Let’s start with their main “company”, embotic.xyz.
Here they provide free and paid hosting.
Not revealing security issues.
Here is the most recent example. They reset all domain proxies (a proxy so people can link their own domains to web servers). This proxy is used on both free and paid plans. This reset meant anyone could proxy pointed domains to any web server on the embotic network. This wouldn’t be too bad if they made people aware of the reset, but they didn’t. All they mentioned is below:
Here is an older but more important one.
Around 2 months ago, Embotic had a data leak which included staff documents and payment logs. Instead of making people aware (payment logs included full names, emails and payment ids), embotic stayed quiet. This leak has since been deleted, so I am unable to provide screenshots. According to management, none of the leaked data was important…
Weird Ban Reasons
For pointing out the proxy issue, i got hit with a ban. Below is my reason…
In all the security issues I found, I reported them with reproduction steps. With the proxy thing for example, I put a picture of a cat on the website. Completely harmless.
Downtime
Recently embotic suffered about 2 days of downtime due to a ddos attack against their panel.
This prevented free and paid users from accessing their sites. They still have some countries blocked from this ddos, further preventing access.
FiveM selling
Unless they since changed it (can’t check due to my ban), they are offering FiveM servers as a paid option. As I highly doubt they have the correct licensing to do so, they shouldn’t be providing this as an option
Inaccurate Status Page
Remember that 2 day downtime I mentioned? It has since been wiped from their status page. According to it, there has been no downtime outside of maintenance this month…
They are constantly wiping unplanned events from their status page to hide their poor uptime.
Their Subsidiary - PauloVM
This is a new subsidiary, where Embotic has pinged everyone twice within a week to check it out.
They also had a security issue, where my IP got leaked somehow. Instead of doing smth about it, they asked the person to send it in chat, they said it was correct then left it in chat..
If that wasn’t a vpn, could have gone terribly
The staff are nothing but toxic, I have provided many images below.
the prompt in question:
I will not be monitoring or responding further in this post. I have provided ample evidence of pretty much every claim I have sent here.
