scotaloo phisher - proof

[🏰 TradeFortress 🏰]

2013-06-27 03:30:57 scotaloo main
has anyone got bought one of these/

2013-06-27 03:31:03 scotaloo main
<a href="http://bitcoin-talk.org/index.php?topic=122438.msg0;boardseen#new" target="_blank">bitcoin-talk.org/index.php?topic=122438.msg0;boardseen#new</a>

--

2013-06-27 04:10:54 scotaloo PM with alberthrocks
relogin to your account on the real site, only way you can know for sure i haven&#039;t got a cookie etc

2013-06-27 04:11:10 scotaloo PM with alberthrocks
here use this URL: <a href="http://bitcoin-talk.org" target="_blank">bitcoin-talk.org</a>

2013-06-27 07:11:09 scotaloo main
back again, look people seriously this was too easy for me. I cleaned out his GoDaddy, Bitcoin wallet, coinlenders, coinchat, steam because they are all the same password which had his name in it. He REGISTERED a new account on my phishing site with the same password.

2013-06-27 07:11:09 scotaloo main
keep your shit secure and this wont happen to you

2013-06-27 07:12:58 scotaloo main
I&#039;ve been travelling the world for months from BTC money

which means fished/hacked/scammed money

so yeah I do OK

its a job. pays the bills

----

User: scotaloo
Password hash: 9a900403ac313ba27a1bc81f0932652b8020dac92c234d98fa0b06bf0040ecfd
which is qwertyuiop (just to clarify: I only store hashes, this hash is common and it shows up in a google search for qwertyuiop)

IP addresses signed into scotaloo:
192.95.15.21 2013-06-27 03:21:46
37.130.227.133 2013-06-27 07:09:36

Other accounts of scotaloo on coinchat (made, ban evading accounts, hacked, or using the same proxy/vpn/tor):

pandaec
moobot
wazaw
NoirSuccubus
thecoolguy222
notnolyp
blueskizzy
Peanuts
scotaloo -- this is when he registered scotaloo
devinhacker
JessicaAlba
asdasdasda1337
yousuckatcoding
devinthedude

------

Proof that this is the same scotaloo:

Auctioning this domain devinthedev.com, regged on Godaddy

Bid starts at $1

minimum increment $1

Ends in 24hrs, escrow only!

[1715337006]

1715337006

[1715337006]

1715337006

[1715337006]

1715337006

[1715337006]

1715337006

[1715337006]

1715337006

[1715337006]

1715337006

[🏰 TradeFortress 🏰]

Related to the BitcoinOxygen hack:

https://bitcointalk.org/index.php?topic=247805.msg2657710#msg2657710

[favdesu]

dude can you please stop posting users passwords? I know this one is an evil person, but this attidue makes me want to withdraw all my btc i've stored on your services. you just can't do that if you're offering legit services.

[🏰 TradeFortress 🏰]

User: scotaloo
Password hash: 9a900403ac313ba27a1bc81f0932652b8020dac92c234d98fa0b06bf0040ecfd
which is qwertyuiop

You know the reason people use a password hash, is so no one knows the password. This is a horrible practice and very misleading.

I don't salt passwords for coinchat because it's more trouble than it's worth to rework the system and add password migration. Note that I don't store unhashed passwords, I simply googled the hash and found out.

[🏰 TradeFortress 🏰]

   

    devinthedude how much are you willing to pay for it? 13:59
    devbot Why would you hack my accounts? 14:00
    devbot Have I ever done anything to you? 14:00
    devinthedude because they were all the same user and password 14:00
    devinthedude and you fell for a phish 14:00
    devinthedude its a lesson somepeople have to learn 14:00
    devbot I'm not paying you anything for the domain. Sooo 14:01
    devinthedude ok cool, well enjoy 14:01
    devbot Really? Man. How much do you want? 14:01
    devinthedude reg fee I suppose 14:02
    devinthedude $10 14:02
    devbot reg fee? 14:02
    devinthedude thats a good deal really 14:02
    devbot What other accounts do you have access to? 14:03
    devinthedude $10, the price you paid for it from godaddy 14:03
    devinthedude not a lot because your email had a different password so I had to guess what sites you used 14:03
    devbot Tell me which ones you have. 14:04
    devinthedude whats was with the visa protection thing on your paypal BTW 14:04
    devinthedude you dodged a bullet there however you dont that 14:05
    devinthedude I'll tell you what 14:05
    devbot It's a safeguard against people like you 14:05
    devinthedude $50 and I'll undo everything 14:05
    devbot Undo what? 14:05
    devinthedude and refund the 0.05BTC to that dude I scammed lastnight with your coinchat 14:05
    devinthedude change back all your accounts and tell you the names 14:05
    devinthedude and sites 14:05
    devbot I don't have $50 14:06
    devbot Soo, I'm not sure what to tell you honestly. 14:06
    devinthedude what do you have? 14:06
    devbot I honestly only have .01 14:07
    devinthedude ah rite, I can believe that, well, mayeb you might get some of your accounts back in a couple of days 14:08
    devbot Are you being sarcastic? "ah rite, I can believe that" 14:09
    devinthedude nope because you had lke $5 in your paypal account and fuck all transaction history, its usually an indicator if someone has got money or not 14:10
    devinthedude by the way, you didnt hear this from me, but dont trust your "friend" alberth 14:11
    devbot Why not? 14:11
    devinthedude he's dishonest, thats all I can say 14:12
    devbot He seemed like a pretty cool guy. 14:12
    devinthedude have you got back into the coinchat account yet? 14:12
    devbot No, I haven't 14:12
    devinthedude I posted the password in chat last night so im locked out too 14:12
    devbot has tipped devinthedude 0.8 mBTC! 14:13
    devinthedude it was qwertyuiop though 14:13
    devbot That's all I have on this acct as well. 14:14
    devinthedude has tipped debot 0.78 mBTC! 14:14
    devinthedude lol oh shit i meant to sent it back 14:15
    devbot Can you send me the account info? Please man. They'll be no hard feelings. 14:16
    devinthedude the password for devinthedev was qwertyuiop but when i logged out I posted the password in chat, looks like somebody changed it 14:17
    devinthedude PM tradefortress 14:17
    devbot Are you whiskers perhaps? 14:18
    devbot Can you send me the account info? Please man. They'll be no hard feelings. 14:18
    devinthedude for what account? 14:18
    devinthedude yes i am 14:18
    devbot For the Godaddy acct. 14:19
    devinthedude ah rite, eh, 2secs 14:19
    devbot Come on buddy. Please. 14:22
    devinthedude lol, hold up i need to check whats in it again I cant remember 14:23
    devinthedude and I'm trying to remember the pass 14:23
     
    He comes back as MrHackerReal
     
    MrHackerReal hello? 14:57
    MrHackerReal hey dude, if you can come up with $20 in the next 24 hours you cna have all your stuff back 14:57
    MrHackerReal but hurry though 14:57
    MrHackerReal bitcointalk.org/index.php?topic=244859.0 14:57
    MrHackerReal not a phish, dont login just read, im going to sell everything I hacked 14:57
    MrHackerReal asdsadasdas 15:00
    MrHackerReal you there? 15:00
    devbot Hey 15:01
    devbot Really man? Please don't do that. 15:01
    MrHackerReal sorry dude, $20 isn't a lot of money, your from Florida not some poor place, you should be able to earn it 15:02
    devbot #1 It's my company site. #2 I've never done anything to you #3 What you're doing is illegal. #4 Why would you betray coinchat like you're doing? 15:03
    devbot What if I give you $4.99 that's in my Paypal acct? 15:04
    MrHackerReal 1 So then pay for it 2. I don't know who oyu are 3. I know dude 4. i dont use coinchat, I only used it last night to phish some accounts, its a nice site tho 15:04
    MrHackerReal i dont take paypal & no 15:04
    MrHackerReal sell it for BTC and you only need $15 15:04
    MrHackerReal more 15:04
    MrHackerReal and you have 0.01BTC too, this hsouldnt be hard 15:04
    devbot #5 I hope you have a proxy. 15:06
    MrHackerReal lol! did you not read the chatlog on coinchat last night? 15:06
    MrHackerReal Admin banned me 100k times 15:06
    MrHackerReal each time ?I had a new ip and account in seconds 15:06
    MrHackerReal read the chat dude it was hilarious 15:07
    MrHackerReal I had to get a new ip and account every single time I post, he would insta-ban me 15:07
    devbot MrHackerReal: You were a mod. Why'd you decide to do this to Coin Chat? 15:09
    MrHackerReal lol 15:09
    MrHackerReal who is this whiskers dude? 15:09
    MrHackerReal i really want to know 15:09
    MrHackerReal honestly this is my second day on this site 15:09
    devbot Honestly, why don't you just send me my account info and we call it a day? 15:10
    MrHackerReal nah, dont be cheap, you fucked up so you gotta pay 15:10
    MrHackerReal either pay by not having your accounts or just straight up pay 15:10 Tip mBTC
    MrHackerReal nobody else had a chance to get their shit back 15:10
    devbot I'm not cheap. Come on man. All I have is $4.99 in my Paypal. and .01 BTC 15:11
    MrHackerReal you only need around 0.19BTC 15:11
    MrHackerReal and you havbe 24hrs, go get a job 15:11
    devbot I can make that face too. And what happens after 24 hours? 15:12
    MrHackerReal i sell your shit to someone else 15:12
    devbot And who would want that domain? 15:14
    MrHackerReal its a $ 15:15
    MrHackerReal someone will pay $1 for it 15:15
    MrHackerReal atleast 15:15
    MrHackerReal i could just host something on it too actually 15:15
    MrHackerReal gayporn or someshit 15:15

[🏰 TradeFortress 🏰]

dude can you please stop posting users passwords? I know this one is an evil person, but this attidue makes me want to withdraw all my btc i've stored on your services. you just can't do that if you're offering legit services.

I wouldn't have been able to post it if he used a good password. That hash comes up when you google it.

If you do scam me, or someone else on my site, then I will disclose information.

[🏰 TradeFortress 🏰]

WOW Your not a programmer, your a con, this is horrible. Should be salted and using a hash like bcrypt that can't be brute forced, so you can't post users passwords, that is the worst thing ever!

I use bcrypt for Inputs, and good salts for CoinLenders.

I don't care if I upset or violate the privacy of scammers. If you dislike this policy, you can (1) not scam people or (2) not use my services.

[🏰 TradeFortress 🏰]

Tradefortress, I just PMed you, please respond immediately once read. Thanks.

Replied to.

[scotaloo]

pandaec
moobot
wazaw
NoirSuccubus
thecoolguy222
notnolyp
blueskizzy
Peanuts
scotaloo -- this is when he registered scotaloo
devinhacker
JessicaAlba
asdasdasda1337
yousuckatcoding
devinthedude

lol!

out of all these, 4 are right i think, rest are probably poor TOR users or whiskers

moobot is devins bot, i never had access to that you can ask him all of oyur evidence is soo wrong its not even funny

Also Admin please check the IP of who registered this bitcointalk account, it'll be shocking, its a reputable member here he didnt use a proxy, the story is forever lost if u ban, maybe i might tell you, but TF is so wrong with this 'evidence' that he pulled out his ass, how did oyu even compile that list? you just looked for people using some NL tor node?

[Atruk]

moobot is devins bot, i never had access to that you can ask him all of oyur evidence is soo wrong its not even funny

Actually its lordsonkit's bot...

[scotaloo]

theres about a million accounts missing from that list that are mine and pretty much all are not mine

[favdesu]

dude can you please stop posting users passwords? I know this one is an evil person, but this attidue makes me want to withdraw all my btc i've stored on your services. you just can't do that if you're offering legit services.

I wouldn't have been able to post it if he used a good password. That hash comes up when you google it.

If you do scam me, or someone else on my site, then I will disclose information.

it doesn't matter if you can google it or table it in 5 mins. how would you feel if your bank would post passwords of their fraudulent customers?

I would question their trust.

no offence, but this is a no go.

[scotaloo]

moobot is devins bot, i never had access to that you can ask him all of oyur evidence is soo wrong its not even funny

Actually its lordsonkit's bot...

who may have had something to do with devinhack....... and alberthrocks (i have pm's/email to prove that)

[🏰 TradeFortress 🏰]

it doesn't matter if you can google it or table it in 5 mins. how would you feel if your bank would post passwords of their fraudulent customers?

I would question their trust.

no offence, but this is a no go.

There's a legal system for that.

How did you feel about people posting Trendon Shaver's address when he scammed millions? Go to the SEC? 

[scotaloo]

There's a legal system for that.

How did you feel about people posting Trendon Shaver's address when he scammed millions? Go to the SEC?  

i know you'll find this hard to believe, but you haven't a clue at what happened at coinchat at all, seriously your soo wrong its not even funny.

Do you still think im whiskers?

and why do you insist on staying anonymous yourself?

[🏰 TradeFortress 🏰]

I never thought you were whiskers75.

[scotaloo]

I never thought you were whiskers75.

yeah you did? maybe your mixing me up with someone else, lol, you thought I was whiskers and kept banning me for a while, i'll have to get my pm logs with you, cos half of those nicks arent even mine dude.

[Atruk]

moobot is devins bot, i never had access to that you can ask him all of oyur evidence is soo wrong its not even funny

Actually its lordsonkit's bot...

who may have had something to do with devinhack....... and alberthrocks (i have pm's/email to prove that)

Well, I never really liked Moo anyway.

[scotaloo]

Well, I never really liked Moo anyway.

This whole thing has destroyed any trust I had in TF, he seriously fucked up here, I've checked he's banning users who were using the TOR exit node I was using and he took their coinchat balance too (thats what happens when you get a ban). Thats seriously unprofessional and a major mistake...

[Turks]

Well, I never really liked Moo anyway.

This whole thing has destroyed any trust I had in TF, he seriously fucked up here, I've checked he's banning users who were using the TOR exit node I was using and he took their coinchat balance too (thats what happens when you get a ban). Thats seriously unprofessional and a major mistake...

Yes, that is what happens when you abuse a free system to earn Bitcoin for doing nothing but talking about random crap for hours at a time. People like you give TOR a bad name, but not to mention it's hard to discern degenerates like yourself from genuine human beings.

[Atruk]

Well, I never really liked Moo anyway.

This whole thing has destroyed any trust I had in TF, he seriously fucked up here, I've checked he's banning users who were using the TOR exit node I was using and he took their coinchat balance too (thats what happens when you get a ban). Thats seriously unprofessional and a major mistake...

I don't see any reason to distrust TF over this. You were phishing and using phished accounts to defraud. It is people abusing TOR as you did that makes it harder for poor political dissidents to find TOR useful when they desperately need it.

[scotaloo]

I don't see any reason to distrust TF over this.

What posts were you reading?

https://bitcointalk.org/index.php?topic=254776.0

[DiamondCardz]

pandaec  Hmmm...
moobot Wait, what? o_o I find that extremely hard to believe
wazaw
NoirSuccubus Doubt that Noir is a phisher.
thecoolguy222
notnolyp
blueskizzy Hmmm...
Peanuts Wait, what? Nope
scotaloo -- this is when he registered scotaloo
devinhacker
JessicaAlba
asdasdasda1337
yousuckatcoding
devinthedude

Yeah, he's using tor or proxies.

[devthedev]

scotaloo, I just have nothing to say to you. 

[scotaloo]

I've been thinking recently, you guys can't ban this account, all you have done is allege that I am an alt, nobody has been defrauded by this account on BitcoinTalk, me being an alt of someone else is irrelevant.

Normally you don't ban alt accounts even if they are obvious scammer alts unless they scam someone, I have not posted any phishing links or done any trades at all (other than the competition thing which I paid double the amount required) and have not scammed anyone on BitcoinTalk using this account, this is a clean account.

None of my alleged 'alts' which I deny ownership of have been banned either so I am not ban evading, if you do find one of my alts I will 'fess up, but I've checked and none are banned but just have negative trust.

[🏰 TradeFortress 🏰]

yes you have, you posted phishing links and you were selling phished propert.

[scotaloo]

yes you have, you posted phishing links and you were selling phished propert.

I never posted phishing links, mods can check all my posts and any edits/pm's and placing an ad for a domain is different than actually selling it. At the most that makes me an alleged scammer as advertising property for sale does not prove that I was in possession of it or actually stole it.

[🏰 TradeFortress 🏰]

Correction: your account has not posted any phishing links through bitcointalk, but you as a person has posted phishing links - especially you own bitcoin - talk.org

[scotaloo]

Correction: your account has not posted any phishing links through bitcointalk, but you as a person has posted phishing links - especially you own bitcoin - talk.org

Please prove to Theymos that either I own that site or that I posted links to it on bitcointalk then, let him decide if your proof is enough to warrant a ban.

Actually if you can prove I posted it elsewhere on the internet you should give him that proof too, I don't think it'll warrant a ban by itself but maybe with whatever Maged allegedly has it'll be enough, only one way to find out....

Also how do we know that I wasn't hacked and a hacker was just posting the links? I mean, look at all the hacked accounts posting/PMing links to wallet.dat.exe, why are they not banned?

[BlackLilac Jordan]

theres about a million accounts missing from that list that are mine and pretty much all are not mine

yeah you can say that but you're a proven liar and clearly a born loser, so we don't care what bullshit comes out of your worthless, pathetic mouth.

[scotaloo]

yeah you can say that but you're a proven liar and clearly a born loser, so we don't care what bullshit comes out of your worthless, pathetic mouth.

No proof has been posted, so on this forum people are guilty until they prove their innocence?

Posting rude posts like that is not how you make friends here btw Jordan Lear...

[🏰 TradeFortress 🏰]

There's plenty of evidence. Don't ignore it

[scotaloo]

There's plenty of evidence. Don't ignore it

The real worlds definition of evidence and yours are completely different... You banned innocent people on your chat site already.

[🏰 TradeFortress 🏰]

The real worlds definition of evidence and yours are completely different...

This isn't a criminal court buddy. It's blatantly obvious that scotaloo here IS scotaloo on coinchat.

[scotaloo]

This isn't a criminal court buddy.

Look you can stop posting, nobody buys your shoddy evidence. Maged wanted to ban me for ban evading, I've already highlighted that he was wrong. You're just spewing lies about me because I critized the security of your sites and highlighted a number of flaws.

It's blatantly obvious that scotaloo here IS scotaloo on coinchat.

Look at how many people agree with you...

[🏰 TradeFortress 🏰]

I know this tactic - it's called derailing.

Now let's go back to this thread.

https://bitcointalk.org/index.php?topic=252125.40

[AndyRossy]

mmm you should always salt passwords, kinda important.