!!SCAM!!: http://www.entropiauniverse.net84.net/

SHY

Stalker
Joined
Jul 2, 2007
Posts
2,092
Friends of mine noticed a new scam ingame.
Some avatar using these nicknames adds you as a friend:
"Entropiia Supoort Universe"
"Entropiia Supoort Universe"

After this you receive a message about them giving you 100ped reward as a special offer when you logon at the website. They also ask you to fill your GoldCard number (if you have any) behind the username and showing one of the following links:

http://www.entropiauniverse.net84.net/
www.entropiauniverse.hostei.com

The website looks almost the same as the one of Entropia Universe.
I filled in a fake username/password and after this was done it forwards you to the official website of Entropia Universe.. But in the meantime your LoginCredentials are send to the scammers/Thiefs

I checked the source-code of the website and this is the coding:

<html>
<head>
<title>www.entropiauniverse.com</title>
<style type="text/css">
body {
background: transparent url(tlo.png); background-repeat: no-repeat;
background-size: 100%, 100%;
background-color:black;

}
</style>
</head>
<body>
<br><br><br><br><br><br><br><br><br><br><br>
<center>
<form action="" method="post">
<input type="text" name="pole1" style="width: 200px; height: 30px" /><br />
<br /><br /><br /><input type="password" name="pole2" style="width: 200px; height: 30px" />
</textarea><br />
<input type="submit" value="Send" />
</form><br><br><br><br><br><br><br><br><br><br><br>
</body>
<br><br><br><br><br><br><br><br>








</html>

<!-- Hosting24 Analytics Code -->
<script type="text/javascript" src="http://stats.hosting24.com/count.php"></script>
<!-- End Of Analytics Code -->

Several people i know already filled a supportcase to Entropia.

Be aware of these bastards !:boxer::cussing::sniper::handgun:
 
Last edited:

Luckycharm

Elite
Joined
Feb 25, 2007
Posts
3,136
Society
The Dung Kickers
Avatar Name
Gallyon Luckycharm Sundstrand
Disgusting but also incredibly stupid if one would supply such details on a domain like that. Serious phishing attempt though. Hope MA locks all accounts that will log in from unlikely 'regular' Ip's then and force resync for affected gc owners.
 

whiteknut

Elite
Joined
Nov 4, 2006
Posts
3,049
Location
Estonia
Society
Vikings of Calypso
Avatar Name
Snablesnot Male Young
Yaay free peds! Thank you for sharing i could sure use those 100peds.
 

Dennis blighter

Prowler
Joined
Mar 16, 2011
Posts
1,244
Location
Alaska
Society
Lost Renegades
Avatar Name
Thanos Blighter Havoc
1. It doesnt load properly.
2. Thats the ingame login screen, not a website one.
3. Dont trust any avatar providing websites ingame.
4. Promotions are sent through your email if u have it enabled.
5. Poor quality website.
6. The ending of the website gives it away.

What does that add up to? DONT TRUST IT.

Thank you.
 

sakuraqueen

Alpha
Joined
May 24, 2008
Posts
564
Location
eudoria
Society
Starfleet Command
Avatar Name
Sakura SEXY Queen
good info bro :laugh:

wonder why it is 84 in their website name..
 

Az Bloodz

Elite
Joined
Sep 10, 2006
Posts
3,059
Location
Germany
Society
kAoS
Avatar Name
Az Lammbock Bloodz
1. It doesnt load properly.
2. Thats the ingame login screen, not a website one.
3. Dont trust any avatar providing websites ingame.
4. Promotions are sent through your email if u have it enabled.
5. Poor quality website.
6. The ending of the website gives it away.

What does that add up to? DONT TRUST IT.

Thank you.

Glad you've pointed out the obvious
 

e-lite

Moderator
Moderator
Joined
Feb 7, 2005
Posts
5,221
Location
Sweden
Society
Magnum Opus
Avatar Name
Xaero e-lite Cynque
Registrant:
II Hosting Media

K. Donelaicio 62-412
Kaunas, 44248
Lithuania

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Domain Name: NET84.NET
Created on: 01-Jun-08
Expires on: 01-Jun-13
Last Updated on: 02-Jun-12

Administrative Contact:
000webhost.com, Hostmaster awex@hostprince.com
II Hosting Media
K. Donelaicio 62-412
Kaunas, 44248
Lithuania
68545251

Technical Contact:
000webhost.com, Hostmaster abuse@000webhost.com
II Hosting Media
K. Donelaicio 62-412
Kaunas, 44248
Lithuania
68545251

Domain servers in listed order:
NS1.000WEBHOST.COM
NS2.000WEBHOST.COM


Registry Status: clientDeleteProhibited
Registry Status: clientRenewProhibited
Registry Status: clientTransferProhibited
Registry Status: clientUpdateProhibited
 
  • Like
Reactions: SHY

JohnCapital

Slayer
Joined
Jul 19, 2006
Posts
9,778
Location
Colorado
Society
Freelancer
Avatar Name
John Teacher Capital
Sorry, e-lite, but sharing personal info like that is not allowed here.

However, I am leaving up the info on the OP as it's just URL, and website info. Leaving up mention of ava name in this case too, as impersonation of MA officials is a SERIOUS offense.

Glad support cases were sent. Hope they take action immediately. Obviously they can't affect the website, but they can permban the avas and hopefully the other accounts they're connected to via IP, and other identifying protocals.

EDIT: E-lites post placed back, as no personal information was shown.
 
Last edited:

sidxx

Prowler
Joined
Mar 27, 2010
Posts
1,316
Location
"/pos"
Society
Crimson Devils
Avatar Name
General of the sidxx Forsaken Fallen
bombard them with fake logins and passwords lol :D
 

MIND

Prowler
Joined
Jul 20, 2011
Posts
1,317
Location
Calypso
Society
Project Society
Avatar Name
Sebastian Kamstiesboy Kamsties

Nor Alien

Elite
Joined
Feb 21, 2008
Posts
4,125
Location
Completely and utterly lost..
Society
The Gathering
Avatar Name
Nor Alien Euqcab
Username: you suck alot

Password: in programming

username: Your mother was a hampster
password: and your father smelled of elderberries

Gold card #: (3825968) ;)

For those who don't know the phone number association.. gold card translation= (fuckyou) :D
 

e-lite

Moderator
Moderator
Joined
Feb 7, 2005
Posts
5,221
Location
Sweden
Society
Magnum Opus
Avatar Name
Xaero e-lite Cynque
Sorry, e-lite, but sharing personal info like that is not allowed here.

However, I am leaving up the info on the OP as it's just URL, and website info. Leaving up mention of ava name in this case too, as impersonation of MA officials is a SERIOUS offense.

Glad support cases were sent. Hope they take action immediately. Obviously they can't affect the website, but they can permban the avas and hopefully the other accounts they're connected to via IP, and other identifying protocals.

IMO that mod was overkill. The info I posted was a whois query for the domain and is public to anyone.
 

Dennis blighter

Prowler
Joined
Mar 16, 2011
Posts
1,244
Location
Alaska
Society
Lost Renegades
Avatar Name
Thanos Blighter Havoc
IMO that mod was overkill. The info I posted was a whois query for the domain and is public to anyone.


I do have to agree, its not personal info on that one.

Any known action by MA yet?
 

MIND

Prowler
Joined
Jul 20, 2011
Posts
1,317
Location
Calypso
Society
Project Society
Avatar Name
Sebastian Kamstiesboy Kamsties
username: Your mother was a hampster
password: and your father smelled of elderberries

Gold card #: (3825968) ;)

For those who don't know the phone number association.. gold card translation= (fuckyou) :D

:laugh::laugh::laugh::laugh::laugh:
 

RobBuona

Elite
Joined
Dec 29, 2010
Posts
2,638
Location
United States
Society
Stockholm Syndrome
Avatar Name
Patrizia Pandemic Giano
Copy + pasting thousands of characters into the boxes.

Maybe it'll take down their databse.
 
Joined
Nov 22, 2009
Posts
4,412
Location
Sweden
Society
The Unit
Avatar Name
Edgewise
Disgusting but also incredibly stupid if one would supply such details on a domain like that.



I agree completely...

I wouldn't be surprised if a lot of people did it tho... :) there is ALWAYS someone who doesnt watch what is going on... That's why people keep doing these sites :p
 

EMW

Stalker
Banned
Joined
Oct 22, 2008
Posts
1,678
Location
Southern Spain
Avatar Name
ENTROPIAS MOST WANTED
hes at PA right now spamming this scam!!
 

JohnCapital

Slayer
Joined
Jul 19, 2006
Posts
9,778
Location
Colorado
Society
Freelancer
Avatar Name
John Teacher Capital
IMO that mod was overkill. The info I posted was a whois query for the domain and is public to anyone.

I do have to agree, its not personal info on that one.

Any known action by MA yet?

2.5 - Personal Information
Revealing real world information about a member, administrator or moderator is STRICTLY PROHIBITED, regardless of the source, public or private. This includes any information about a forum member or Entropia Universe participant that reveals an individual's legal name, address, occupation or other sensitive or personally identifiable information. All such content will be deleted without notice, ...

whois info has always been suppressed on this site by every mod I know.

Besides, in this case, the whois info is irrelevant, since net84.net is just a web hosting site, not the actually people doing the scam. (most likely)

From their homepage:
"Welcome to the free web hosting provider www.000webhost.com

We use subdomains under domain NET84.NET to setup free web hosting accounts for our clients. Each subdomain *.NET84.NET is managed by different customer."

Regardless, I suggest we concentrate our efforts to making sure MA is aware of this, and acts ASAP, while spreading the word ingame to make sure no one falls for their scam.
 

e-lite

Moderator
Moderator
Joined
Feb 7, 2005
Posts
5,221
Location
Sweden
Society
Magnum Opus
Avatar Name
Xaero e-lite Cynque

Cly

Dominant
Joined
Jun 24, 2006
Posts
428
Location
Near Manchester, UK
Society
Darksteel Enterprises
Avatar Name
Clytemnestra Darksteel
They have multiple Avatars

The one I saw last night was

Entropia Universe Suport

What they said is as per screenie here:

 

Jennson

Elite
Joined
May 22, 2009
Posts
2,942
Location
Germany
Society
The Ministry
Avatar Name
Jennson Laudi Marakomm
The website is down now, since the hoster pulled the plug. Let's hope these get banned ingame as fast as their phishing site went down
 

FallenAngel

Stalker
Joined
Dec 9, 2006
Posts
1,968
Society
Free!
Avatar Name
Fallen Yours Angel
The website is down now, since the hoster pulled the plug. Let's hope these get banned ingame as fast as their phishing site went down

Posted by Staff Member, on July 28, 2012, 06:03:00
Hello,

Reported website has been removed from our server. We would like to thank you for reporting abuse.

Thank You,
Helpdesk Staff
www.000webhost.com

if they want to stay in business these types of hosters have to take abuse reports seriously :)
 

JohnCapital

Slayer
Joined
Jul 19, 2006
Posts
9,778
Location
Colorado
Society
Freelancer
Avatar Name
John Teacher Capital

PM sent to stop going off-topic on this thread. However, just a few mod comments:

After re-examining your post, I concluded it had no personal information, only business info. Since it didn't break rule 2.5 - Personal Information, I put it back.

on topic, glad to hear the site's down, but they'll just find another hoster. MA needs to shut down their IPs and whatever avas they're connected to.
 

BenCoyote

Old Alpha
Joined
Sep 26, 2008
Posts
724
Location
Tucson, Arizona, United States
Society
(DFA) Don't feed the Animals
Avatar Name
Benjamin 'Ben' Coyote
Fight scamming refuse this joker!

Fool me Once, shame on you.... Cause you are not folling me a second time.

I had this happen to me today while me and my girlfriend were mining.. or finishing up a run..
I got that that same name wanted to be my friend..

I refused...

So take that you scumbag.. Not going to fall for it.. You've done it before and you can try it all you want.. you're not getting anything but a load of abuse reports to your ISP and a number of complains to MA.. (BAN HAMMER!)


Oh and next time.. try a little harder.. might make you look more stupid.

Also this brings up a question.. how would they know who is in game and who has a gold card...

See that's why I think and this is just my opinion.. that the database has been hacked and hopefully the people who are smart (Like myself get this joker and get them banned and possibly prosecuted for Impersonating an MA official for the sole gain of making money.. (Read the EULA) that's a major violation and in fact is a bannable offense.)


Sorry buddy, YOU LOSE!:lolup:

Benjamin Ben COyote
a.k.a The Bline Sniper"
 
Last edited:

MR. Fresh

Dominant
Banned
Joined
May 18, 2008
Posts
471
Location
Foxes Strip Club
Society
Freelancer
IMO that mod was overkill. The info I posted was a whois query for the domain and is public to anyone.

agree 100%

JC, maybe you can take a break or something for a while I think this forum is dandy without you
 
Top