%PDF-1.3 %��C ��C ����"#Qr����&1!A"2qQa��� ?�y,�/3J�ݹ�߲؋5�Xw���y�R��I0�2�PI�I��iM��r�N&"KgX:��nTJnLK��@!�-� ���m�;�g���&�hw���@�ܗ 9�-�.�1 AnonSec Shell
AnonSec Shell
Server IP : 192.175.98.165  /  Your IP : 216.73.217.36
Web Server : Apache
System : Linux server.tobedev.com 4.18.0-553.72.1.el8_10.x86_64 #1 SMP Tue Sep 2 06:07:48 EDT 2025 x86_64
User : meir5web ( 1019)
PHP Version : 7.4.33
Disable Function : passthru,shell_exec
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/meir5web/mail/.spam/cur/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ HOME ]     

Current File : /home/meir5web/mail/.spam/cur/1766071907.M831556P1384316.server.tobedev.com,S=7705,W=7918:2,a
Return-Path: <dh_czbtmx@vps67647.dreamhostps.com>
Delivered-To: meir5web+spam@server.tobedev.com
Received: from server.tobedev.com
	by server.tobedev.com with LMTP
	id myOHMGMeRGl8HxUAkQZavg
	(envelope-from <dh_czbtmx@vps67647.dreamhostps.com>)
	for <meir5web+spam@server.tobedev.com>; Thu, 18 Dec 2025 15:31:47 +0000
Return-path: <dh_czbtmx@vps67647.dreamhostps.com>
Envelope-to: contact@meirpanim.fr
Delivery-date: Thu, 18 Dec 2025 15:31:47 +0000
Received: from [173.236.220.17] (port=50204 helo=vps67647.dreamhostps.com)
	by server.tobedev.com with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.99)
	(envelope-from <dh_czbtmx@vps67647.dreamhostps.com>)
	id 1vWFym-00000005o3W-2qiy
	for contact@meirpanim.fr;
	Thu, 18 Dec 2025 15:31:47 +0000
Received: by vps67647.dreamhostps.com (Postfix, from userid 6886184)
	id 4dXDJJ60ZqzLswJcw; Thu, 18 Dec 2025 06:56:16 -0800 (PST)
To: contact@meirpanim.fr
X-PHP-Originating-Script: 6886184:acc.php
From: Godaddy <Godaddy@vps67647.dreamhostps.com>
Reply-To: Godaddy@vps67647.dreamhostps.com
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Message-Id: <4dXDJJ60ZqzLswJcw@vps67647.dreamhostps.com>
Date: Thu, 18 Dec 2025 06:56:16 -0800 (PST)
X-Spam-Status: Yes, score=8.4
X-Spam-Score: 84
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "server.tobedev.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  _ Action Required: Update Your Payment Details Action Required:
    Update Your Payment Details 
 Content analysis details:   (8.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.5 RCVD_IN_HOSTKARMA_BL   RBL: Sender listed in HOSTKARMA-BLACK
                       [173.236.220.17 listed in hostkarma.junkemailfilter.com]
  3.6 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
                             [173.236.220.17 listed in zen.spamhaus.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [173.236.220.17 listed in bl.score.senderscore.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see <https://www.spamcop.net/bl.shtml?173.236.220.17>]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: socotrawater.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [173.236.220.17 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [173.236.220.17 listed in sa-accredit.habeas.com]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
X-Spam-Flag: YES
Subject:  ***SPAM***  GoDaddy Renewal Issue – Action Needed Within 24 Hours

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <title>⚠ Action Required: Update Your Payment Details</title>
  <style>
    body {
      margin: 0;
      padding: 0;
      font-family: "Segoe UI", Roboto, Arial, sans-serif;
      background: linear-gradient(180deg, #f7f8fa 0%, #e9ebf0 100%);
      color: #222;
      -webkit-font-smoothing: antialiased;
      text-rendering: optimizeLegibility;
    }

    .container {
      max-width: 560px;
      margin: 60px auto;
      background: #ffffff;
      padding: 45px 55px;
      border-radius: 16px;
      box-shadow: 0 10px 40px rgba(0, 0, 0, 0.08);
      border: 1px solid #f0f0f0;
    }

    .logo {
      text-align: left;
      margin-bottom: 30px;
    }

    .logo img {
      width: 160px;
      height: auto;
      filter: drop-shadow(0 2px 2px rgba(0,0,0,0.1));
    }

    .title {
      font-size: 24px;
      font-weight: 700;
      color: #000;
      margin-bottom: 25px;
      text-shadow: 0 1px 0 rgba(0,0,0,0.05);
    }

    .message {
      font-size: 15px;
      line-height: 1.8;
      color: #444;
      margin-bottom: 25px;
    }

    .highlight {
      color: #000;
      font-weight: 600;
    }

    .button-wrapper {
      text-align: center;
      margin: 40px 0;
    }

    .button {
      background: linear-gradient(90deg, #000 0%, #333 100%);
      color: #fff;
      text-decoration: none;
      padding: 14px 40px;
      font-size: 15px;
      font-weight: 600;
      border-radius: 50px;
      display: inline-block;
      letter-spacing: 0.5px;
      transition: all 0.3s ease;
      box-shadow: 0 6px 15px rgba(0,0,0,0.15);
    }

    .button:hover {
      background: linear-gradient(90deg, #222 0%, #000 100%);
      transform: translateY(-2px);
      box-shadow: 0 8px 20px rgba(0,0,0,0.2);
    }

    .footer {
      text-align: center;
      font-size: 12px;
      color: #777;
      margin-top: 35px;
      border-top: 1px solid #eee;
      padding-top: 20px;
      line-height: 1.6;
    }

    @media (max-width: 600px) {
      .container {
        padding: 30px 25px;
        margin: 20px;
      }

      .title {
        font-size: 20px;
      }
    }
  </style>
</head>
<body>
  <div class="container">
    <div class="logo">
      <img src="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQixfQW369rEJpZbhVX0kVppbFu6BU9eckbpFk-PNdMPUgQpV0U0RaT0Kp0TQ2XIu3noA&usqp=CAU" alt="GoDaddy Logo">
    </div>

    <div class="title">Action Required: Update Your Payment Details</div>

    <div class="message">
      Dear Customer,<br><br>
      We were unable to process your recent GoDaddy service renewal because your payment method was declined.<br><br>
      To prevent your services from being <span class="highlight">suspended within 24 hours</span>, please update your billing details immediately.
    </div>

    <div class="button-wrapper">
      <a href="https://socotrawater.com/GoZex.php" class="button">Update Payment</a>
    </div>

    <div class="message">
      Once updated, your renewal will be processed automatically.<br><br>
      Thank you for choosing <strong>GoDaddy</strong>.
    </div>

    <div class="footer">
      Copyright © 1999-2025 GoDaddy Operating Company, LLC. 100 S Mill Ave, Suite 1600, Tempe, AZ 85281 USA. All rights reserved.<br>

    </div>
  </div>
</body>
</html>

Anon7 - 2022
AnonSec Team