Topic: LTCGear.com SCAM - Enough is enough, lets get some info together - page 22. (Read 55606 times)

Thank you for that info

So, Lavinia

She runs:
http://www.virtual-electronic.ro/

Domain is now offline.

Whois at http://www.rotld.ro/engleza/index_en.html shows:

Domain Info
Domain Name:

virtual-electronic.ro
Registrar:

ICI - ROTLD
Registration Date:

2004-02-23 00:00:00
Nameservers:

ns1.gazduire.ro
ns2.gazduire.ro
Status:

OK



   
Owner Data (Registrant)
Owner Name:

Virtual SRL
Address:

Str. Maica Domnului Nr.42
Address:

Sector 2
Address:

Bucuresti
City:

xx
Sector/County:

Postal Code:

70000
Country:

ROMANIA
Phone:

+40-021-2109207
Fax:

+40-021-2109207
E-mail:

[email protected]



There is also the order for some fans:
http://www.ic886.com/ic/GB0535ADB2-8/datasheet/pdf/106850.html

More contact:
http://www.dioda.ro/WeblinksPro/l_op=viewlinkdetails/lid=173.html

It is too bad that Litecointalk removed my post but I’ll give you a brief summary.

I looked at the pastbin with 10 usernames and I tried to log-in on the first one. The correct password was; “drumrolls”… test!. Now that I was able to log-in I took a look at the account and I found a working order history (see screenshot).

http://s24.postimg.org/n5nc5wext/ltcgear1.jpg
Besides the working order history I found that there were some suspicious orders, for example the 3K0 pack at 25dec for just 1$ (see screenshot).

http://s29.postimg.org/bgci2s64j/ltcgear2.jpg

At this moment I was doubting if this was a “fake” account, maybe one of the accounts who was messing with the shares and fake purchases etc. But the mailaddress uses to create this account starts with: geegee…[email protected]. When I searched this mail address, I found out that is was linked to a certain website registered in Bucharest (where Chris supposedly lives).
The name geegee is also used in the oldest pastbin, so this was enough proof that this was really Chris his account.

+----+-----------------+-----------------+
    | Id | Login           | Name            |
+----+-----------------+-----------------+
    | 1  | geegee          | Chris           |


So, since I have no bad intentions with this account I changed the password (because if I can guess it, other people are also capable). Send an mail to Beekeeper, and informed the moderator at Litecointalk who has some direct contact with Chris.

This was all yesterday; at this moment it is still possible to login on this account.
If you have more question, feel free to ask

Where is the list?

a second list of 1000 users published (haven't seen the first one though...)

Definitely recognize some names on that list

oh so he is that elusive percent of user (10k account 100 belonging to himself  )
by the way, your post on litecointalk must have been removed because didn't see anything.
If it is suspicious it would be nice to tell a little more, or at least a short summary...

ps: I promise, I won't ask why in the hell are you logging in other people account even though it is suspicious as well...
(nice protection if it is possible to log in Chris account btw... or may-be he is trying to trace people doing that...)

edit: a new pastebin is available showing the first 45 users... 
seriously is that site not even protected a little bit ? (if there is something clear, he is not working in improving the security...)

I won't tell because I think it is a testing account of Chris. I send him a PM and the moderator of Litecointalk who has/had contact with Chris.
The mailaddress he used to create the account starts with: "geegee" that a direct link to the original user list

+----+-----------------+-----------------+
    | Id | Login           | Name            |
    +----+-----------------+-----------------+
    | 1  | geegee          | Chris           |

you should check the post, indeed very suspicious i can tell

Which account is it?

let him read this, 1 month+ patient for him to deliver the payment, and now he is asking for tax, pretty silly, if he intended to run, better scrub off whats left or people will come to hunt him down.

First post here, i'm from the neighbors of litecointalk but I discovered something regarding the user-list of the Pastebin.
I was able to log-in on an account of the list and discovered the following:

https://litecointalk.org/index.php?topic=22870.msg248421#msg248421

Maybe it gives you more information. I'm at work now so I don't have the time to look into it.

Ok a little update, so it looks like Chris has been reading this topic and has taken some actions to hide his tracks even more

http://pastebin.com/VpQzEuhh
http://pastebin.com/kuruZ5mJ

Original User List:

New User List:

Basically the user list has changed from the original scan. All the "real" original accounts have been deleted. geegee/cucu/ionion/lavinia and a couple others. In addition he's started to add news as a sub page of farm payments instead of making a wordpress "post" like he used to. The only reason I can see for him doing that is because pages don't show who the author is like posts do.

It doesn't prove very much but it indicates two things to me:
1. He is reading these threads and watching what we say (seems highly coincidental he would make these changes without having seen the information posted here)
2. He has reason to try hide the above information

The scans also show that nothing besides those changes have occurred. No extra security, no additional plugins. What has happened in all that downtime? Seems like basically he's just spent the time trying to cover his tracks.

That scan is very very shorter than the previous, what does that mean ? Security improved ?
Also, enumeration seems to be gone.

I'm just asking questions, don't know anything about it
Anyone can develop on it ? Danzor ?

http://www.btcfeed.net/news/ltcgear-next-gawminers/

Yup, clarification would be nice.

add a look to that but quite frankly I don't understand anything

Can you share your thoughts on the interesting developments?

Thanks

PM me the link please

Wait, so they aren't going to cover the loses? And they are basicaly acting like nothing happend?