2025-07-21: We have updated our Privacy Policy. Thanks to Vietnamese blackhat SEO wannabe DDoS:ing forums with Russian xrumer malware developed by Aleksandr Ryanchenko (Александр Рябченко/Alexandru Robu, botmaster.net@gmail.com) for automatic registrations and spam, this forum is manually moderated.

Melatoninfrei besser schlafen: Jetzt 70% sparen .

Various emails containing phishing attacks, scams and irrelevant spam
emailbot
Posts: 1523
Joined: 2025-4-22 17:52

Post by emailbot » 2026-5-25 11:59

1RED Support Team <support@1red.com> wrote:
2026-5-25 11:59

Email subject: Melatoninfrei besser schlafen: Jetzt 70% sparen .
Reply-to: 1RED Support Team <support@1red.com>

IN THE LOOP: service@kanairpw.com contact@kanairpw.com

AUTHOR: support@hallow.app
Ein Mitglied unseres Teams wird sich in Kürze mit Ihnen in Verbindung
setzen und so schnell wie möglich antworten — normalerweise
innerhalb eines Tages (außer sonntags, wenn wir den Tag des Herrn
begehen).

Derzeit erhalten wir ein außergewöhnlich hohes Anfrageaufkommen,
weshalb unsere Antwort länger als gewöhnlich dauern kann. Wir
versichern, dass wir alles daransetzen, das Anliegen so schnell wie
möglich zu klären!
This email is delivered by HelpDesk
[https://www.helpdesk.com/powered-by-helpdesk/?utm_source=ticket-footer&utm_medium=email&utm_campaign=1692134327]

Ticket ID: hd.1779710171440.7u66w3.bdfb6031

Code: Select all

Return-Path: <f6+bncBDBK52FNX4ARBXXR2DIAMGQE377L3KI@kanairpw.com>
X-Original-To: contact@webseodesigners.com
Delivered-To: x22832538@pdx1-sub0-mail-mx208.dreamhost.com
Received: from mail-qt1-f200.google.com (mail-qt1-f200.google.com [209.85.160.200])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by pdx1-sub0-mail-mx208.dreamhost.com (Postfix) with ESMTPS id 4gPDvJ0V7kz98BT
	for <contact@webseodesigners.com>; Mon, 25 May 2026 04:59:24 -0700 (PDT)
Received: by mail-qt1-f200.google.com with SMTP id d75a77b69052e-516dd6e4ed4sf58230651cf.0
        for <contact@webseodesigners.com>; Mon, 25 May 2026 04:59:24 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1779710363; cv=pass;
        d=google.com; s=arc-20240605;
        b=fjSpn7AOJlE8F0/W/9mM++P8CgwJtCgC2MhzIlT0Y5Fo18ICSS+QMaHXoactUBAsCF
         O5zE0XPhC1uc8r5WTXEE7pvLeWKxX9Fe4LqkDOVW4sGuFHJtfxR39FtpJs6gbP+ZRhVf
         yxrWo6IXKIv0MDrZAz7upeViFjDKqC8U/CVUNWQ9JHcieP3PSu2EbRgbCzoAzm016Jxa
         0tM0+sT4OoivxvamxGY/1FJbSCT7AwAgd/4TpOa4NJw4nmdKexEAM34y8Tk4purKz2Q3
         jVSGfxtDe7VkXtT6p7oCDSaUOyqUyOYCzrrAxJaXLkcffHGCScist1+IyTloNIAqoVii
         i5wg==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:mime-version:feedback-id
         :auto-submitted:message-id:to:subject:date:from:sender
         :dkim-signature;
        bh=w8XvT5vci+0QztBCTaE/I12DPjQfWGz2Om/4Llyt4h4=;
        fh=62iSGlCNZacKPKHbo+o+1WnpBJHuY0YGQ3XOVD0C/QQ=;
        b=l2EkkuDHIuyXyLPMNXa/0cEoZQ80gb15KaGE6h3X6Cpr4UeeNlOO5+cNGe5P7hcaqx
         HeNQGr1Lf7nZ3ScK2GghsR8Wa1QPmQFVCIiQbya92ZzlwqtIKhiF3tPjQF4h8vaCnKtm
         hWCj2qSJETINUauqkH3vPUkgwN3hPzGXFFi6jvccFKunFXx3VpDTewiHkTP8ndEmKw+u
         Utom/5CO/7OKpXsh0GbfFuAdDIycbCEq4fxZIsQlQ3KxuD5ya/zU3PFuOwz66MCe/IpN
         TO643PWTUHrMWTuW8RhKNcbQ0fjKzGQcayfn94Sr/Yof1jd0t3rnACAjAhOAJzCL8/E3
         ECbA==;
        darn=webseodesigners.com
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@pm.mtasv.net header.s=pm20250806 header.b=cEAE2FwE;
       dkim=pass header.i=@1red.com header.s=20260218100200pm header.b=TnNOwQFq;
       spf=pass (google.com: domain of pm_bounces@pm-bounces.1red.com designates 104.245.209.202 as permitted sender) smtp.mailfrom=pm_bounces@pm-bounces.1red.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=1red.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=kanairpw.com; s=google; t=1779710363; x=1780315163; darn=webseodesigners.com;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results
         :x-original-sender:mime-version:feedback-id:auto-submitted
         :message-id:to:subject:date:from:sender:from:to:cc:subject:date
         :message-id:reply-to;
        bh=w8XvT5vci+0QztBCTaE/I12DPjQfWGz2Om/4Llyt4h4=;
        b=fPr8kNxdJcPOzvQdJ+Nz/dmu02Jx+5MVDEVv/r0c5oez5unDaoUoJ9UVhall6Bzeph
         mcBzG6uM6moHXSEuJSq5cf0E/acPxHiMRQu3spc8LViOjrZeQP307esVCCIondOQhcks
         e9i5PhLzf4yZioWPax2tZPx64y3lunFwP+gQs=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20251104; t=1779710363; x=1780315163;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :x-spam-checked-in-group:list-id:mailing-list:precedence
         :x-original-authentication-results:x-original-sender:mime-version
         :feedback-id:auto-submitted:message-id:to:subject:date:from
         :x-beenthere:x-beenthere:x-gm-message-state:sender:from:to:cc
         :subject:date:message-id:reply-to;
        bh=w8XvT5vci+0QztBCTaE/I12DPjQfWGz2Om/4Llyt4h4=;
        b=CdFaizkdH2Zp94Q2XZ13day2l5FMfWCExSvXVejClH4Wb5ti2X0SfqqkPKczeyUMpc
         prgI1IO/OBajUJafl24UHy5dO8WWcr9tnm6eBnIFLeTPy3xR6b/0dItSFAJotIjzbn+a
         vg3IMQFvD5Y8XqbaTx/HbHbFxYCvdE3E/ZK/rHik7g0An2wNWTNwV0ibRERLNvo8U+ui
         G8YhuXCSj854duK2D/gqtSwwd7y2aRPLbRISSpgO9KvEFKsyJyABYW7Kc0ZFR14p17Kq
         shzTOPUoISIVeBmMFEjtj/4bvjHOL/X9Op8r/UNU+KnyfrbyIpjaQAWUro8j+Syqbm9z
         ljmA==
Sender: f6@kanairpw.com
X-Forwarded-Encrypted: i=2; AFNElJ8KAt91xPrjgAkKJs7ZjE/xMU34UgbOqIm+yjH97OZGRxjIbEfkMc/RgLXzTMNalkc+lBUQTPRf@webseodesigners.com
X-Gm-Message-State: AOJu0YzEz/oP9HFyy98hXdttMyy2pN+mZXZODexK1pgfjuhm57wh7/gZ
	107b/LdO8wZKjx3CMP8JHnq3pB/JxWyUJu3+GLqYpWZ2ASUXEn2+SXoZlqciNOcUteo=
X-Received: by 2002:a05:622a:a6da:b0:50f:9c33:af18 with SMTP id d75a77b69052e-516d4428303mr154902771cf.51.1779710363000;
        Mon, 25 May 2026 04:59:23 -0700 (PDT)
X-BeenThere: f6@kanairpw.com; h="AUV6zMMky+ctjMfLfLasL4b9FnWsUXW6PCloBxWoGK6R9UcIBA=="
Received: by 2002:a05:622a:391:b0:509:3b91:35f6 with SMTP id
 d75a77b69052e-516455e7530ls311838111cf.2.-pod-prod-02-us; Mon, 25 May 2026
 04:56:14 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AFNElJ8qaXZELupuZq3h3btv/Pn3aCBSRWTmZcnVXeyENPjaDhLMfhKLWfd9HobrLXj7JEHTzQ==@kanairpw.com
X-Received: by 2002:a05:622a:244b:b0:50d:e471:2d1e with SMTP id d75a77b69052e-516d43cb2dbmr191465291cf.35.1779710174074;
        Mon, 25 May 2026 04:56:14 -0700 (PDT)
X-BeenThere: contact@kanairpw.com; h="AUV6zMO//YFBvvPBEFXm5fxg3Yur0d3AkaP8fzhHPlRaGOw00g=="
Received: by 2002:a05:6214:1247:b0:89c:4454:b4e6 with SMTP id
 6a1803df08f44-8c94667c44fls319951616d6.2.-pod-prod-02-us; Mon, 25 May 2026
 04:56:13 -0700 (PDT)
X-Received: by 2002:a05:620a:c50:b0:912:61f8:cab1 with SMTP id af79cd13be357-914b494e2fcmr2038783385a.25.1779710173044;
        Mon, 25 May 2026 04:56:13 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1779710173; cv=none;
        d=google.com; s=arc-20240605;
        b=Rio/2Auzm3803y6l/VlhfZG+HvZQrI9Vdb0GYi5FbUMuCYc/WWin/IAWBLgTiC9e/6
         ctLZoOvNMjhoSeq4+rtNRxPyDK1+0iWvUIhxIs6LNohOm/8VXWnvNcJAojOfmvhpTHxO
         le+b7+E39nbwVEsSzT8XpFFK6Qj5v6q0TfM/Z3OKlbgWpEF5UloQSjmKuZFEwo+wMYqR
         ssmyC9BdVOa1i/O74oV6S8K7xY4QWm3wAbU5ob/WKC0qPEozgBkOBUQE9F9Pp4QqqJEy
         DW+n87yjNXmsfDH/a0gQ5EfZLHdoaIRRzGRt2KvKlMA+Q7gqhOZOswaX+PqmFsJDc4Dw
         in1g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=mime-version:feedback-id:auto-submitted:message-id:to:subject:date
         :from:dkim-signature:dkim-signature;
        bh=w8XvT5vci+0QztBCTaE/I12DPjQfWGz2Om/4Llyt4h4=;
        fh=jveel/0/Cw5GAMLCpzo8NPjc8+QQUuLaWblg4qO25r0=;
        b=XBdTnuH3YD69kL6MrzyLzB0U3btRtIVyEwk1hCQFUMmx+lSk8ffFle7KeGKjvuSMng
         Bv+wu8ozJXNaJBzbMNgVeha8p4KnAhlGvne93/KrYeh5f6ZEGfh3WU8RUcVuh2u7Nd/6
         4uBwCPRzU+Lg08acxTP7hPp1zgZFSN/PBU+0wGcWHHrxiFhEqHk3n3BRnDqVbprgJXdD
         kGTHVkqBGdekBtCXuaEoGKlSemo/dRe6M0pesoNoasHGxDE6OsLwQbBABJv+taoB7QIZ
         7fY7xGx3KNp9lHWzRJIOokRA+d7ya5/xMWDbneQZBuUKhI1IukwN6+f8Qm88Ef63IM3T
         xonQ==;
        dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@pm.mtasv.net header.s=pm20250806 header.b=cEAE2FwE;
       dkim=pass header.i=@1red.com header.s=20260218100200pm header.b=TnNOwQFq;
       spf=pass (google.com: domain of pm_bounces@pm-bounces.1red.com designates 104.245.209.202 as permitted sender) smtp.mailfrom=pm_bounces@pm-bounces.1red.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=1red.com
Received: from mta202a-ord.mtasv.net (mta202a-ord.mtasv.net. [104.245.209.202])
        by mx.google.com with ESMTPS id af79cd13be357-914bb874a90si974889585a.17.2026.05.25.04.56.12
        for <contact@kanairpw.com>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Mon, 25 May 2026 04:56:13 -0700 (PDT)
Received-SPF: pass (google.com: domain of pm_bounces@pm-bounces.1red.com designates 104.245.209.202 as permitted sender) client-ip=104.245.209.202;
X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50IjoiY29udGFjdEBrYW5haXJwdy5jb20ifQ==
Received: from ip-172-26-31-115.us-east-2.compute.internal (172.26.31.115)
  by production-pmta-useast2.internal.postmarkapp.com (KumoMTA 10.97.242.233) 
  with ESMTP id ba1d9bf0583011f19ed80261883958bb for <contact@kanairpw.com>;
  Mon, 25 May 2026 11:56:12 +0000
From: 1RED Support Team <support@1red.com>
Date: Mon, 25 May 2026 11:56:11 +0000
Subject: Melatoninfrei besser schlafen: Jetzt 70% sparen .
To: contact@kanairpw.com
Message-Id: <b8ffe9a2-d442-47f2-b02b-0b2447e4d113.7u66w3.00650052@tickets.helpdesk.com>
X-Helpdesk: YES
X-Helpdesk-License-ID: 1692134327
Auto-Submitted: auto-generated
Feedback-ID: s4697626-YXBpLnRpY2tldHMuY2MubWVzc2FnZQ==:s4697626:a168573:postmark
X-Complaints-To: abuse@postmarkapp.com
X-Job: 168573_4697626
X-PM-Message-Id: 02865ae2-9ca9-46e1-b049-e7ada1b9e7f8
X-PM-Tag: api.tickets.cc.message
X-PM-RCPT: |bTB8MTY4NTczfDQ2OTc2MjZ8Y29udGFjdEBrYW5haXJwdy5jb20=|
X-PM-Message-Options: v1;1.5fNEtCeYdP6NbwPbru4eUA.rOMcmUuma0i32oMVqch4y8gAHeFL1FAzgeLYEOVpT6e-3yIWjjhqYxHJX02WLI5oRXROlPq1O6RjsfCsF4T0xmytft-UTZRgaFrNsLB3a_leN39MeIfAaIghv-DHsdom-fONqPHyT6MV60_3_Uo4pV-9wXIuIZhI959KUs1chsgGPDV8-g8obRof-ZeN9AvU
X-PM-Message-Details: v1;1.h8vx2Dh3-e5_5to3W6-_gQ.KFHCC_cEC67AhDsfpHsVkdasmV7fNZR9OY1-c3pIzU0caIGXTMYqfvvdM8GoxHNhm_LPCA3yD9C72oJmQlIbQxCT2YEc4f398GYsm8mQUT52CsDE0FLAxWqt9bmP3p6-AmkHl66dP3GL3FA3dE2JYg
MIME-Version: 1.0
X-virtual-MTA: ord-104-245-209-202
X-PM-MTA-Pool: transactional-3
Content-Type: multipart/alternative;
	boundary=mk3-a37a7e0f4b24407dabc0462c04c06c18; charset=UTF-8
X-Original-Sender: support@1red.com
X-Original-Authentication-Results: mx.google.com;       dkim=pass
 header.i=@pm.mtasv.net header.s=pm20250806 header.b=cEAE2FwE;       dkim=pass
 header.i=@1red.com header.s=20260218100200pm header.b=TnNOwQFq;
       spf=pass (google.com: domain of pm_bounces@pm-bounces.1red.com
 designates 104.245.209.202 as permitted sender) smtp.mailfrom=pm_bounces@pm-bounces.1red.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=1red.com
Precedence: list
Mailing-list: list f6@kanairpw.com; contact f6+owners@kanairpw.com
List-ID: <f6.kanairpw.com>
X-Spam-Checked-In-Group: contact@kanairpw.com
X-Google-Group-Id: 194937886339
List-Post: <https://groups.google.com/a/kanairpw.com/group/f6/post>, <mailto:f6@kanairpw.com>
List-Help: <https://support.google.com/a/kanairpw.com/bin/topic.py?topic=25838>,
 <mailto:f6+help@kanairpw.com>
List-Archive: <https://groups.google.com/a/kanairpw.com/group/f6/>
List-Subscribe: <https://groups.google.com/a/kanairpw.com/group/contact/subscribe>,
 <mailto:contact+subscribe@kanairpw.com>
List-Unsubscribe: <mailto:googlegroups-manage+194937886339+unsubscribe@googlegroups.com>,
 <https://groups.google.com/a/kanairpw.com/group/f6/subscribe>

--mk3-a37a7e0f4b24407dabc0462c04c06c18
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Author: support@hallow.app

Ein Mitglied unseres Teams wird sich in K=C3=BCrze mit Ihnen in Verbindung =
setzen und so schnell wie m=C3=B6glich antworten =E2=80=94 normalerweise in=
nerhalb eines Tages (au=C3=9Fer sonntags, wenn wir den Tag des Herrn begehe=
n).=20
=20
 Derzeit erhalten wir ein au=C3=9Fergew=C3=B6hnlich hohes Anfrageaufkommen,=
 weshalb unsere Antwort l=C3=A4nger als gew=C3=B6hnlich dauern kann. Wir ve=
rsichern, dass wir alles daransetzen, das Anliegen so schnell wie m=C3=B6gl=
ich zu kl=C3=A4ren!

This email is delivered by www.HelpDesk.com


Ticket ID: hd.1779710171440.7u66w3.bdfb6031

--mk3-a37a7e0f4b24407dabc0462c04c06c18
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.=
w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns=3D"http://www.w3.=
org/1999/xhtml"><head>
		<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
		<title>Melatoninfrei besser schlafen: Jetzt 70% sparen .</title>
	</head>
	<body>
		<strong>In the loop:</strong> <a href=3D"mailto:service@kanairpw.com">ser=
vice@kanairpw.com</a> <a href=3D"mailto:contact@kanairpw.com">contact@kanai=
rpw.com</a> <br>
		<br>
		<div dir=3D"auto"><div><strong>Author:</strong> support@hallow.app</div><=
br>Ein Mitglied unseres Teams wird sich in K=C3=BCrze mit Ihnen in Verbindu=
ng setzen und so schnell wie m=C3=B6glich antworten =E2=80=94 normalerweise=
 innerhalb eines Tages (au=C3=9Fer sonntags, wenn wir den Tag des Herrn beg=
ehen). <br> <br> Derzeit erhalten wir ein au=C3=9Fergew=C3=B6hnlich hohes A=
nfrageaufkommen, weshalb unsere Antwort l=C3=A4nger als gew=C3=B6hnlich dau=
ern kann. Wir versichern, dass wir alles daransetzen, das Anliegen so schne=
ll wie m=C3=B6glich zu kl=C3=A4ren!</div>
	<div class=3D"powered-by" style=3D"color: #000000; font-size: 13px; text-a=
lign: center; padding-top: 72px;">
			This email is delivered by
			<a href=3D"https://www.helpdesk.com/powered-by-helpdesk/?utm_source=3Dti=
cket-footer&utm_medium=3Demail&utm_campaign=3D1692134327" style=3D"=
color: #000000; font-weight: bold;">HelpDesk</a>
		</div><div style=3D"color: #ffffff; font-size: 13px; text-align: center;"=
 aria-hidden=3D"true">Ticket ID: hd.1779710171440.7u66w3.bdfb6031</div>
</body></html>

--mk3-a37a7e0f4b24407dabc0462c04c06c18--