Security Update

[Bertha Bot]

Security Update
7 May 2007

The Support Dept. wish to alert Entropia Universe participants to fake websites that have been created to gain access to your Login and Password.

Please pay attention when writing the www.entropia-universe.com URL. We recommend that you bookmark the correct URL and always use it when visiting the Entropia Universe website.

Originally Posted Here

[EyeContact]

And get a gold card

TODAY

[jdegre]

Originally Posted by Bertha Bot

Security Update
7 May 2007

Please pay attention when writing the www.entropia-universe.com URL. We recommend that you bookmark the correct URL and always use it when visiting the Entropia Universe website.

that's funny because i was under the impression that the real address was:

http://www.entropiauniverse.com

(without the dash)

and, after a search in dns, it turns out that "entropia-universe.com" is an alias of the real "entropiauniverse.com".

so, both names point to the same set of addresses (62.93.236.[11-14]), but it's funny that they mention the alias instead of the "real" name

/jdegre.

[kygon]

Originally Posted by jdegre

that's funny because i was under the impression that the real address was:

http://www.entropiauniverse.com

(without the dash)

and, after a search in dns, it turns out that "entropia-universe.com" is an alias of the real "entropiauniverse.com".

so, both names point to the same set of addresses (62.93.236.[11-14]), but it's funny that they mention the alias instead of the "real" name

/jdegre.

that IS the url that links form the CL

[NineofTen]

Originally Posted by EyeContact

And get a gold card

TODAY

Good advice

[Etopia]

funny , adress was :
http://www.entropiauniverse.com

and they say to book bark the good one and give a redirect :
http://www.entropia-universe.com

Personally i dont carre , i have bookmark since day one...

just a bit stra,ge to it that way...
Maybe they should redoo the DNS and use the adress with - now , since its better imho

[Prescott]

the reason they have the dash is becouse its harder to spell wrong with it included

[Bear]

i allways use the link in the login-prgramm..... very simple .. lol

[AlphaGeek]

Sheesh, MA was alerted to mispelled domain exploits the second week of April and this is the response time?


BTW, the gold card will not help secure your account from the web site. The GC is only used when actually launching the game.

See previous discussion on this forum:
http://www.entropiaforum.com/forums/showthread.php?t=63175&highlight=entropiaunvierse


Here's a support case I filed on it after talking with one of the guides at PA.

Support Case 106236 history11 Apr 2007You wrote:Account / Abuse / Piracy / Online Theft / Phishing

This is urgent, no crap.

Please alert your security people that there is at least one website in Korea that is exploiting a domain name that is a misspell of yours in a "phishing" attempt!

the missspelled site is:
http://www.entropiaunvierse.com/

The site in question pulls graphics and other elements from your legitimate page and has fields for users to authenticate.

Help protect your customers accounts, get after these guys ASAP!
12 Apr 2007Entropia Support:Hello AG and thank you for bringing this to our attention, we are now investigating this.
Regards,
Entropia Support

[AJack10600]

Originally Posted by AlphaGeek

Sheesh, MA was alerted to mispelled domain exploits the second week of April and this is the response time?


BTW, the gold card will not help secure your account from the web site. The GC is only used when actually launching the game.

See previous discussion on this forum:
http://www.entropiaforum.com/forums/showthread.php?t=63175&highlight=entropiaunvierse


Here's a support case I filed on it after talking with one of the guides at PA.

Support Case 106236 history11 Apr 2007You wrote:Account / Abuse / Piracy / Online Theft / Phishing

This is urgent, no crap.

Please alert your security people that there is at least one website in Korea that is exploiting a domain name that is a misspell of yours in a "phishing" attempt!

the missspelled site is:
http://www.entropiaunvierse.com/

The site in question pulls graphics and other elements from your legitimate page and has fields for users to authenticate.

Help protect your customers accounts, get after these guys ASAP!
12 Apr 2007Entropia Support:Hello AG and thank you for bringing this to our attention, we are now investigating this.
Regards,
Entropia Support

True ... should have reacted much much faster than that !!!!!!!!!!!!!!!!!!!!!!