2025-07-21: We have updated our Privacy Policy. Thanks to Vietnamese blackhat SEO wannabe DDoS:ing forums with Russian xrumer malware developed by Aleksandr Ryanchenko (Александр Рябченко/Alexandru Robu, botmaster.net@gmail.com) for automatic registrations and spam, this forum is manually moderated.

Melatoninfrei besser schlafen: Jetzt 70% sparen .

Various emails containing phishing attacks, scams and irrelevant spam
emailbot
Posts: 1523
Joined: 2025-4-22 17:52

Post by emailbot » 2026-5-25 11:56

KingHills via caaplsoevze <contact@kanairpw.com> wrote:
2026-5-25 11:56

Email subject: Melatoninfrei besser schlafen: Jetzt 70% sparen .
Reply-to: KingHills <support@kinghills.com>

IN THE LOOP: service@kanairpw.com contact@kanairpw.com

AUTHOR: support@hallow.app
Ein Mitglied unseres Teams wird sich in Kürze mit Ihnen in Verbindung
setzen und so schnell wie möglich antworten — normalerweise
innerhalb eines Tages (außer sonntags, wenn wir den Tag des Herrn
begehen).

Derzeit erhalten wir ein außergewöhnlich hohes Anfrageaufkommen,
weshalb unsere Antwort länger als gewöhnlich dauern kann. Wir
versichern, dass wir alles daransetzen, das Anliegen so schnell wie
möglich zu klären!
Ticket ID: hd.1779710172987.j32bn8.5438bbf4

Code: Select all

Return-Path: <f1+bncBC47ZTURTUKRBXXR2DIAMGQEFRDLZMY@kanairpw.com>
X-Original-To: webmaster@webseodesigners.com
Delivered-To: x24776540@pdx1-sub0-mail-mx203.dreamhost.com
Received: from mail-qt1-f198.google.com (mail-qt1-f198.google.com [209.85.160.198])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by pdx1-sub0-mail-mx203.dreamhost.com (Postfix) with ESMTPS id 4gPF8R1kcfz7d2w
	for <webmaster@webseodesigners.com>; Mon, 25 May 2026 05:10:47 -0700 (PDT)
Received: by mail-qt1-f198.google.com with SMTP id d75a77b69052e-516d191f2ccsf78452331cf.2
        for <webmaster@webseodesigners.com>; Mon, 25 May 2026 05:10:47 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1779711046; cv=pass;
        d=google.com; s=arc-20240605;
        b=eLzMRW4Ee+zdtjcjdToW76j1rFIDa+vkZ3qbrHdT+Vb1+j0TG5wsGx0Kt5+gHwxwcV
         ZLNfbCt+TzLImqG2QMUbrWtxwyEeK8Ar9W5DzCimE1f6pyCm95MezTVP9s07syh9B8Rb
         xX3XghDxgF0UxteRcowmp5VP44A9caP+nM6sBIMwqLR/gC8wOmd9UVpG8InLLKImTK8I
         6sRg2pAxZBz4YK3nZjp0gIyA+KrvtOnutpGHiLqw040RjMyijQ/M9XmnTYCoqeTKLq0F
         kahTZuWv+DGP2SeD8K+j17hyyccKKm3cYAUZICrRXKk8Pfa+MqW2Ytah+DS/5aYOhWFK
         /TrA==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:reply-to:mime-version:feedback-id
         :auto-submitted:message-id:to:subject:date:from:dkim-signature;
        bh=2DaqoFNl4hO5eHTzw4vBPXEFTF9Hv1nhx88PHYfEc6w=;
        fh=VfOVhQo4I00kyBavII1NbJ6IcPePaJDd/H9zfwrWVW8=;
        b=bMgQmcHWjyvzKOu6o29xlCCBn/wT1vPniLoqd4xLdvQ+Lto7QzBM7fSl7wsHq5xV1t
         VHp82sVLN4Jycdp+kxYySP0U3PFgkygEakiVOHF8lJ7pZCL8J9QIcuy4mJ3DNkHvXuqQ
         tjxOSVsJwBu/KWMHIErpjH+MMmUZ+qJPt7EV7bOXJ5UiRYsdIshSYRosFROCiTUfoq3k
         tdPB6ooRBugeSNHTxAYxSzYJxkndQ37Np1gp0ABmOGhiMl9jcKRIRl12aHznr6HtMMDG
         Im9XslaWVaMABSSlFA2JHkHjq7p1waKDzAtRn0IJAT9bQjeaPs+CVVK/gHIv/q5IClNB
         ZGZQ==;
        darn=webseodesigners.com
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@pm.mtasv.net header.s=pm20250806 header.b=aXMhxLlm;
       dkim=pass header.i=@kinghills.com header.s=20240125152908pm header.b=Cr8YEbf8;
       spf=pass (google.com: domain of pm_bounces@pm-bounces.kinghills.com designates 104.245.209.237 as permitted sender) smtp.mailfrom=pm_bounces@pm-bounces.kinghills.com;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=kinghills.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=kanairpw.com; s=google; t=1779711046; x=1780315846; darn=webseodesigners.com;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:reply-to
         :x-original-authentication-results:x-original-sender:mime-version
         :feedback-id:auto-submitted:message-id:to:subject:date:from:from:to
         :cc:subject:date:message-id:reply-to;
        bh=2DaqoFNl4hO5eHTzw4vBPXEFTF9Hv1nhx88PHYfEc6w=;
        b=QvD9rRjMolha7z53F4mAXf04zGHs0ebaKBKzPSluk+I6H8oIcEPEyJ311VvwCvf4Pl
         /26ofEyVq1peR2T2YVwa6Eha6B2/wFXWyYbDLbwBIRCYmA2aex5A3TqXK2jkbgLaNtQ5
         /SYppl5x8T8MXlb6xmcNSKW1ZQhmMBCn9QDyY=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20251104; t=1779711046; x=1780315846;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to
         :x-original-authentication-results:x-original-sender:mime-version
         :feedback-id:auto-submitted:message-id:to:subject:date:from
         :x-beenthere:x-beenthere:x-gm-message-state:from:to:cc:subject:date
         :message-id:reply-to;
        bh=2DaqoFNl4hO5eHTzw4vBPXEFTF9Hv1nhx88PHYfEc6w=;
        b=mMsilfF1fFpmDvj3kJIWdu4Ie23Ohm9kcYuDKRnOBopVEWEMwSqoiuNCr3oEHkmAy6
         fjwf+pm/CjOwiOOj8sZLYavWedIHSazOU4MVSLRfNfbfaBm8bqWR0KsglYQcPr9RDfUl
         gY9yO5KmTa5g02vAOnd9r0eInBvgRcOXORJCnmFPMamfzHFRcth/CWGxW5su+r8K/ZrD
         Mg3GPhZEK3Dcbi2MqGet4GT0crECt6rgXT19FJbL/CbBLsNgBSZJtQjHrIydAVkGyqVS
         yavVHNro1HfMPpnrj7SiQDeDgtjqqXR5+PCom+k82Zf3zP6bUHdqgB0MHunmJy+gf/y2
         6kCw==
X-Forwarded-Encrypted: i=2; AFNElJ8su4hzRpD5PGEgtlhHbPU20UUSxo1ddeeumI435nRLmaurNE2fWx5Cx3G5kJKSAvQ2Oz0GMcPV0+4=@webseodesigners.com
X-Gm-Message-State: AOJu0Yy7GdnAyRCNuXaBTYLrSaCRSAnRCaNL7l/N7uEvEOOTDTBr6hN+
	iEeEzsAwV9Uss5D9BpeZmMB3QoRjzmC0uK+UEp+7GTEFU/ewEwVGBfutWVwFD0/dwxA=
X-Received: by 2002:ac8:5889:0:b0:516:d60f:6438 with SMTP id d75a77b69052e-516d60f72demr193102111cf.0.1779711045589;
        Mon, 25 May 2026 05:10:45 -0700 (PDT)
X-BeenThere: f1@kanairpw.com; h="AUV6zMNHg3I1wmHVetVwaoIqFTYmfhgAdZNTD0y0TXNymRrRdw=="
Received: by 2002:a05:6214:2486:b0:890:5973:709e with SMTP id
 6a1803df08f44-8c9413bb247ls120757596d6.0.-pod-prod-02-us; Mon, 25 May 2026
 04:56:14 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AFNElJ9QR1QzX1e4e6tzfdd1WVTr/8zLONFPs7q+vfYki10eqKpnu/lGrDQGad48djHfsEPCRA==@kanairpw.com
X-Received: by 2002:a05:6214:242b:b0:8cc:60dc:a249 with SMTP id 6a1803df08f44-8cc7b5e72e3mr213476726d6.42.1779710174499;
        Mon, 25 May 2026 04:56:14 -0700 (PDT)
X-BeenThere: contact@kanairpw.com; h="AUV6zMNQaek+sT5aeNzewT4X+Mcec5sLD6JMiVbI8njBx55I5Q=="
Received: by 2002:a05:6214:1247:b0:89c:4454:b4e6 with SMTP id
 6a1803df08f44-8c94667c44fls319951676d6.2.-pod-prod-02-us; Mon, 25 May 2026
 04:56:13 -0700 (PDT)
X-Received: by 2002:a05:6214:4001:b0:8a1:478a:e58a with SMTP id 6a1803df08f44-8cc7b5d68a6mr220658226d6.36.1779710173434;
        Mon, 25 May 2026 04:56:13 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1779710173; cv=none;
        d=google.com; s=arc-20240605;
        b=BAvpuxLNiu5MIcSE4rHv/seb/mqyfZGQFoGZ1SwZfdNEvaxHJxPQRQ+mfUFWQY83vZ
         AyETTtsjTvVAUrP1CXU6K009rDI1Fd5mHkR94MtNi2+zg+2I6mzFeTUJUmRrxxgwxRbg
         1wXt8DpUeYp6fYZ4qUV5mcIQnIbNTSbdarK8XhYyX4lgCcSDqN8RztLRVWe7vRsixf2u
         DdDwcGJgfi1L07O8T/eInyI6IBAESt9qlp212e9WF6Lve3/gChhbmjtk382Nn0HoO83A
         t06MojdCUtAjzY6Tk5irK49W/OLuvYFeJJRVzr1/praMVO4WHvCFiXSqYg/dRqu6rGT0
         WZQQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=mime-version:feedback-id:auto-submitted:message-id:to:subject:date
         :from:dkim-signature:dkim-signature;
        bh=2DaqoFNl4hO5eHTzw4vBPXEFTF9Hv1nhx88PHYfEc6w=;
        fh=jveel/0/Cw5GAMLCpzo8NPjc8+QQUuLaWblg4qO25r0=;
        b=U1JnN4UJL4+mzFyv4bZs+plg0ORKC7ISChp8GkkCUujTC7FUyEJlMF7ZeJ6bd+Fx8C
         iIVHF2cdMgf1e3tLVw4KKSaqvFsxtAp4cD74X3pdNOlM7Eg5Sm90xq4ODxzKjLNJQtYE
         Ant9oRYjfxSTP2LcYb320fov+vrYIQMabhLfEIAZR5dWj6UWBxOlsIVdrYrCCK6l3THc
         TTf7NVFgEwGfvjazMFOiVH2HyWMbK21xYZHM/xfXNf7gWU70iPjfMeC3DG6JaMj0YrtC
         f4XXPgtmje4LDv3aMh8CKq4tKIlLsEWszl6nOoP8RVC0CMJt7UvAW29PRr/39vPOto0g
         iLWw==;
        dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@pm.mtasv.net header.s=pm20250806 header.b=aXMhxLlm;
       dkim=pass header.i=@kinghills.com header.s=20240125152908pm header.b=Cr8YEbf8;
       spf=pass (google.com: domain of pm_bounces@pm-bounces.kinghills.com designates 104.245.209.237 as permitted sender) smtp.mailfrom=pm_bounces@pm-bounces.kinghills.com;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=kinghills.com
Received: from mta237b-ord.mtasv.net (mta237b-ord.mtasv.net. [104.245.209.237])
        by mx.google.com with ESMTPS id 6a1803df08f44-8cc8130fd7dsi113353126d6.287.2026.05.25.04.56.13
        for <contact@kanairpw.com>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Mon, 25 May 2026 04:56:13 -0700 (PDT)
Received-SPF: pass (google.com: domain of pm_bounces@pm-bounces.kinghills.com designates 104.245.209.237 as permitted sender) client-ip=104.245.209.237;
X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50IjoiY29udGFjdEBrYW5haXJwdy5jb20ifQ==
Received: from ip-172-26-31-58.us-east-2.compute.internal (172.26.31.58)
  by production-pmta-useast2.internal.postmarkapp.com (KumoMTA 10.97.243.58) 
  with ESMTP id ba515003583011f1b63c026bb4f62a99 for <contact@kanairpw.com>;
  Mon, 25 May 2026 11:56:13 +0000
From: "'KingHills' via caaplsoevze" <contact@kanairpw.com>
Date: Mon, 25 May 2026 11:56:13 +0000
Subject: Melatoninfrei besser schlafen: Jetzt 70% sparen .
To: contact@kanairpw.com
Message-Id: <211560d3-7d09-428b-bd69-90de86887570.j32bn8.071e53f6@tickets.helpdesk.com>
X-Helpdesk: YES
X-Helpdesk-License-ID: 1763085424
Auto-Submitted: auto-generated
Feedback-ID: s4697626-YXBpLnRpY2tldHMuY2MubWVzc2FnZQ==:s4697626:a168573:postmark
X-Complaints-To: abuse@postmarkapp.com
X-Job: 168573_4697626
X-PM-Message-Id: 7cb84ac9-f85a-4750-b803-eec12e6a29d0
X-PM-Tag: api.tickets.cc.message
X-PM-RCPT: |bTB8MTY4NTczfDQ2OTc2MjZ8Y29udGFjdEBrYW5haXJwdy5jb20=|
X-PM-Message-Options: v1;1.PAmubGXGNd7lHqJygFGRZA.z9XeKJfbqOK-iBvQVwurcvzY64zDCqRlRI37OdN57iG_K6HV9AzqJLZNM5oN2gXwFXH-OiVl0eohEj-vgcwukLq5u5ng7YRXHWTsM1MC0HIPn89jxhUFuH_O4XicXoVfrJ76gfTfR3rJtB_103ekBLOQyPC8h9-THhaQ3g9NAqV2GAyXgo-6uIeZXtVwb8ty
X-PM-Message-Details: v1;1.YCZFDcTKvIdcFjZqYBWg5A.KOpjUK7EUBjX8EVbAnqF5SpmjV_aDHI5OSeu69JvG_W8Q57he_OB95r3Kt-AGjOuLtoKCixXNCkSKy5yEpTTuFVEkC_Fpr0xnENKRPFOLvfLy247WJToePGkUcfINpR9izkbLPd8Z286t0j-TuUO6w
MIME-Version: 1.0
X-virtual-MTA: ord-104-245-209-237
X-PM-MTA-Pool: transactional-3
Content-Type: multipart/alternative;
	boundary=mk3-01cca2698dc14028bab5a6d7698a69bc; charset=UTF-8
X-Original-Sender: support@kinghills.com
X-Original-Authentication-Results: mx.google.com;       dkim=pass
 header.i=@pm.mtasv.net header.s=pm20250806 header.b=aXMhxLlm;       dkim=pass
 header.i=@kinghills.com header.s=20240125152908pm header.b=Cr8YEbf8;
       spf=pass (google.com: domain of pm_bounces@pm-bounces.kinghills.com
 designates 104.245.209.237 as permitted sender) smtp.mailfrom=pm_bounces@pm-bounces.kinghills.com;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=kinghills.com
X-Original-From: KingHills <support@kinghills.com>
Reply-To: KingHills <support@kinghills.com>
Precedence: list
Mailing-list: list f1@kanairpw.com; contact f1+owners@kanairpw.com
List-ID: <f1.kanairpw.com>
X-Spam-Checked-In-Group: contact@kanairpw.com
X-Google-Group-Id: 531238735218
List-Post: <https://groups.google.com/a/kanairpw.com/group/f1/post>, <mailto:f1@kanairpw.com>
List-Help: <https://support.google.com/a/kanairpw.com/bin/topic.py?topic=25838>,
 <mailto:f1+help@kanairpw.com>
List-Archive: <https://groups.google.com/a/kanairpw.com/group/f1/>
List-Subscribe: <https://groups.google.com/a/kanairpw.com/group/contact/subscribe>,
 <mailto:contact+subscribe@kanairpw.com>
List-Unsubscribe: <mailto:googlegroups-manage+531238735218+unsubscribe@googlegroups.com>,
 <https://groups.google.com/a/kanairpw.com/group/f1/subscribe>

--mk3-01cca2698dc14028bab5a6d7698a69bc
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Author: support@hallow.app

Ein Mitglied unseres Teams wird sich in K=C3=BCrze mit Ihnen in Verbindung =
setzen und so schnell wie m=C3=B6glich antworten =E2=80=94 normalerweise in=
nerhalb eines Tages (au=C3=9Fer sonntags, wenn wir den Tag des Herrn begehe=
n).=20
=20
 Derzeit erhalten wir ein au=C3=9Fergew=C3=B6hnlich hohes Anfrageaufkommen,=
 weshalb unsere Antwort l=C3=A4nger als gew=C3=B6hnlich dauern kann. Wir ve=
rsichern, dass wir alles daransetzen, das Anliegen so schnell wie m=C3=B6gl=
ich zu kl=C3=A4ren!

Ticket ID: hd.1779710172987.j32bn8.5438bbf4

--mk3-01cca2698dc14028bab5a6d7698a69bc
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.=
w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns=3D"http://www.w3.=
org/1999/xhtml"><head>
		<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
		<title>Melatoninfrei besser schlafen: Jetzt 70% sparen .</title>
	</head>
	<body>
		<strong>In the loop:</strong> <a href=3D"mailto:service@kanairpw.com">ser=
vice@kanairpw.com</a> <a href=3D"mailto:contact@kanairpw.com">contact@kanai=
rpw.com</a> <br>
		<br>
		<div dir=3D"auto"><div><strong>Author:</strong> support@hallow.app</div><=
br>Ein Mitglied unseres Teams wird sich in K=C3=BCrze mit Ihnen in Verbindu=
ng setzen und so schnell wie m=C3=B6glich antworten =E2=80=94 normalerweise=
 innerhalb eines Tages (au=C3=9Fer sonntags, wenn wir den Tag des Herrn beg=
ehen). <br> <br> Derzeit erhalten wir ein au=C3=9Fergew=C3=B6hnlich hohes A=
nfrageaufkommen, weshalb unsere Antwort l=C3=A4nger als gew=C3=B6hnlich dau=
ern kann. Wir versichern, dass wir alles daransetzen, das Anliegen so schne=
ll wie m=C3=B6glich zu kl=C3=A4ren!</div>
	<div style=3D"color: #ffffff; font-size: 13px; text-align: center;" aria-h=
idden=3D"true">Ticket ID: hd.1779710172987.j32bn8.5438bbf4</div>
</body></html>

--mk3-01cca2698dc14028bab5a6d7698a69bc--