2025-07-21: We have updated our Privacy Policy. Thanks to Vietnamese blackhat SEO wannabe DDoS:ing forums with Russian xrumer malware developed by Aleksandr Ryanchenko (Александр Рябченко/Alexandru Robu, botmaster.net@gmail.com) for automatic registrations and spam, this forum is manually moderated.

Satisfaction Survey

Various emails containing phishing attacks, scams and irrelevant spam
emailbot
Posts: 1258
Joined: 2025-4-22 17:52

Post by emailbot » 2026-4-5 03:41

cs@rupiahcepat.co.id wrote:
2026-4-5 03:41
Email subject: Satisfaction Survey
Reply-to: cs@rupiahcepat.co.id



Dear thrtfbgrter@shjy-kj.com :

Please feedback for our customer service

Go to feedback
[https://cscenter-indonesia.rupiahcepatweb.com/console/mailServiceComment?cid=52a2c161e1f148dcbd65641a0d9dbe21&langFlag=3&receiveMail=cs@rupiahcepat.co.id]
This mail is sent by system，please do not reply

Code: Select all

Return-Path: <u2+bncBDVO5LEV5QHBBFFRY7HAMGQERWR4SWI@shjy-kj.com>
X-Original-To: contact@webseodesigners.com
Delivered-To: x22832538@pdx1-sub0-mail-mx209.dreamhost.com
Received: from mail-pl1-f197.google.com (mail-pl1-f197.google.com [209.85.214.197])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by pdx1-sub0-mail-mx209.dreamhost.com (Postfix) with ESMTPS id 4fpJCg42lXz5YCQ
	for <contact@webseodesigners.com>; Sat,  4 Apr 2026 20:41:19 -0700 (PDT)
Received: by mail-pl1-f197.google.com with SMTP id d9443c01a7336-2adc527eaf5sf20145345ad.0
        for <contact@webseodesigners.com>; Sat, 04 Apr 2026 20:41:19 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1775360479; cv=pass;
        d=google.com; s=arc-20240605;
        b=f5nLTT7Uv0jmX18zrJK295qN41FvMxVNdlomq7XxatWFnZmT9D/0YU6d3Vi4bbf43h
         nI3wjD+LPMGWtX40An+woxGX1glElzcfbwoYBMx2JRo2h4jTwUB0DlFuSu+vmvl6+KwH
         kL7BxRPrlHLNy4DDQ/slpHzzF4IhFPCmEjeouVDviPmSRKB+jRWVgLKusrP9EqUuXHVu
         cjsLDbc6CnKMi3tmHviB5E32TSX502jCHKXSytj2Ebgv1uLtiu6IO+jy92Y5y2ZUNjaD
         UfdPv94TekSajBqJu6zaMPEyJde/sq9OlaRtZFjEjgp1t64FzQ7U+edkMQosIyAECPgc
         nk0w==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:content-transfer-encoding
         :mime-version:subject:message-id:to:from:date:sender:dkim-signature;
        bh=P4HbemzoKQaeNd4sFdXBTZfbWbmZDw27xUtj/Y+Tp6E=;
        fh=NFX7zdklK6FRxmSqMNziBhVk/Sx8YYsT6o3eSwJ3ovI=;
        b=h+7P7wVmGNG9TzC7RNwTGsqvE6BFka+RHxW93mvJVnjg3Yhr+PXKt5bSmhDvHQ0G4Q
         pZiw6csz6XNtgj7XPtzqQM/7iyTNYDsjJZ0FeFCCF8VyK51ZzAjL6MIUdVHIGWYRE+89
         cPqptvFCzoIJuwSU9+gopnkyTKYlYVpJA90IQvrZ3Mbcx3NlccA2zPTP6+tY0DC2L6uz
         NYE8+kX1ZNCvhS9idfZqwUL0yr6/xVPucGYO5+pFC6YZNL98oJ3gNfMW1Burb1+35zv5
         IXMRR0HNdKCQ1YCjoYVnSrmVLdNsTQSyTpF5l4w7EJAm5ad9vIZdRWYwAA9+drwCHZbx
         uFbA==;
        darn=webseodesigners.com
ARC-Authentication-Results: i=2; mx.google.com;
       spf=pass (google.com: domain of cs@rupiahcepat.co.id designates 161.117.175.34 as permitted sender) smtp.mailfrom=cs@rupiahcepat.co.id
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=shjy-kj.com; s=google; t=1775360479; x=1775965279; darn=webseodesigners.com;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results
         :x-original-sender:content-transfer-encoding:mime-version:subject
         :message-id:to:from:date:sender:from:to:cc:subject:date:message-id
         :reply-to;
        bh=P4HbemzoKQaeNd4sFdXBTZfbWbmZDw27xUtj/Y+Tp6E=;
        b=lw41UAo2rUcQXD8Of0TqLHSnBWYrskos/wJZprLc3JZ3Hz1A0BhwIl9DTe/Q5yJctN
         9nmjCUzm7yM5Vmh7dw+kooYjx9Bhu1vXbRKOw1lNE1XnF4kBI9iOqyYmOysz8/CoRPib
         lBPB+Jy0R9Cg62eHVOUi/fAIJ/u22lVTTlWCk=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20251104; t=1775360479; x=1775965279;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :x-spam-checked-in-group:list-id:mailing-list:precedence
         :x-original-authentication-results:x-original-sender
         :content-transfer-encoding:mime-version:subject:message-id:to:from
         :date:x-beenthere:x-beenthere:x-gm-message-state:sender:from:to:cc
         :subject:date:message-id:reply-to;
        bh=P4HbemzoKQaeNd4sFdXBTZfbWbmZDw27xUtj/Y+Tp6E=;
        b=OOs8mtLZ0yj7rk7Zumr2guAvE+FmSQykMoDG8CNAzarMf5GtGFpLU0AnvnzG24viQB
         jcRQzaq8Ou8vV/dHVJknhKGVS/8QjTHiDb+FCEb2aSwmMZCxpUiDHnl8ZDkx6hi9J5L/
         bV03rcifHaDW8nNjKnw0xiYaJFOUlMip2CfsCc3NfS6M95sK2euajbF52obnh0NwPKwn
         dRrJugXDTbvOzuWprYT6Xhk+0Orr6HFJBKhxR1vKlSFxwBWeuP35m1eS+VuY6kYl3OS5
         zh0NG5mhQpHZODnOnm6oIs/MujavDYqRJbxc57J3Qa18UOMi6kBuiiTmdnDcMO0eC2UZ
         a5fg==
Sender: u2@shjy-kj.com
X-Forwarded-Encrypted: i=2; AJvYcCUG2UqURZ51g0HsnqxTwUcFPBppn1mTf+aiBS/Chu2h/iAt4y3GbrNvAQfWfG0MJ+7dxKJ30bWK@webseodesigners.com
X-Gm-Message-State: AOJu0YwYRTnwdFO5l9iwIVKBUaZrzNdHrZGLN5bvs8bQ3vqvS4PtT++E
	wEiV6kpTGm0Rznjmufs30YNwGFuUVxbhLgy1iGDOkOBkbw6ZAmZh1p1J4zqh09OWy8k=
X-Received: by 2002:a17:903:185:b0:2b0:5be9:f423 with SMTP id d9443c01a7336-2b2819180c5mr79603745ad.43.1775360478612;
        Sat, 04 Apr 2026 20:41:18 -0700 (PDT)
X-BeenThere: u2@shjy-kj.com; h="AYAyTiJnsjXqKezJseyXOYlxLoX/NQowHHntHjAfMqyyribMlw=="
Received: by 2002:a17:902:b005:b0:2ae:3d77:10a0 with SMTP id
 d9443c01a7336-2b27592f02fls27233195ad.0.-pod-prod-09-us; Sat, 04 Apr 2026
 20:35:48 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AJvYcCX/1woXJMcWjeJN0d1jo6NZV7a8ybGEHCunh0HiEzJ7LtfogY8RVUzk33/coKmo8xud1A==@shjy-kj.com
X-Received: by 2002:a17:902:cec7:b0:2aa:d5e5:b136 with SMTP id d9443c01a7336-2b2818ee1ebmr87183225ad.38.1775360148060;
        Sat, 04 Apr 2026 20:35:48 -0700 (PDT)
X-BeenThere: thrtfbgrter@shjy-kj.com; h="AYAyTiJKV9vWp/PPTErgnFP6SFdtu/4yqE4sKHumTi89FP0tWw=="
Received: by 2002:a17:903:334f:b0:2b0:7eb8:fc06 with SMTP id
 d9443c01a7336-2b275f46f75ls1558955ad.1.-pod-delta-01-us; Sat, 04 Apr 2026
 20:35:47 -0700 (PDT)
X-Received: by 2002:a05:6a21:10d:b0:39b:83cf:eb99 with SMTP id adf61e73a8af0-39f2ee0d89bmr4800716637.1.1775360146840;
        Sat, 04 Apr 2026 20:35:46 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1775360146; cv=none;
        d=google.com; s=arc-20240605;
        b=XdF8h4gxkHW4oMhQie7A4DaIlC6ZGR2zJaKjsFumoQJRMJvryxau6xCJSJH+nurkDu
         DLkANIUaieKsAk/zOsvkfurFx+VRxO47W+ZXK0AsOQWQJTqxM295Q2P/chvKX0cah9v3
         zpk7ugEtXoHBKQvCQlkusx35EF4eyQXnT3LImGl7F7eYNpo7Rnd07SygS/9ROyTX0Z7p
         YFcGmgbn40eXat0lLi5/K41Q901gb7lCIGFSf7bzc/KzDnIhpbyt8f5Ymk4CnYkNpwei
         YtuBAJRXrq9Frqsw3jWX9owZ4tB9LntkT9yjq4Os5+jDtji37piitArVWnDQpqw6MQ5L
         7VxA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=content-transfer-encoding:mime-version:subject:message-id:to:from
         :date;
        bh=P4HbemzoKQaeNd4sFdXBTZfbWbmZDw27xUtj/Y+Tp6E=;
        fh=RwWtKwQYgC8rByKaj7dtF9q3FBIQb6nXOf7sH4jps10=;
        b=LTzlwgd6kMRT0NqZwY6F+44zyknGfURLBhdiPJLc5D576xwNWf5V+3Bm5pz04wRgzI
         X4h+SqIk5v+uIw+kkylq8b4fsEeZHM7UjOAZz+UFp9rktYtPcibosSB/1vfmbVO2TzMt
         D67/t/k7FMnNrxgzj6vkWtSdg3th7fKu0wfEiFKpQL9xMntCspRNavIAzQnK/po0pcy/
         ND/qLUQ7XutReLrWAgw3lx5ZDi5TgElT+h2Z0aIInhaOrAq7kFOSZF9ABs1MHrfxvGh7
         ElMruKFTlAoIhnVzj1voqP0F0m1+v0VBuSqEK5eeheIFki927vWDhzG/F7tJQbZtq9j1
         e9EQ==;
        dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
       spf=pass (google.com: domain of cs@rupiahcepat.co.id designates 161.117.175.34 as permitted sender) smtp.mailfrom=cs@rupiahcepat.co.id
Received: from out175-34.sg.b.mail.aliyun.com (out175-34.sg.b.mail.aliyun.com. [161.117.175.34])
        by mx.google.com with ESMTPS id d2e1a72fcca58-82cf9d23066si25131946b3a.192.2026.04.04.20.35.46
        for <thrtfbgrter@shjy-kj.com>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Sat, 04 Apr 2026 20:35:46 -0700 (PDT)
Received-SPF: pass (google.com: domain of cs@rupiahcepat.co.id designates 161.117.175.34 as permitted sender) client-ip=161.117.175.34;
X-Alimail-AntiSpam: AC=CONTINUE;BC=0.4474642|-1;CH=blue;DM=|OVERLOAD|false|;DS=CONTINUE|ham_news_journal|0.638958-0.0470546-0.313987;FP=4394315617126792885|21|1|16|0|-1|-1|-1;HT=maildocker-contentspam033081225036;MF=cs@rupiahcepat.co.id;NM=1;PH=DS;RN=1;RT=1;SR=0;TI=SMTPD_.5fVFxVDVrr_1775360144;
Received: from app03(mailfrom:cs@rupiahcepat.co.id fp:SMTPD_.5fVFxVDVrr_1775360144 cluster:ay29sg)
          by smtp.aliyun-inc.com;
          Sun, 05 Apr 2026 11:35:44 +0800
Date: Sun, 5 Apr 2026 10:35:44 +0700 (GMT+07:00)
From: cs@rupiahcepat.co.id
To: thrtfbgrter@shjy-kj.com
Message-ID: <1661726379.482712.1775360144563@app03>
Subject: Satisfaction Survey
MIME-Version: 1.0
Content-Type: text/html;charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Original-Sender: cs@rupiahcepat.co.id
X-Original-Authentication-Results: mx.google.com;       spf=pass (google.com:
 domain of cs@rupiahcepat.co.id designates 161.117.175.34 as permitted sender) smtp.mailfrom=cs@rupiahcepat.co.id
Precedence: list
Mailing-list: list U2@shjy-kj.com; contact U2+owners@shjy-kj.com
List-ID: <U2.shjy-kj.com>
X-Spam-Checked-In-Group: thrtfbgrter@shjy-kj.com
X-Google-Group-Id: 937436636112
List-Post: <https://groups.google.com/a/shjy-kj.com/group/U2/post>, <mailto:U2@shjy-kj.com>
List-Help: <https://support.google.com/a/shjy-kj.com/bin/topic.py?topic=25838>,
 <mailto:U2+help@shjy-kj.com>
List-Archive: <https://groups.google.com/a/shjy-kj.com/group/U2/>
List-Subscribe: <https://groups.google.com/a/shjy-kj.com/group/thrtfbgrter/subscribe>,
 <mailto:thrtfbgrter+subscribe@shjy-kj.com>
List-Unsubscribe: <mailto:googlegroups-manage+937436636112+unsubscribe@googlegroups.com>,
 <https://groups.google.com/a/shjy-kj.com/group/U2/subscribe>

<!doctype html>
<html lang=3D"en">
<head>
    <meta charset=3D"UTF-8">
    <meta name=3D"viewport"
          content=3D"width=3Ddevice-width, user-scalable=3Dno, initial-scal=
e=3D1.0, maximum-scale=3D1.0, minimum-scale=3D1.0">
    <meta http-equiv=3D"X-UA-Compatible" content=3D"ie=3Dedge">
    <title>Document</title>
    <style>
        .mail-evaluation{
            text-align: center;
        }
        .mail-evaluation a:hover {
            text-decoration: none;
        }
        .mail-evaluation div{
            text-align: center;
        }
        .mail-evaluation .a{
            display: block;
            margin: 0 auto;
            text-decoration: none;width: 160px;line-height: 40px;text-align=
: center;background: #0DAEAF;color: #fff;border-radius: 2px;
        }
        .mail-evaluation span{
            font-size: 10px;
            color: grey;
        }
    </style>
</head>
<body>
    <div class=3D'mail-evaluation'>
        <p>Dear thrtfbgrter@shjy-kj.com :</p>
        <p>Please feedback for our customer service</p>
        <div>
            <a class=3D'a' href=3D'https://cscenter-indonesia.rupiahcepatwe=
b.com/console/mailServiceComment?cid=3D52a2c161e1f148dcbd65641a0d9dbe21&lan=
gFlag=3D3&receiveMail=3Dcs@rupiahcepat.co.id' target=3D_blank>Go to feedbac=
k</a>
        </div>
        <span>This mail is sent by system=EF=BC=8Cplease do not reply</span=
>
    </div>
</body>
</html>


Top

Return to “Phishing, scam and spam emails”