%PDF-1.3 %��C ��C ����"#Qr����&1!A"2qQa��� ?�y,�/3J�ݹ�߲؋5�Xw���y�R��I0�2�PI�I��iM��r�N&"KgX:��nTJnLK��@!�-� ���m�;�g���&�hw���@�ܗ 9�-�.�1 AnonSec Shell
AnonSec Shell
Server IP : 192.175.98.165  /  Your IP : 216.73.217.36
Web Server : Apache
System : Linux server.tobedev.com 4.18.0-553.72.1.el8_10.x86_64 #1 SMP Tue Sep 2 06:07:48 EDT 2025 x86_64
User : meir5web ( 1019)
PHP Version : 7.4.33
Disable Function : passthru,shell_exec
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/meir5web/mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ HOME ]     

Current File : /home/meir5web/mail/.spam/new/1752756603.M760946P34651.server.tobedev.com,S=9460,W=9683
Return-Path: <jgdcz@fellingbtters.top>
Delivered-To: meir5web+spam@server.tobedev.com
Received: from server.tobedev.com
	by server.tobedev.com with LMTP
	id 4En5LHvxeGhbhwAAkQZavg
	(envelope-from <jgdcz@fellingbtters.top>)
	for <meir5web+spam@server.tobedev.com>; Thu, 17 Jul 2025 12:50:03 +0000
Return-path: <jgdcz@fellingbtters.top>
Envelope-to: contact@meirpanim.fr
Delivery-date: Thu, 17 Jul 2025 12:50:03 +0000
Received: from fellingbtters.top ([185.176.220.228]:40513)
	by server.tobedev.com with esmtp (Exim 4.98.2)
	(envelope-from <jgdcz@fellingbtters.top>)
	id 1ucO3m-000000008yJ-1kIS
	for contact@meirpanim.fr;
	Thu, 17 Jul 2025 12:50:03 +0000
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=fellingbtters.top;
 h=Date:Sender:Message-Id:To:From:Subject:Content-Type:Mime-Version:Content-Transfer-Encoding; i=contact@fellingbtters.top;
 bh=/EZX1LfReIy9VKG8ftFStgwy+Zk=;
 b=RarBJlqkvm3F9K++AGOg6vvLu30pb8DnV4hXKQ01fHNAgbq3JsKnyRJ+wC9wMCrdYbVdbrkbELyU
   v3jssc/PVOxtgDPZ5ayQgPqXXEtoRKHz7DLo+Qv8pyltzwx050kT9AASltsTDpq8VrdFldlJGtpS
   0hTDHvqmDj3F8UkyJhE=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=fellingbtters.top;
 b=gTbHTei0JC+5Q5RmRqCfHzmSZbzQoP67Hdc81zLF+LasqXe1ESJeuiyAVaSmiVppB3drfGPiF5D2
   9Tn5KEXszllkOYUxlDuUkIWLr1jfuFE1LCP9fuATdKAQnJ1YlYjDKq0ZD6w5tsLuRazc1hai7p+6
   P0YjKS6b+PFxways0qM=;
Date: Thu, 17 Jul 2025 12:49:21 +0000
Sender: contact@fellingbtters.top
Message-Id: <756348665701956.0.GTT0484480691@fellingbtters.top>
To: contact@meirpanim.fr
From: Temu <Temu@fellingbtters.top>
Content-Type: text/html; charset="UTF-8"
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=20.1
X-Spam-Score: 201
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.tobedev.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Mini Portable Juicer – Fresh Juice Anywhere! 🍹 Mini
   Portable Juicer Cup – Over 300,000 sold already! Fresh juice anytime, anywhere
    – no outlets needed! 🥝⚡ 
 Content analysis details:   (20.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: kwcdn.com]
                             [URI: bestrends.click]
                             [URI: temu.to]
                             [URI: wikimedia.org]
                             [URI: fellingbtters.top]
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                             [185.176.220.228 listed in zen.spamhaus.org]
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URI: fellingbtters.top/185.176.220.228]
                             [URI: ogridxyic.bestrends.click/185.91.117.98]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [185.176.220.228 listed in bl.score.senderscore.com]
  0.0 URIBL_DBL_ABUSE_REDIR  Contains an abused redirector URL listed in the
                              Spamhaus DBL blocklist
                             [URI: ogridxyic.bestrends.click]
                             [URI: bestrends.click]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus DBL
                             blocklist
                             [URI: ogridxyic.bestrends.click]
                             [URI: bestrends.click]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.176.220.228 listed in sa-accredit.habeas.com]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URI: fellingbtters.top]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [185.176.220.228 listed in sa-trusted.bondedsender.org]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
             [Blocked - see <https://www.spamcop.net/bl.shtml?185.176.220.228>]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [185.176.220.228 listed in psbl.surriel.com]
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL blocklist
                             [URI: fellingbtters.top]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  2.0 PDS_OTHER_BAD_TLD      Untrustworthy TLDs
                             [URI: ogridxyic.bestrends.click]
                             [(click)]
  0.0 HTML_IMAGE_ONLY_32     BODY: HTML: images with 2800-3200 bytes of words
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 KAM_SHORT              Use of a URL Shortener for very short URL
  0.5 FROM_SUSPICIOUS_NTLD   From abused NTLD
  0.8 KAM_OTHER_BAD_TLD      Other untrustworthy TLDs
X-Spam-Flag: YES
Subject:  ***SPAM***  Ce mixeur portable est incroyable. Déjà plus de 330 000 vendus ! 😱

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
  <title>Mini Portable Juicer – Fresh Juice Anywhere!</title>
  <style>
    body {
      font-family: Arial, sans-serif;
      background: #f4f4f4;
      margin: 0;
      padding: 0;
      text-align: center;
    }

    .container {
      max-width: 700px;
      margin: 40px auto;
      background: #fff;
      padding: 20px;
      border-radius: 12px;
      box-shadow: 0 0 10px rgba(0,0,0,0.1);
    }

    .logo {
      max-width: 100px;
      margin-bottom: 20px;
    }

    .product-img {
      width: 100%;
      border-radius: 10px;
      margin-bottom: 15px;
      transition: transform 0.3s ease;
    }

    .product-img:hover {
      transform: scale(1.02);
    }

    h2 {
      color: #333;
      font-size: 24px;
      margin: 10px 0;
    }

    .highlight {
      color: #ff6f00;
      font-size: 18px;
      font-weight: bold;
      margin: 10px 0;
    }

    .details {
      font-size: 16px;
      color: #555;
      line-height: 1.6;
      margin: 15px 0;
    }

    .btn {
      display: inline-block;
      background: #ff6f00;
      color: #fff;
      padding: 14px 28px;
      text-decoration: none;
      font-size: 18px;
      font-weight: bold;
      border-radius: 8px;
      margin-top: 20px;
      transition: background 0.3s ease;
    }

    .btn:hover {
      background: #e65c00;
    }
  </style>
</head>
<body>
  <div class="container">
    <!-- Temu logo -->
    <img src="https://upload.wikimedia.org/wikipedia/fr/a/a6/Temu_logo.svg" alt="Temu Logo" class="logo" />

    <h2>🍹 Mini Portable Juicer Cup –  Over 300,000 sold already!</h2>

    <!-- Product image -->
    <a href="https://temu.to/k/e4bgtj389ep" target="_blank">
      <img class="product-img" src="https://img.kwcdn.com/product/fancy/44be558d-8480-449b-9433-66dac7da4ec4.jpg" alt="Mini Juicer Cup" />
    </a>

    <div class="highlight">Fresh juice anytime, anywhere – no outlets needed! 🥝⚡</div>

    <div class="details">
      ✅ Compact & lightweight – perfect for travel or the gym<br>
      ✅ Rechargeable via USB – no cords while blending<br>
      ✅ Ideal for smoothies, juices, baby food & more<br>
      ✅ Easy to clean & leak-proof design<br>
      ✅ Stylish and available in cute colors – perfect gift idea!<br>
    </div>

    <a href="https://temu.to/k/e4bgtj389ep" class="btn" target="_blank">🛒 Shop Now on Temu</a>
  </div>

  <center style="margin: 30px 0;">
    <a href="http://ogridxyic.bestrends.click/index.php?search=6&d202385&fttdb=310-10&lm=467654JSVJ253&sd=9&page=1FwrS3IDUyqsHDU">Click here to unsubscribe</a>
    <img src="http://bestrends.click/track/index.php?search=3&d202385&rbrnx=310-10&lm=467654VOMZ253&sd=9&page=wg2myroh8MRATRX" style="display:none;" alt="tracking pixel"/>
  </center>
</body>
</html>

Anon7 - 2022
AnonSec Team