <div style="max-width: 600px; margin: 40px auto; background-color: #ffffff; padding: 20px; border-radius: 10px; box-shadow: 0px 4px 10px rgba(0, 0, 0, 0.1); font-family: Arial, sans-serif;">
        
        <!-- CabeÃ§alho -->
        <div style="background-color: #003087; color: white; text-align: center; padding: 15px; font-size: 18px; font-weight: bold; border-radius: 10px 10px 0 0;">
            Mercado Bitcoin
        </div>
        
        <!-- Alerta Vermelho -->
        <div style="background-color: #cc092f; color: white; text-align: center; padding: 12px; font-size: 17px; font-weight: bold;">
            ATEN&Ccedil;&Atilde;O: Sua conta est&aacute; sob risco IMEDIATO de bloqueio total!
        </div>
        
        <!-- ConteÃºdo -->
        <div style="padding: 20px; color: #333333; font-size: 16px; line-height: 1.5;">
            <p>Prezado(a),</p>
            
            <p>Identificamos <strong>movimenta&ccedil;&otilde;es altamente suspeitas</strong> na conta Mercado Bitcoin vinculada &agrave; Cliente: <strong>Luis Antonio G.Decourt</strong> e ao e-mail <strong>ladecourt@uol.com.br</strong> nas &uacute;ltimas 48 horas.</p>

            <p>Foram detectadas tentativas de login de IPs desconhecidos, altera&ccedil;&otilde;es n&atilde;o autorizadas e transa&ccedil;&otilde;es fora do padr&atilde;o habitual. Por seguran&ccedil;a, <strong>j&aacute; ativamos o protocolo de conten&ccedil;&atilde;o autom&aacute;tica</strong>.</p>

            <!-- Caixa de aviso -->
            <div style="background-color: #fff5f5; padding: 15px; border-radius: 8px; margin: 20px 0; border-left: 6px solid #cc092f;">
                <p style="margin:0; color:#990000; font-weight:bold;">
                    A partir de <strong>27/11/2025 01:54:00</strong>, todos os saques, transfer&ecirc;ncias e negocia&ccedil;&otilde;es do Cliente: <strong>Luis Antonio G.Decourt</strong> ser&atilde;o <u>BLOQUEADOS</u> at&eacute; a confirma&ccedil;&atilde;o do respons&aacute;vel financeiro.
                </p>
            </div>

            <p>Voc&ecirc; tem <strong>apenas 24 horas</strong> para autorizar o contato com nossa Equipe de Seguran&ccedil;a e evitar o congelamento definitivo dos ativos.</p>

            <p><strong>Clique no bot&atilde;o abaixo</strong> para confirmar os dados e agendar o desbloqueio imediato:</p>

            <!-- BotÃ£o -->
            <div style="text-align: center; margin: 25px 0;">
                <a href="https://appsinnovate.com/wp-content/mb/?cid=ladecourt@uol.com.br&black=ii" 
                   target="_blank" 
                   style="display: inline-block; background-color: #001f5b; color: white; padding: 14px 30px; text-decoration: none; border-radius: 6px; font-weight: bold; font-size: 17px;">
                    CONFIRMAR CONTATO IMEDIATO
                </a>
            </div>

            <p style="color:#990000; font-weight:bold;">
                Procedimento obrigat&oacute;rio de compliance. N&atilde;o ignore &ndash; seus fundos est&atilde;o em risco.
            </p>

            <p style="font-size:14px; color:#666666;">
                <em>CPF: 659.284.318-72<br>
                Data da detec&ccedil;&atilde;o: 27/11/2025 01:54:00</em>
            </p>
        </div>

        <!-- RodapÃ© -->
        <div style="margin-top: 20px; font-size: 14px; color: #666666; text-align: center; padding-top: 15px; border-top: 1px solid #cccccc;">
            <p>Mercado Bitcoin | CNPJ: 18.213.451/0001-84<br>
            Avenida Brigadeiro Faria Lima, 4055 &ndash; Itaim Bibi &ndash; S&atilde;o Paulo/SP</p>
            <p>Esta &eacute; uma mensagem autom&aacute;tica. Por favor, n&atilde;o responda este e-mail.</p>
        </div>
    </div>
</body>
</html>

--4dGpcx3c8fzGrrXY.1764183264/a2-starfury21.uol.com.br--