C-Cex Has Frozen Your BTC! Not to be Trusted

[TribalBob]

lojack - Just over 3 hours left then I'm dumping your info (with pics).

[1714945677]

1714945677

[1714945677]

1714945677

[TribalBob]

I see you lurking. You may be hiding your online status but I can see your "last activity" time changing...

[blajde]

Diz gunna bee intwesting

[illodin]

And if you don't have the money anymore, go loan it from somewhere. Probably your parents would like to see you stay out of jail.

[Sparood]

Will watch this closely...

[TribalBob]

That pedo thing is for hunting them... Link is dead so cant just bust him for that

Wasn't sure because I wasn't going to click on anything with "pedo" in the title, lol...

[TribalBob]

That son of a bitch. Thank you very much for this info.

Quite welcome.

[shmick]

Hey there, shmick here. Just saw this via twitter.

Not really sure what it's about.

1) Yes, I do have a BTC-e account. I don't mine bitcoin though, I've only got a single machine at home mining primecoin.

2) Yes, that's my github archive for scanning OTA TV signals with an HDHomeRun tuner.

3) I've no idea who "sxqut@evopo.com", "Mairusu" and "Darkman" are.

Cheers.

[slyA]

This is getting good.

[TribalBob]

Hey there, shmick here. Just saw this via twitter.

Not really sure what it's about.

1) Yes, I do have a BTC-e account. I don't mine bitcoin though, I've only got a single machine at home mining primecoin.

2) Yes, that's my github archive for scanning OTA TV signals with an HDHomeRun tuner.

3) I've no idea who "sxqut@evopo.com", "Mairusu" and "Darkman" are.

Cheers.

It seems I may have made a mistake, it seems that your paste appeared in my search results because the cached page contained a link to a paste made by the person we are actually looking for. I am incredibly embarrassed and I am very sorry. I have deleted all my posts with your information and I would like to ask that others do the same as well.

[shmick]

Guys, I'm all for nailing people who have scammed others, but please remember that things posted online, while seemingly benign, can have long term repercussions and it's very hard to delete things once they're online.

[ExD]

I checked evopo.com where he has email, it has only blank nginx page, so it might be his rented vps with email server running.

WHOIS data:

Code:

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

   Domain Name: EVOPO.COM
   Registrar: GODADDY.COM, LLC
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS77.DOMAINCONTROL.COM
   Name Server: NS78.DOMAINCONTROL.COM
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 31-aug-2013
   Creation Date: 31-aug-2013
   Expiration Date: 31-aug-2014

>>> Last update of whois database: Mon, 03 Mar 2014 19:01:25 UTC <<<

NOTICE: The expiration date displayed in this record is the date the 
registrar's sponsorship of the domain name registration in the registry is 
currently set to expire. This date does not necessarily reflect the expiration 
date of the domain name registrant's agreement with the sponsoring 
registrar.  Users may consult the sponsoring registrar's Whois database to 
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois 
database through the use of electronic processes that are high-volume and 
automated except as reasonably necessary to register domain names or 
modify existing registrations; the Data in VeriSign Global Registry 
Services' ("VeriSign") Whois database is provided by VeriSign for 
information purposes only, and to assist persons in obtaining information 
about or related to a domain name registration record. VeriSign does not 
guarantee its accuracy. By submitting a Whois query, you agree to abide 
by the following terms of use: You agree that you may use this Data only 
for lawful purposes and that under no circumstances will you use this Data 
to: (1) allow, enable, or otherwise support the transmission of mass 
unsolicited, commercial advertising or solicitations via e-mail, telephone, 
or facsimile; or (2) enable high volume, automated, electronic processes 
that apply to VeriSign (or its computer systems). The compilation, 
repackaging, dissemination or other use of this Data is expressly 
prohibited without the prior written consent of VeriSign. You agree not to 
use electronic processes that are automated and high-volume to access or 
query the Whois database except as reasonably necessary to register 
domain names or modify existing registrations. VeriSign reserves the right 
to restrict your access to the Whois database in its sole discretion to ensure 
operational stability.  VeriSign may restrict or terminate your access to the 
Whois database for failure to abide by these terms of use. VeriSign 
reserves the right to modify these terms at any time. 

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
Domain Name: EVOPO.COM
Registry Domain ID: 1824710660_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Update Date: 2013-08-31 15:27:59
Creation Date: 2013-08-31 15:27:59
Registrar Registration Expiration Date: 2014-08-31 15:27:59
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: +1.480-624-2505
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Domain Status: clientRenewProhibited
Domain Status: clientDeleteProhibited
Registry Registrant ID: 
Registrant Name: Oron Adam
Registrant Organization: 
Registrant Street: 33 derech bait lehem
Registrant City: Jerusalem
Registrant State/Province: Israel
Registrant Postal Code: 93553
Registrant Country: Israel
Registrant Phone: 546671414
Registrant Phone Ext: 
Registrant Fax: 
Registrant Fax Ext: 
Registrant Email: oronoa@gmail.com
Registry Admin ID: 
Admin Name: Oron Adam
Admin Organization: 
Admin Street: 33 derech bait lehem
Admin City: Jerusalem
Admin State/Province: Israel
Admin Postal Code: 93553
Admin Country: Israel
Admin Phone: 546671414
Admin Phone Ext: 
Admin Fax: 
Admin Fax Ext: 
Admin Email: oronRegistry Tech ID: 
Tech Name: Oron Adam
Tech Organization: 
Tech Street: 33 derech bait lehem
Tech City: Jerusalem
Tech State/Province: Israel
Tech Postal Code: 93553
Tech Country: Israel
Tech Phone: 546671414
Tech Phone Ext: 
Tech Fax: 
Tech Fax Ext: 
Tech Email: oronoa@gmail.com
Name Server: NS77.DOMAINCONTROL.COM
Name Server: NS78.DOMAINCONTROL.COM
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2014-03-03T19:00:00Z

The data contained in GoDaddy.com, LLC's WhoIs database,
while believed by the company to be reliable, is provided "as is"
with no guarantee or warranties regarding its accuracy.  This
information is provided for the sole purpose of assisting you
in obtaining information about domain name registration records.
Any use of this data for any other purpose is expressly forbidden without the prior written
permission of GoDaddy.com, LLC.  By submitting an inquiry,
you agree to these terms of usage and limitations of warranty.  In particular,
you agree not to use this data to allow, enable, or otherwise make possible,
dissemination or collection of this data, in part or in its entirety, for any
purpose, such as the transmission of unsolicited advertising and
and solicitations of any kind, including spam.  You further agree
not to use this data to enable high volume, automated or robotic electronic
processes designed to collect or compile this data for any purpose,
including mining this data for your own personal or commercial purposes. 

Please note: the registrant of the domain name is specified
in the "registrant" section.  In most cases, GoDaddy.com, LLC 
is not the registrant of domain names listed in this database.

Upd: nope, this domain is used for disposable email addresses, so owner probably have nothing to do with this.

[TribalBob]

Ok, starting back at basics, here is what we do have for sure:

E-Mail used at C-CEX: sxqut@evopo.com
Account Name at C-CEX: Mairusu
Chat name at C-CEX : Darkman

Links
Paste #1: http://webcache.googleusercontent.com/search?q=cache:vNRUfQ-rzQ8J:pastebin.ca/2645903+&cd=1&hl=en&ct=clnk&gl=us
Paste #2: http://webcache.googleusercontent.com/search?q=cache:08JImy9Kt4YJ:pastebin.ca/2645904+&cd=1&hl=en&ct=clnk&gl=us

[TribalBob]

I checked evopo.com where he has email, it has only blank nginx page, so it might be his rented vps with email server running.

WHOIS data:

Code:

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

   Domain Name: EVOPO.COM
   Registrar: GODADDY.COM, LLC
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS77.DOMAINCONTROL.COM
   Name Server: NS78.DOMAINCONTROL.COM
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 31-aug-2013
   Creation Date: 31-aug-2013
   Expiration Date: 31-aug-2014

>>> Last update of whois database: Mon, 03 Mar 2014 19:01:25 UTC <<<

NOTICE: The expiration date displayed in this record is the date the 
registrar's sponsorship of the domain name registration in the registry is 
currently set to expire. This date does not necessarily reflect the expiration 
date of the domain name registrant's agreement with the sponsoring 
registrar.  Users may consult the sponsoring registrar's Whois database to 
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois 
database through the use of electronic processes that are high-volume and 
automated except as reasonably necessary to register domain names or 
modify existing registrations; the Data in VeriSign Global Registry 
Services' ("VeriSign") Whois database is provided by VeriSign for 
information purposes only, and to assist persons in obtaining information 
about or related to a domain name registration record. VeriSign does not 
guarantee its accuracy. By submitting a Whois query, you agree to abide 
by the following terms of use: You agree that you may use this Data only 
for lawful purposes and that under no circumstances will you use this Data 
to: (1) allow, enable, or otherwise support the transmission of mass 
unsolicited, commercial advertising or solicitations via e-mail, telephone, 
or facsimile; or (2) enable high volume, automated, electronic processes 
that apply to VeriSign (or its computer systems). The compilation, 
repackaging, dissemination or other use of this Data is expressly 
prohibited without the prior written consent of VeriSign. You agree not to 
use electronic processes that are automated and high-volume to access or 
query the Whois database except as reasonably necessary to register 
domain names or modify existing registrations. VeriSign reserves the right 
to restrict your access to the Whois database in its sole discretion to ensure 
operational stability.  VeriSign may restrict or terminate your access to the 
Whois database for failure to abide by these terms of use. VeriSign 
reserves the right to modify these terms at any time. 

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
Domain Name: EVOPO.COM
Registry Domain ID: 1824710660_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Update Date: 2013-08-31 15:27:59
Creation Date: 2013-08-31 15:27:59
Registrar Registration Expiration Date: 2014-08-31 15:27:59
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: +1.480-624-2505
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Domain Status: clientRenewProhibited
Domain Status: clientDeleteProhibited
Registry Registrant ID: 
Registrant Name: Oron Adam
Registrant Organization: 
Registrant Street: 33 derech bait lehem
Registrant City: Jerusalem
Registrant State/Province: Israel
Registrant Postal Code: 93553
Registrant Country: Israel
Registrant Phone: 546671414
Registrant Phone Ext: 
Registrant Fax: 
Registrant Fax Ext: 
Registrant Email: oronoa@gmail.com
Registry Admin ID: 
Admin Name: Oron Adam
Admin Organization: 
Admin Street: 33 derech bait lehem
Admin City: Jerusalem
Admin State/Province: Israel
Admin Postal Code: 93553
Admin Country: Israel
Admin Phone: 546671414
Admin Phone Ext: 
Admin Fax: 
Admin Fax Ext: 
Admin Email: oronRegistry Tech ID: 
Tech Name: Oron Adam
Tech Organization: 
Tech Street: 33 derech bait lehem
Tech City: Jerusalem
Tech State/Province: Israel
Tech Postal Code: 93553
Tech Country: Israel
Tech Phone: 546671414
Tech Phone Ext: 
Tech Fax: 
Tech Fax Ext: 
Tech Email: oronoa@gmail.com
Name Server: NS77.DOMAINCONTROL.COM
Name Server: NS78.DOMAINCONTROL.COM
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2014-03-03T19:00:00Z

The data contained in GoDaddy.com, LLC's WhoIs database,
while believed by the company to be reliable, is provided "as is"
with no guarantee or warranties regarding its accuracy.  This
information is provided for the sole purpose of assisting you
in obtaining information about domain name registration records.
Any use of this data for any other purpose is expressly forbidden without the prior written
permission of GoDaddy.com, LLC.  By submitting an inquiry,
you agree to these terms of usage and limitations of warranty.  In particular,
you agree not to use this data to allow, enable, or otherwise make possible,
dissemination or collection of this data, in part or in its entirety, for any
purpose, such as the transmission of unsolicited advertising and
and solicitations of any kind, including spam.  You further agree
not to use this data to enable high volume, automated or robotic electronic
processes designed to collect or compile this data for any purpose,
including mining this data for your own personal or commercial purposes. 

Please note: the registrant of the domain name is specified
in the "registrant" section.  In most cases, GoDaddy.com, LLC 
is not the registrant of domain names listed in this database.

evopo.com is a domain used by a disposable email service that is owned by Oron Adam

Basically you go to homepage for the service and it assigns you a throwaway box with random numbers and letters @ one of their registered domains. then you have to check the box every "x" hours or it is automatically deleted. You can't even use them to send mail, have to use another service (our guy likes to use send-email.org)

[rasnetworks]

Request to bitcoin talk administrators
Can you  publish IP addresses used by lojack?

[gregorymiles]

Hey Grégory (lojack),

Stop messing around and send the money back or things are about to get furry in the suburbs of Paris.

- KickTails60

[Hueristic]

[gregorymiles]

and in case you don't believe me,
this date mean anything to you: 21/04/1984

[Bitcoin_Gambler]

He has clearly decided to take a portion of the money.  Let's get his real info out there so that people can file charges appropriately.

[gregorymiles]

He has clearly decided to take a portion of the money.  Let's get his real info out there so that people can file charges appropriately.

True

Here's who i believe our guy is:

http://i60.tinypic.com/mligcm.png

Grégory Hautier
Location: Creil, France
aka. Mairusu-Paua, Mairusu, Darkman, hitaku60, tails60
DOB: 04/21/1984

Schools Attended:
Collège Charles De Gaulle -  1995 - 2000
Lycée Marie Curie - 2000 - 2004
Antenne Universite de Picardide Jules Verne -  2004 - 2008

Last known employer:
Vietnam Tourism Forum - September 2003
vtf.com.vn


Social Networks:
http://www.france-jeunes.net/view.php?tid=135718
https://myspace.com/127585348
https://www.facebook.com/greg.hautier
https://www.facebook.com/greg.hautier.1
https://www.facebook.com/gregory.hautier.52

In his own words:
I'm a half belgian french guy, I live in the north suburbs of Paris. Interested in tons and various thing :3, literature, draw, picture, architecture, animals, art....
I'm also a fur, "unknown", my nickname is Miles Tails Power on the web.
If you want speak with me no problem, but I don't talk much :3
Current Residence: Suburbs of Paris
Favourite genre of music: jazz/blues/world music/ classical....
Favourite style of art: oniric art, furry art,...
Operating System: OS X Lion ver. 10.7.1
Personal Quote: "partir le coeur à l'agonie, le coeur brisé, .... partir en clandestin, au petit jour"

For some reason Gregory is obsessed with Tails from Sonic the hedgehog. You can read his Tails fan-fiction site: http://mairusu-paua.tumblr.com
also his view on bitcoin: http://mairusu-paua.tumblr.com/post/77838460722/bitcoins
notice his writing style, especially his serial commas. Very reminiscent of Lojack's.