http://www.xscrypt.com - This is a scam, I made the script.

[SadDev]

https://bitcointalk.org/index.php?topic=1067965.0

I made the backend to this site. I even managed to give myself a free contract earlier using a POST request.

Site uses blockcypher API to receive payments.

Dont invest, they have no mining equipment.

[1713925269]

1713925269

[1713925269]

1713925269

[1713925269]

1713925269

[1713925269]

1713925269

[1713925269]

1713925269

[1713925269]

1713925269

[WhiteCodex]

https://bitcointalk.org/index.php?topic=1067965.0

I made the backend to this site. I even managed to give myself a free contract earlier using a POST request.

Site uses blockcypher API to receive payments.

Dont invest, they have no mining equipment.

Oh you made it?
Use blockcypher don't say nothing. Much sites use it.

You made it and you manage a way to add fake contract? Man you a dumb, because you don't create a way to empty the bitcoin cold wallet?

Lol you make me funny. Our scrypt is custom, some sites trying to copy it, but only our Xscrypt site is functional.

[siameze]

https://bitcointalk.org/index.php?topic=1067965.0

I made the backend to this site. I even managed to give myself a free contract earlier using a POST request.

Site uses blockcypher API to receive payments.

Dont invest, they have no mining equipment.

The developer of a scam warns others about a scam site using his scam code.

The lines in the crypto world get blurrier. 

[kralle]

Maybe he got scammed by the admin and now whant to take revenge

[el kaka22]

Wow, that site gives a hourly payout of 6933 satoshis while the cost is only 0.029616 BTC (2,961,600 satoshis). Then the 'break even' time is only 428 hours (about 18 days). That very high payout of that site already implies that it is 99.99% a scam.

[brendanjhwu]

https://bitcointalk.org/index.php?topic=1067965.0

I made the backend to this site. I even managed to give myself a free contract earlier using a POST request.

Site uses blockcypher API to receive payments.

Dont invest, they have no mining equipment.

I read out out your title in the most Mission: Impossible, turning point voice.
One of my good friends was just telling me about this site, thanks for telling us!

[Btree]

LOL
my first time see Developer ponzi site say that
very fair  

and your english very bad   

[siameze]

The whole point of scamming is getting money for nothing, so scripts used are simple and probably can be made by anyone.

Clearly this guy is just trying to get attention, like so many other hackers who feed their ego by telling random strangers how much crimes they committed.

Precisely this, an ego boost if you will. Most never move beyond the scam scripts to more advanced forms of coding.

[WhiteCodex]

Wow, that site gives a hourly payout of 6933 satoshis while the cost is only 0.029616 BTC (2,961,600 satoshis). Then the 'break even' time is only 428 hours (about 18 days). That very high payout of that site already implies that it is 99.99% a scam.

Hello, you is wrong, its not hourly, its each 6 hours. Its not const only 0.029616, that price is one week of 20% discount, its already ended. and now cost 0.03702.

Our roi is about 4 months and 8 months of profits.

Best Regards

[SadDev]

No, Im not a very good dev, Im self taught and have not been doing it too long, I only just get along.

I have more files also. As you see the passwords and not encrypted... he wanted it this way so he could see peoples passwords and try and get into their "other" accounts, so I removed the encryption

In this version I was using some other guy (on github) AddressValidator script, but had some problems so I left it out, But I managed to fix it in the one I sent WhiteCodex.

This is http://www.xscrypt.com/registerp.php

Code:

<?php

require_once('./includes/db_connect.php');
require_once('./includes/session.php');
require_once('./includes/functions.php');
//require_once('./includes/AddressValidator.php');

$xEmail_Address = $_POST['email_address'];
$xPassphrase = $_POST['passphrase'];
$xBitcoin_Address = $_POST['bitcoin_address'];
$xAffid = $_POST['affid'];

if ($xAffid == '') {
  $xAffid = 'None';
}

?>
<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <!-- The above 3 meta tags *must* come first in the head; any other head content must come *after* these tags -->
    <title>xScrypt - Premier Scrypt Cloud Mining Contracts</title>

    <!-- Bootstrap -->
    <link href="css/bootstrap.min.css" rel="stylesheet">
    <link href="css/custom.css" rel="stylesheet">
    <link href='http://fonts.googleapis.com/css?family=Roboto' rel='stylesheet' type='text/css'>
    <!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
    <!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
    <!--[if lt IE 9]>
      <script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script>
      <script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
    <![endif]-->
  </head>
  <body>
    
    <div class="container-fluid">
      
      <div class="row">
        <div class="col-md-3 logobar"><p></p></div>
        <div class="col-md-6 logobar"></div>
        <div class="col-md-3 logobar"><p></p></div>
      </div>
      
      <br>
      
      <div class="row">
        <div class="col-md-3"><p></p></div>
        <div class="col-md-6">
          <div class="collapse navbar-collapse navbar-menubuilder">
                  <ul class="nav navbar-nav navbar-left">
                      <li class="active"><a href="https://xscrypt.com/?id=">Home</a>
                      </li>
                      <li><a href="https://xscrypt.com/register.php?id=">Register</a>
                      </li>
                      <li><a href="https://xscrypt.com/login.php">Login</a>
                      </li>
                      <li><a href="https://xscrypt.com/purchase.php">Purchase</a>
                      </li>
                      <li><a href="https://xscrypt.com/account.php">Account</a>
                      </li>
                      <li><a href="https://xscrypt.com/contact.php">Contact</a>
                      </li>
                      <li><a href="https://xscrypt.com/faq.php?id=">FAQ</a>
                      </li>
                  </ul>
              </div>
        </div>
        <div class="col-md-3"><p></p></div>
      </div>
      
      <br>
      
      <div class="row">
        <div class="col-md-3"><p></p></div>
        <div class="col-md-6 standardsection text-center">
           <div class="row">
             <div class="col-md-4"><p></p></div>
             <div class="col-md-4">
                    <h2>Register</h2>
                      <?php
        if(!filter_var($xEmail_Address, FILTER_VALIDATE_EMAIL)) {
         echo "<p class='cus-center'>Please enter a valid Email Address</p>";
          } else {;
          $varPass = True;
          if ($varPass = False) {
          echo "<p class='cus-center'>Please enter a valid Bitcoin Address</p>";
        } else {
        $connLogin = new PDO("mysql:host=$varDB_host;dbname=$varDB_name", $varDB_user, $varDB_password);
        if ($xPassphrase == '') {
          echo "<p class='cus-center'>Please enter a passphrase</p>";
        } else {
        
        $xEncrypted_Password = $xPassphrase;

        $stmtCheckDupe = $connLogin->prepare("SELECT * FROM user_accounts WHERE email_address = '$xEmail_Address';");
        $stmtCheckDupe->execute();
        if ($stmtCheckDupe->rowCount() >= 1) {
          echo "<p class='cus-center'>Email Address already in use</p>";
        } else {

        $xEmail_Address = stripslashes($xEmail_Address);
        $xBitcoin_Address = stripslashes($xBitcoin_Address);

        $epoch = time();
        $dt = new DateTime("@$epoch");
        $xDate = $dt->format('d-m-Y H:i:s');

        $stmt = $connLogin->prepare("INSERT INTO user_accounts (email_address, passphrase, bitcoin_address, affiliateid, register_date, register_ip) VALUES (:email, :pass, :btcadd, :aff, :regdate, :regip)");

        $stmt->execute(array(
          "email" => $xEmail_Address,
          "pass" => $xEncrypted_Password,
          "btcadd" => $xBitcoin_Address,
          "aff" => $xAffid,
          "regdate" => $xDate,
          "regip" => get_client_ip()
        ));

        $xHeaders = 'From: support@xscrypt.com' . "\r\n" .
                   'Reply-To: support@xscrypt.com' . "\r\n" .
                   'X-Mailer: PHP/' . phpversion();
        @mail("support@xscrypt.com", "xscrypt User Registration - " . $xEmail_Address, "A new user has registered on the website", $xHeaders);

        echo "<p class='cus-center'>Thank you for registering</p>";
        echo "<p class='cus-center'><a href='./login.php'>Click Here</a> to login</p>";
        echo "<p class='cus-center'><a href='./purchase.php'>Click Here</a> to purchase mining power</p>";

        }
    
        }

        }

        }
      ?>
                      
            </div>
            <div class="col-md-4"><p></p></div>
            </div>
        </div>
        <div class="col-md-3"><p></p></div>
      </div>
      
    </div>
    
    <br>
    
    <footer class="footer">
      <div class="container">
        <p class="text-muted">Copyright &copy; 2015 xscrypt.com</p>
      </div>
    </footer>
     
    <!-- jQuery (necessary for Bootstrap's JavaScript plugins) -->
    <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js"></script>
    <!-- Include all compiled plugins (below), or include individual files as needed -->
    <script src="js/bootstrap.min.js"></script>
  </body>
</html>

db_connect.php

Code:

<?php

$varDB_host = "";
$varDB_name = "";
$varDB_user = "";
$varDB_password = "";

?>

functions.php

Code:

<?php

function get_client_ip() {
    $ipaddress = '';
    if (getenv('HTTP_CLIENT_IP'))
        $ipaddress = getenv('HTTP_CLIENT_IP');
    else if(getenv('HTTP_X_FORWARDED_FOR'))
        $ipaddress = getenv('HTTP_X_FORWARDED_FOR');
    else if(getenv('HTTP_X_FORWARDED'))
        $ipaddress = getenv('HTTP_X_FORWARDED');
    else if(getenv('HTTP_FORWARDED_FOR'))
        $ipaddress = getenv('HTTP_FORWARDED_FOR');
    else if(getenv('HTTP_FORWARDED'))
       $ipaddress = getenv('HTTP_FORWARDED');
    else if(getenv('REMOTE_ADDR'))
        $ipaddress = getenv('REMOTE_ADDR');
    else
        $ipaddress = 'UNKNOWN';
    return $ipaddress;
}

?>

session.php

Code:

<?php

session_start();

$varUserid = $_SESSION['user_id'];
$varEmail_Address = $_SESSION['email_address'];

?>

[el kaka22]

Wow, that site gives a hourly payout of 6933 satoshis while the cost is only 0.029616 BTC (2,961,600 satoshis). Then the 'break even' time is only 428 hours (about 18 days). That very high payout of that site already implies that it is 99.99% a scam.

Hello, you is wrong, its not hourly, its each 6 hours. Its not const only 0.029616, that price is one week of 20% discount, its already ended. and now cost 0.03702.

Our roi is about 4 months and 8 months of profits.

Best Regards

You is wrong?! First you are wrong with the grammar. Second, your site said:

Hourly Mining Payment (send on each 6 hours): 0.00006933 BTC (Automatically sent to your btc account)

and this will mislead people that it is 6933 satoshi hourly. Please improve your English skills before you're trying to scam.

[MarkMJ]

Hello

So you made "the backend to this site"
Can you show me one page via pm?
I hope you not lie
Waiting pm from you.

[siameze]

Wow, that site gives a hourly payout of 6933 satoshis while the cost is only 0.029616 BTC (2,961,600 satoshis). Then the 'break even' time is only 428 hours (about 18 days). That very high payout of that site already implies that it is 99.99% a scam.

Hello, you is wrong, its not hourly, its each 6 hours. Its not const only 0.029616, that price is one week of 20% discount, its already ended. and now cost 0.03702.

Our roi is about 4 months and 8 months of profits.

Best Regards

You is wrong?! First you are wrong with the grammar. Second, your site said:

Hourly Mining Payment (send on each 6 hours): 0.00006933 BTC (Automatically sent to your btc account)

and this will mislead people that it is 6933 satoshi hourly. Please improve your English skills before you're trying to scam.

Scammers care about as much for proper grammar as they do for proper code. 

[cablepair]

Wow, that site gives a hourly payout of 6933 satoshis while the cost is only 0.029616 BTC (2,961,600 satoshis). Then the 'break even' time is only 428 hours (about 18 days). That very high payout of that site already implies that it is 99.99% a scam.

Hello, you is wrong, its not hourly, its each 6 hours. Its not const only 0.029616, that price is one week of 20% discount, its already ended. and now cost 0.03702.

Our roi is about 4 months and 8 months of profits.

Best Regards

You is wrong?! First you are wrong with the grammar. Second, your site said:

Hourly Mining Payment (send on each 6 hours): 0.00006933 BTC (Automatically sent to your btc account)

and this will mislead people that it is 6933 satoshi hourly. Please improve your English skills before you're trying to scam.

Scammers care about as much for proper grammar as they do for proper code. 

We are not required to learn English To provide the service. But we are obliged to fulfill what we offer.

Best Regards

[cablepair]

Wow, that site gives a hourly payout of 6933 satoshis while the cost is only 0.029616 BTC (2,961,600 satoshis). Then the 'break even' time is only 428 hours (about 18 days). That very high payout of that site already implies that it is 99.99% a scam.

Hello, you is wrong, its not hourly, its each 6 hours. Its not const only 0.029616, that price is one week of 20% discount, its already ended. and now cost 0.03702.

Our roi is about 4 months and 8 months of profits.

Best Regards

You is wrong?! First you are wrong with the grammar. Second, your site said:

Hourly Mining Payment (send on each 6 hours): 0.00006933 BTC (Automatically sent to your btc account)

and this will mislead people that it is 6933 satoshi hourly. Please improve your English skills before you're trying to scam.

Scammers care about as much for proper grammar as they do for proper code. 

We are not required to learn English To provide the service. But we are obliged to fulfill what we offer.

Best Regards

Sorry where you see "We" it should be "Them".

Thanks

[BeGoods]

Wow, that site gives a hourly payout of 6933 satoshis while the cost is only 0.029616 BTC (2,961,600 satoshis). Then the 'break even' time is only 428 hours (about 18 days). That very high payout of that site already implies that it is 99.99% a scam.

Hello, you is wrong, its not hourly, its each 6 hours. Its not const only 0.029616, that price is one week of 20% discount, its already ended. and now cost 0.03702.

Our roi is about 4 months and 8 months of profits.

Best Regards

You is wrong?! First you are wrong with the grammar. Second, your site said:

Hourly Mining Payment (send on each 6 hours): 0.00006933 BTC (Automatically sent to your btc account)

and this will mislead people that it is 6933 satoshi hourly. Please improve your English skills before you're trying to scam.

Scammers care about as much for proper grammar as they do for proper code. 

We are not required to learn English To provide the service. But we are obliged to fulfill what we offer.

Best Regards

Sorry where you see "We" it should be "Them".

Thanks

Where did you learn english? it actually should be they

[siameze]

Maybe they offered free English lessons at scam coders academy.

[cablepair]

Wow, that site gives a hourly payout of 6933 satoshis while the cost is only 0.029616 BTC (2,961,600 satoshis). Then the 'break even' time is only 428 hours (about 18 days). That very high payout of that site already implies that it is 99.99% a scam.

Hello, you is wrong, its not hourly, its each 6 hours. Its not const only 0.029616, that price is one week of 20% discount, its already ended. and now cost 0.03702.

Our roi is about 4 months and 8 months of profits.

Best Regards

You is wrong?! First you are wrong with the grammar. Second, your site said:

Hourly Mining Payment (send on each 6 hours): 0.00006933 BTC (Automatically sent to your btc account)

and this will mislead people that it is 6933 satoshi hourly. Please improve your English skills before you're trying to scam.

Scammers care about as much for proper grammar as they do for proper code. 

We are not required to learn English To provide the service. But we are obliged to fulfill what we offer.

Best Regards

Sorry where you see "We" it should be "Them".

Thanks

Where did you learn english? it actually should be they

Sorry again, here you see "we" it should be "They" kkkkkk
Next year i will pay for a english teacher

Thanks

[bitbollo]

Maybe he got scammed by the admin and now whant to take revenge

sure... it's also stupid admit this...
the owner of the site know how is the "programmer"....