Can I help?

Len · 02-19-2008, 02:33 PM

Some info I have dug up that I want to share with you guy's!
Take a look at this! http://www.euphro2.com/forum/index.php?showtopic=2249

Go to post by Mushi Sushi on feb 11th and bingo!!

Name: Joyce Chan aka Mushi Sushi
Past Admin/GM Experience: Marshall RO / Nekomimi RO / Affinity RO
Experience: About everything a GM needs to know and experience in the field.

Contact: mushisushi520@hotmail.com
contact me if you require more information or an assessment .

I believe that hotmail address was one used by
HKSteve http://www.volkdefense.com/?cat=10

I think "SHE" made a mistake by giving her name. I looked up affinity RO and found it is a gamers site (Sound Familiar) Mushi Sushi is an Administrator on the site! Her avatar is definately female but there is absolutely no info on her profile???....Not even an email address! I really believe we are looking for at least one female in all this...maybe the name HKSteve is to make us think we are dealing with a male rather than female. What do you think? Being an administrator on a forum could, although I'm not sure, give her access to passwords..and we know that many people use the same password on every account they possess..Paypal/bank etc. Just a thought.

bgmv · 02-19-2008, 03:15 PM

Originally Posted by Len

Some info I have dug up that I want to share with you guy's!
Take a look at this! http://www.euphro2.com/forum/index.p...pic=2249&st=20

Go to post by Mushi Sushi on feb 11th and bingo!!

Name: Joyce Chan aka Mushi Sushi
Past Admin/GM Experience: Marshall RO / Nekomimi RO / Affinity RO
Experience: About everything a GM needs to know and experience in the field.

Contact: mushisushi520@hotmail.com
contact me if you require more information or an assessment .

I believe that hotmail address was one used by
HKSteve http://www.volkdefense.com/?cat=10

I think "SHE" made a mistake by giving her name. I looked up affinity RO and found it is a gamers site (Sound Familiar) Mushi Sushi is an Administrator on the site! Her avatar is definately female but there is absolutely no info on her profile???....Not even an email address! I really believe we are looking for at least one female in all this...maybe the name HKSteve is to make us think we are dealing with a male rather than female. What do you think? Being an administrator on a forum could, although I'm not sure, give her access to passwords..and we know that many people use the same password on every account they possess..Paypal/bank etc. Just a thought.

For those that dont know HKSTEVE is the person that posted the paypal username and password for hstearns84@hotmail.com on desihackerz link above
????: NamePros.com http://www.namepros.com/warnings-and-alerts/431828-beware-new-scammer-dp-got-scammed.html

Also I found this:

Yoshimit + Linksys are the two people who sold to Mehboob. They are the same person. Mehboob paid via paypal to berserkv@gmail.com. Berserkv@gmail brings up the following handles:
PingKKK- alot in Chinese, cant read it
HKOP- asking specific questions about PayPal http://64.233.169.104/search?q=cache...lnk&cd=1&gl=us

Len · 02-19-2008, 03:18 PM

Just done some more digging and now I believe the following:
hksteve is hkop located in Canada!

Info on hkop - berserkv@gmail.com AIM- chineseguyx

http://72.14.205.104/search?q=cache:...&ct=clnk&cd=45

Posting on d-addicts.com by hkop
hkop
Joined: 09 Jul 2007
Total posts: 7
Gender: Unknown
Posted: Mon Jul 09, 2007 6:21 pm Post subject: Post Rating: 0

important if anybody can read japanese please give me a email or chat want to talk to you, my email is : berserkv@gmail.com

hkop is a member of euphro2.com as is mushi Sushi!

Getting closer......

CHILLY · 02-19-2008, 09:11 PM

I just got this suspicious Private Message with what appeared to be a Phishing link.

Quad Premium LLLL Domains

BladeMaster

FTNO
GRSO
NHOB

Anthony Sun · 02-19-2008, 09:26 PM

Originally Posted by CHILLY

I just got this suspicious Private Message with what appeared to be a Phishing link.

Quad Premium LLLL Domains

BladeMaster

FTNO
GRSO
NHOB

BladeMaster has 100% positive feedback from 10 trades though.
????: NamePros.com http://www.namepros.com/showthread.php?t=431828

Just out of curiousity, I got the email address of the owner of FTNO.com from WHOIS and had sent him an email for conformation.

We will see what happen.

Anthony

bgmv · 02-19-2008, 09:46 PM

Originally Posted by Len

Just done some more digging and now I believe the following:
hksteve is hkop located in Canada!

Info on hkop - berserkv@gmail.com AIM- chineseguyx

http://72.14.205.104/search?q=cache:...&ct=clnk&cd=45

Posting on d-addicts.com by hkop
hkop
Joined: 09 Jul 2007
Total posts: 7
Gender: Unknown
Posted: Mon Jul 09, 2007 6:21 pm Post subject: Post Rating: 0

important if anybody can read japanese please give me a email or chat want to talk to you, my email is : berserkv@gmail.com
????: NamePros.com http://www.namepros.com/showthread.php?t=431828

hkop is a member of euphro2.com as is mushi Sushi!

Getting closer......

You had the answer the whole time!!! Check the link you posted the IP is in the link, 72.14.205.104. Guess where it leads...drum roll please....Montreal, Canada

http://whatismyipaddress.com/staticp...lookup-results

It appears that he/she lives on the Avenue du docteur-Penfield, near the Shriners Hospital...oh I think we got em'

Now guess what major university is located on this street???
MCGILL UNIVERSITY, this completely fits the profile...oh man we are so close right now

Anthony Sun · 02-19-2008, 09:57 PM

This is getting very interesting. I hope you guys can catch the person. Put the person in jail, man!

Anthony

02-19-2008, 11:39 PM

Scammer is NOT cybershadow, mozilla, Ian, or many of the others people have said. Everyone is pointing fingers. I KNOW the scammer is idiotenglish@hotmail.com . I have a great idea how to catch him, but I would need an advanced hacker. The hacker would be doing a good deed.

bgmv · 02-19-2008, 11:43 PM

Originally Posted by myidea

Scammer is NOT cybershadow, mozilla, Ian, or many of the others people have said. Everyone is pointing fingers. I KNOW the scammer is idiotenglish@hotmail.com . I have a great idea how to catch him, but I would need an advanced hacker. The hacker would be doing a good deed.

How do you KNOW the hacker is idiotenglish?

02-20-2008, 12:01 AM

he scammed me

RJ · 02-20-2008, 08:44 AM

Originally Posted by myidea

Scammer is NOT cybershadow, mozilla, Ian, or many of the others people have said. Everyone is pointing fingers. I KNOW the scammer is idiotenglish@hotmail.com . I have a great idea how to catch him, but I would need an advanced hacker. The hacker would be doing a good deed.

This was posted by cybershadow/mozilla/Ian btw.

tanujdude91 · 02-20-2008, 09:02 AM

DP is full of scammers .
scammers of dp transferred to the domains section after the money xchanges threads got banned .

Len · 02-20-2008, 10:18 AM

Originally Posted by -RJ-

This was posted by cybershadow/mozilla/Ian btw.

RJ are you saying cybershadow/mozilla/Ian and myidea are one and the same?

vatsan · 02-20-2008, 10:25 AM

This thing is just so interesting!

sdsinc · 02-20-2008, 11:19 AM

myidea
Account Suspended

Hmmmm...

Len · 02-20-2008, 11:20 AM

Looks like this whole area is the accomodation blocks for the McGill Uni students
????: NamePros.com http://www.namepros.com/showthread.php?t=431828
It covers 1100 Av Du Docteur-Penfield, Montreal, QC H3A 1A8 --1460 Av Du Docteur-Penfield, Montreal, QC H3G 1B8
If we had a first name/surname of sorts to go off I could easily track them down! Has anyone ever had a reply from the email address berserkv@gmail.com ?? I know he has used it elsewhere to communicate.

Ok don't know if I am digging too deep here but this is what I have come up with.
The stolen Domains have primarily been registered in 2 names using the Paypal accounts associated with those names. They are Brian Gordon and Micheal Stearns.
We believe those reponsible live somewhere around the McGill University, Montreal.

I have found that both the names Brian Gordon and Micheal Stearns are also associated with Montreal.....Brian Gordon - 4575 Boul Grand Montreal, QC
Micheal Stearns - 3833 Av Melrose Montreal, QC

These 2 adresses are only 1.8kms (4 minutes walk)apart! And...only 6.6kms and 5.4kms respectively away from the McGill University!!! This is possibly why and how these accounts were used. Details have either been stolen, hacked or obtained by some other illegal method....... My point is I believe that we are very close....very,very close..

bgmv · 02-20-2008, 12:37 PM

Why dont we just ask both Michael Stearns and Brian Gordon where they live?

nielsencl · 02-20-2008, 12:47 PM

FYI - More info on the former myidea can be found here.

Len · 02-20-2008, 01:02 PM

Originally Posted by bgmv

Why dont we just ask both Michael Stearns and Brian Gordon where they live?

Sent an email to Brian Gordon asking the same question.....Just waiting to see if he answers!

dannbkk · 02-21-2008, 12:39 AM

It hasn't happened to me yet touch wood, but I am going to file a complaint to paypal now anyway so that they can put proper actions on domain sellers, so that we can continue to do business through paypal and so that they can provide a better service as us the sellers seemed to be left helpless.

Can everyone support this cause and send paypal an email with the following, I have already done so:

"Domain Name sellers left helpless with Chargebacks, Please change your Policy!"

The more of us emailing them with this they well get the picture a bit like having a protest!

GreenGambler · 02-23-2008, 08:04 PM

Originally Posted by Len

Looks like this whole area is the accomodation blocks for the McGill Uni students
It covers 1100 Av Du Docteur-Penfield, Montreal, QC H3A 1A8 --1460 Av Du Docteur-Penfield, Montreal, QC H3G 1B8
If we had a first name/surname of sorts to go off I could easily track them down! Has anyone ever had a reply from the email address berserkv@gmail.com ?? I know he has used it elsewhere to communicate.

Ok don't know if I am digging too deep here but this is what I have come up with.
The stolen Domains have primarily been registered in 2 names using the Paypal accounts associated with those names. They are Brian Gordon and Micheal Stearns.
We believe those reponsible live somewhere around the McGill University, Montreal.

I have found that both the names Brian Gordon and Micheal Stearns are also associated with Montreal.....Brian Gordon - 4575 Boul Grand Montreal, QC
Micheal Stearns - 3833 Av Melrose Montreal, QC

These 2 adresses are only 1.8kms (4 minutes walk)apart! And...only 6.6kms and 5.4kms respectively away from the McGill University!!! This is possibly why and how these accounts were used. Details have either been stolen, hacked or obtained by some other illegal method....... My point is I believe that we are very close....very,very close..

Fantastic info Len.

I think that you are tottally on to something..

Just an FYI.. That is the same person (BobWilkok@gmail.com) who stole my names (Zmul.com and GjrF.com) using the PayPal account of Kelly Willhite. But then they reversed the Willhite payment and sent a new payment from the Micheal Sterns PayPal account.

I thought this was suspicious so I replied to the PayPal email that I received telling me that Micheal Sterns sent me a payment.

I sent a message to Msterns on Feb 12th, 11:35pm, via reply to the automated PayPal message, saying:

Originally Posted by Me to LLLL.com buyer

Hello,

I have received a PayPal payment for $150 from your paypal account for the domain names, Zmul.com and Gjrf.com

I would please like to confirm that you are the person with whome I have made this transaction.

Please reply to this email immedietly so that I can verify the validity of the payment.

Thanks,
Richard

He replied:

Originally Posted by LLLL.com scammer

Yes im partnered with ash on dp. sorry for the mess

I replied:

Originally Posted by Me to LLLL.com buyer

Thanks Mike,

I'm just trying to look out for everyone, and my fellow domainers.

Cheers,
Rich

His final reply on Feb. 13th, 12:05am was:

Originally Posted by LLLL.com scammer

np pleasereply im legit thank you

????: NamePros.com http://www.namepros.com/showthread.php?t=431828
????: NamePros.com http://www.namepros.com/showthread.php?t=431828
A few hours later I noticed the payment had been reversed so I sent this on Feb. 13th, 3:37am:

Originally Posted by Me to LLLL.com buyer

Why did you reverse the payment?

Then on Feb. 13th, 10:46am he sent this:

Originally Posted by LLLL.com scammer or true PP account holder?

Payment was reversed by Paypal representatives due to fradulent charges. Any payment received by you under my e-mail is now null void.

I replied:

Originally Posted by Me to LLLL.com buyer

So did somebody hack into your PayPal account?

I sold 2 domain names to your account, and spoke with someone via this email address, mstearns84@hotmail.com. Are you saying that it was not you whom I spoke with last night?

And the final message I received from MSterns84 was:

Originally Posted by LLLL.com scammer or true PP account holder?

Definitely wasn't me. Person got into my e-mail account and paypal account.

Maybe this will help a bit.

For a while there I thought that Micheal Sterns and the scammer were the same person but now with your info I am not sure if it is or if it is another case of stolen identity.

bgmv · 02-25-2008, 05:33 PM

Ok, im pretty sure that this link verifies that Idiotenglish@hotmail.com, hksteve, once lived in London, Ontario, Canada. It looks like his name is Inhyuk Kim, and he is korean.

http://209.85.207.104/search?q=cache...nk&cd=12&gl=us

Len · 02-25-2008, 06:20 PM

Originally Posted by bgmv

Ok, im pretty sure that this link verifies that Idiotenglish@hotmail.com, hksteve, once lived in London, Ontario, Canada. It looks like his name is Inhyuk Kim, and he is korean.
????: NamePros.com http://www.namepros.com/showthread.php?t=431828

http://209.85.207.104/search?q=cache...nk&cd=12&gl=us

Possibility that he was there as a student at Western University. There may still be some correlation here with Mcgill university as both have very similar faculties.

tinner666 · 02-25-2008, 06:42 PM

Just wish that after the crimes get reported, the domains would land on a hotsheet somewhere that was always checked so the dungbug couldn't get it hosted or sold anywhere.

Meongtae · 02-25-2008, 06:58 PM

I was reading the thread, as all good newbies should do, and keyed in on the possible "asian hacker/student" thing.
HK might stand for Hong Kong as a lot of Chinese students are in the US. So, check this....
It is a few asian guys together, in a college dorm, at a LAN party.
I'm not saying anyone is guilty of anything, but, gaming and hacking are like peanut butter and jelly for some.
One guy's name is HKSteve.
(and I'm not a bad tracer either)

http://good-times.webshots.com/photo...62047408gEhIuw

And it sure looks like a dorm room doesnt it?

02-19-2008, 02:33 PM	#51 (permalink)
Len dot TV'er Join Date: Feb 2007 Location: Central Ontario, Canada Posts: 3,757	Some info I have dug up that I want to share with you guy's! Take a look at this! http://www.euphro2.com/forum/index.php?showtopic=2249 Go to post by Mushi Sushi on feb 11th and bingo!! Name: Joyce Chan aka Mushi Sushi Past Admin/GM Experience: Marshall RO / Nekomimi RO / Affinity RO Experience: About everything a GM needs to know and experience in the field. Contact: mushisushi520@hotmail.com contact me if you require more information or an assessment . I believe that hotmail address was one used by HKSteve http://www.volkdefense.com/?cat=10 I think "SHE" made a mistake by giving her name. I looked up affinity RO and found it is a gamers site (Sound Familiar) Mushi Sushi is an Administrator on the site! Her avatar is definately female but there is absolutely no info on her profile???....Not even an email address! I really believe we are looking for at least one female in all this...maybe the name HKSteve is to make us think we are dealing with a male rather than female. What do you think? Being an administrator on a forum could, although I'm not sure, give her access to passwords..and we know that many people use the same password on every account they possess..Paypal/bank etc. Just a thought. Last edited by Len; 02-19-2008 at 03:27 PM.

02-19-2008, 03:18 PM	#53 (permalink)
Len dot TV'er Join Date: Feb 2007 Location: Central Ontario, Canada Posts: 3,757	Just done some more digging and now I believe the following: hksteve is hkop located in Canada! Info on hkop - berserkv@gmail.com AIM- chineseguyx http://72.14.205.104/search?q=cache:...&ct=clnk&cd=45 Posting on d-addicts.com by hkop hkop Joined: 09 Jul 2007 Total posts: 7 Gender: Unknown Posted: Mon Jul 09, 2007 6:21 pm Post subject: Post Rating: 0 important if anybody can read japanese please give me a email or chat want to talk to you, my email is : berserkv@gmail.com hkop is a member of euphro2.com as is mushi Sushi! Getting closer...... Last edited by Len; 02-19-2008 at 03:36 PM.

02-19-2008, 09:11 PM	#54 (permalink)
CHILLY NamePros Regular Join Date: Aug 2006 Location: New Jersey Posts: 595	I just got this suspicious Private Message with what appeared to be a Phishing link. Quad Premium LLLL Domains BladeMaster FTNO GRSO NHOB __________________ Travel Tourism Guide for Chichester, West Sussex UK

02-19-2008, 09:57 PM	#57 (permalink)
Anthony Sun Senior Member Join Date: Aug 2007 Location: New York City Posts: 2,183	This is getting very interesting. I hope you guys can catch the person. Put the person in jail, man! Anthony __________________ www.TheDomainCity.com www.BUY.SC :: BUY Shopping Center

02-20-2008, 09:02 AM	#62 (permalink)
tanujdude91 NamePros Member Join Date: Dec 2007 Posts: 115	DP is full of scammers . scammers of dp transferred to the domains section after the money xchanges threads got banned . __________________ Tanuj

02-19-2008, 11:39 PM	#58 (permalink)
myidea Guest Posts: n/a	Scammer is NOT cybershadow, mozilla, Ian, or many of the others people have said. Everyone is pointing fingers. I KNOW the scammer is idiotenglish@hotmail.com . I have a great idea how to catch him, but I would need an advanced hacker. The hacker would be doing a good deed.

02-20-2008, 12:01 AM	#60 (permalink)
myidea Guest Posts: n/a	he scammed me

02-20-2008, 10:25 AM	#64 (permalink)
vatsan Senior Member Join Date: May 2007 Location: India Posts: 1,003	This thing is just so interesting!

02-20-2008, 11:19 AM	#65 (permalink)
sdsinc Domains my Dominion Join Date: Aug 2005 Location: Web 1.0 Posts: 9,556	myidea Account Suspended Hmmmm... __________________ NameNewsletter.com - free lists of available domain names ZoneFiles.net (beta) - ccTLD and gTLD droplists

02-20-2008, 11:20 AM	#66 (permalink)
Len dot TV'er Join Date: Feb 2007 Location: Central Ontario, Canada Posts: 3,757	Looks like this whole area is the accomodation blocks for the McGill Uni students ????: NamePros.com http://www.namepros.com/showthread.php?t=431828 It covers 1100 Av Du Docteur-Penfield, Montreal, QC H3A 1A8 --1460 Av Du Docteur-Penfield, Montreal, QC H3G 1B8 If we had a first name/surname of sorts to go off I could easily track them down! Has anyone ever had a reply from the email address berserkv@gmail.com ?? I know he has used it elsewhere to communicate. Ok don't know if I am digging too deep here but this is what I have come up with. The stolen Domains have primarily been registered in 2 names using the Paypal accounts associated with those names. They are Brian Gordon and Micheal Stearns. We believe those reponsible live somewhere around the McGill University, Montreal. I have found that both the names Brian Gordon and Micheal Stearns are also associated with Montreal.....Brian Gordon - 4575 Boul Grand Montreal, QC Micheal Stearns - 3833 Av Melrose Montreal, QC These 2 adresses are only 1.8kms (4 minutes walk)apart! And...only 6.6kms and 5.4kms respectively away from the McGill University!!! This is possibly why and how these accounts were used. Details have either been stolen, hacked or obtained by some other illegal method....... My point is I believe that we are very close....very,very close..

02-20-2008, 12:37 PM	THREAD STARTER #67 (permalink)
bgmv Senior Member Join Date: Jul 2007 Location: bgmv.com Posts: 2,388 Follow @bvardag	Why dont we just ask both Michael Stearns and Brian Gordon where they live? __________________ HVAC Training Michael Myers Mask Joan Miro Great Keppel Island Calculadora Gratis Enclosed Car Transport Paperless Office Blood Diamonds SEO Boca Raton Serenity Prayer

02-20-2008, 12:47 PM	#68 (permalink)
nielsencl Senior Member Join Date: Jul 2006 Location: Minneapolis Posts: 2,513	FYI - More info on the former myidea can be found here. __________________ Lorraine Bowman - Internet Expert Witness - Bankrupture - Ad Creation Marketplace - How To Sell Domain Name

02-21-2008, 12:39 AM	#70 (permalink)
dannbkk NamePros Regular Join Date: Feb 2007 Posts: 558	It hasn't happened to me yet touch wood, but I am going to file a complaint to paypal now anyway so that they can put proper actions on domain sellers, so that we can continue to do business through paypal and so that they can provide a better service as us the sellers seemed to be left helpless. Can everyone support this cause and send paypal an email with the following, I have already done so: "Domain Name sellers left helpless with Chargebacks, Please change your Policy!" The more of us emailing them with this they well get the picture a bit like having a protest! __________________ SEO Services SEO Book Internet Marketer Hostgator Promo Codes SEO Plugin Make Money Coupon Codes Last edited by dannbkk; 02-21-2008 at 12:45 AM.

02-25-2008, 05:33 PM	THREAD STARTER #72 (permalink)
bgmv Senior Member Join Date: Jul 2007 Location: bgmv.com Posts: 2,388 Follow @bvardag	Ok, im pretty sure that this link verifies that Idiotenglish@hotmail.com, hksteve, once lived in London, Ontario, Canada. It looks like his name is Inhyuk Kim, and he is korean. http://209.85.207.104/search?q=cache...nk&cd=12&gl=us __________________ HVAC Training Michael Myers Mask Joan Miro Great Keppel Island Calculadora Gratis Enclosed Car Transport Paperless Office Blood Diamonds SEO Boca Raton Serenity Prayer

02-25-2008, 06:42 PM	#74 (permalink)
tinner666 NamePros Regular Join Date: Jan 2008 Location: Richmond Va. Posts: 209	Just wish that after the crimes get reported, the domains would land on a hotsheet somewhere that was always checked so the dungbug couldn't get it hosted or sold anywhere. __________________ $7.49 Domains @ Domain Sales Zone Coupons: 100CN15, 50CN10, 5NC25 Internet Crimes Complaint Ctr. Albert's Specialty Roofing

02-25-2008, 06:58 PM	#75 (permalink)
Meongtae NamePros Regular Join Date: Feb 2008 Posts: 576	Can I help? I was reading the thread, as all good newbies should do, and keyed in on the possible "asian hacker/student" thing. HK might stand for Hong Kong as a lot of Chinese students are in the US. So, check this.... It is a few asian guys together, in a college dorm, at a LAN party. I'm not saying anyone is guilty of anything, but, gaming and hacking are like peanut butter and jelly for some. One guy's name is HKSteve. (and I'm not a bad tracer either) http://good-times.webshots.com/photo...62047408gEhIuw And it sure looks like a dorm room doesnt it?

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)