2025-07-21: We have updated our Privacy Policy. Thanks to Vietnamese blackhat SEO wannabe DDoS:ing forums with Russian xrumer malware developed by Aleksandr Ryanchenko (Александр Рябченко/Alexandru Robu, botmaster.net@gmail.com) for automatic registrations and spam, this forum is manually moderated.

Your feedback is important. Help us to improve by taking this survey.

Various emails containing phishing attacks, scams and irrelevant spam
emailbot
Posts: 1148
Joined: 2025-4-22 17:52

Post by emailbot » 2026-3-21 17:02

Funko Support <cs-noreply@funko.com> wrote:
2026-3-21 17:02
Email subject: Your feedback is important. Help us to improve by taking this survey.
Reply-to: Funko Support <cs-noreply@funko.com>

Hello Kilohearts...

We'd love some feedback on the recent support you have received.
Please take a moment to answer one simple question by clicking the
 link below:
Open Survey
[https://funko.my.site.com/Survey/survey/runtimeApp.app?invitationId=0KiU10000063Dq5&surveyName=case_survey&UUID=82fadfc0-5b44-4ba4-8885-ec5fba854ac2]

Thank you,
Funko

Code: Select all

Return-Path: <ty+bncBDIYHYXXTENBBG427PGQMGQES2Q5ZQQ@teamkurofune.com>
X-Original-To: contact@webseodesigners.com
Delivered-To: x22832538@pdx1-sub0-mail-mx212.dreamhost.com
Received: from mail-pj1-f70.google.com (mail-pj1-f70.google.com [209.85.216.70])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by pdx1-sub0-mail-mx212.dreamhost.com (Postfix) with ESMTPS id 4fdQhk3cjjz8nkK
	for <contact@webseodesigners.com>; Sat, 21 Mar 2026 10:02:14 -0700 (PDT)
Received: by mail-pj1-f70.google.com with SMTP id 98e67ed59e1d1-35ba4bf54besf2400463a91.1
        for <contact@webseodesigners.com>; Sat, 21 Mar 2026 10:02:14 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1774112534; cv=pass;
        d=google.com; s=arc-20240605;
        b=EigxUZiXmilBJc6xYL5SLi82EGUk6ltSe8RFBjD2fV+p01oZEflQwOtEqEnzDkns0E
         ApR92u1m8oZ9qrzId/k6qylHKoYlhQ6oFcKUwKJdVVME2tXOK+JePG3/5hO2XgwzgaY3
         jcwFf00DxmParFCTGLNv+frgyy6D7n4yhYmB7lnT1V5oG5fby4z3eNHmpLrenvUYXjfb
         O2jr7VKNRHreihY1Nkbx9MhK8gzOGkAXYvlZPL0zJhNQyE5eIdJqfa9DRrYjCE4j/+xY
         XLGMAc7AWel0jwUcz2732lFq1vStL9VV80SKkwL18lNnmMavf2ATpeOjg0JscZN57Zrc
         +qGw==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:content-transfer-encoding
         :mime-version:subject:message-id:to:from:date:sender:dkim-signature;
        bh=A9YGeXR+2ugCqSrB3MH0JOr2TOBKnY0qVB/nR8Nrn9w=;
        fh=Cfdo0UtWN2p/aXTNe/x0nZpbUoNIxkF0x9DqDzAmiKg=;
        b=aeT7CPqUkR9SaPNYjZMRexu2BN+Ssz83mc8DcTIrHBy0MJr4UpbN7Eds5b6F2aNiGU
         hs/j9A6F3XHD/Qz1xF81YxpUxM2/TT56cQ/+Qtz0g3ulFdwR8RFSKcy3GDidEDiqlqLM
         JydJgk4W1ed8ylOWwtxy89nyGPvoMBJZrlGTvEqMgmcG1ESUvKwikkddZdzNXeqblUkw
         1HCHMF8jzEkBgbKWjaHV4bzWI0t2XuBsJFrDk5fDFXwEMnIw562XI0U4VbiCIgxFFoYX
         SIjw0oUOMLGs/p81lh+HmBnQfYsWCSR6TMlchepLnYS4TdyYAqn8yTC/Q/XoKSyIh9+o
         V13w==;
        darn=webseodesigners.com
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@funko.com header.s=funko2 header.b=toc+lwDq;
       spf=pass (google.com: domain of cs-noreply@funko.com designates 35.85.98.200 as permitted sender) smtp.mailfrom=cs-noreply@funko.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=funko.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=teamkurofune.com; s=google; t=1774112534; x=1774717334; darn=webseodesigners.com;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results
         :x-original-sender:content-transfer-encoding:mime-version:subject
         :message-id:to:from:date:sender:from:to:cc:subject:date:message-id
         :reply-to;
        bh=A9YGeXR+2ugCqSrB3MH0JOr2TOBKnY0qVB/nR8Nrn9w=;
        b=FUhVr69xVA8a6UvMbpB4LXhzAujagvmZb/nffap3N6umDf9vKL+69k6giKsgZU0SrI
         nLPILPulJvBGJ/+6eW6CKtHrWfxuaptFfEvxtD1jaPllNaZEi0rLYMmtaMrjgCSWV647
         Xp+NVtym6xIzN0ZDgzWr6y5HPFNh9MjaD8K+E=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20251104; t=1774112534; x=1774717334;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :x-spam-checked-in-group:list-id:mailing-list:precedence
         :x-original-authentication-results:x-original-sender
         :content-transfer-encoding:mime-version:subject:message-id:to:from
         :date:x-beenthere:x-beenthere:x-gm-message-state:sender:from:to:cc
         :subject:date:message-id:reply-to;
        bh=A9YGeXR+2ugCqSrB3MH0JOr2TOBKnY0qVB/nR8Nrn9w=;
        b=VsBidaAit8capyXWP0UD6nYeWeqTckmSF2+uBRSmNtP0PcsThIe2p0NBj5Gy+ETbEs
         KKkU0+yaLwqpP10k2YCCDlzAYLabLhzSOExLLxqY/fjXulZzFQdB6F3uqwP/O6tNgiOT
         n7tsJZEdhW+aUKOqkVT81KPfxVSXTUMqVmsoIwFAzUFQYZStqQTwnpZZqPz+Y2UAx9T9
         LU/0FK3lVOiPrrKtjhY553WxV7EYLTsJY0WrLsgzLTaFAcAHve+9aG4xOcOU1yFWOnLk
         hBDHzmG5d6c4rn2JHgOIkEWzq9St7sunn2zSiMfgPUoCCVQa139RTJSRyOgIcUTxp2O3
         JRHg==
Sender: ty@teamkurofune.com
X-Forwarded-Encrypted: i=2; AJvYcCUOAJ5a5szp7plgZGLSwQtJS0FfMjp8rF2rfOVvQAqeEYmSw0Cj0i/OXRI+/cSFFMbuOvXjRMU5@webseodesigners.com
X-Gm-Message-State: AOJu0Yxt0uAyZKUj2iwrojsQds/ZMKlsiOuFaU5eRpzAJuXB7YseW4VM
	ehNLL2wlm+LnpgxuV17yVw+jYz9Fr90zlfhUJ8yFYrSJH9Qnx23O8HQNFAh343V7hcI=
X-Received: by 2002:a17:90b:2d8d:b0:35b:a168:9671 with SMTP id 98e67ed59e1d1-35bd2d08db9mr5584005a91.32.1774112533659;
        Sat, 21 Mar 2026 10:02:13 -0700 (PDT)
X-BeenThere: ty@teamkurofune.com; h="AV1CL+HrE57HggFOburj9LWzwl3SIxEkk1fhjow5qLkimLbMLg=="
Received: by 2002:a17:90a:c712:b0:35a:eeb:6bc7 with SMTP id
 98e67ed59e1d1-35bc7051560ls1720830a91.2.-pod-prod-02-us; Sat, 21 Mar 2026
 09:53:47 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AJvYcCVl0KwsABvqfwh566GirPjB0/ydN6jV/l/UL/aTz1fZW7XWyT416NofkAPBv/FtPOchBQ==@teamkurofune.com
X-Received: by 2002:a17:90b:5102:b0:354:a332:1a61 with SMTP id 98e67ed59e1d1-35bd2b9729bmr5677514a91.5.1774112027166;
        Sat, 21 Mar 2026 09:53:47 -0700 (PDT)
X-BeenThere: infgfgfg9964fgtttggg@teamkurofune.com; h="AV1CL+HQO1HHkesbI1V8NCk2/LvF2AcUU7TYuMweOOBV0qPkSQ=="
Received: by 2002:a17:90a:fd0d:b0:359:9dc9:af7e with SMTP id
 98e67ed59e1d1-35bc6ebf132ls1575095a91.0.-pod-prod-02-us; Sat, 21 Mar 2026
 09:53:46 -0700 (PDT)
X-Received: by 2002:a05:6300:8985:b0:39b:e321:63ef with SMTP id adf61e73a8af0-39be321660fmr2964728637.57.1774112026238;
        Sat, 21 Mar 2026 09:53:46 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1774112026; cv=none;
        d=google.com; s=arc-20240605;
        b=hXvZtP6CxTwAZ1rYck1XUBHw/b1XiHyz6znmLTE6x048lkWOWTx/4noJOB6CW99c/K
         lx6qz4L9WspoaaGYEJHz7zkb0j63tvxM+4cZYjq8LUOXfFvgOfXmOxXgM2e/38jfZ4hW
         Lerhws2E5VYROtIzGlXvWbXNWhE5x3p58gvHG5lbCs+60H9kUhkpVw9vNtXKR0VkI1vV
         Qj+WQZexkmUdKvxxYOSWz4WV1pSAAT9N8H6+8Te9GF3LBAXnddL80YWf/vjFJKB13Cfp
         jHaFfWFMGBLOcGQNgfijk1MPUyQBZChd+qL2m411m0JFmnom2ZLucFnaRcylK1EH9T53
         BNMg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=content-transfer-encoding:mime-version:subject:message-id:to:from
         :date:dkim-signature;
        bh=A9YGeXR+2ugCqSrB3MH0JOr2TOBKnY0qVB/nR8Nrn9w=;
        fh=UOxFqOCDxS6lSYjAUeRNUivOdkK3RIiotorrkkQDSfQ=;
        b=EViYhWCCKuZdtYqT3emxAN3hmqUyUt8VBPuPVPPafw0+cD2GgkPRFowGx4PioPoHsi
         JDs7Zc/nrSl1572fpDTBmeAskFkhGDXi6tIpqF8T1UEY2zuXl1e7KlurlZdUKWqvGupo
         KEyn7WBiQQESWAfjPu0VyXLcVzcm9E/7ZG0Zh/4MZIWVQM6av+69HpoBtKAIfQcaXBoR
         mLKhIuhDzCpUPjLKVEVI6g+FXZYoGun/srYOYMyWkgTISZm0dWa0LFR+yN9CpCTJ/DEm
         lhNxBJw7u+2o3uEStPvhRjNIMa5d2fvJFQzDjPGbvBAok67ITE3vutD1IiYlI687YosH
         yt8w==;
        dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@funko.com header.s=funko2 header.b=toc+lwDq;
       spf=pass (google.com: domain of cs-noreply@funko.com designates 35.85.98.200 as permitted sender) smtp.mailfrom=cs-noreply@funko.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=funko.com
Received: from smtp-0c6633d4915a578a7.core2.sfdc-lywfpd.mta.salesforce.com (smtp-0c6633d4915a578a7.core2.sfdc-lywfpd.mta.salesforce.com. [35.85.98.200])
        by mx.google.com with ESMTPS id 41be03b00d2f7-c7458762650si7725799a12.241.2026.03.21.09.53.46
        for <infgfgfg9964fgtttggg@teamkurofune.com>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Sat, 21 Mar 2026 09:53:46 -0700 (PDT)
Received-SPF: pass (google.com: domain of cs-noreply@funko.com designates 35.85.98.200 as permitted sender) client-ip=35.85.98.200;
Received: from [127.0.0.1] ([127.0.0.1:38062] helo=eaas-6.eaas.emailinfra.svc.cluster.local)
	by mx1.core2.sfdc-lywfpd.mta.salesforce.com (envelope-from <cs-noreply@funko.com>)
	(ecelerity 4.7.0.20111 r(msys-ecelerity:tags/4.7.0-ga^0)) with ESMTP
	id 0B/40-00708-91DCEB96; Sat, 21 Mar 2026 16:53:45 +0000
Received: from 127.0.0.1 (localhost. [127.0.0.1]) by eaas-6 (EaaS) id
  0000cs6r6ij74osn for <Kilohearts 88s9deedes
  <infgfgfg9964fgtttggg@teamkurofune.com>> Sat, 21 Mar 2026 16:53:45 GMT
  (GMT)
Date: Sat, 21 Mar 2026 16:53:45 +0000 (GMT)
From: Funko Support <cs-noreply@funko.com>
To: Kilohearts 88s9deedes <infgfgfg9964fgtttggg@teamkurofune.com>
Message-ID: <cHvwy000000000000000000000000000000000000000000000TC9DLL00hi1odGasQS-6yACXypv_Mw@sfdc.net>
Subject: Your feedback is important. Help us to improve by taking this
 survey.
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-SFDC-CORRELATION-ID: 0000cs6r6ij74osn
X-SFDC-TLS-NoRelay: 1
X-SFDC-Binding: 1WrIRBV94myi25uB
X-SFDC-LK: 00D8c000005L3ZZ
X-SFDC-Interface: internal
X-Original-Sender: cs-noreply@funko.com
X-Original-Authentication-Results: mx.google.com;       dkim=pass
 header.i=@funko.com header.s=funko2 header.b=toc+lwDq;       spf=pass
 (google.com: domain of cs-noreply@funko.com designates 35.85.98.200 as
 permitted sender) smtp.mailfrom=cs-noreply@funko.com;       dmarc=pass
 (p=NONE sp=NONE dis=NONE) header.from=funko.com
Precedence: list
Mailing-list: list ty@teamkurofune.com; contact ty+owners@teamkurofune.com
List-ID: <ty.teamkurofune.com>
X-Spam-Checked-In-Group: infgfgfg9964fgtttggg@teamkurofune.com
X-Google-Group-Id: 937436636112
List-Post: <https://groups.google.com/a/teamkurofune.com/group/ty/post>, <mailto:ty@teamkurofune.com>
List-Help: <https://support.google.com/a/teamkurofune.com/bin/topic.py?topic=25838>,
 <mailto:ty+help@teamkurofune.com>
List-Archive: <https://groups.google.com/a/teamkurofune.com/group/ty/>
List-Subscribe: <https://groups.google.com/a/teamkurofune.com/group/infgfgfg9964fgtttggg/subscribe>,
 <mailto:infgfgfg9964fgtttggg+subscribe@teamkurofune.com>
List-Unsubscribe: <mailto:googlegroups-manage+937436636112+unsubscribe@googlegroups.com>,
 <https://groups.google.com/a/teamkurofune.com/group/ty/subscribe>

<html><head>=09<title></title></head><body style=3D"height: auto; min-heigh=
t: auto;"><div style=3D"font-size: 0.875rem; font-family: 'Salesforce Sans'=
,Arial,sans-serif;">Hello Kilohearts...<br /><br /><meta />We'd love some f=
eedback on the recent support you have received. Please take a moment to an=
swer one simple question by clicking the &nbsp;link below:<p><span><a href=
=3D"https://funko.my.site.com/Survey/survey/runtimeApp.app?invitationId=3D0=
KiU10000063Dq5&surveyName=3Dcase_survey&UUID=3D82fadfc0-5b44-4ba4-8885-ec5f=
ba854ac2" style=3D" vertical-align: middle; border: 1px solid rgb(221, 219,=
 218); transition: border .15s linear; background-color: rgb(0, 112, 210); =
border-color: rgb(0, 112, 210); color: rgb(255, 255, 255); display: inline-=
block; background-clip: border-box; border: 1px solid transparent; border-r=
adius: .25rem; line-height: 1.875rem; text-decoration: none; -webkit-appear=
ance: none; white-space: normal; -webkit-user-select: none; -moz-user-selec=
t: none; -ms-user-select: none; user-select: none; padding: 0 1rem;" target=
=3D"_blank">Open Survey</a></span></p><br />Thank you,<br />Funko</div><img=
 alt=3D"" src=3D"https://funko.my.salesforce.com/servlet/servlet.ImageServe=
r?oid=3D00D8c000005L3ZZ&esid=3D018U100000aa3Ck&from=3Dext"></body></html>


Top

Return to “Phishing, scam and spam emails”