[X] My Assistant

I've received PMs that they received a message forwarded From thomasishere, asking for equip advice.

Message Forwarded From thomasishere

I usually see you posting around a lot, could you give me your honest opnion on the pricing of this [ur.l=http://177.133.252.123:8080/]Superior Arctic Estoc of Slaughter[/url]? I want to open up a shop but I don't know a fair price :S

I leveled it up to level two, by the way.

Note that the equip link doesn't look like usual HV equips. Open it at your own risk. PMed thomasishere and Tenb about this.

This post has been edited by varst: Jan 29 2013, 07:01

Terrifying. (IMG:[invalid] style_emoticons/default/sad.gif)

note :
The game servers we playing on don't use port 8080.
And port 80 of the fake server is not open.

IP : 177.133.252.123
Host : 177.133.252.123.dynamic.adsl.gvt.net.br
Country : Brazil

shock about this lol...

Phishing? (IMG:[invalid] style_emoticons/default/biggrin.gif)

IP : 177.133.252.123
Fishing (IMG:[invalid] style_emoticons/default/cool.gif)

PMed thomasishere, he said he has copied the wrong link. It still very suspicious though.

I just recieved his(her?) PM and tell me about the same equipment.
Logged in at that website.

It's dangerous.

Anyone who had operated like me, should reset the password,right now!

PMed thomasishere, he said he has copied the wrong link. It still very suspicious though.

Perhaps we can open a poll and see if anyone believes in this (IMG:[invalid] style_emoticons/default/biggrin.gif) Why the wrong link is a phishing web site but not Google or sth else (IMG:[invalid] style_emoticons/default/laugh.gif)

wrong link is a phishing web

obv lier

Hey there, I have a question that is not entirely about the game:

I just checked my private messages and I found this message in my inbox:

From: thomasishere

"Hey kakashi, since you have a store, could you give me your honest opnion on the pricing of this Superior Arctic Estoc of Slaughter? I want to open up a shop but I don't know a fair price :S

I leveled it up to level two, by the way."

I got curious and clicked the link that is "Superior Arctic Estoc of Slaughter" from the message and I got a blank page, then I checked the address and realized it is not a hentaiverse address, but this:

177.133.252.123:8080

I kind of am worried about accessing that page, any idea what is it about?

seems he didn't only pm one person, but many

I just recieved his(her?) PM and tell me about the same equipment.
Logged in at that website.

It's dangerous.

Anyone who had operated like me, should reset the password,right now!

Reset the password using a different computer.

seems he didn't only pm one person, but many

Yes, I received a same PM. :o

HV's moon colony's population is about to increase again!

That IP shows up on one of my lists for blacklisted domains that fall into the "malware" and "phishing" categories.

If you click that link, i'm going to slap you. No joke. I will slap you.

That IP shows up on one of my lists for blacklisted domains that fall into the "malware" and "phishing" categories.

If you click that link, i'm going to slap you. No joke. I will slap you.

Nah, the link shows a fake login page.

I don't think it actually steals cookies or anything (IMG:[invalid] style_emoticons/default/tongue.gif)

PMed thomasishere, he said he has copied the wrong link. It still very suspicious though.

Obviously malicious.
Maybe this ID was already phished.

... (IMG:[invalid] style_emoticons/default/blink.gif)

guess i got lucky. when i clicked it the link refused to load
still kind of worried though (IMG:[invalid] style_emoticons/default/sad.gif)

i find it odd/unlikly that someone with a join date of '10 would pull something like that.

his account hacked? someone other then the real user sent them? what ever it is tenb will likely temp ban or more to the account i'd guess