I found this on pastebin. Post with expiry time so likely gone from caches already. Pastebin ID was Fe3gCy0u.
¯\\_(ツ)_/¯ Crypterra.net
@author esfdsdfsdfasfsdf <
[email protected]>
=================
Architecture
=================
1 crypterra.net 2 Proxy 3 Payout Server
+ ---------- + + --------- + + --------- +
| OVH French | ------- :3306 ------- | SSH Proxy | ------- :22 ------- | localhost |
+ -----------+ + --------- + + --------- +
| | |
| 5 VPS Control | |
| + ------------ + | |
+ ---- API ---- | unihost.com | --- + |
| + ------------ + |
| |
| 6 Cart Wallet |
| + ------------ + + --------------- +
+ ---- API ---- | yobit.net | ------------ API ----------- | blockchain.info | 4 Payout Wallet
| | + ------------ + + --------------- +
| | |
| | 7 Cart Invoicement BTC NET
| | + -------------- + |
+ ---- API ---- | paymentbar.com | Your Wallet
| + -------------- +
|
| 8 Mining Calculation
| + ------------ +
+ ---- API ---- | APIS |
+ ------------ +
=================
references
=================
1. crypterra.net
-----------------
old server: ip30.ip-92-222-138.eu
current server: ns554090.ip-144-217-182.net
2. Proxy
-----------------
proxies used by admins
www.fastssh.com62.210.69.80
163.172.220.199
51.15.37.183
spotssh.us
162.243.243.19
46.101.56.31
3. Payout Server
-----------------
- no information available
4. Payout Wallet
-----------------
www.blockchain.infoconnected with: billing(at)crypterra.net
blockchain wallet-id: ea3b4192-7ab7-487e-8abc-89e094b8e258
5. VPS Control
-----------------
unihost.com
6. Cart Wallet
-----------------
www.yobit.netConnected with: billing(at)crypterra.net
Litecoin-Wallet: LTuyWdi6x2RWARMfjyM5ES68vNcJxsmhzy
Bitcoin-Wallet: 1BwpytQQK53Yr7vU4XJz89WFuuKgfq8kFt
7. Cart Invoicement
-----------------
https://go.paymentbar.com/api/v2/make?pay_to_btc=8. Mining Calculation
-----------------
ETH:
http://alpha61.com/ethereum.jsonZCASH:
https://api.zcha.in/v2/mainnet/networkBTC:
https://api.blockchain.info/statsLTC:
https://whattomine.com/coins/4.jsoncrypterra owners
-----------------
Dmitriy Sta <
[email protected]>
Business-Mail: <
[email protected]>
Skype: unihostcom
Maкcим Пилипeнкo ( Maxim Pilipenko ) <
[email protected]>
Skype: ost_ukrainian_07
Profiles found on Facebook, Google and Steam
Real IP-Addresses
-----------------
37.44.86.102
178.121.216.139
178.121.203.94
213.184.225.81
=================
please notice
=================
- this information is the result by data-analysis from mailserver and sourcecode of crypterra.net (Oct 2017).
- i will not answer any questions about how i broke into the system.
- i will not share any sourcecode (clone preventing).
- i'm in contact with EC3 (Europol ~ European Cybercrime Centre)