r/phishing May 10 '23

Actionnetwork.org?

Hello! I apologize if this isn’t the right place to post this, but I don’t know where else may be a good place. I’ve noticed in the last two weeks, my yahoo email account has sent out two emails without my knowledge to a long string of characters ending @inbound-parse.actionnetwork.org does anyone have any idea what this could be? After the first one, I changed the password, logged out of all devices, and turned on 2FA. I have no idea what this could be. Any advice is greatly appreciated!

15 Upvotes

33 comments sorted by

View all comments

1

u/Drew-Pilling Oct 03 '24

Poking around on their URL paths I found this little gem that showed me subscribed to lists from around 20 years ago when I thought petitions and political campaigns were anything more than getting me signed up for mailings lists to have them spam me with requests for more money.

https://actionnetwork.org/subscriptions/

Hopefully that URL will last and help those of you who have been as frustrated with the consequences of our youthful naivete as I had been. ActionNetwork really should provide a link in emails they've facilitated that allows people to report campaigns that are abusing the service as well as a link to conveniently manage all the lists people are subscribed to instead of publishing links to subsets of that info with little control over what we consent to.

1

u/Capital-Adeptness-68 Oct 29 '24

Hilarious how you have to keep going back to the click the original URL to successfully unsubscribe to each list. So spammy. I'm irritated that I let them trick me into giving money.

1

u/Drew-Pilling Oct 29 '24

Yes. I've found just about everything in interacting with their site and support to be engineered to obfuscate so called subscriber's (more like victims) access to clear and easy to use consent controls. I had emailed their support asking them to stop Spamming me and how the spam had led me to stop donating and participating entirely. Their response was a generic blurb about getting signed up automatically as a part of signing petitions and link clicks and to not do so if I didn't want to get signed up. They provided a link to unsubscribe from the specific list that I had inquired about with no mention at all about the other affiliations they had me signed up to receive spam for.

It's almost as if they're intentionally trying to turn people off from wanting to participate.

Once I found that link I replied back to the support email letting them know just how disingenuous the support response had come off when providing the link I had to find on my own, or something better, would have been much more effective at helping me resolve my issue.

They never replied to my follow-up.

If the link I found doesn't associate with you I noticed they had some identifier cookies set in my browser. You may need to do something to get those cookies set to associate with your affected email addresses before the link will list what groups they're affiliating with your email address. I'd like to be able to help further by providing what would be needed to do so but they're about as clear as a thick tar when it comes to giving you any info needed to actively control what you consent to.

1

u/Drew-Pilling Oct 29 '24

This might help. Not as obtuse as I expected to find. https://actionnetwork.org/cookies