EVE-Search ForumWatch

Warning, potential malware spam to subscribers(?) - by Banana Torres

Mon, 14 Jul 2009 14:51:00 +0000

So, two weeks Eve Online for free is malware now?

I am beginning to subscribe to the argument that the IQ of the Eve community has fallen to that of the WoW community.

Well done 'tards!

Warning, potential malware spam to subscribers(?) - by Blaster Pax

Mon, 14 Jul 2009 13:25:00 +0000

Originally by: Crumplecorn
Originally by: Blaster Pax
I received this email twice now at two different email addresses I signed up for Eve with. That's fine and all, good to know it's legit, but I have yet to have any of my accounts reactivated using the link given. It just logs in to the expired account, so my only option is to reactivate through buying a time card. Am I doing something wrong?
There should be a banner to click when you log in to your account management page.

I've logged into my 9 inactive accounts and 2 active accounts.. none of which any new banner or link, just the normal account management options..

Warning, potential malware spam to subscribers(?) - by Loyal Servant

Mon, 14 Jul 2009 13:20:00 +0000

Edited by: Loyal Servant on 14/07/2008 13:23:25

Originally by: CCP Wrangler
This is a legit email sent by us.

Then why don't you idiots use your own servers and not others that look like spammers and scammers?

Meh...

Edit:
I don't even see these guys in your SPF record:
v=spf1 mx ip4:87.237.32.0/24 ip4:87.237.38.0/24 ip4:87.237.39.0/24 mx:mail.global.frontbridge.com mx:ymir.ccpgames.com all

Thats probably why I don't have this email anyplace, it smells like spam, and looks like a scam and it went right into /dev/null

Warning, potential malware spam to subscribers(?) - by Crumplecorn

Mon, 14 Jul 2009 13:10:00 +0000

Originally by: Blaster Pax
I received this email twice now at two different email addresses I signed up for Eve with. That's fine and all, good to know it's legit, but I have yet to have any of my accounts reactivated using the link given. It just logs in to the expired account, so my only option is to reactivate through buying a time card. Am I doing something wrong?

There should be a banner to click when you log in to your account management page.
-

DesuSigs

Warning, potential malware spam to subscribers(?) - by Blaster Pax

Mon, 14 Jul 2009 13:09:00 +0000

I received this email twice now at two different email addresses I signed up for Eve with. That's fine and all, good to know it's legit, but I have yet to have any of my accounts reactivated using the link given. It just logs in to the expired account, so my only option is to reactivate through buying a time card. Am I doing something wrong?

Warning, potential malware spam to subscribers(?) - by Khlitouris RegusII

Sun, 6 Jul 2009 02:51:00 +0000

Originally by: CCP Wrangler
This is a legit email sent by us.

Can ccp please stop sending me unsolicited spam then i havent unsubscribed nor is my account closed atm so i don't need spam about coming back to eve when ive never left.

Warning, potential malware spam to subscribers(?) - by Fastercart

Sun, 6 Jul 2009 00:52:00 +0000

Originally by: Jim McGregor
Since Ive never heard of them (yes, im outside the US), my first thought was actually they sound like a xxx provider.

Well, have you seen their commercials? (:
__
Rorqual AKA Mega Maid

Oh, my God. It's Mega Maid. She's gone from suck to blow.

Warning, potential malware spam to subscribers(?) - by Mika Meroko

Sat, 5 Jul 2009 09:02:00 +0000

oh god.. CCP used the word "Epic"...

for some reason that sounded so wrong....

I mean, Fleet battles always felt like a tragedy =P

Warning, potential malware spam to subscribers(?) - by Andrue

Sat, 5 Jul 2009 08:38:00 +0000

Originally by: CCP Wrangler
Originally by: Jim McGregor
Edited by: Jim McGregor on 04/07/2008 18:48:24

Originally by: CCP Wrangler
This is a legit email sent by us.

Winterblink, this is all your fault.

I too feel it is appropriate to blame Winterblink in this case. Mainly because I always like to be able to blame Winterblink. The fact I haven't had a real reason to blame Winterblink is beside the point.

I find that blaming colleagues for things is often a good idea. At the very least it's entertaining. The best colleagues to pick are those that are on holiday or better yet, those that are late to the meeting and haven't arrived yet.
--
(Sarcastic mission running veteran, 4+ years)

[Brackley, UK]

My budgie can say "ploppy bottom". You have been warned.

Warning, potential malware spam to subscribers(?) - by Jim McGregor

Sat, 5 Jul 2009 08:07:00 +0000

Edited by: Jim McGregor on 05/07/2008 08:08:00

Originally by: Fastercart
Maybe godaddy isn't popular outside the US, but they have great commercials. They even have commercials during the Superbowl.

http://www.youtube.com/user/GoDaddyTV

Since Ive never heard of them (yes, im outside the US), my first thought was actually they sound like a xxx provider.

---
Its dead, Jim.

Warning, potential malware spam to subscribers(?) - by Lord Fitz

Sat, 5 Jul 2009 08:05:00 +0000

This is one of several mails sent out over the years just like this, commercial mass mailing systems are generally much easier than designing one in house.

My complaint is that while I was sent two of these (And I do have 2 accounts inactive), the link doesn't seem to work, when I login it just sends me to the account management page with no time added. (to an inactive account).

Warning, potential malware spam to subscribers(?) - by DasDizzy

Sat, 5 Jul 2009 03:39:00 +0000

how does this thing work?
[/sig start]
Due to popular request i have now added a thing to show where my sig starts

In federate gallente, armor tanks YOU
[sig end]

Warning, potential malware spam to subscribers(?) - by Fastercart

Sat, 5 Jul 2009 00:53:00 +0000

Maybe godaddy isn't popular outside the US, but they have great commercials. They even have commercials during the Superbowl.

http://www.youtube.com/user/GoDaddyTV

__
Rorqual AKA Mega Maid

Oh, my God. It's Mega Maid. She's gone from suck to blow.

Warning, potential malware spam to subscribers(?) - by Anti Excedrin

Sat, 5 Jul 2009 00:16:00 +0000

Sweet, 14 more days.

Warning, potential malware spam to subscribers(?) - by Vala Draaken

Sat, 5 Jul 2009 00:13:00 +0000

Yeah, I must agree.

That mail looks very fake. If I hadn't petitioned it I would never have believed it was legit.

First of all because the reply-to and the link your supposed to sign-up on, is not on eve-online.com.

Second, because I have 2 active accounts, I would not expect to get trial/reactivation mails from CCP.

All in all it screams fake to me, but apparently it's just unprofessional. I expect better from CCP.

Just my opion,

Vala D.
--------

Warning, potential malware spam to subscribers(?) - by Sirion Fujiwara

Fri, 4 Jul 2009 21:14:00 +0000

So anyway - this CP20 thingy, is that in any way related to t20? Oh, sorry....

Warning, potential malware spam to subscribers(?) - by Drizit

Fri, 4 Jul 2009 20:56:00 +0000

Originally by: Winterblink
Originally by: Jim McGregor
Edited by: Jim McGregor on 04/07/2008 18:13:56

Domain Name: CP20.COM
Registrar: GODADDY.COM, INC.

Godaddy.com? I dont think this is CCP.

Damn, Winterblink was a few seconds faster... oh well. We are both right.

*lightsaber swings down at your neck*

You are beaten.

CCP wranglers Mega Pulse laser hit's you in the back. Go home Vader, you're in the wrong game.
--

Freighters need a tank

Warning, potential malware spam to subscribers(?) - by F'nog

Fri, 4 Jul 2009 20:55:00 +0000

Originally by: Winterblink
Originally by: CCP Wrangler
This is a legit email sent by us.

Can I still cut Jim's hand off and tell him I'm his father?

Father or daddy?

Originally by: Kazuma Saruwatari

F'nog for Amarr Emperor. Nuff said

Originally by: Chribba
Go F'nog! You're a hero! Not a Zero! /me bows

Warning, potential malware spam to subscribers(?) - by Jinx Barker

Fri, 4 Jul 2009 20:53:00 +0000

Originally by: Mithfindel
Back to the topic from Wrangler, what's the funny part is that this is being posted to active accounts.

Thats a pretty valid question, why was it e-mailed to current accounts - not to expired accounts only? Does that mean we get extra 14 days if we login/engage in FW?

Warning, potential malware spam to subscribers(?) - by fuxinos

Fri, 4 Jul 2009 20:49:00 +0000

this doestn seem to work (for me)
tried to (re)activate 2 older accounts but i cant login with neither of them

Warning, potential malware spam to subscribers(?) - by Mithfindel

Fri, 4 Jul 2009 20:15:00 +0000

Back to the topic from Wrangler, what's the funny part is that this is being posted to active accounts. Couldn't you just plain add the 14 days of extra game time without any hassles?

Also, down with CONCORD and boost the empire navies a bit and let them take CONCORD's role. If FWers are crying foul for getting popped in hostile hisec, then make the anti-criminal police ships a tad tougher than the "military" ships. While it doesn't make absolutely any sense, hey, it's a game.

Warning, potential malware spam to subscribers(?) - by Jinx Barker

Fri, 4 Jul 2009 19:39:00 +0000

Originally by: CCP Wrangler
Really Blinky, the only reason that still works is that it's so old no one remembers it. Come up with something new!

I think Winterblink has been challenged here.... I can not wait to see the next comic.

Warning, potential malware spam to subscribers(?) - by CCP Wrangler

Fri, 4 Jul 2009 19:31:00 +0000

Really Blinky, the only reason that still works is that it's so old no one remembers it. Come up with something new!

Wrangler
Community Manager
CCP Hf, EVE Online
Email

"It's not worth doing something unless you are doing something that someone, somewhere, would much rather you weren't doing."

Warning, potential malware spam to subscribers(?) - by Tippia

Fri, 4 Jul 2009 19:02:00 +0000

Originally by: Winterblink
Need some protection?

(edit: off to a meeting, enjoy the wrangler-based fallout, mwa-ha-hah)

I'm willing to chip in up to and including 10ISK to cover the reconstructive surgery poor WB is going to need…

Warning, potential malware spam to subscribers(?) - by Jim McGregor

Fri, 4 Jul 2009 18:59:00 +0000

Originally by: Winterblink
Edited by: Winterblink on 04/07/2008 18:56:53

Originally by: Jim McGregor
Its always appropriate to blame Winterblink. It just feels... right.

Also, he killed me before in this thread. I frown upon that.

Need some protection?

(edit: off to a meeting, enjoy the wrangler-based fallout, mwa-ha-hah)

"One size fits all"...

---
Its dead, Jim.

Warning, potential malware spam to subscribers(?) - by Tarminic

Fri, 4 Jul 2009 18:56:00 +0000

Dust off and nuke the site from orbit. It's the only way to be sure.
----------------
Play EVE: Downtime Madness v0.83 (Updated 7/3)

Warning, potential malware spam to subscribers(?) - by Tippia

Fri, 4 Jul 2009 18:56:00 +0000

Originally by: Winterblink
Don't make me do it man. You know what, and you know I'll do it. :)

I say do it anyway – just to show him you're not kidding around…

…whatever "it" is.

Warning, potential malware spam to subscribers(?) - by Winterblink

Fri, 4 Jul 2009 18:56:00 +0000

Edited by: Winterblink on 04/07/2008 18:56:53

Originally by: Jim McGregor
Its always appropriate to blame Winterblink. It just feels... right.

Also, he killed me before in this thread. I frown upon that.

Need some protection?

(edit: off to a meeting, enjoy the wrangler-based fallout, mwa-ha-hah)

warp drive active | nature vraie

Warning, potential malware spam to subscribers(?) - by Jim McGregor

Fri, 4 Jul 2009 18:54:00 +0000

Edited by: Jim McGregor on 04/07/2008 18:54:18

Originally by: CCP Wrangler
Originally by: Jim McGregor
Edited by: Jim McGregor on 04/07/2008 18:48:24

Originally by: CCP Wrangler
This is a legit email sent by us.

Winterblink, this is all your fault.

I too feel it is appropriate to blame Winterblink in this case. Mainly because I always like to be able to blame Winterblink. The fact I haven't had a real reason to blame Winterblink is beside the point.

Its always appropriate to blame Winterblink. It just feels... right.

Also, he killed me before in this thread. I frown upon that.

---
Its dead, Jim.

Warning, potential malware spam to subscribers(?) - by Winterblink

Fri, 4 Jul 2009 18:54:00 +0000

Originally by: CCP Wrangler
I too feel it is appropriate to blame Winterblink in this case. Mainly because I always like to be able to blame Winterblink. The fact I haven't had a real reason to blame Winterblink is beside the point.

Don't make me do it man. You know what, and you know I'll do it. :)

warp drive active | nature vraie

Warning, potential malware spam to subscribers(?) - by CCP Wrangler

Fri, 4 Jul 2009 18:52:00 +0000

Originally by: Jim McGregor
Edited by: Jim McGregor on 04/07/2008 18:48:24

Originally by: CCP Wrangler
This is a legit email sent by us.

Winterblink, this is all your fault.

I too feel it is appropriate to blame Winterblink in this case. Mainly because I always like to be able to blame Winterblink. The fact I haven't had a real reason to blame Winterblink is beside the point.

Wrangler
Community Manager
CCP Hf, EVE Online
Email

"It's not worth doing something unless you are doing something that someone, somewhere, would much rather you weren't doing."

Warning, potential malware spam to subscribers(?) - by Jim McGregor

Fri, 4 Jul 2009 18:46:00 +0000

Edited by: Jim McGregor on 04/07/2008 18:48:24

Originally by: CCP Wrangler
This is a legit email sent by us.

Winterblink, this is all your fault.

---
Its dead, Jim.

Warning, potential malware spam to subscribers(?) - by CCP Wrangler

Fri, 4 Jul 2009 18:45:00 +0000

This is a legit email sent by us.

Wrangler
Community Manager
CCP Hf, EVE Online
Email

"It's not worth doing something unless you are doing something that someone, somewhere, would much rather you weren't doing."

Warning, potential malware spam to subscribers(?) - by Winterblink

Fri, 4 Jul 2009 18:45:00 +0000

Originally by: CCP Wrangler
This is a legit email sent by us.

Can I still cut Jim's hand off and tell him I'm his father?

warp drive active | nature vraie

Warning, potential malware spam to subscribers(?) - by Jim McGregor

Fri, 4 Jul 2009 18:43:00 +0000

I want to know how they knew I was a Eve subscriber and also how they found out my email address I use for Eve...

---
Its dead, Jim.

Warning, potential malware spam to subscribers(?) - by Jack Rowanburn

Fri, 4 Jul 2009 18:37:00 +0000

Godaddy don't support or sanction scammers, theyre a domain registrar in the US/Canada. Theyre like 123reg in the UK - And like any registrar, if you register your name with them and host your services elsewhere they can't do anything about how you use the address.
-------------
Insert Sig Here

Warning, potential malware spam to subscribers(?) - by Pan Crastus

Fri, 4 Jul 2009 18:27:00 +0000

Originally by: Pan Crastus
After a closer look, this does seem to be authentic.

The URL in the E-Mail leads to a HTTP redirect to https://secure.eve-online.com/login.aspx?id=reactivate14dayfree ... now unless something's completely broken about HTTP / current browsers, I don't see how they could exploit this XSS-style or so.

Second thought: of course something entirely different might happen depending on the HTTP client used... If I didn't use an exploitable browser, I might have seen something harmless instead of the actual exploit.

How to PVP: 1. buy ISK with GTCs, 2. fit cloak, learn aggro mechanics, 3. buy second account for metagaming

Warning, potential malware spam to subscribers(?) - by Pan Crastus

Fri, 4 Jul 2009 18:24:00 +0000

After a closer look, this does seem to be authentic.

The URL in the E-Mail leads to a HTTP redirect to https://secure.eve-online.com/login.aspx?id=reactivate14dayfree ... now unless something's completely broken about HTTP / current browsers, I don't see how they could exploit this XSS-style or so.

How to PVP: 1. buy ISK with GTCs, 2. fit cloak, learn aggro mechanics, 3. buy second account for metagaming

Warning, potential malware spam to subscribers(?) - by Letrange

Fri, 4 Jul 2009 18:24:00 +0000

and a quick search on the internet reveals that godaddy either facilitates scammers or are so lax that scammers know to make use of them.

Warning, potential malware spam to subscribers(?) - by Tamia Clant

Fri, 4 Jul 2009 18:17:00 +0000

This thread is going places...

Looking for queue-free research slots? Click here!

Warning, potential malware spam to subscribers(?) - by Jim McGregor

Fri, 4 Jul 2009 18:16:00 +0000

Edited by: Jim McGregor on 04/07/2008 18:17:50

Originally by: Winterblink
Originally by: Jim McGregor

Domain Name: CP20.COM
Registrar: GODADDY.COM, INC.

Godaddy.com? I dont think this is CCP.

Damn, Winterblink was a few minutes faster... oh well. We are both right.

*lightsaber swings down at your neck*

You are beaten.

---
Its dead, Jim.

Warning, potential malware spam to subscribers(?) - by Winterblink

Fri, 4 Jul 2009 18:15:00 +0000

Originally by: Jim McGregor
Edited by: Jim McGregor on 04/07/2008 18:13:56

Domain Name: CP20.COM
Registrar: GODADDY.COM, INC.

Godaddy.com? I dont think this is CCP.

Damn, Winterblink was a few seconds faster... oh well. We are both right.

*lightsaber swings down at your neck*

You are beaten.

warp drive active | nature vraie

Warning, potential malware spam to subscribers(?) - by Jim McGregor

Fri, 4 Jul 2009 18:13:00 +0000

Edited by: Jim McGregor on 04/07/2008 18:17:31

Domain Name: CP20.COM
Registrar: GODADDY.COM, INC.

Godaddy.com? I dont think this is CCP.

Damn, Winterblink was a few minutes faster... oh well. We are both right.
---
Its dead, Jim.

Warning, potential malware spam to subscribers(?) - by Winterblink

Fri, 4 Jul 2009 18:11:00 +0000

Edited by: Winterblink on 04/07/2008 18:12:57

Originally by: Tamia Clant
CCP has often used weird addresses when sending out mail, I wouldn't be surprised if this one was sanctioned by CCP. Better not risk it until we hear from them, though.

NEGATIVE, I've never seen addresses that weren't from CCP owned domains. This one's not legit.

Quote:

Registrant:
Got Corporation Inc.

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: CP20.COM

Domain servers in listed order:
PDNS1.ULTRADNS.NET
PDNS2.ULTRADNS.NET
PDNS3.ULTRADNS.ORG
PDNS4.ULTRADNS.ORG
PDNS5.ULTRADNS.INFO
PDNS6.ULTRADNS.CO.UK

For complete domain details go to:
http://who.godaddy.com/whoischeck.aspx?Domain=CP20.COM

----

Registrant:
Got Corporation Inc.

685 Cathcart St.
Suite 300
Montreal, Quebec H3B 1M7
Canada

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: CP20.COM
Created on: 25-Aug-04
Expires on: 25-Aug-14
Last Updated on: 03-Aug-07

Administrative Contact:
T, I it@gotcorp.com
Got Corporation Inc.
685 Cathcart St.
Suite 300
Montreal, Quebec H3B 1M7
Canada
5142820595 Fax -- 5142821908

Technical Contact:
T, I it@gotcorp.com
Got Corporation Inc.
685 Cathcart St.
Suite 300
Montreal, Quebec H3B 1M7
Canada
5142820595 Fax -- 5142821908

Domain servers in listed order:
PDNS1.ULTRADNS.NET
PDNS2.ULTRADNS.NET
PDNS3.ULTRADNS.ORG
PDNS4.ULTRADNS.ORG
PDNS5.ULTRADNS.INFO
PDNS6.ULTRADNS.CO.UK

Registry Status: clientDeleteProhibited
Registry Status: clientRenewProhibited
Registry Status: clientTransferProhibited
Registry Status: clientUpdateProhibited

warp drive active | nature vraie

Warning, potential malware spam to subscribers(?) - by Pan Crastus

Fri, 4 Jul 2009 18:10:00 +0000

What is odd is that nowhere on eve-online.com there is a reference to this and surely they would link to an official page about this offer?

How to PVP: 1. buy ISK with GTCs, 2. fit cloak, learn aggro mechanics, 3. buy second account for metagaming

Warning, potential malware spam to subscribers(?) - by Tamia Clant

Fri, 4 Jul 2009 18:09:00 +0000

CCP has often used weird addresses when sending out mail, I wouldn't be surprised if this one was sanctioned by CCP. Better not risk it until we hear from them, though.

Looking for queue-free research slots? Click here!

Warning, potential malware spam to subscribers(?) - by Pan Crastus

Fri, 4 Jul 2009 18:08:00 +0000

I just got this:

-----
Received: from mta119.cp20.com (mta119.cp20.com [216.24.226.119])
...
Reply-To: EVE_Online_meddj@cp20.com
Errors-To: EVE_Online_meddj@cp20.com
Date: Fri, 4 Jul 2008 13:39:13 -0400
Bounces-To: EVE_Online_meddj@cp20.com
X-Campaign: 111720/257494/86012437
Message-ID: <1215187543306.111720.257494.86012437@backend.cp20.com>
To: ...
From: "EVE Online"
Subject: EVE Online - War Is Upon Us

WAR IS UPON US!

>>> EMERGENCY ACTION MESSAGE <<<

SENDER:? CONCORD DIRECT ENFORCEMENT DIVISION

GENERAL BROADCAST

MESSAGE READS:

TO ALL PILOTS:

CONCORD HAS RECEIVED AUTHENTICATED COMMUNICATIONS FROM AMARR EMPIRE, CALDARI STATE,
GALLENTE FEDERATION AND MINMATAR REPUBLIC MILITARY REPRESENTATIVES CONFIRMING THAT A
STATE OF WAR HAS BEEN DECLARED WITHIN THE NEW EDEN CLUSTER.

DIRECT ENFORCEMENT DIVISION ASSETS HAVE BEEN REDEPLOYED TO PROTECT CONCORD
FACILITIES. PRIMARY RESPONSIBILITY FOR IN-SYSTEM PROTECTION OF NEUTRALS AND EMPIRE
NATIONALS HAS SHIFTED TO LOCAL MILITARY AUTHORITIES.

CONCORD CANNOT ASSURE THE SAFETY OR SECURITY OF ANY SHIP IN TRANSIT AT THIS TIME.

PERSONAL MESSAGE FROM CONCORD DIRECTORATE:

DIPLOMACY HAS FAILED. OUR PRAYERS ARE WITH YOU ALL.

>>> MESSAGE ENDS <<<

- - - - - -?- - - - - -?- - - - - -?- - - - - -?- - - - - -?- - - - - -
With the launch of Empyrean Age, the newest expansion for EVE Online, pilots can now
engage in solo, small group or even fleet battles any time you want via a new
feature called Factional Warfare.? Players have asked for easier, more accessible
PvP fights and to have the ability to find friends to fight with without making the
commitment to 0.0 space and Alliances. CCP has answered with Factional Warfare - war
is upon New Eden and your help is needed.

Enlist today and add 14 free days to your account.
http://cp20.com/Tracking/[...]
?
Log in, and see what you've been missing.

Players can now enlist in any of the four empire militias, granting access to
special missions into contested space and epic PvP action where you can engage in
combat against opposing militia forces in high security space - without CONCORD
interference.? Each combat zone is full of missions built for new and veteran
players alike - including those accessible only to pilots in inexpensive frigates.

Enlisted pilots will also be able to fight for the control of entire star systems in
designated combat zones. Militias battle over control bunkers in each zone which can
help direct? that system's defenses. Capturing and controlling these systems is
critical to determining who will win and who will lose in the war raging across New
Eden.

We want you back.? If you left EVE Online because you found it difficult to find PvP
action, we are confident Factional Warfare solves that problem.? If you haven't
played EVE Online recently you will also be surprised by the incredible new graphics
released last year in the Trinity expansion as well.

Offer valid until July 31st, 2008. If user converts their Trial account into a Paid
Subscription, payment options include a valid credit card, debit card or direct
debit.

-----

This looks very "official" and obviously they have some subscriber information(?), but cp20.com does not seem to be affiliated with CCP. If they are, this is still odd...

Can anyone at CCP shed some light on this?

How to PVP: 1. buy ISK with GTCs, 2. fit cloak, learn aggro mechanics, 3. buy second account for metagaming