2025-07-21: We have updated our Privacy Policy. Thanks to Vietnamese blackhat SEO wannabe DDoS:ing forums with Russian xrumer malware developed by Aleksandr Ryanchenko (Александр Рябченко/Alexandru Robu, botmaster.net@gmail.com) for automatic registrations and spam, this forum is manually moderated.

Your feedback is important. Help us to improve by taking this survey.

Various emails containing phishing attacks, scams and irrelevant spam
emailbot
Posts: 1148
Joined: 2025-4-22 17:52

Post by emailbot » 2026-3-21 16:53

Funko Support <cs-noreply@funko.com> wrote:
2026-3-21 16:53
Email subject: Your feedback is important. Help us to improve by taking this survey.
Reply-to: Funko Support <cs-noreply@funko.com>

Hello Kilohearts...

We'd love some feedback on the recent support you have received.
Please take a moment to answer one simple question by clicking the
 link below:
Open Survey
[https://funko.my.site.com/Survey/survey/runtimeApp.app?invitationId=0KiU10000063Dq5&surveyName=case_survey&UUID=82fadfc0-5b44-4ba4-8885-ec5fba854ac2]

Thank you,
Funko

Code: Select all

Return-Path: <h+bncBDIYHYXXTENBBG427PGQMGQEGPNXAAI@teamkurofune.com>
X-Original-To: webmaster@webseodesigners.com
Delivered-To: x24776540@pdx1-sub0-mail-mx200.dreamhost.com
Received: from mail-pf1-f197.google.com (mail-pf1-f197.google.com [209.85.210.197])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by pdx1-sub0-mail-mx200.dreamhost.com (Postfix) with ESMTPS id 4fdQt16kNTz60C0
	for <webmaster@webseodesigners.com>; Sat, 21 Mar 2026 10:10:17 -0700 (PDT)
Received: by mail-pf1-f197.google.com with SMTP id d2e1a72fcca58-82a6c70f1f8sf2297465b3a.0
        for <webmaster@webseodesigners.com>; Sat, 21 Mar 2026 10:10:17 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1774113017; cv=pass;
        d=google.com; s=arc-20240605;
        b=le6Rgr/s+XmRC2lLBB9gF+BZOUguvzsjbkxEjtQ06+HBSFp1J3uLprlAhT7fk1E9BC
         mqadrP5N2bMsTTk8/ozVJKjg57lxunLtrhlgjfm1m7e+nMuyS0RQHqK2ap8enbHahxgy
         OIwCVxmOpicW5Y6vA/tcOl3LXGM1vvjI+CyFjTB4zn8yS3gwoTDZxP5Zd0dY9xvqePU2
         0/PPDFfLQPcXDAr5bmgZXt8rIbdCUMKLKTcyFPDWWspNDXsT2H4mD0yQ70g2t2mJd9w9
         WJqZOSuNWxzpCaZdXrjQXG5DdPl474hP/Ei+RzB5dODlyS3oQFFIkzt0twoJOR5pPKIc
         mJIA==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:content-transfer-encoding
         :mime-version:subject:message-id:to:from:date:sender:dkim-signature;
        bh=A9YGeXR+2ugCqSrB3MH0JOr2TOBKnY0qVB/nR8Nrn9w=;
        fh=DEbY+JeHmLe8uxi9vYTF9fyNHkwu1hCIoJQDHLW8FVk=;
        b=IqdTA+m11nUzUo6V9FVu4UAtkSwRSX7/9pvcETRt2cmsnum0hGM7Z3AfTXg+mci2gH
         sbEGj7euQ2ogru3FE1riTH4STZ17c/AWSvGEADtUsdoINmANyvy/dgZTLlXNH8dJ7Ppa
         q4g4oniUdvzl06EuiC1wjh+VJ165HwQAtO2EfNXKmnvHuO+VqaLXi2Pod3Neeu9Lu7T3
         aBx72ilOBhbroPqISEQYpqH0xZdspJN301i3cZ/YaGMb4AjdzA1E9c/DKwA5SCZluiu0
         Mz99iX4k36axDDFswOxSJa7CW/MKKwkuPzH7j8FCTlJ/90QQRlQG34s0ZY/c0iMz/K1C
         YJpg==;
        darn=webseodesigners.com
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@funko.com header.s=funko2 header.b=toc+lwDq;
       spf=pass (google.com: domain of cs-noreply@funko.com designates 35.85.98.200 as permitted sender) smtp.mailfrom=cs-noreply@funko.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=funko.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=teamkurofune.com; s=google; t=1774113017; x=1774717817; darn=webseodesigners.com;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results
         :x-original-sender:content-transfer-encoding:mime-version:subject
         :message-id:to:from:date:sender:from:to:cc:subject:date:message-id
         :reply-to;
        bh=A9YGeXR+2ugCqSrB3MH0JOr2TOBKnY0qVB/nR8Nrn9w=;
        b=A11oVYBh1HcU/I03E/X1uDwU7JP1AFFSyVa87EBoPZmYVaYWA3IquqqQHSAkyrxzNa
         h6mjzjCPq0vkrvrLF982gl3zzIpyK+RpWt33KSJgv+pdW15TNdAQLWxyRBrxVondTesm
         mhRmgqNJy9W1AYCgnrcO0zuissRmlLmCWdQqI=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20251104; t=1774113017; x=1774717817;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :x-spam-checked-in-group:list-id:mailing-list:precedence
         :x-original-authentication-results:x-original-sender
         :content-transfer-encoding:mime-version:subject:message-id:to:from
         :date:x-beenthere:x-beenthere:x-gm-message-state:sender:from:to:cc
         :subject:date:message-id:reply-to;
        bh=A9YGeXR+2ugCqSrB3MH0JOr2TOBKnY0qVB/nR8Nrn9w=;
        b=AyulNcdttVEbEMoYorN8DxRhU/RHZp5Ea8PbBbuv88ywOkxNTZ31ew6GLqf9E/ptbs
         gPBDjb6G/0wrjkEMbJTqD2g/bXJLfo9zbWcvXU4yEnZG5LuuztwYySkbIqtR03np5lbO
         Ypk4sSLLJuFRBa+0DQirmucbvQZYTpgMWbnGZcSUDPu6nIJ6z2l6BlYCZ9U0Xn8UE0hU
         DCSsUDGL9aK2+Aqu7VT79wsezQueQQZeUXesFtrDDxnOz6lcD1HSAop997GK1qsiS8Vv
         gGpxjBNx0hSbTOIC9lUYNiCmZqaPNHzl8WQ55k0X8ypI1yh8LwsBgrl6kJoLkn6GsL0j
         LjCA==
Sender: h@teamkurofune.com
X-Forwarded-Encrypted: i=2; AJvYcCUyh9hHvTfT1ovDUW8wolfKWCR+3l4OblvfxTBpWJb2dz9DNq08lXkTSG4MTB7iV0nZ6TSpdG7kxz0=@webseodesigners.com
X-Gm-Message-State: AOJu0Yy5p/upbNJxSBkbbIazpOOsrkk6NHd5g0eee0e+es3DBamGMtlo
	/2BANdtepeKFH9wsUZ4yf/iE1el/Jb+U51j1DOxJTV7fi38bVwBpopxbVxdFX5FeK+I=
X-Received: by 2002:a05:6300:210e:b0:398:b499:44f1 with SMTP id adf61e73a8af0-39bcec0134amr6110219637.58.1774113016931;
        Sat, 21 Mar 2026 10:10:16 -0700 (PDT)
X-BeenThere: h@teamkurofune.com; h="AV1CL+Eyhv7WgRh3kclmHHCo+5GGpys2yld6TlzACXmsBzt7+w=="
Received: by 2002:a17:90a:fd0d:b0:359:9dc9:af7e with SMTP id
 98e67ed59e1d1-35bc6ebf132ls1575100a91.0.-pod-prod-02-us; Sat, 21 Mar 2026
 09:53:47 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AJvYcCXjcHzl7x6IgpSytgcwgtHeV9Dgyv9NEHYW6u3lyO6J38tilqUpcTD7TRFBOpe2CU3c@teamkurofune.com
X-Received: by 2002:a17:90b:5102:b0:354:a332:1a61 with SMTP id 98e67ed59e1d1-35bd2b9729bmr5677514a91.5.1774112027166;
        Sat, 21 Mar 2026 09:53:47 -0700 (PDT)
X-BeenThere: infgfgfg9964fgtttggg@teamkurofune.com; h="AV1CL+HQO1HHkesbI1V8NCk2/LvF2AcUU7TYuMweOOBV0qPkSQ=="
Received: by 2002:a17:90a:fd0d:b0:359:9dc9:af7e with SMTP id
 98e67ed59e1d1-35bc6ebf132ls1575095a91.0.-pod-prod-02-us; Sat, 21 Mar 2026
 09:53:46 -0700 (PDT)
X-Received: by 2002:a05:6300:8985:b0:39b:e321:63ef with SMTP id adf61e73a8af0-39be321660fmr2964728637.57.1774112026238;
        Sat, 21 Mar 2026 09:53:46 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1774112026; cv=none;
        d=google.com; s=arc-20240605;
        b=hXvZtP6CxTwAZ1rYck1XUBHw/b1XiHyz6znmLTE6x048lkWOWTx/4noJOB6CW99c/K
         lx6qz4L9WspoaaGYEJHz7zkb0j63tvxM+4cZYjq8LUOXfFvgOfXmOxXgM2e/38jfZ4hW
         Lerhws2E5VYROtIzGlXvWbXNWhE5x3p58gvHG5lbCs+60H9kUhkpVw9vNtXKR0VkI1vV
         Qj+WQZexkmUdKvxxYOSWz4WV1pSAAT9N8H6+8Te9GF3LBAXnddL80YWf/vjFJKB13Cfp
         jHaFfWFMGBLOcGQNgfijk1MPUyQBZChd+qL2m411m0JFmnom2ZLucFnaRcylK1EH9T53
         BNMg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=content-transfer-encoding:mime-version:subject:message-id:to:from
         :date:dkim-signature;
        bh=A9YGeXR+2ugCqSrB3MH0JOr2TOBKnY0qVB/nR8Nrn9w=;
        fh=UOxFqOCDxS6lSYjAUeRNUivOdkK3RIiotorrkkQDSfQ=;
        b=EViYhWCCKuZdtYqT3emxAN3hmqUyUt8VBPuPVPPafw0+cD2GgkPRFowGx4PioPoHsi
         JDs7Zc/nrSl1572fpDTBmeAskFkhGDXi6tIpqF8T1UEY2zuXl1e7KlurlZdUKWqvGupo
         KEyn7WBiQQESWAfjPu0VyXLcVzcm9E/7ZG0Zh/4MZIWVQM6av+69HpoBtKAIfQcaXBoR
         mLKhIuhDzCpUPjLKVEVI6g+FXZYoGun/srYOYMyWkgTISZm0dWa0LFR+yN9CpCTJ/DEm
         lhNxBJw7u+2o3uEStPvhRjNIMa5d2fvJFQzDjPGbvBAok67ITE3vutD1IiYlI687YosH
         yt8w==;
        dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@funko.com header.s=funko2 header.b=toc+lwDq;
       spf=pass (google.com: domain of cs-noreply@funko.com designates 35.85.98.200 as permitted sender) smtp.mailfrom=cs-noreply@funko.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=funko.com
Received: from smtp-0c6633d4915a578a7.core2.sfdc-lywfpd.mta.salesforce.com (smtp-0c6633d4915a578a7.core2.sfdc-lywfpd.mta.salesforce.com. [35.85.98.200])
        by mx.google.com with ESMTPS id 41be03b00d2f7-c7458762650si7725799a12.241.2026.03.21.09.53.46
        for <infgfgfg9964fgtttggg@teamkurofune.com>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Sat, 21 Mar 2026 09:53:46 -0700 (PDT)
Received-SPF: pass (google.com: domain of cs-noreply@funko.com designates 35.85.98.200 as permitted sender) client-ip=35.85.98.200;
Received: from [127.0.0.1] ([127.0.0.1:38062] helo=eaas-6.eaas.emailinfra.svc.cluster.local)
	by mx1.core2.sfdc-lywfpd.mta.salesforce.com (envelope-from <cs-noreply@funko.com>)
	(ecelerity 4.7.0.20111 r(msys-ecelerity:tags/4.7.0-ga^0)) with ESMTP
	id 0B/40-00708-91DCEB96; Sat, 21 Mar 2026 16:53:45 +0000
Received: from 127.0.0.1 (localhost. [127.0.0.1]) by eaas-6 (EaaS) id
  0000cs6r6ij74osn for <Kilohearts 88s9deedes
  <infgfgfg9964fgtttggg@teamkurofune.com>> Sat, 21 Mar 2026 16:53:45 GMT
  (GMT)
Date: Sat, 21 Mar 2026 16:53:45 +0000 (GMT)
From: Funko Support <cs-noreply@funko.com>
To: Kilohearts 88s9deedes <infgfgfg9964fgtttggg@teamkurofune.com>
Message-ID: <cHvwy000000000000000000000000000000000000000000000TC9DLL00hi1odGasQS-6yACXypv_Mw@sfdc.net>
Subject: Your feedback is important. Help us to improve by taking this
 survey.
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-SFDC-CORRELATION-ID: 0000cs6r6ij74osn
X-SFDC-TLS-NoRelay: 1
X-SFDC-Binding: 1WrIRBV94myi25uB
X-SFDC-LK: 00D8c000005L3ZZ
X-SFDC-Interface: internal
X-Original-Sender: cs-noreply@funko.com
X-Original-Authentication-Results: mx.google.com;       dkim=pass
 header.i=@funko.com header.s=funko2 header.b=toc+lwDq;       spf=pass
 (google.com: domain of cs-noreply@funko.com designates 35.85.98.200 as
 permitted sender) smtp.mailfrom=cs-noreply@funko.com;       dmarc=pass
 (p=NONE sp=NONE dis=NONE) header.from=funko.com
Precedence: list
Mailing-list: list h@teamkurofune.com; contact h+owners@teamkurofune.com
List-ID: <h.teamkurofune.com>
X-Spam-Checked-In-Group: infgfgfg9964fgtttggg@teamkurofune.com
X-Google-Group-Id: 284246864961
List-Post: <https://groups.google.com/a/teamkurofune.com/group/h/post>, <mailto:h@teamkurofune.com>
List-Help: <https://support.google.com/a/teamkurofune.com/bin/topic.py?topic=25838>,
 <mailto:h+help@teamkurofune.com>
List-Archive: <https://groups.google.com/a/teamkurofune.com/group/h/>
List-Subscribe: <https://groups.google.com/a/teamkurofune.com/group/infgfgfg9964fgtttggg/subscribe>,
 <mailto:infgfgfg9964fgtttggg+subscribe@teamkurofune.com>
List-Unsubscribe: <mailto:googlegroups-manage+284246864961+unsubscribe@googlegroups.com>,
 <https://groups.google.com/a/teamkurofune.com/group/h/subscribe>

<html><head>=09<title></title></head><body style=3D"height: auto; min-heigh=
t: auto;"><div style=3D"font-size: 0.875rem; font-family: 'Salesforce Sans'=
,Arial,sans-serif;">Hello Kilohearts...<br /><br /><meta />We'd love some f=
eedback on the recent support you have received. Please take a moment to an=
swer one simple question by clicking the &nbsp;link below:<p><span><a href=
=3D"https://funko.my.site.com/Survey/survey/runtimeApp.app?invitationId=3D0=
KiU10000063Dq5&surveyName=3Dcase_survey&UUID=3D82fadfc0-5b44-4ba4-8885-ec5f=
ba854ac2" style=3D" vertical-align: middle; border: 1px solid rgb(221, 219,=
 218); transition: border .15s linear; background-color: rgb(0, 112, 210); =
border-color: rgb(0, 112, 210); color: rgb(255, 255, 255); display: inline-=
block; background-clip: border-box; border: 1px solid transparent; border-r=
adius: .25rem; line-height: 1.875rem; text-decoration: none; -webkit-appear=
ance: none; white-space: normal; -webkit-user-select: none; -moz-user-selec=
t: none; -ms-user-select: none; user-select: none; padding: 0 1rem;" target=
=3D"_blank">Open Survey</a></span></p><br />Thank you,<br />Funko</div><img=
 alt=3D"" src=3D"https://funko.my.salesforce.com/servlet/servlet.ImageServe=
r?oid=3D00D8c000005L3ZZ&esid=3D018U100000aa3Ck&from=3Dext"></body></html>


Top

Return to “Phishing, scam and spam emails”