Author

Topic: Scam alert bitcoin wallet process. (Read 111 times)

newbie
Activity: 10
Merit: 0
July 26, 2019, 08:28:57 AM
#1
Hi. Good afternoon. I'm new in this forum. I would like to report a scam process that is happening through twitter.

through the following address TXI: https://www.blockchain.com/btc/tx/c27e0a31d3b4c003e92ae82e97c4927c3963caef0807e24e9473f7d5d4d9d5d4d5d4d5d4d5d4d4d4d4d4d4d5d4d4d4d4d4d4d5d4d4d5d4d5d4d5 How I got all this information and although it seems absurd the user left a public file inside his server with his emails and passwords get.claimmycrypto.top/bigaccounts.txt

With this data I made a small investigation in different networks where the user was mobilized, since the user when realizing his error reported his emails of gmail and many other things, even changing passwords of some important pages for him. However, users are using bots developed in Python which they use to disseminate content on the social network constantly through different amounts of accounts purchased on BHW and https://buyaccs.com/getaccs_btc.php?token= cb790335e14969f53a38cf7bdb07c8dd & lang = en with which they create fake twitter ads with names of personalities like Cameron Winklevoss, John Mcaafee and other users of interest. The ads forward the victim to a page. that offers a limited time a random promotion. in which they tell you that if you send a certain amount of bitcoin in the next few hours. Your money will be returned win or lose.

use the servers linked to hostamus and 69.77.162.50. in these addresses they prepare their scripts and send them to the people, the money is sent to the wallets

https://www.blockchain.com/es/btc/address/154iaYoFAgNgNKKHUhXDtSz9USxp7YSzeT
https://www.blockchain.com/es/btc/address/1AJrymfZ445ur3t1ki5U7JFVFGyS2ugQ8u
https://etherscan.io/address/0x40949225c4a1745a9946F6AAf763241c082cb9ac

i hope explain me good my fort no its the english.
if u like to help me with any donation u can to this direction: 1NsJSr2jQxrMRq1atCLYZhuy7kGeKAnmiF

having massive movement within many other wallets I suppose they are false, all the material is linked to a person with a mail called, I share part of the content extracted from the file and investigated .:
[email protected]
twitter: password mail: password
[email protected]
gmail password: 78ef & Ydhddwsd
& fuefh8e8fsww
[email protected]
78ef & Ydhddwsd
[email protected]
gmail password: 78ef & Ydhddwsd
& fuefh8e8fsww
[email protected]
78ef & Ydhddwsd
 asdalmalek5: qazwsxedc1: [email protected]: RIADH21227315
https://twitter.com/officialmcafee/status/1013084386378600449
google voice:
 [email protected]:haa0g9tCS17:5308686101:[email protected]:5304355071
[email protected]:r6fV98035:2097367741:[email protected]:2196908019
[email protected]:vAkYxoEn20:6624688271:[email protected]:8285651599
[email protected]:s7Z7t21wM:2568125725:[email protected]:2605472427


https://www.factswt.com/wp-content/uploads/2018/01/winklevoss-twins-file-bitcoin-trust-with-the-sec-758x398.jpg?https://cdn-images-1.medium.com/max/800/1*FTiGiZn_8inMhkIdIbj4sQ.png">
https://b8adb1c6-c9b6-4881-bb01-62ce1def7008.htmlpasta.com/
qazwsxedc1ds:[email protected]
 :qazwsxedc1ds:[email protected]
 :[email protected]
cahybalubyt:sjcjz2tdnrEj:[email protected]:szmhBvf5o
 :qazwsxedc1ds:[email protected]
https://buyaccs.com/getaccs_btc.php?token=cb790335e14969f53a38cf7bdb07c8dd&lang=en
------------------------  
 :qazwsxedc1ds:[email protected]
wqdqfwwffw:qazwsxedc1ds:[email protected]
efefafddvd:qazwsxedc1ds:[email protected]

-----------------3435@$@443332r

pofaxerijade:s2Zejtcvu:[email protected]:3anHroAcmiibs
sojuregubejo:fsz3ZpbJmnqv:[email protected]:gzrxCddl5
mitivufasuly:iltsp2ekqOzcj:[email protected]:ukmobAu9t
IOHK_Chaelrs:kdkzmp2OmyMc:[email protected]:whIf6ccFjhqel
repaqyrikin:uzutvccenGJu9:[email protected]:gCdzc1Dljqcc

 ;qazwsxedc1ds;[email protected]
 ;qazwsxedc1ds;[email protected]
 ;qazwsxedc1ds;[email protected]
asdalmalek5:qazwsxedc1:[email protected]:RIADH21227315
guser44k | &fuefh8e8fsww cheese43434 | 78ef&Ydhddwsd

ergergwwgwgwgssss2: yahoo

tRgrr453refewefdcs : cloud

qazwsxedc1
http://get.claimmycrypto.top/bigaccounts.txt
188.165.24.140
[email protected]
qazwsxedc1
qazwsxedc1ds
RIADH21227315

Discord user involveds:
principal: saveposter#5867
-----------------------
gringo#0666
toxichf#3952
Tommy#6911
bee#5373
Hick#4891
fjfjjfjfj#4876
deleted#9999
--------------------
ergergwwgwgwgssss2: yahoo
tRgrr453refewefdcs : cloud

[email protected]:Patriste:[email protected]
[email protected]:30013001:[email protected]
[email protected]:icecream1:[email protected]
[email protected]:respect:[email protected]
PeyterCarruthe1:6pJjY5tDOu:[email protected]:mM3xN7aBj6
ArtemisGorman:CxU0ht9DeG:[email protected]:Bgvt9gkDj8
GiraudMimmack:HzVoKtrVM9:[email protected]:HSUIHInSSy
EnnisHalliday:mXd1AfFzp6:[email protected]:Gj5kDEkuFC
FeliksEverest:HYwYUWghDC:[email protected]:b5khK5CoLr
ConstantinSloc1:9hTTXO65bs:[email protected]:uMoApZFca2
HarbertKeeley:DWOk85YN4X:[email protected]:fnz7sVkKMK
gav_hood:SoKLAYMBDs:[email protected]:GD7ccE0exD
ChaplinHubert:0LKOyLD02q:[email protected]:ol6bMiWAh1
qulanefehu    eesqkfzcw    [email protected]    ssaUueysplbS6
pylujanorofy    vRNe2okzyx    [email protected]    9Uhucdqcimypc
zygymawajiwu    9oFalgymH    [email protected]    ou5SZzsbhv
GarveyotjAlix    calhfuipl    [email protected]    4RZWrLWopA
hivosury    sUPUJYCeC    [email protected]    YKelsifltwe1w
datywyqiwa    ujrnahdrqn    [email protected]    igoj2tgbsr
xefafovaxage    gwpDkflzjzu2H    [email protected]    uqnuzK4zl
vetypokyxoso    P2tvqTgthap    [email protected]    3lgnwiSgVa
tevyviwulyni    paOyCqtj2lk    [email protected]    hmaNwswbk9rno
luxivykazyma    lvueLDip0xln    [email protected]    4upiinKivckb
jihuwotyvol    or6kODqtg    [email protected]    co1SRpudze
nojumebujol    ysnnegvrgr    [email protected]    RwpiawlKz2g
wylyfikalahi    dUvdcpmu0u    [email protected]    lr6Vdqcybig
perugyruja    tqkxovjro    [email protected]    md9RPahqy
LizottegueDusty    sgvpgrtkb    [email protected]    Gibhzdn3q7
zogaqagokato    UwjixL7rnas    [email protected]    2vFfbkmwrz
finally
saveposter07/20/2018
thanks
deleted07/20/2018
kohyvajehur    9AinwboeOyl    [email protected]    dqrK3dinqlY
hydagaqetasy    xpnadxX9M    [email protected]    gcws8qdmypG
vafusapuzyga    uI0ggncur    [email protected]    voRz7wBqc
dysodidubyse    RbidHj9xzz    [email protected]    jnhfvuTdK3
tupygerecofy    hdFth5alWj    [email protected]    aryxgULov1
jebacusyxepa    TbycncLmh8euf    [email protected]    diublob3bS
lokolabepux    apYxp0aYrtuq    [email protected]    YbjdhsvIq1hn
zyjaqaqofymi    rexd2nZMo    [email protected]    x6dkzwtTwzc
mifyduqimebi    zkrN4czxsjV    [email protected]    f6aywqhnfQ
kylonowagego    fo4RhnbTrka    [email protected]    U9jkImhykx
banned again omfg
just going to post on other pgs
with no likes an shit just need to get one person then buying another follower acct
looks like my tweets still there
an u need numb for like all those accts
chek mcafee
wot should i do pop this xanax or smoke sum weeed hmm


https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact=8&ved=2ahUKEwj3wffZz9LjAhWutlkKHdwbBoYQFjAAegQIAxAB&url=https%3A%2F%2Fdomainbigdata.com%2Fgmail.com%2Fmj%2FalMR8lYal59wf1-P1JicUg&usg=AOvVaw0lK6pw1cllhGrRydGQ0dK7
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=3&cad=rja&uact=8&ved=2ahUKEwj3wffZz9LjAhWutlkKHdwbBoYQFjACegQIABAB&url=https%3A%2F%2Fthirtythousandlenses.com.cutestat.com%2F&usg=AOvVaw2ejF_Y2w4E5eMu82qlKcDP
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=4&cad=rja&uact=8&ved=2ahUKEwj3wffZz9LjAhWutlkKHdwbBoYQFjADegQIARAB&url=https%3A%2F%2Fpastebin.com%2FsQkqsGiE&usg=AOvVaw00EWlR4GGziteGhsnsGsF_
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=5&cad=rja&uact=8&ved=2ahUKEwj3wffZz9LjAhWutlkKHdwbBoYQFjAEegQIBBAB&url=https%3A%2F%2Fcountenance.wordpress.com%2F2014%2F08%2F05%2Fsmall-size-me-please%2F&usg=AOvVaw0uaURlQKkbMhi0AxFA7S3J

Eye this information is not to involve someone specific because the site https://domainbigdata.com/gmail.com/mj/alMR8lYal59wf1-P1JicUg gives us information about a person. But we don't know if this person may or may not be the one involved. since I doubt who did the act is so dumb to register domains in his name. but nevertheless if it was so silly to leave such an important public file. could be. therefore I do not accuse him directly. This is a purely informative post so be careful. and observe all the directions involved.

the user use ip from turkia 78.160.106.252 but in one chat from discord say that he change the ip when restart the modem.



I hope that all this information can be used to be cautious. Thank you very much for your time. Any donation will be received pleasantly, until next time. 1NsJSr2jQxrMRq1atCLYZhuy7kGeKAnmiF

http://prnt.sc/okede5
http://prnt.sc/okedpz
http://prnt.sc/okee3c
http://prnt.sc/okeehc
http://prnt.sc/okefce
Jump to: