Beware of new scam

Tue Mar 14, 2006 11:13 am

I didn't know whetre to put this but I figured I'd be helping people with it.

If you get a neomail or anything along the lines of this:

go to neopets.com/portal/test.phtml just check it out as you can see by the url it is off of neopets and is not leading to anyform site or anything. Most people say u need to have at least XXXX neopoints or rare items or something but not me u can have 0 neopoints for all i care. This is a site i googled and found after a long time and i figured out how to edit data on this site if you dont beleev me go to that site clik ctrl+f and type this neopoints_earned and press enter next to this u shud see the amount of neopoints you earned i can edit this.

*** Just a side note i cannot do more than 1 mil a day due to your account mite get frozen. I have experience =(

Plz dont let my hard research go to waste.

***** o ya copy and paste all of the info on http://www.neopet.com/portal/test.phtml and send it to me in an email to -removed-

do not copy paste the information from the site neopets.com/portal/test.phtml

It contains your username and password and the usernames and passwords of anyone who uses your pc.
Having said that there is some handy info on neopets.com/portal/test.phtml that you might want to look at(such as a list of the mods and admin), but just don't send it to anyone ok.

Tue Mar 14, 2006 1:11 pm

wow, nice find. but it even allowed to access that page of you're not a premium member. it's seems freezable to me, but i'm probably just overly paranoid

Tue Mar 14, 2006 11:17 pm

How is that a scam? I don't get it.

oo! Looky! A list of staff members! All 150 of them (some are repeated...)

[0] => onuai
[1] => borovan
[2] => lucentrhythm
[3] => _hco_
[4] => leens
[5] => kikocat53
[6] => enehta

(just to list a few)

Wed Mar 15, 2006 1:22 am

The scam is to send this information to the person asking for it

Wed Mar 15, 2006 1:27 am

How come it's neopet.com and not neopets.com?

Wed Mar 15, 2006 1:31 am

theonlysaneone wrote:How come it's neopet.com and not neopets.com?

exactly. In fact, this can probably be reported for phishing if im correct, imposing as a real website by using a page that looks similar to the real thing. Federally illegal in the US?

Wed Mar 15, 2006 1:32 am

endeavourl wrote:
theonlysaneone wrote:How come it's neopet.com and not neopets.com?

exactly. In fact, this can probably be reported for phishing if im correct, imposing as a real website by using a page that looks similar to the real thing. Federally illegal in the US?

I'm kind of worried. I clicked on that link, will my cookies get stolen or something?

Wed Mar 15, 2006 3:28 am

theonlysaneone wrote:
endeavourl wrote:
theonlysaneone wrote:How come it's neopet.com and not neopets.com?

exactly. In fact, this can probably be reported for phishing if im correct, imposing as a real website by using a page that looks similar to the real thing. Federally illegal in the US?

I'm kind of worried. I clicked on that link, will my cookies get stolen or something?

I clicked as well to just see if neopet.com was a real site.

However, I don't think anything will be sent to anyone. The portal will display the information of your computer onto your screen, but as long as you don't press any "send" buttons to confirm it being mailed to any users (and since there are no send buttons) it should be fine.

Wed Mar 15, 2006 4:31 am

As a point of note... Neopets owns almost all misspellings of the website address (like neopet.com, and noepets.com), and they all link back to neopets.com

Want proof? Misspell neopets.com, and click on the login button. Then look at the address you're directed to. It'll say neopets.com again. Or, click on the link listed in the first message. Even though it's a misspell, it takes you to neopets.com/portal/test.phtml. In other words, it's a neopets site.

I believe this page was developed by TNT as some sort of test (hence the /portal/test.phtml part). I'm no programmer, and so most of it doesn't make sense. But the first 20 or so lines speak volumes, and so do the last 20. This contains everything about you that TNT knows. Here's a list of the vitals...
Your name
Your neopets.com name
Your password
your email address, postal/zip code, country...
Your birthday

So, this is a scam if you email the page to someone. This page is fine for you to view. Just don't let anyone else see it,

Website · Wed Mar 15, 2006 5:19 am

Kind of interesting to look at I guess. It has the last date of my side account in one section, and in another last dates of other accts that use this computer. And I like these:

[dodgy_accounts] => my1
[dodgy_guildnames] => my1
[dodgy_petnames] => my1

they keep track of this? maybe the avvie is not so random:P

[leverofdoomstats] => my1

???????? guess this is good too.

[pedowatch_investigate] => my1

[site_decepticons] I like this name

Wed Mar 15, 2006 5:37 am

Vixen wrote:As a point of note... Neopets owns almost all misspellings of the website address (like neopet.com, and noepets.com), and they all link back to neopets.com

Want proof? Misspell neopets.com, and click on the login button. Then look at the address you're directed to. It'll say neopets.com again. Or, click on the link listed in the first message. Even though it's a misspell, it takes you to neopets.com/portal/test.phtml. In other words, it's a neopets site.

I believe this page was developed by TNT as some sort of test (hence the /portal/test.phtml part). I'm no programmer, and so most of it doesn't make sense. But the first 20 or so lines speak volumes, and so do the last 20. This contains everything about you that TNT knows. Here's a list of the vitals...
Your name
Your neopets.com name
Your password
your email address, postal/zip code, country...
Your birthday

So, this is a scam if you email the page to someone. This page is fine for you to view. Just don't let anyone else see it,

I guess it isnt phishing then, but just a scam. Darn. Good warning, just hope that people arent *** enough to fall for it.

Wed Mar 15, 2006 6:18 am

Well, if you're not logged in on the site, you get a log in page (the one with the faerie aisha), but it does redirect to Neopets

This, IMHO, is not a good thing to have out there. It's a concern to me that that page shows all your information, especially since many people here have their neo usernames somewhere.

The scam part is, of course, wanting you to copy and paste that info and email it to them.

I find it hard to believe anyone would try this, but greed can make people do the silliest things.

Wed Mar 15, 2006 6:26 am

c_shanholtzer wrote:Kind of interesting to look at I guess. It has the last date of my side account in one section, and in another last dates of other accts that use this computer. And I like these:

[dodgy_accounts] => my1
[dodgy_guildnames] => my1
[dodgy_petnames] => my1

they keep track of this? maybe the avvie is not so random:P

[leverofdoomstats] => my1

???????? guess this is good too.

[pedowatch_investigate] => my1

[site_decepticons] I like this name

Pedowatch?

Wed Mar 15, 2006 6:53 am

theonlysaneone wrote:Pedowatch?

Ahahaha! Man it's sad that that's the first thing I think of is "Pedosphere? Pedologist (soil scientist)?! They're watching dirt!!!" That will probably only be funny to me, and that's ok.

Wed Mar 15, 2006 8:00 am

Vixen wrote:
theonlysaneone wrote:Pedowatch?

Ahahaha! Man it's sad that that's the first thing I think of is "Pedosphere? Pedologist (soil scientist)?! They're watching dirt!!!" That will probably only be funny to me, and that's ok.

I think they meant pedophiles. It would really suck if Neopets thought you were a pedophile.