Legit or a phishing scam?

[bookworm370]

I just got the following. The url points to a pstmrk.it domain but with a userinterview tag.
Just curious if anyone else got this. The first thing that caught my eye was that it came under an email that Dish doesn't have as my main email address.

Smells like a phishing scam.

Hi xxxxxx,


My name is Kai and I'm a user researcher at Dish TV. We are working on making some improvements to the Home Screen and would love your input on the current experience.


If you're interested in sharing your feedback, it should only take 50 minutes and you'll receive $65.00 via choice of dozens of digital gift cards as a thank you.
Click the button below to get started!

 

[cpdretired]

One for the spam folder.

 

[Yespage]

If it were any more suspicious of a phishing scam, it'll be slapping its tail in your face.

• Misspelled your name 'xxxxxxx'
• "Dish TV"
• improvements to the Home Screen?
• 50 minutes?!
• Offer of money in a form of "digital gift cards".
• "Click the button"

However, kudos to the scam using the right version of "you're", but the sentences due tend to run on.

 

[chiodo]

Most likely English is not my first language scammer.

 

[Josh.M]

Did the email include a last name?

What was the full email address?

 

[bookworm370]

If it were any more suspicious of a phishing scam, it'll be slapping its tail in your face.

• Misspelled your name 'xxxxxxx'

However, kudos to the scam using the right version of "you're", but the sentences due tend to run on.

I did the xxxxxx as they used my real first name.

 

[bookworm370]

Did the email include a last name?

What was the full email address?

No last name, just my real first name.

The email address (easy to spoof) says "research@userinterviews.com"

The link goes to.. I removed some stuff so that someone here doesn't accidentally click it.
And changed some of the % to @'s to make it invalid. So just substitute % for the @ and that's the URL it pointed to.

https://click.pstmrk.it/2sm/www.userinterviews.com@2Fprojects@2Ft49hcwhn4A@2Fapply%3Fparticipant_id@3D4206502@26participant_screener_key%3DX8bhISfWpYFctxLG/YK7GejIN/8NxD/MKhwm2wgxf/eyJ1aWQiOiI3ODUzMToxNjY0Mzk0NTE4OnQ0OWhjd2huNEEiLCJlbWFpbF9wdXJwb3NlIjoicGFydGljaXBhbnRfaW52aXRhdGlvbiJ9

 

[clone1008]

• Improvements to the Home Screen?

FYI, there is a Home screen now on Hopper Plus and Joey 4s

 

[Josh.M]

No last name, just my real first name.

The email address (easy to spoof) says "research@userinterviews.com"

The link goes to.. I removed some stuff so that someone here doesn't accidentally click it.
And changed some of the % to @'s to make it invalid. So just substitute % for the @ and that's the URL it pointed to.

I spoke to the individual that is running this project and he said

"Hey sir, yup that's legit. They would have signed up for products research pool within the last year. The feedback is good. I will work on making it look less like spam"

Thanks!

 

[Josephinelcajon]

Did the email include a last name?

What was the full email address?

Does Dish have a "abuse@dish.com" to forward these emails to? THANKS!

 

[Josephinelcajon]

No last name, just my real first name.

The email address (easy to spoof) says "research@userinterviews.com"

The link goes to.. I removed some stuff so that someone here doesn't accidentally click it.
And changed some of the % to @'s to make it invalid. So just substitute % for the @ and that's the URL it pointed to.

I never trust those third part "research" companies too fishy to me that they don't sell your info

 

[clone1008]

I never trust those third part "research" companies too fishy to me that they don't sell your info

Then you should be more careful on information that you allow to be shared. The person stated to Josh, "They would have signed up for products research pool within the last year."

 

[Josephinelcajon]

Then you should be more careful on information that you allow to be shared. The person stated to Josh, "They would have signed up for products research pool within the last year."

I know now and will pay more attention!

 

[John2021]

I tell them to take the money from my Nigerian bank account. It has millions in it I cannot access.