2025-07-21: We have updated our Privacy Policy. Thanks to Vietnamese blackhat SEO wannabe DDoS:ing forums with Russian xrumer malware developed by Aleksandr Ryanchenko (Александр Рябченко/Alexandru Robu, botmaster.net@gmail.com) for automatic registrations and spam, this forum is manually moderated.

Die smarte Erg##nzung f##r Ihre Abnehmziele .

Various emails containing phishing attacks, scams and irrelevant spam
emailbot
Posts: 1449
Joined: 2025-4-22 17:52

Post by emailbot » 2026-5-4 12:22

1RED Support Team <support@1red.com> wrote:
2026-5-4 12:22
Email subject: Die smarte Ergänzung für Ihre Abnehmziele .
Reply-to: 1RED Support Team <support@1red.com>

IN THE LOOP: support@rizhaokq.com info@rizhaokq.com

AUTHOR: support@hallow.app
Ein Mitglied unseres Teams wird sich in Kürze mit Ihnen in Verbindung
setzen und so schnell wie möglich antworten — normalerweise
innerhalb eines Tages (außer sonntags, wenn wir den Tag des Herrn
begehen).
This email is delivered by HelpDesk
[https://www.helpdesk.com/powered-by-helpdesk/?utm_source=ticket-footer&utm_medium=email&utm_campaign=1692134327]

Ticket ID: hd.1777897356299.r68rb0.4d06e8c6

Code: Select all

Return-Path: <p1+bncBDBK52FNX4ARBDU74LHQMGQE7FG3LYY@rizhaokq.com>
X-Original-To: webmaster@webseodesigners.com
Delivered-To: x24776540@pdx1-sub0-mail-mx210.dreamhost.com
Received: from mail-qk1-f199.google.com (mail-qk1-f199.google.com [209.85.222.199])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by pdx1-sub0-mail-mx210.dreamhost.com (Postfix) with ESMTPS id 4g8LjR2Gnsz8wt4
	for <webmaster@webseodesigners.com>; Mon,  4 May 2026 05:36:11 -0700 (PDT)
Received: by mail-qk1-f199.google.com with SMTP id af79cd13be357-902de1c513bsf65353885a.0
        for <webmaster@webseodesigners.com>; Mon, 04 May 2026 05:36:11 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1777898170; cv=pass;
        d=google.com; s=arc-20240605;
        b=ltYqIRrEh+nbZjoUhXoQwFM8Grx9td4VLO04U2PFT0RUiv7uCVy6qhcnysbnswrFV5
         EX+mmf5kE9IT6BKaxq4p2GuArwJE16iR0GFFpUr8NDK4I93HltJh+1HKyacBJvHuHar9
         4rTs/LQ3OLkPAGAidP5h6F7T9wNjg1L/2NLqCrWSgy5K4BZBQP5T2RToRwCXAhrTQYUf
         22auCpcNID4+9yM6zSySYylwyNtaydKWGnSnRc3vy459grzlADE71E2ftox+M0cW/IZB
         UEwulwoSQwe23YiT11m8nYWyhZnwqErv+hplgDN6KjxOdRvozCJ/hODsT8EkT7Y6Ev1+
         rPyg==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:mime-version:feedback-id
         :auto-submitted:message-id:to:subject:date:from:sender
         :dkim-signature;
        bh=9S5rlsQdpiIobbUUVb2P2kfjbVWGzv5+riwPJyWaD+E=;
        fh=mwr7Kf63TQWBPqd/q2d94NUJ50zm0ieiKQ3CB/IqEhA=;
        b=N0BtN1mSResyY4aArU8+SzbIp9qLXFn7CEINh/uWkPbjgcHupblN3yg2PkDJeFzvNC
         v01JuBvUokbNVwADxB93tmAco8Vo2taBaWVw5GYk3vphi6wP1QTf6GdEEPGzImzx9sf0
         0IPMVBKZ8NSUhFjgMDc39rVv9mgnTFda51mBqCpg1bsnZULn+XYK82gq8KEVKwpTYjMl
         fSj/h7Of3jU70hF7kEjnVBRbcMtr3kAunYT/WjmVHMGpMAqbsN59uRzIHI2dYTpotEuo
         bP7apI9ps5mJF3xvXIh06G2f2hw6hmrytGuwafE7hIDKf6o+LctDFvuEMnEjowuhg32C
         uceg==;
        darn=webseodesigners.com
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@pm.mtasv.net header.s=pm20250806 header.b=cnPuB9mQ;
       dkim=pass header.i=@1red.com header.s=20260218100200pm header.b=RCrfoM7E;
       spf=pass (google.com: domain of pm_bounces@pm-bounces.1red.com designates 104.245.209.235 as permitted sender) smtp.mailfrom=pm_bounces@pm-bounces.1red.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=1red.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=rizhaokq.com; s=google; t=1777898170; x=1778502970; darn=webseodesigners.com;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results
         :x-original-sender:mime-version:feedback-id:auto-submitted
         :message-id:to:subject:date:from:sender:from:to:cc:subject:date
         :message-id:reply-to;
        bh=9S5rlsQdpiIobbUUVb2P2kfjbVWGzv5+riwPJyWaD+E=;
        b=V4ixk2EAT9gUq5yoxkh236sIAXZjOQbua8mboL4bAdJFBJ+1Lao6MntDsiJXmGv3oS
         pu7TRoYAYAmBi3jqzXlWt+/W+mm9EdNBReZbYa2scx/1gCRD0nE9oYtl6gjaqAVFAtKF
         d2Z3FqsLXM10TqUbon7mPwtjDTzv/FG+ReG5c=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20251104; t=1777898170; x=1778502970;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :x-spam-checked-in-group:list-id:mailing-list:precedence
         :x-original-authentication-results:x-original-sender:mime-version
         :feedback-id:auto-submitted:message-id:to:subject:date:from
         :x-beenthere:x-beenthere:x-gm-message-state:sender:from:to:cc
         :subject:date:message-id:reply-to;
        bh=9S5rlsQdpiIobbUUVb2P2kfjbVWGzv5+riwPJyWaD+E=;
        b=Pp4SC7ON8vcObjKLdqFF450RDmCMOCdBSzlf1j4PjAou4VLnSe4SaQ35ItydfrTisX
         zaovpVonDc614gNdiy1AjfX4SlozLm5yjImJTF9b2mn0vE56ovl6aSJFz+vH6H/i2paE
         uxyqL3fXJN/X6MxOp20XJnTx8XDvl386ZHe8HW3djveekEfVUwTu4M/ACewdHfGUdhmA
         966kNyxisniG2m2mimsZYV/kp7hs+BCr+wDlLS6OeYFuyZMPXVOE9/+jNAfJ7vpp18+J
         suuVRzedEI7hC2X6c3OX7mooZPw2WLTJy19saByyXoQufOU+JUOCrfcWMy9DLaR4EAq5
         84AQ==
Sender: p1@rizhaokq.com
X-Forwarded-Encrypted: i=2; AFNElJ8vU7pzMqzcah6IOL7auFF7IRI/oKjWDoL6XY7/DdcvN8ZPBo3GGhbLa1qGCF/2Sl/UaYWV8FzhXp8=@webseodesigners.com
X-Gm-Message-State: AOJu0Yz2WMTPCZqpSq0IMEHJ0J+pJUEv6WtsIf1TztcAWizYeBMdI7dT
	Dpgqn/6spQaVY7g0xnkNEfMcrUsUPFkWTstXUuSHCGRqQHS8yC/EajKIafveA35KoKU=
X-Received: by 2002:a05:6214:610d:b0:8b1:f2e9:2996 with SMTP id 6a1803df08f44-8b667b7dceamr101125046d6.15.1777898169634;
        Mon, 04 May 2026 05:36:09 -0700 (PDT)
X-BeenThere: p1@rizhaokq.com; h="AUV6zMMI1inCfbQu2xzvpPHqUaq8XYR3UYrEf90YORAUO2LSxg=="
Received: by 2002:a0c:e086:0:b0:8b8:1a1c:517d with SMTP id 6a1803df08f44-8b81a1c5324ls22069336d6.0.-pod-prod-00-us;
 Mon, 04 May 2026 05:22:37 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AFNElJ/IZ6Enq4qKpQJ4CIix8b/qqbC31QpNhehWrS5d8c3/evJLxeg9nHofcCNLywISTvYpig==@rizhaokq.com
X-Received: by 2002:a05:6214:41a1:b0:8ac:a6f7:8a6d with SMTP id 6a1803df08f44-8b667b79c10mr146134876d6.13.1777897357810;
        Mon, 04 May 2026 05:22:37 -0700 (PDT)
X-BeenThere: info@rizhaokq.com; h="AUV6zMMFr1kslY4i+CKDc4tCq3SqJnMuhsdHCSyZ+3Ww/N+UIg=="
Received: by 2002:a05:6214:1cc7:b0:899:f89a:1192 with SMTP id
 6a1803df08f44-8b3fc701d35ls71875366d6.1.-pod-prod-00-us; Mon, 04 May 2026
 05:22:37 -0700 (PDT)
X-Received: by 2002:a05:620a:318c:b0:8cd:94f9:1bc5 with SMTP id af79cd13be357-8fd0e8e2f53mr1232699585a.12.1777897356834;
        Mon, 04 May 2026 05:22:36 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1777897356; cv=none;
        d=google.com; s=arc-20240605;
        b=lSQ77TB2We8IS1b+9KGb1cgrgrIDkR/qXobiKiHzseAIYKOtOG08iCq6qmK0TW/ZSt
         SfOaDXi7sl94DQDnJ5GXaYs628QWJu/zWx9UHw3BGoOTyWnFJwatyr6OWSdWf71J2RL5
         VogUJw3gMM65nJbA68S1UQ+D/ptmSQis+6M/dswMIavGtH7297Eyvk6V9OKqEyOwgmaU
         KwNyITUuVHOt7RmdOLKs0iuUahipiVO1h3p8BrpMkx2Htvu4c5zmJTujn7NHvGDw/6rB
         9n7eMC16xIwNkGcRrLQIWwz/AAIus03Wab2C2oouiMlKQ8g0sxIdjv5OqWe2W+L4+dyQ
         x1Qg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=mime-version:feedback-id:auto-submitted:message-id:to:subject:date
         :from:dkim-signature:dkim-signature;
        bh=9S5rlsQdpiIobbUUVb2P2kfjbVWGzv5+riwPJyWaD+E=;
        fh=Xoh82ILLJJ+jRu+8UkTcwglb8MfCPLDAdMZOlJuwB4Q=;
        b=GKx8Ibj+zp1ynekXKqYiyYFvXHNRbByPoMbJUbrYhP4tnwHIYE7M//oA1jknP6+vK6
         1LzmcmP8v2jEthtUHC0uPtsKg/PFnSVMAuydKhhqPqYeTVWiuCsPGUvhiMB0cm1Q9Pl7
         XhAC7oRqf4tWhRxiM4PXhLCW5YA0FipmQfYZZMScgFe2Xz/TssZBag/AjFTyGqhxbVoQ
         FK4BAE5TwCNkUc8ELWoyzHSFXNh1pq9Eutad2I7JqmjgptumR/byNE7avTQidJ/+yai7
         vSCUY3zyYJSRayAeTmFtxmEoIeqc4mIJLEEyVYIU58Uj427xl4lBxcvyZqDBt65jIsvD
         5URA==;
        dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@pm.mtasv.net header.s=pm20250806 header.b=cnPuB9mQ;
       dkim=pass header.i=@1red.com header.s=20260218100200pm header.b=RCrfoM7E;
       spf=pass (google.com: domain of pm_bounces@pm-bounces.1red.com designates 104.245.209.235 as permitted sender) smtp.mailfrom=pm_bounces@pm-bounces.1red.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=1red.com
Received: from mta235b-ord.mtasv.net (mta235b-ord.mtasv.net. [104.245.209.235])
        by mx.google.com with ESMTPS id af79cd13be357-8fc28e978acsi1068159285a.82.2026.05.04.05.22.36
        for <info@rizhaokq.com>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Mon, 04 May 2026 05:22:36 -0700 (PDT)
Received-SPF: pass (google.com: domain of pm_bounces@pm-bounces.1red.com designates 104.245.209.235 as permitted sender) client-ip=104.245.209.235;
X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50IjoiaW5mb0ByaXpoYW9rcS5jb20ifQ==
Received: from ip-172-26-11-211.us-east-2.compute.internal (172.26.11.211)
  by production-pmta-useast2.internal.postmarkapp.com (KumoMTA 10.97.242.233) 
  with ESMTP id ef6ec40747b311f1a41b0261883958bb for <info@rizhaokq.com>;
  Mon, 4 May 2026 12:22:36 +0000
From: 1RED Support Team <support@1red.com>
Date: Mon, 04 May 2026 12:22:36 +0000
Subject: Die smarte =?utf-8?b?RXJnw6RuenVuZyBmw7xy?= Ihre Abnehmziele .
To: info@rizhaokq.com
Message-Id: <8d26346d-863c-4b28-b21b-03db9ecbc175.r68rb0.ab5cb561@tickets.helpdesk.com>
X-Helpdesk: YES
X-Helpdesk-License-ID: 1692134327
Auto-Submitted: auto-generated
Feedback-ID: s4697626-YXBpLnRpY2tldHMuY2MubWVzc2FnZQ==:s4697626:a168573:postmark
X-Complaints-To: abuse@postmarkapp.com
X-Job: 168573_4697626
X-PM-Message-Id: 8696fff7-4c5f-4691-823e-5b5f7954605e
X-PM-Tag: api.tickets.cc.message
X-PM-RCPT: |bTB8MTY4NTczfDQ2OTc2MjZ8aW5mb0ByaXpoYW9rcS5jb20=|
X-PM-Message-Options: v1;1.PM7ptXftLUSVNZ-PJH0pSQ.AJD3KsPdo9MenxjCs5_Ypr3ZippOxYeaHhXl2hhb_OR9YUCR2rHNo6jLzd53Gf3zYHnHWYzL98urEp3z8XGBZeWwHS-OAkoj3JLAeefdF0X-X6sAyj5KBAQh4ya-sAj3GpJz6CUfMmKYnEBmWIfFOgxP538VELm6z7pbLBoXKBLBMTPzhLnSkGy0_8ETC-Q7
X-PM-Message-Details: v1;1.Clw_Ny65BBavIL1H54Xelg.nkWmT5Rmw5oevru0Pg5nxchAgS4OQezsVJFIAGKRRIjbrqGVpZWLUfoprUT0xCigBJQ0XuW_rlXIxEA0pd8x6ydBDpMasGI--Pan_J_vNG_nihQD6ue485mDoqMoG5tkG9GFLFtuvZx1Is2FXBmyPQ
MIME-Version: 1.0
X-virtual-MTA: ord-104-245-209-235
X-PM-MTA-Pool: transactional-3
Content-Type: multipart/alternative;
	boundary=mk3-561da128299e4b43a07361c40bd7aaae; charset=UTF-8
X-Original-Sender: support@1red.com
X-Original-Authentication-Results: mx.google.com;       dkim=pass
 header.i=@pm.mtasv.net header.s=pm20250806 header.b=cnPuB9mQ;       dkim=pass
 header.i=@1red.com header.s=20260218100200pm header.b=RCrfoM7E;
       spf=pass (google.com: domain of pm_bounces@pm-bounces.1red.com
 designates 104.245.209.235 as permitted sender) smtp.mailfrom=pm_bounces@pm-bounces.1red.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=1red.com
Precedence: list
Mailing-list: list p1@rizhaokq.com; contact p1+owners@rizhaokq.com
List-ID: <p1.rizhaokq.com>
X-Spam-Checked-In-Group: info@rizhaokq.com
X-Google-Group-Id: 531238735218
List-Post: <https://groups.google.com/a/rizhaokq.com/group/p1/post>, <mailto:p1@rizhaokq.com>
List-Help: <https://support.google.com/a/rizhaokq.com/bin/topic.py?topic=25838>,
 <mailto:p1+help@rizhaokq.com>
List-Archive: <https://groups.google.com/a/rizhaokq.com/group/p1/>
List-Subscribe: <https://groups.google.com/a/rizhaokq.com/group/info/subscribe>,
 <mailto:info+subscribe@rizhaokq.com>
List-Unsubscribe: <mailto:googlegroups-manage+531238735218+unsubscribe@googlegroups.com>,
 <https://groups.google.com/a/rizhaokq.com/group/p1/subscribe>

--mk3-561da128299e4b43a07361c40bd7aaae
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Author: support@hallow.app

Ein Mitglied unseres Teams wird sich in K=C3=BCrze mit Ihnen in Verbindung =
setzen und so schnell wie m=C3=B6glich antworten =E2=80=94 normalerweise in=
nerhalb eines Tages (au=C3=9Fer sonntags, wenn wir den Tag des Herrn begehe=
n).

This email is delivered by www.HelpDesk.com


Ticket ID: hd.1777897356299.r68rb0.4d06e8c6

--mk3-561da128299e4b43a07361c40bd7aaae
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.=
w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns=3D"http://www.w3.=
org/1999/xhtml"><head>
		<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
		<title>Die smarte Erg=C3=A4nzung f=C3=BCr Ihre Abnehmziele .</title>
	</head>
	<body>
		<strong>In the loop:</strong> <a href=3D"mailto:support@rizhaokq.com">sup=
port@rizhaokq.com</a> <a href=3D"mailto:info@rizhaokq.com">info@rizhaokq.co=
m</a> <br>
		<br>
		<div dir=3D"auto"><div><strong>Author:</strong> support@hallow.app</div><=
br>Ein Mitglied unseres Teams wird sich in K=C3=BCrze mit Ihnen in Verbindu=
ng setzen und so schnell wie m=C3=B6glich antworten =E2=80=94 normalerweise=
 innerhalb eines Tages (au=C3=9Fer sonntags, wenn wir den Tag des Herrn beg=
ehen).</div>
	<div class=3D"powered-by" style=3D"color: #000000; font-size: 13px; text-a=
lign: center; padding-top: 72px;">
			This email is delivered by
			<a href=3D"https://www.helpdesk.com/powered-by-helpdesk/?utm_source=3Dti=
cket-footer&utm_medium=3Demail&utm_campaign=3D1692134327" style=3D"=
color: #000000; font-weight: bold;">HelpDesk</a>
		</div><div style=3D"color: #ffffff; font-size: 13px; text-align: center;"=
 aria-hidden=3D"true">Ticket ID: hd.1777897356299.r68rb0.4d06e8c6</div>
</body></html>

--mk3-561da128299e4b43a07361c40bd7aaae--


Top

Return to “Phishing, scam and spam emails”