2025-07-21: We have updated our Privacy Policy. Thanks to Vietnamese blackhat SEO wannabe DDoS:ing forums with Russian xrumer malware developed by Aleksandr Ryanchenko (Александр Рябченко/Alexandru Robu, botmaster.net@gmail.com) for automatic registrations and spam, this forum is manually moderated.

Your feedback is important. Help us to improve by taking this survey.

Various emails containing phishing attacks, scams and irrelevant spam
emailbot
Posts: 1148
Joined: 2025-4-22 17:52

Post by emailbot » 2026-3-21 16:53

Funko Support <cs-noreply@funko.com> wrote:
2026-3-21 16:53
Email subject: Your feedback is important. Help us to improve by taking this survey.
Reply-to: Funko Support <cs-noreply@funko.com>

Hello Kilohearts...

We'd love some feedback on the recent support you have received.
Please take a moment to answer one simple question by clicking the
 link below:
Open Survey
[https://funko.my.site.com/Survey/survey/runtimeApp.app?invitationId=0KiU10000063DN4&surveyName=case_survey&UUID=880c6b3a-7ca7-4bbc-956a-2479223c7d94]

Thank you,
Funko

Code: Select all

Return-Path: <h+bncBDIYHYXXTENBBG427PGQMGQEGPNXAAI@teamkurofune.com>
X-Original-To: webmaster@webseodesigners.com
Delivered-To: x24776540@pdx1-sub0-mail-mx211.dreamhost.com
Received: from mail-pl1-f198.google.com (mail-pl1-f198.google.com [209.85.214.198])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by pdx1-sub0-mail-mx211.dreamhost.com (Postfix) with ESMTPS id 4fdQt06HHJz5ylX
	for <webmaster@webseodesigners.com>; Sat, 21 Mar 2026 10:10:16 -0700 (PDT)
Received: by mail-pl1-f198.google.com with SMTP id d9443c01a7336-2aed1beaa73sf35637705ad.2
        for <webmaster@webseodesigners.com>; Sat, 21 Mar 2026 10:10:16 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1774113016; cv=pass;
        d=google.com; s=arc-20240605;
        b=PSlr/G1otlDSnzSIYxFiZrERa1jVkt8rzbGJXaxjXJTsQVvlG/3CZtU/lhIWJ3CI2i
         Xfunbk9jlm3Q6dAwdr0D6zusjlvqdtKdygpDeRmw9DnoKLDf4Cv/FiejQbk4L30pMZ2a
         7NwellhceVQEMfV5dG3aQlP/7BK6cQesb1O6rSY01Hei0w7CCAZHKgAOyNi78x3W6skg
         zgDGybkApIY83W6gbAzV33u00jArVtRn1iQqpFR7mag1L1vJuQnlwrJx7AtmQ/ArOOdE
         ciPuwXQsaDGZaSE+EJOEboxG0/weVGNd5jmOyD0/1kV5PBE5uFRdtL6m/wlRYsu/KJ2l
         ZZFA==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:content-transfer-encoding
         :mime-version:subject:message-id:to:from:date:sender:dkim-signature;
        bh=0fS5Rk5ktrMaaQIOmXn1YbIgb79xh0ZxsnVtvmDkX8o=;
        fh=4lgcQ/Qs2i83LCrgm3lBchAejqoAlsZAneWvLa7YncY=;
        b=gVC7itAQByWqIZmO2+f8l/6fC7UpYGH3yhLWXm3GkfD3xE/wAl5lEtuIEXYLC+/1mt
         onFaZF4+LjuabET1XTdVUQ0JrfWJVv6TQ9wb8uy+rKaSs4XqCwKp0F5RyoMDzfdshvi8
         yq4GRvLgUAs3m/H+ejuZ1oClIxWcd9+iOk22e1OYxLkssFx7YDTbo0dh3yRVaQS/lsPX
         qx1jj1TlPTO6+OINHpuC6d3wZKYfhiWXCd0oURuWXeTfNTBuYwEdFX+IuFRLHVkjEB1U
         LNQtcoT2rr5ilibuDYDn7MZuSjV7ESCzxn/7z2dEPBXAZ3/sR43LVOB/bpDElAEUBUiY
         2mQA==;
        darn=webseodesigners.com
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@funko.com header.s=funko2 header.b=xNRJ0cK0;
       spf=pass (google.com: domain of cs-noreply@funko.com designates 44.230.101.178 as permitted sender) smtp.mailfrom=cs-noreply@funko.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=funko.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=teamkurofune.com; s=google; t=1774113016; x=1774717816; darn=webseodesigners.com;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results
         :x-original-sender:content-transfer-encoding:mime-version:subject
         :message-id:to:from:date:sender:from:to:cc:subject:date:message-id
         :reply-to;
        bh=0fS5Rk5ktrMaaQIOmXn1YbIgb79xh0ZxsnVtvmDkX8o=;
        b=CQYolxopq203+XMPMUud/e98RgsuqCsCpixz4HdV0ojxc49M1zdg/CfYCFGgP/c0ZY
         cyhbXtd+f0oSQr8z1SPxdlGyrK4EvEYyFI7+0ugfXHnZZnyf47bzhj6hsPetw+Txr7Cz
         87IxJfSGRYlwInA6sYTgED+CZ/cSvSi1E7PP4=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20251104; t=1774113016; x=1774717816;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :x-spam-checked-in-group:list-id:mailing-list:precedence
         :x-original-authentication-results:x-original-sender
         :content-transfer-encoding:mime-version:subject:message-id:to:from
         :date:x-beenthere:x-beenthere:x-gm-message-state:sender:from:to:cc
         :subject:date:message-id:reply-to;
        bh=0fS5Rk5ktrMaaQIOmXn1YbIgb79xh0ZxsnVtvmDkX8o=;
        b=ccq68P5Qt3N0lNIQSxVNezc0kZG4GxtnBrSUO1TRKUAGHcvBlHtgC2T/Sh3FzrE3EQ
         rUtN0mGOCYO57Ua4xuEuPgIswtVAL95ieIsadbDbwVnAb322UfBMvEecJbqQfHUH+tgk
         6RcnFhu+HP/vHC6TiYOYCXqcS402flIQc+K7N+DermAZ9RLLL/DInnBl3xGdO9GUryjb
         3lgwUxjVUiHTnJUSxDw6nkJ2oJekeJkvQdna1B0Fv5HEV49sguwnUliQ8Gh96IUH6TT+
         nrZ10G7P6txmOvkycMNb26nPldA5Udf2n0MfZ9ZfQZep7UmtIRQ5GBVLymrFQwhuz+fC
         rSNg==
Sender: h@teamkurofune.com
X-Forwarded-Encrypted: i=2; AJvYcCW814MdkhmrxxQcv5T0/02OsJUhhwvff5xKdeYg3vSgTpjR9VeDw9G8yqiybYsaKTGppPeb4Uvcevk=@webseodesigners.com
X-Gm-Message-State: AOJu0YxF4kFMy1YgYS2qp0GI8Us5/hzEmbProsao09vrGMbN+5xADvWu
	+zAKhIIa1Z7IEbL9jp6QEivT15zeYrCfXoV7x/EjFa2L8y+kV1s4cB0oKlSffgXrQPk=
X-Received: by 2002:a17:903:244f:b0:2ae:6192:8d78 with SMTP id d9443c01a7336-2b0826c7097mr66542605ad.1.1774113016066;
        Sat, 21 Mar 2026 10:10:16 -0700 (PDT)
X-BeenThere: h@teamkurofune.com; h="AV1CL+FeO6W98zZRcM2Ion3VnLvBP7+JXrdB0kERm32l1kQWdw=="
Received: by 2002:a17:902:ce84:b0:2ae:5f1d:3b9d with SMTP id
 d9443c01a7336-2b09137702fls2468755ad.1.-pod-prod-02-us; Sat, 21 Mar 2026
 09:53:47 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AJvYcCVd/gTtOIByK49eMMMLavu2+jR7Qs+cds/ovt2CKn9QWWb0Gp0JLodimGKK7vjwq3T/@teamkurofune.com
X-Received: by 2002:a17:902:cece:b0:2b0:67a4:fbe8 with SMTP id d9443c01a7336-2b0827a4f3dmr70036715ad.40.1774112027334;
        Sat, 21 Mar 2026 09:53:47 -0700 (PDT)
X-BeenThere: infgfgfg9964fgtttggg@teamkurofune.com; h="AV1CL+F5nAZFmdAs1oLUK51l5xVs5k996qn3yGndCvZ6V++yQQ=="
Received: by 2002:a17:902:ce84:b0:2ae:5f1d:3b9d with SMTP id
 d9443c01a7336-2b09137702fls2468655ad.1.-pod-prod-02-us; Sat, 21 Mar 2026
 09:53:46 -0700 (PDT)
X-Received: by 2002:a17:902:ce0d:b0:2b0:489f:84e9 with SMTP id d9443c01a7336-2b0826c668dmr63408105ad.7.1774112026439;
        Sat, 21 Mar 2026 09:53:46 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1774112026; cv=none;
        d=google.com; s=arc-20240605;
        b=FEQDkTFtvUFzsLoZUai/HOsGYSWaNZ13QPb9+QL5clJEO17d+5caEoofRRotviE2NO
         VpP+KDmLm076WSu6RAhJYzySargWNlYhojPOMkhkBGmZM2KqSz458vC9/SfNAV0eF3MA
         3rt2KiBsmxRZ0ReQ6Gly2wtd39Pd/VEmSG0ieYrrLSF3qcgM1q/juZs0iNYDU7Muvj77
         oWsPW/gqzZZlUoSku8evSyug7sW6m/MzTQMvm2yAUkgTEJEL0eEe8kodH2l1xPYiEp9r
         tniAL5Wg1hBXSBRKIVFD6NuZ6qJbrvbSodGC6K+TgHnBoh3GByFKPlY8H3nfpDOkQ/Lc
         Iv7w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=content-transfer-encoding:mime-version:subject:message-id:to:from
         :date:dkim-signature;
        bh=0fS5Rk5ktrMaaQIOmXn1YbIgb79xh0ZxsnVtvmDkX8o=;
        fh=UOxFqOCDxS6lSYjAUeRNUivOdkK3RIiotorrkkQDSfQ=;
        b=BKfi82r6PHMHGtZUbeHdpIRsFzWYVPhJjMeHru7Egu1xPYBAQVBAFiqeTDba8oi7TL
         SkpFwo48dWY4WgS7BRGWnlNs5Hn11wPeU6vZIwpH+5j8snllQ9pyrcq7O9tYmsiWXbNE
         sITAdQRB5djjDCFTuj9uSQrb5SpVSdpjVI3V0s21Ki2f8rCXweaviyhVSjVJtJ19LRcL
         k11aAALboi49TpAhoMWtfF/lYNPgjgvt0r0f2v+raICfL5k6Nd9rhwCTUgODeKq61EzN
         Wg/A/gso0BvRt5TiRkISWA8KCdXLbgdZ1vk0uXyuiKsdEm42j1yRe3MqSwn8oslkk2mH
         sHZQ==;
        dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@funko.com header.s=funko2 header.b=xNRJ0cK0;
       spf=pass (google.com: domain of cs-noreply@funko.com designates 44.230.101.178 as permitted sender) smtp.mailfrom=cs-noreply@funko.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=funko.com
Received: from smtp-08a48bf98dc10f379.core2.sfdc-lywfpd.mta.salesforce.com (smtp-08a48bf98dc10f379.core2.sfdc-lywfpd.mta.salesforce.com. [44.230.101.178])
        by mx.google.com with ESMTPS id d9443c01a7336-2b08476a4a5si75360305ad.38.2026.03.21.09.53.46
        for <infgfgfg9964fgtttggg@teamkurofune.com>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Sat, 21 Mar 2026 09:53:46 -0700 (PDT)
Received-SPF: pass (google.com: domain of cs-noreply@funko.com designates 44.230.101.178 as permitted sender) client-ip=44.230.101.178;
Received: from [127.0.0.1] ([127.0.0.1:52626] helo=eaas-8.eaas.emailinfra.svc.cluster.local)
	by mx1.core2.sfdc-lywfpd.mta.salesforce.com (envelope-from <cs-noreply@funko.com>)
	(ecelerity 4.7.0.20111 r(msys-ecelerity:tags/4.7.0-ga^0)) with ESMTP
	id CD/B2-00705-A1DCEB96; Sat, 21 Mar 2026 16:53:46 +0000
Received: from 127.0.0.1 (localhost. [127.0.0.1]) by eaas-8 (EaaS) id
  0002fn07fhbw5ajq for <Kilohearts 88s9deedes
  <infgfgfg9964fgtttggg@teamkurofune.com>> Sat, 21 Mar 2026 16:53:46 GMT
  (GMT)
Date: Sat, 21 Mar 2026 16:53:46 +0000 (GMT)
From: Funko Support <cs-noreply@funko.com>
To: Kilohearts 88s9deedes <infgfgfg9964fgtttggg@teamkurofune.com>
Message-ID: <hULJv000000000000000000000000000000000000000000000TC9DLM009GQNjPS2QBSzRarg_19TCw@sfdc.net>
Subject: Your feedback is important. Help us to improve by taking this
 survey.
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-SFDC-CORRELATION-ID: 0002fn07fhbw5ajq
X-SFDC-TLS-NoRelay: 1
X-SFDC-Binding: 1WrIRBV94myi25uB
X-SFDC-LK: 00D8c000005L3ZZ
X-SFDC-Interface: internal
X-Original-Sender: cs-noreply@funko.com
X-Original-Authentication-Results: mx.google.com;       dkim=pass
 header.i=@funko.com header.s=funko2 header.b=xNRJ0cK0;       spf=pass
 (google.com: domain of cs-noreply@funko.com designates 44.230.101.178 as
 permitted sender) smtp.mailfrom=cs-noreply@funko.com;       dmarc=pass
 (p=NONE sp=NONE dis=NONE) header.from=funko.com
Precedence: list
Mailing-list: list h@teamkurofune.com; contact h+owners@teamkurofune.com
List-ID: <h.teamkurofune.com>
X-Spam-Checked-In-Group: infgfgfg9964fgtttggg@teamkurofune.com
X-Google-Group-Id: 284246864961
List-Post: <https://groups.google.com/a/teamkurofune.com/group/h/post>, <mailto:h@teamkurofune.com>
List-Help: <https://support.google.com/a/teamkurofune.com/bin/topic.py?topic=25838>,
 <mailto:h+help@teamkurofune.com>
List-Archive: <https://groups.google.com/a/teamkurofune.com/group/h/>
List-Subscribe: <https://groups.google.com/a/teamkurofune.com/group/infgfgfg9964fgtttggg/subscribe>,
 <mailto:infgfgfg9964fgtttggg+subscribe@teamkurofune.com>
List-Unsubscribe: <mailto:googlegroups-manage+284246864961+unsubscribe@googlegroups.com>,
 <https://groups.google.com/a/teamkurofune.com/group/h/subscribe>

<html><head>=09<title></title></head><body style=3D"height: auto; min-heigh=
t: auto;"><div style=3D"font-size: 0.875rem; font-family: 'Salesforce Sans'=
,Arial,sans-serif;">Hello Kilohearts...<br /><br /><meta />We'd love some f=
eedback on the recent support you have received. Please take a moment to an=
swer one simple question by clicking the &nbsp;link below:<p><span><a href=
=3D"https://funko.my.site.com/Survey/survey/runtimeApp.app?invitationId=3D0=
KiU10000063DN4&surveyName=3Dcase_survey&UUID=3D880c6b3a-7ca7-4bbc-956a-2479=
223c7d94" style=3D" vertical-align: middle; border: 1px solid rgb(221, 219,=
 218); transition: border .15s linear; background-color: rgb(0, 112, 210); =
border-color: rgb(0, 112, 210); color: rgb(255, 255, 255); display: inline-=
block; background-clip: border-box; border: 1px solid transparent; border-r=
adius: .25rem; line-height: 1.875rem; text-decoration: none; -webkit-appear=
ance: none; white-space: normal; -webkit-user-select: none; -moz-user-selec=
t: none; -ms-user-select: none; user-select: none; padding: 0 1rem;" target=
=3D"_blank">Open Survey</a></span></p><br />Thank you,<br />Funko</div><img=
 alt=3D"" src=3D"https://funko.my.salesforce.com/servlet/servlet.ImageServe=
r?oid=3D00D8c000005L3ZZ&esid=3D018U100000aZutx&from=3Dext"></body></html>


Top

Return to “Phishing, scam and spam emails”