Page 1 of 2
Sonic "survey" spam injected into web requests...?
Posted: Mon Sep 07, 2015 10:13 am
by tbessie
I was just browsing the web and suddenly get a popup at "rewardopportunities" saying I've been selected for a survey for "sonic.net".
Screenshot enclosed (tho' after I said "OK" to the request).
Is this fake spam? If not, what's up with injected as a response to an unrelated HTTP request? This seems so unethical, I can't believe sonic.net commissioned it.
Dane, anyone else - what's this about?
- Tim
Re: Sonic "survey" spam injected into web requests...?
Posted: Mon Sep 07, 2015 11:32 am
by ben.blois
tbessie wrote:I was just browsing the web and suddenly get a popup at "rewardopportunities" saying I've been selected for a survey for "sonic.net".
Screenshot enclosed (tho' after I said "OK" to the request).
Is this fake spam? If not, what's up with injected as a response to an unrelated HTTP request? This seems so unethical, I can't believe sonic.net commissioned it.
Dane, anyone else - what's this about?
- Tim
This is indeed fake spam, thank you for bringing it to our attention!
Re: Sonic "survey" spam injected into web requests...?
Posted: Mon Sep 07, 2015 3:01 pm
by parker_day
You'd get the popup not matter what ISP you use. The page does a reverse lookup of your IP address and changes the name in the ad to match the one accessing the page. So if you used Comcast it would say Comcast. It's not just Sonic. Here is another (safer) example of the same type of tech:

Re: Sonic "survey" spam injected into web requests...?
Posted: Mon Sep 07, 2015 4:48 pm
by tbessie
Thanks for the replies, folks! Yeah, I didn't think it was ligit, but thought I'd ask just to make sure. It's the first of its kind I've seen before, amazingly.
- Tim
Re: Sonic "survey" spam injected into web requests...?
Posted: Tue Sep 08, 2015 6:55 pm
by dct
I had someone give us a call recently wondering why we never shipped out our Miraculous Anti-Aging cream. That was pretty confusing!
Re: Sonic "survey" spam injected into web requests...?
Posted: Mon Sep 14, 2015 11:48 am
by a1zealot
I Just got this today in my Sonic email account.
Certainly looks like Phishing to me, has anyone else got this?
Thanks,
-m
Re: Sonic "survey" spam injected into web requests...?
Posted: Mon Sep 14, 2015 2:00 pm
by bobrk
Definitely. I would be interesting to see what the links are pointing at.
Re: Sonic "survey" spam injected into web requests...?
Posted: Mon Sep 14, 2015 3:33 pm
by Guest
bobrk wrote:Definitely. I would be interesting to see what the links are pointing at.
http://whois.icann.org/en/lookup?name=son.net
Some stupid shell company.
Re: Sonic "survey" spam injected into web requests...?
Posted: Wed Sep 16, 2015 9:44 am
by brendanw
That message is definitely a phishing attempt that Support is aware of and has taken steps to block.
Re: Sonic "survey" spam injected into web requests...?
Posted: Wed Sep 16, 2015 10:03 am
by a1zealot
Thank you!
-m