NotAPonzi (OP)
Member
Offline
Activity: 70
Merit: 10
|
|
January 27, 2015, 10:58:30 PM |
|
It seems there are some new WP Scans posted on http://pastebin.com. I'm not going to post them after all the shit last time. Some interesting developments... PM me the link please
|
|
|
|
vipgelsi
Legendary
Offline
Activity: 1736
Merit: 1001
|
|
January 27, 2015, 11:36:21 PM |
|
It seems there are some new WP Scans posted on http://pastebin.com. I'm not going to post them after all the shit last time. Some interesting developments... Can you share your thoughts on the interesting developments? Thanks
|
|
|
|
djm34
Legendary
Offline
Activity: 1400
Merit: 1050
|
|
January 28, 2015, 12:30:56 AM |
|
It seems there are some new WP Scans posted on http://pastebin.com. I'm not going to post them after all the shit last time. Some interesting developments... Can you share your thoughts on the interesting developments? Thanks add a look to that but quite frankly I don't understand anything
|
djm34 facebook pageBTC: 1NENYmxwZGHsKFmyjTc5WferTn5VTFb7Ze Pledge for neoscrypt ccminer to that address: 16UoC4DmTz2pvhFvcfTQrzkPTrXkWijzXw
|
|
|
crazyivan
Legendary
Offline
Activity: 1652
Merit: 1007
DMD Diamond Making Money 4+ years! Join us!
|
|
January 28, 2015, 07:15:06 AM |
|
It seems there are some new WP Scans posted on http://pastebin.com. I'm not going to post them after all the shit last time. Some interesting developments... Can you share your thoughts on the interesting developments? Thanks Yup, clarification would be nice.
|
|
|
|
m3
|
|
January 28, 2015, 07:22:06 AM |
|
|
| THEMERKLE | ... |
| ●.BTC.●.LTC ● XMR.● DASH .● DOGE.● ETH
|
|
|
|
|
PhilippeStevens
|
|
January 28, 2015, 01:09:42 PM |
|
That scan is very very shorter than the previous, what does that mean ? Security improved ? Also, enumeration seems to be gone.
I'm just asking questions, don't know anything about it Anyone can develop on it ? Danzor ?
|
|
|
|
NotAPonzi (OP)
Member
Offline
Activity: 70
Merit: 10
|
|
January 28, 2015, 02:06:10 PM |
|
Ok a little update, so it looks like Chris has been reading this topic and has taken some actions to hide his tracks even more http://pastebin.com/VpQzEuhhhttp://pastebin.com/kuruZ5mJOriginal User List: +----+-----------------+-----------------+ | Id | Login | Name | +----+-----------------+-----------------+ | 1 | geegee | Chris | | 2 | cucu | Vasile | | 3 | ionion | Ion | | 4 | lavinia | Vasilica Gigi | | 5 | z34b19ry0 | z34b19ry0 | | 6 | johncena | John Cena | | 7 | anne | Anne Smith | | 8 | lavinia-schipor | Lavinia Schipor | | 9 | | | | 10 | dirtybit | David | +----+-----------------+-----------------+ New User List: +----+----------+----------+ | Id | Login | Name | +----+----------+----------+ | 5 | johncena | johncena | | 7 | 0100110 | 0100110 | | 8 | 020btc | 020BTC | | 9 | 0nie13 | 0nie13 | | 10 | 0rphane | 0rphane | +----+----------+----------+ Basically the user list has changed from the original scan. All the "real" original accounts have been deleted. geegee/cucu/ionion/lavinia and a couple others. In addition he's started to add news as a sub page of farm payments instead of making a wordpress "post" like he used to. The only reason I can see for him doing that is because pages don't show who the author is like posts do. It doesn't prove very much but it indicates two things to me: 1. He is reading these threads and watching what we say (seems highly coincidental he would make these changes without having seen the information posted here) 2. He has reason to try hide the above information The scans also show that nothing besides those changes have occurred. No extra security, no additional plugins. What has happened in all that downtime? Seems like basically he's just spent the time trying to cover his tracks.
|
|
|
|
Vertje
Newbie
Offline
Activity: 13
Merit: 0
|
|
January 28, 2015, 02:20:05 PM |
|
First post here, i'm from the neighbors of litecointalk but I discovered something regarding the user-list of the Pastebin. I was able to log-in on an account of the list and discovered the following: https://litecointalk.org/index.php?topic=22870.msg248421#msg248421Maybe it gives you more information. I'm at work now so I don't have the time to look into it.
|
|
|
|
play4fun
Newbie
Offline
Activity: 5
Merit: 0
|
|
January 28, 2015, 02:26:51 PM |
|
Ok a little update, so it looks like Chris has been reading this topic and has taken some actions to hide his tracks even more http://pastebin.com/VpQzEuhhhttp://pastebin.com/kuruZ5mJOriginal User List: +----+-----------------+-----------------+ | Id | Login | Name | +----+-----------------+-----------------+ | 1 | geegee | Chris | | 2 | cucu | Vasile | | 3 | ionion | Ion | | 4 | lavinia | Vasilica Gigi | | 5 | z34b19ry0 | z34b19ry0 | | 6 | johncena | John Cena | | 7 | anne | Anne Smith | | 8 | lavinia-schipor | Lavinia Schipor | | 9 | | | | 10 | dirtybit | David | +----+-----------------+-----------------+ New User List: +----+----------+----------+ | Id | Login | Name | +----+----------+----------+ | 5 | johncena | johncena | | 7 | 0100110 | 0100110 | | 8 | 020btc | 020BTC | | 9 | 0nie13 | 0nie13 | | 10 | 0rphane | 0rphane | +----+----------+----------+ Basically the user list has changed from the original scan. All the "real" original accounts have been deleted. geegee/cucu/ionion/lavinia and a couple others. In addition he's started to add news as a sub page of farm payments instead of making a wordpress "post" like he used to. The only reason I can see for him doing that is because pages don't show who the author is like posts do. It doesn't prove very much but it indicates two things to me: 1. He is reading these threads and watching what we say (seems highly coincidental he would make these changes without having seen the information posted here) 2. He has reason to try hide the above information The scans also show that nothing besides those changes have occurred. No extra security, no additional plugins. What has happened in all that downtime? Seems like basically he's just spent the time trying to cover his tracks. let him read this, 1 month+ patient for him to deliver the payment, and now he is asking for tax, pretty silly, if he intended to run, better scrub off whats left or people will come to hunt him down.
|
|
|
|
Danz0r77
|
|
January 28, 2015, 02:30:25 PM |
|
First post here, i'm from the neighbors of litecointalk but I discovered something regarding the user-list of the Pastebin. I was able to log-in on an account of the list and discovered the following: https://litecointalk.org/index.php?topic=22870.msg248421#msg248421Maybe it gives you more information. I'm at work now so I don't have the time to look into it. Which account is it?
|
|
|
|
play4fun
Newbie
Offline
Activity: 5
Merit: 0
|
|
January 28, 2015, 02:34:17 PM |
|
First post here, i'm from the neighbors of litecointalk but I discovered something regarding the user-list of the Pastebin. I was able to log-in on an account of the list and discovered the following: https://litecointalk.org/index.php?topic=22870.msg248421#msg248421Maybe it gives you more information. I'm at work now so I don't have the time to look into it. Which account is it? you should check the post, indeed very suspicious i can tell
|
|
|
|
Vertje
Newbie
Offline
Activity: 13
Merit: 0
|
|
January 28, 2015, 02:41:29 PM |
|
First post here, i'm from the neighbors of litecointalk but I discovered something regarding the user-list of the Pastebin. I was able to log-in on an account of the list and discovered the following: https://litecointalk.org/index.php?topic=22870.msg248421#msg248421Maybe it gives you more information. I'm at work now so I don't have the time to look into it. Which account is it? you should check the post, indeed very suspicious i can tell I won't tell because I think it is a testing account of Chris. I send him a PM and the moderator of Litecointalk who has/had contact with Chris. The mailaddress he used to create the account starts with: "geegee" that a direct link to the original user list +----+-----------------+-----------------+ | Id | Login | Name | +----+-----------------+-----------------+ | 1 | geegee | Chris |
|
|
|
|
djm34
Legendary
Offline
Activity: 1400
Merit: 1050
|
|
January 28, 2015, 03:53:42 PM Last edit: January 28, 2015, 06:00:40 PM by djm34 |
|
First post here, i'm from the neighbors of litecointalk but I discovered something regarding the user-list of the Pastebin. I was able to log-in on an account of the list and discovered the following: https://litecointalk.org/index.php?topic=22870.msg248421#msg248421Maybe it gives you more information. I'm at work now so I don't have the time to look into it. Which account is it? you should check the post, indeed very suspicious i can tell I won't tell because I think it is a testing account of Chris. I send him a PM and the moderator of Litecointalk who has/had contact with Chris. The mailaddress he used to create the account starts with: "geegee" that a direct link to the original user list +----+-----------------+-----------------+ | Id | Login | Name | +----+-----------------+-----------------+ | 1 | geegee | Chris | oh so he is that elusive percent of user (10k account 100 belonging to himself ) by the way, your post on litecointalk must have been removed because didn't see anything. If it is suspicious it would be nice to tell a little more, or at least a short summary... ps: I promise, I won't ask why in the hell are you logging in other people account even though it is suspicious as well... (nice protection if it is possible to log in Chris account btw... or may-be he is trying to trace people doing that...) edit: a new pastebin is available showing the first 45 users... seriously is that site not even protected a little bit ? (if there is something clear, he is not working in improving the security...)
|
djm34 facebook pageBTC: 1NENYmxwZGHsKFmyjTc5WferTn5VTFb7Ze Pledge for neoscrypt ccminer to that address: 16UoC4DmTz2pvhFvcfTQrzkPTrXkWijzXw
|
|
|
Danz0r77
|
|
January 28, 2015, 07:20:05 PM |
|
edit: a new pastebin is available showing the first 45 users... seriously is that site not even protected a little bit ? (if there is something clear, he is not working in improving the security...) Definitely recognize some names on that list
|
|
|
|
djm34
Legendary
Offline
Activity: 1400
Merit: 1050
|
|
January 28, 2015, 09:15:01 PM |
|
edit: a new pastebin is available showing the first 45 users... seriously is that site not even protected a little bit ? (if there is something clear, he is not working in improving the security...) Definitely recognize some names on that list a second list of 1000 users published (haven't seen the first one though...)
|
djm34 facebook pageBTC: 1NENYmxwZGHsKFmyjTc5WferTn5VTFb7Ze Pledge for neoscrypt ccminer to that address: 16UoC4DmTz2pvhFvcfTQrzkPTrXkWijzXw
|
|
|
damiano
Legendary
Offline
Activity: 1246
Merit: 1000
103 days, 21 hours and 10 minutes.
|
|
January 29, 2015, 03:32:43 AM |
|
edit: a new pastebin is available showing the first 45 users... seriously is that site not even protected a little bit ? (if there is something clear, he is not working in improving the security...) Definitely recognize some names on that list a second list of 1000 users published (haven't seen the first one though...) Where is the list?
|
|
|
|
Vertje
Newbie
Offline
Activity: 13
Merit: 0
|
|
January 29, 2015, 09:30:33 AM |
|
First post here, i'm from the neighbors of litecointalk but I discovered something regarding the user-list of the Pastebin. I was able to log-in on an account of the list and discovered the following: https://litecointalk.org/index.php?topic=22870.msg248421#msg248421Maybe it gives you more information. I'm at work now so I don't have the time to look into it. Which account is it? you should check the post, indeed very suspicious i can tell I won't tell because I think it is a testing account of Chris. I send him a PM and the moderator of Litecointalk who has/had contact with Chris. The mailaddress he used to create the account starts with: "geegee" that a direct link to the original user list +----+-----------------+-----------------+ | Id | Login | Name | +----+-----------------+-----------------+ | 1 | geegee | Chris | oh so he is that elusive percent of user (10k account 100 belonging to himself ) by the way, your post on litecointalk must have been removed because didn't see anything. If it is suspicious it would be nice to tell a little more, or at least a short summary... ps: I promise, I won't ask why in the hell are you logging in other people account even though it is suspicious as well... (nice protection if it is possible to log in Chris account btw... or may-be he is trying to trace people doing that...) edit: a new pastebin is available showing the first 45 users... seriously is that site not even protected a little bit ? (if there is something clear, he is not working in improving the security...) It is too bad that Litecointalk removed my post but I’ll give you a brief summary. I looked at the pastbin with 10 usernames and I tried to log-in on the first one. The correct password was; “drumrolls”… test!. Now that I was able to log-in I took a look at the account and I found a working order history (see screenshot). http://s24.postimg.org/n5nc5wext/ltcgear1.jpgBesides the working order history I found that there were some suspicious orders, for example the 3K0 pack at 25dec for just 1$ (see screenshot). http://s29.postimg.org/bgci2s64j/ltcgear2.jpgAt this moment I was doubting if this was a “fake” account, maybe one of the accounts who was messing with the shares and fake purchases etc. But the mailaddress uses to create this account starts with: geegee….@.....com. When I searched this mail address, I found out that is was linked to a certain website registered in Bucharest (where Chris supposedly lives). The name geegee is also used in the oldest pastbin, so this was enough proof that this was really Chris his account. +----+-----------------+-----------------+ | Id | Login | Name | +----+-----------------+-----------------+ | 1 | geegee | Chris | So, since I have no bad intentions with this account I changed the password (because if I can guess it, other people are also capable). Send an mail to Beekeeper, and informed the moderator at Litecointalk who has some direct contact with Chris. This was all yesterday; at this moment it is still possible to login on this account. If you have more question, feel free to ask
|
|
|
|
|
NotAPonzi (OP)
Member
Offline
Activity: 70
Merit: 10
|
|
January 29, 2015, 01:49:29 PM |
|
|
|
|
|
|
|