Forum Discussion

FreedomRydr's avatar
FreedomRydr
New Contributor

Cox 'Survey'?

I got a page pop up in my Google Chrome browser calling itself a 'Survey', addressing me as 'Dear Cox User' not by name

The image insert tools 'cannot load plugin' so I can't show the page. but below is the actual 'URL' from which it came. I did not follow the 'survey' as it just 'smells bad'. Does anyone know if this is real or just another data mining phishing tool?

http://satisfaction-surveys.org/13/index_b9_us.php?ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F54.0.2840.50%20Safari%2F537.36&browserversion=Chrome%2054&city=Scottsdale&country=US&device=DESKTOP&isp=Cox%20Communications%20inc.&ip=70.162.62.153&os=Windows&osversion=Windows%2010&browser=Chrome&target=%5BCATEGORYID%5D&type=&match=&voluumdata=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&PLACEMENTID=30622&KEYWORD=[KEYWORD]&CATEGORYID=[CATEGORYID]&voluum-cid={voluum-cid}#mce_temp_url#

2 Replies

Replies have been turned off for this discussion
  • EdwardH's avatar
    EdwardH
    Valued Contributor
    While there are survey's that we conduct, I have not seen one ask how long someone has been a customer issued through us. So it is likely that it is a phishing attempt based on the IP address there. The site appears to be no longer valid so we can not directly check it, but if you run across another you can take a screen shot of it and we can check it that way as well.

    ---
  • grymwulf's avatar
    grymwulf
    Contributor II

    It is rather trivial to get the information of which ISP you are using - I bet this image will show you:

    http://www.danasoft.com/vipersig.jpg

    I personally run with ad-blocker and pop-up blocker software for just this reason.