open All Channels
seplocked EVE General Discussion
blankseplocked Kieron: Legit e-mail, re: EVE Voice Survey
 
This thread is older than 90 days and has been locked due to inactivity.


 
Pages: [1] 2

Author Topic

Freylor
Gallente
SnowSink Enterprises.
Posted - 2007.05.10 16:08:00 - [1]
 

This is a legitimate survey, please read this post for more information. ~kieron

Edited by: Freylor on 10/05/2007 16:17:12
EVE Voice <EVEVoice@mail64.subscribermail.com>

View this message in a browser. (CHECK POST #2)!

First, thank you for signing up for the EVE Voice free trial but we are concerned to see that even though your account is ready it has not been activated.

Since this is a new service we would very much like to get some feedback from you and ask some questions if you could spare a moment:

Please add your comments below the questions in your reply to this e-mail.

1. Did you attempt to use EVE Voice but run into a technical problem? If so, then please tell us what the problem was.

2. Did you sign up but not have anyone to talk with?

3. Did you just not have enough time to try it yet?

4. Are there features you are looking for that are encourage you or your corp to use EVE Voice?

5. Do you or your corp use voice software now? If so which one?

6. How often do you use voice communications?
a. every time you log in
b. most times you log in
c. sometime you log in
d. a few times
e. never

7. Do use voice communications mainly for:
a. game play
b. socializing
c. both equally

8. Which of the following would encourage you to use Eve Voice
a. an offer that would let the CEO or other player buy Eve Voice for the corp
b. the ability to use Eve Voice while not logged in
c. being able to see who else have Eve voice

9. What features do you think are most important in voice communications?


We really appreciate you providing this feedback as it will help us create a better voice services.

Email Marketing
EVE Online
CCP hf.
Grandagarši 8
101 Reykjavķk
Iceland

Freylor
Gallente
SnowSink Enterprises.
Posted - 2007.05.10 16:08:00 - [2]
 

Edited by: Freylor on 10/05/2007 16:13:23
Bit which gets me is... "View this message in a browser"

Links you to a particulary wierd link.
(http://tr.subscriberm ** censored section ** rchives%2Esubscribermail%2Ecom%2Fmsg%2Fc37db1cd34b34c76b5019e100c75da22 ** censored section **)

yet if i click reply it links me to evevoice@eve-online.com

So is this from ccp or not?

Jim McGregor
Posted - 2007.05.10 16:10:00 - [3]
 


Umm, that email looks very fake. Laughing

Freylor
Gallente
SnowSink Enterprises.
Posted - 2007.05.10 16:10:00 - [4]
 

Originally by: Jim McGregor

Umm, that email looks very fake. Laughing


But i click reply it points me towards @eve-online.com

DubanFP
Caldari
Caldari Provisions
Posted - 2007.05.10 16:13:00 - [5]
 

Edited by: DubanFP on 10/05/2007 16:11:00
Edited by: DubanFP on 10/05/2007 16:10:19
Change your EVE password on a different computer, and run a spyware check ASAP. That "strange" link may very well have been link to to a site that automatically downloads a keylogger onto your computer "and steal your account".

I'm sure someone else will probebly do a better job of making sure you're rid of spyware, but for now it might not be a good idea to enter any personal information on that computer.

Jim McGregor
Posted - 2007.05.10 16:14:00 - [6]
 

Edited by: Jim McGregor on 10/05/2007 16:11:06

Originally by: Freylor
Originally by: Jim McGregor

Umm, that email looks very fake. Laughing


But i click reply it points me towards @eve-online.com


Yeah. Im not an expect on the internal browser, but since the sender wants you do use it, I would put my tinfoil hat on and think its some kind of security hack until proven otherwise. I would be careful clicking that link...


Freylor
Gallente
SnowSink Enterprises.
Posted - 2007.05.10 16:14:00 - [7]
 

Edited by: Freylor on 10/05/2007 16:11:09
No i mean my GMAIL reply button points me to @eve-online.com

The link which i didnt click sends me somewhere

DubanFP
Caldari
Caldari Provisions
Posted - 2007.05.10 16:15:00 - [8]
 

Also REMOVE THAT LINK NOW, before you risk infecting anyone else.

Jim McGregor
Posted - 2007.05.10 16:16:00 - [9]
 

Originally by: Freylor
Edited by: Freylor on 10/05/2007 16:11:09
No i mean my GMAIL reply button points me to @eve-online.com

The link which i didnt click sends me somewhere



Yeah, its probably just to make it look genuine. But this is all suspicions... its better to be safe than sorry. CCP probably replies to this thread soon.

Freylor
Gallente
SnowSink Enterprises.
Posted - 2007.05.10 16:16:00 - [10]
 

Originally by: DubanFP
Also REMOVE THAT LINK NOW, before you risk infecting anyone else.


Censored over 1/2 of it.

Jaffa Agonar
Minmatar
Native Freshfood
Posted - 2007.05.10 16:20:00 - [11]
 

I received it as well. I've never signed up for the Voice trial, so... was a tad confusing.

It's trying to run a script that I'm blocking, of course.

Freylor
Gallente
SnowSink Enterprises.
Posted - 2007.05.10 16:25:00 - [12]
 

Originally by: Jaffa Agonar
I received it as well. I've never signed up for the Voice trial, so... was a tad confusing.

It's trying to run a script that I'm blocking, of course.


What kind of script o_0

Segmentor
The Scope
Posted - 2007.05.10 16:26:00 - [13]
 

Edited by: Segmentor on 10/05/2007 16:31:05
Edited by: Segmentor on 10/05/2007 16:27:00

****, i have just sent an answer to that... Crying or Very sad Was tired after a long workday...
Now i'm fully awake. Shocked

EDIT:
I just got this:

"postmaster@ccpgames.com" to me

show details
6:19 pm (5 minutes ago)

Afhending til žessara vištakenda eša sendingarlista mistókst:

EVE Voice
Netfang vištakanda fannst ekki ķ tölvupóstkerfi vištakanda. Microsoft Exchange reynir ekki aš senda bošin aftur. Athuga skal netfang vištakanda og reyna aš senda bošin aftur eša lįta kerfisstjóra ķ té eftirfarandi greiningartexta.
Sent meš Microsoft Exchange Server 2007





Greiningarupplżsingar fyrir kerfisstjóra:

Žjónn bśinn til: ccp.ad.local

evevoice@eve-online.com
#550 5.1.1 RESOLVER.ADR.RecipNotFound; not found ##

Upphaflegir bošahausar:

Received: from valhalla.ccp.cc (213.167.138.65) by exchis.ccp.ad.local
(10.1.2.16) with Microsoft SMTP Server id 8.0.685.24; Thu, 10 May 2007
16:19:33 +0000
Received: from mx0.us-ga.aves.f-prot.com ([204.118.23.105]) by valhalla.ccp.cc
with Microsoft SMTPSVC(6.0.3790.1830); Thu, 10 May 2007 16:20:21 +0000
Received: from wx-out-0506.google.com (wx-out-0506.google.com [66.249.82.226])
by us-ga.aves.f-prot.com (8.12.11.20060308/8.12.8) with ESMTP id
l4AGFGKT008114 for <evevoice@eve-online.com>; Thu, 10 May 2007 16:15:16 GMT
Received: by wx-out-0506.google.com with SMTP id h28so584427wxd for
<evevoice@eve-online.com>; Thu, 10 May 2007 09:15:16 -0700 (PDT)
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed;
d=gmail.com; s=beta;
h=domainkey-signature:received:received:message-id:date:from:to:
subject:in-reply-to:mime-version:content-type:references;

b=HADFjRvKxHuhAYZqnw4pCQXzUrZBpxIGSm7bNx3
/VMbctN23Cj8QG6TxDGuzSBVRzjM24odHvOjIzWPp/PVId9AsU2C2NhlXB/
Pa8CP+kixLElIz0TzYa5iIy3GFIbap/agvS1AOXbBnjl7urY0QesoVPc00zwF4Th4Cb0IljAg=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=beta;
h=received:message-id:date:from:to:subject:
in-reply-to:mime-version:content-type:references;

b=FRDuB+/Uhzl2mCDz0wmoEymsIZGyxf+Na1l/
Je/aYuUpq14TONlQ9p94C1BQPC6uwaunv4MheDL4py2wUBRTdE4
ctiNGU/qXX6hY5u8YAeJQDxJt82OTe+bBy0rCt2eKPrsQvS6yIhcaV
58nCieo4EEXb18tm54pjyWSJHupwo=

Received: by 10.90.105.19 with SMTP id d19mr1819663agc.1178813338160;
Thu, 10 May 2007 09:08:58 -0700 (PDT)
Received: by 10.67.24.5 with HTTP; Thu, 10 May 2007 09:08:57 -0700 (PDT)
Message-ID: <e7a1b6370705100908o2c42278fu8663e239fda2dac1@mail.gmail.com>
Date: Thu, 10 May 2007 18:08:57 +0200
From: Anton B. <***@gmail.com>
To: EVE Voice <evevoice@eve-online.com>
Subject: Re: EVE Voice Survey
In-Reply-To: <E6.5A.03375.26423464@juice.subscribermail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_7357_23285968.1178813337701"
Content-Antispam: Probably not spam. -1.12 < 3.00 [as:0.40 cc:0.00 hc:-1.52 sa:-1.12]
Content-Security: Checked by F-Prot AVES (http://aves.f-prot.com/)
X-Antivirus: Scanned by F-Prot Antivirus (http://www.f-prot.com/)
References: <E6.5A.03375.26423464@juice.subscribermail.com>
Return-Path: ***@gmail.com
X-OriginalArrivalTime: 10 May 2007 16:20:22.0000 (UTC) FILETIME=[1B9EA700:01C7931F]


Final-Recipient: rfc822;evevoice@eve-online.com
Action: failed
Status: 5.1.1
Diagnostic-Code: smtp;550 5.1.1 RESOLVER.ADR.RecipNotFound; not found
X-Display-Name: EVE Voice



---------- Forwarded message ----------
From: *** <***@gmail.com>
To: EVE Voice <evevoice@eve-online.com>
Date: Thu, 10 May 2007 18:08:57 +0200
Subject: Re: EVE Voice Survey


On 5/10/07, EVE Voice <EVEVoice@mail64.subscribermail.com> wrote:

View this message in a browser.

First, thank you for signing up for the EVE Voice free trial but we are concerned to see that even though your account is ready it has not been activated.
bla bla bla...
(the original mail)


Shocked
Looks like my reply was blocked by some kind of internal ccp mail system... This is weird ****.

Line Breaks added as not to stretch the forum too much. -Conuion Meow (mods@ccpgames.com)

Jaffa Agonar
Minmatar
Native Freshfood
Posted - 2007.05.10 16:27:00 - [14]
 

Originally by: Freylor
Originally by: Jaffa Agonar
I received it as well. I've never signed up for the Voice trial, so... was a tad confusing.

It's trying to run a script that I'm blocking, of course.


What kind of script o_0


Not sure. I use that firefox script blocking plugin, which blocks friendly and bad scripts.

Here's the page source in .txt if anyone wants a look. I don't see anything too suspicious about it. http://dl.eve-files.com/media/0705/source.txt

Freylor
Gallente
SnowSink Enterprises.
Posted - 2007.05.10 16:27:00 - [15]
 

Originally by: Segmentor
****, i have just sent an answer to that... Crying or Very sad Was tired after a long workday...
Now i'm fully awake. Shocked


Did you click the link? YARRRR!!

CCP kieron

Posted - 2007.05.10 16:28:00 - [16]
 

Edited by: CCP kieron on 10/05/2007 18:02:59
Update: I received an answer from the Assistant Producer, the survey is legitimate and not a phishing attempt. As I stated earlier, I received the same e-mail survey invitation and the timing coincided with a survey I had been informed of, but the lack of typical CCP branding and format created some internal concern. This has been resolved and should not happen again.

-----------

Oddly enough, I received one of these surveys myself and I don't recognize it. I am checking with the Marketing Department to see if they have a survey in the works.

In the interim, I would advise using discretion when visiting any links sent via e-mail from sources you do not recognize.

Freylor
Gallente
SnowSink Enterprises.
Posted - 2007.05.10 16:30:00 - [17]
 

Edited by: Freylor on 10/05/2007 16:27:35
Originally by: CCP kieron
Oddly enough, I received one of these surveys myself and I don't recognize it. I am checking with the Marketing Department to see if they have a survey in the works.

In the interim, I would advise using discretion when visiting any links sent via e-mail from sources you do not recognize.



Please keep us informed of any developments YARRRR!!

How does one phish all our e-mail addresses btw? I didnt think CCP realised to 3rd parties o_0

Segmentor
The Scope
Posted - 2007.05.10 16:41:00 - [18]
 

Originally by: Freylor
Originally by: Segmentor
****, i have just sent an answer to that... Crying or Very sad Was tired after a long workday...
Now i'm fully awake. Shocked


Did you click the link? YARRRR!!

Yes... Sad

Freylor
Gallente
SnowSink Enterprises.
Posted - 2007.05.10 16:42:00 - [19]
 

Your so gonna lose your **** now :P

Jaffa Agonar
Minmatar
Native Freshfood
Posted - 2007.05.10 16:42:00 - [20]
 

Curiously... did only Gmail users get this? I use Gmail and it seems the other 2 in this thread do as well.

DubanFP
Caldari
Caldari Provisions
Posted - 2007.05.10 16:43:00 - [21]
 

Originally by: Segmentor
Originally by: Freylor
Originally by: Segmentor
****, i have just sent an answer to that... Crying or Very sad Was tired after a long workday...
Now i'm fully awake. Shocked


Did you click the link? YARRRR!!

Yes... Sad

Like i said, log on from a DIFFERENT computer. Go to these forums and click on create account and log on. Change your pasword. QUICKLY

Freylor
Gallente
SnowSink Enterprises.
Posted - 2007.05.10 16:45:00 - [22]
 

Originally by: Jaffa Agonar
Curiously... did only Gmail users get this? I use Gmail and it seems the other 2 in this thread do as well.


Wierd, maybe its exploting a bug in gmail? or got caught my hotmail filters etcetc

NightF0x
Gallente
Intergalactic League of Terrorists
Posted - 2007.05.10 16:51:00 - [23]
 

I received the same message on a non-gmail account. A partial header file for the email was from from

mail64.subscribermail.com ([63.240.155.112]) by asav17.insightbb.com with ESMTP; Thu, 10 May 2007 09:56:12 -0400

I checked out subscribermail.com and they have an email that you can send abuse to. If it is revealed that this is fraudulent, we should all send in emails to the abuse line and get it shut down asap.

DubanFP
Caldari
Caldari Provisions
Posted - 2007.05.10 17:24:00 - [24]
 

/bump "this thread needs looking at"

Trypho
Minmatar
Reikoku
IT Alliance
Posted - 2007.05.10 17:29:00 - [25]
 

I got the same mail on GMail, but I don`t see any link in it, except to see it in a .htm-screen, which according to virusscan gives back nothing dangerous.

Replying to a mail via webinterface won`t affect your PC either. I think it is a CCP-survey tbh., CCP probably is the only source that has my email adres and can associate it with an EVE player. It looks a bit fishy though.

DubanFP
Caldari
Caldari Provisions
Posted - 2007.05.10 17:34:00 - [26]
 

Originally by: Trypho
I got the same mail on GMail, but I don`t see any link in it, except to see it in a .htm-screen, which according to virusscan gives back nothing dangerous.

Replying to a mail via webinterface won`t affect your PC either. I think it is a CCP-survey tbh., CCP probably is the only source that has my email adres and can associate it with an EVE player. It looks a bit fishy though.

the webpage has an unknown script that may have already downloaded something nasty onto your computer. Virus scans won't pick it up if the virus companies havn't picked it up yet.

SiJira
Posted - 2007.05.10 17:35:00 - [27]
 

Originally by: DubanFP

Change your EVE password on a different computer, and run a spyware check ASAP. That "strange" link may very well have been link to to a site that automatically downloads a keylogger onto your computer "and steal your account"
.


i dont know what you guys have as setting for your internet explorer

but i dont have anything able to download without my persmission include activex

cookies can hardly do any damage on their own


Ray McCormack
Nordar Innovations.
Posted - 2007.05.10 17:37:00 - [28]
 

I also got the email (through gmail as well, funnily enough) and checked out the link. Nothing untoward on the page, just standard html. It's also from a reputable company known as Subscribermail (the link points to their domain).

Templer Relleg
4S Corporation
Morsus Mihi
Posted - 2007.05.10 17:48:00 - [29]
 

Edited by: Templer Relleg on 10/05/2007 17:47:22
Very HappyShamless bump.
I clicked the link and actually responded, but also changed my password! LaughingLaughingLaughing

I demand an answer right now if i should panic already!

ChironV
Caldari
Deep Core Mining Inc.
Posted - 2007.05.10 17:51:00 - [30]
 

Originally by: NightF0x
I received the same message on a non-gmail account. A partial header file for the email was from from

mail64.subscribermail.com ([63.240.155.112]) by asav17.insightbb.com with ESMTP; Thu, 10 May 2007 09:56:12 -0400

I checked out subscribermail.com and they have an email that you can send abuse to. If it is revealed that this is fraudulent, we should all send in emails to the abuse line and get it shut down asap.


That IP is from Chicago, Il, owned by CerNet and is a "marketing" email service called SubscriberMail. (IE: spammer)

However the originating ISP looks to be an Insightbb.com customer. (Cable Modem ISP service in the USA) Too bad you didnt get further information so we can tracert to the origin. Could be a zombie computer or someone dumb enough to use their personal computer.

If you get an email, strip the header and put it up here so we can all figure out who's running another scam.


Pages: [1] 2

This thread is older than 90 days and has been locked due to inactivity.


 


The new forums are live

Please adjust your bookmarks to https://forums.eveonline.com

These forums are archived and read-only