Forum Discussion

duke_mabank's avatar
duke_mabank
Sophomore
8 years ago

Is this real from Hughesnet corporate or malicious phishing

I treat all email as malicious if I don't request it so if it is phishing, thought you would want to know.

Firefox message source below the email.

 

Return-Path: <no-reply@hughesnet.com>
Received: from smtp8.co1.qemailserver.com (smtp8.co1.qemailserver.com [162.247.217.58])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mtaig-mac01.mx.aol.com (Internet Inbound) with ESMTPS id BDBC770000090
	for <@aol.com>; Wed,  2 Aug 2017 16:26:05 -0400 (EDT)
Received: from jwm4-app.az1.qprod.net (unknown [10.202.65.11])
	by smtp8.co1.qemailserver.com (Postfix) with ESMTP id 25043C2850
	for <@aol.com>; Wed,  2 Aug 2017 20:26:05 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=qemailserver.com;
	s=qualtrics; t=1501705565;
	bh=fPYVphw3inOeWIHQ0GJg1kVlEApi+qjN3o/lkkUs7OI=;
	h=Date:From:Reply-To:To:Subject:List-Unsubscribe;
	b=V4ONPUhCL5PTrZ1Ql6msb2gLECZO69s85yXflb51mXitqxIzMqwiePKTtcvs0IItH
	 xw5DWD9MAuBleJsUUhIGbRnR6rM15TOAhcHxmxPULsTWa+X/fY1aW5/dwXBQeTP0FK
	 b4NW8ImUj9ijNvERBDdddKIdiIYLjHaeHYKVYcB0=
Date: Wed, 2 Aug 2017 14:26:05 -0600 (MDT)
From: HughesNet Corporate Management <no-reply@hughesnet.com>
Sender: HughesNet Corporate Management <no-reply@hughesnet.com>
Reply-To: HughesNet Corporate Management <research@hughesnet.com>
To: 
Message-ID: <856850247.11493125.1501705565193.JavaMail.default@jwm4-app.az1.qprod.net>
Subject: Feedback Request on HughesNet ECC
MIME-Version: 1.0
Content-Type: multipart/mixed; 
	boundary="----=_Part_11493122_2109852104.1501705565084"
X-QUMID: UR_068Y8q4PpPOAtBG-EMD_aXkOsO6rk8GxFfT-MLRP_d12Nu2pzArClYUZ-SV_3PNpsaguVUUW9N2
List-Unsubscribe: <mailto:abuse@qemailserver.com>
x-aol-global-disposition: G
X-AOL-SCOLL-AUTHENTICATION: mtaig-mac01.mx.aol.com ; domain : qemailserver.com DKIM : pass
Authentication-Results: mx.aol.com;
	spf=permerror (aol.com: while processing the SPF record for hughesnet.com we encountered a fatal error.) smtp.mailfrom=hughesnet.com;
	dkim=pass (aol.com: email passed verification from the domain qemailserver.com.) header.i=@qemailserver.com;
x-aol-sid: 3039ac1adec15982355d2fb2
X-AOL-IP: 162.247.217.58
X-AOL-SPF: domain : hughesnet.com SPF : permerror

------=_Part_11493122_2109852104.1501705565084
Content-Type: multipart/alternative; 
	boundary="----=_Part_11493123_360980208.1501705565084"

------=_Part_11493123_360980208.1501705565084
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Dear Timothy,

During the past several weeks, you found it necessary to=C2=A0escalate your
HughesNet=C2=A0support issue=C2=A0beyond the standard support process to ou=
r corporate
office for resolution.=C2=A0 By responding to these few questions, we expec=
t to
improve support in our standard call center, preventing customers such as
yourself from having to take more action to resolve your problem.=C2=A0

Just as a reminder, this survey will=C2=A0investigate=C2=A0why=C2=A0that es=
calation was
necessary=C2=A0and once escalated, understand your=C2=A0satisfaction with=
=C2=A0the corporate
office Executive Customer Care Agent that handled your recent case.

Follow this link to the Survey:
Take the Survey
<http://hughes.az1.qualtrics.com/jfe/form/SV_3PNpsaguVUUW9N2?Q_DL=3DaXkOsO6=
rk8GxFfT_3PNpsaguVUUW9N2_MLRP_d12Nu2pzArClYUZ&Q_CHL=3Demail>

Or copy and paste the URL below into your internet browser:

http://hughes.az1.qualtrics.com/jfe/form/SV_3PNpsaguVUUW9N2?Q_DL=3DaXkOsO6r=
k8GxFfT_3PNpsaguVUUW9N2_MLRP_d12Nu2pzArClYUZ&Q_CHL=3Demail

Thank you for your feedback.=C2=A0

HughesNet Corporate Management




http://hughes.az1.qualtrics.com/CP/Register.php?OptOut=3Dtrue&RID=3DMLRP_d1=
2Nu2pzArClYUZ&LID=3DGR_5BViHaVIdnYpgfX&CLID=3DPL_abGahtAf48c5zkp&BT=3DaHVna=
GVz%250D%250A&_=3D1

<http://hughes.az1.qualtrics.com/CP/Register.php?OptOut=3Dtrue&RID=3DMLRP_d=
12Nu2pzArClYUZ&LID=3DGR_5BViHaVIdnYpgfX&CLID=3DPL_abGahtAf48c5zkp&BT=3DaHVn=
aGVz%250D%250A&_=3D1>
------=_Part_11493123_360980208.1501705565084
Content-Type: multipart/related; 
	boundary="----=_Part_11493124_150019141.1501705565084"

------=_Part_11493124_150019141.1501705565084
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html>
 <head></head>=20
 <body>=20
  <p><span style=3D"font-size: 12px"><span style=3D"font-family: arial, hel=
vetica, sans-serif">Dear Timothy,</span></span><br> <br> During the past se=
veral weeks, you found it necessary to&nbsp;escalate your HughesNet&nbsp;su=
pport issue&nbsp;beyond the standard support process to our corporate offic=
e for resolution.&nbsp; By responding to these few questions, we expect to =
improve support in our standard call center, preventing customers such as y=
ourself from having to take more action to resolve your problem.&nbsp;<br> =
<br> Just as a reminder, this survey will&nbsp;investigate&nbsp;why&nbsp;th=
at escalation was necessary&nbsp;and once escalated, understand your&nbsp;s=
atisfaction with&nbsp;the corporate office Executive Customer Care Agent th=
at handled your recent case.<span style=3D"font-size: 12px"><span style=3D"=
font-family: arial, helvetica, sans-serif"> </span></span><br> <br> <span s=
tyle=3D"font-size: 12px"><span style=3D"font-family: arial, helvetica, sans=
-serif"><strong>Follow this link to the Survey: </strong><br> <a href=3D"ht=
tp://hughes.az1.qualtrics.com/jfe/form/SV_3PNpsaguVUUW9N2?Q_DL=3DaXkOsO6rk8=
GxFfT_3PNpsaguVUUW9N2_MLRP_d12Nu2pzArClYUZ&amp;Q_CHL=3Demail">Take the Surv=
ey</a><br> <br> Or copy and paste the URL below into your internet browser:=
<br> http://hughes.az1.qualtrics.com/jfe/form/SV_3PNpsaguVUUW9N2?Q_DL=3DaXk=
OsO6rk8GxFfT_3PNpsaguVUUW9N2_MLRP_d12Nu2pzArClYUZ&amp;Q_CHL=3Demail</span><=
/span><br> <br> Thank you for your feedback.&nbsp;<br> <br> HughesNet Corpo=
rate Management<br> <br> <img height=3D"25" src=3D"https://hughes.az1.qualt=
rics.com/CP/Graphic.php?IM=3DIM_6GqRJrvRFevlK6x" style=3D"width: 164px; hei=
ght: 25px;" width=3D"164"><br> <br> <a href=3D"http://hughes.az1.qualtrics.=
com/CP/Register.php?OptOut=3Dtrue&amp;RID=3DMLRP_d12Nu2pzArClYUZ&amp;LID=3D=
GR_5BViHaVIdnYpgfX&amp;CLID=3DPL_abGahtAf48c5zkp&amp;BT=3DaHVnaGVz%250D%250=
A&amp;_=3D1">http://hughes.az1.qualtrics.com/CP/Register.php?OptOut=3Dtrue&=
amp;RID=3DMLRP_d12Nu2pzArClYUZ&amp;LID=3DGR_5BViHaVIdnYpgfX&amp;CLID=3DPL_a=
bGahtAf48c5zkp&amp;BT=3DaHVnaGVz%250D%250A&amp;_=3D1</a></p>=20
  <img width=3D"1" height=3D"1" alt=3D"" src=3D"http://hughes.az1.qualtrics=
.com/WRQualtricsContacts/Watermark.php?UID=3DUR_068Y8q4PpPOAtBG&amp;EMD=3DE=
MD_aXkOsO6rk8GxFfT&amp;CGC=3DMLRP_d12Nu2pzArClYUZ"> =20
 </body>
</html>
------=_Part_11493124_150019141.1501705565084--

------=_Part_11493123_360980208.1501705565084--

------=_Part_11493122_2109852104.1501705565084--
  • That appears to be a legitimate survey, they use Qualtrics for their surveys typically.

  • C0RR0SIVE's avatar
    C0RR0SIVE
    Associate Professor

    That appears to be a legitimate survey, they use Qualtrics for their surveys typically.

    • Liz's avatar
      Liz
      Moderator

      I've edited the original post to remove e-mail addresses to protect the customer's personal info.