Scammer, hijacker steals accounts of affiliate programs, emails, domains, GFY profiles! [Attention!]

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Serious-Partner
    Confirmed User
    • Oct 2003
    • 2585

    #1

    Scammer, hijacker steals accounts of affiliate programs, emails, domains, GFY profiles! [Attention!]

    Hello Webmasters,

    We would like to inform you about a person, who hacks email, gfy , domains , affiliate programs accounts, etc.

    How does he scam?
    - Uses database of logins/emails/passwords to get payments and forces against affiliate programs (we found a lot of accounts in our affiliate programs, which he tried to use in order to get payments). Unfortunately, he has already got 1 payment from us, passing the desirable for reality:
    http://gfy.com/showthread.php?t=1123...rious+partners
    Attention to affiliate programs!

    - Sells hardlinks using hijacked accounts on GFY and domains he has stolen.

    "My domain and GFY account were hijacked at the end of March. Please do not send money to the person, who started this thread as he is no longer in control of the domain."

    http://gfy.com/showthread.php?t=1062634

    - Pornstarbook.com and GFY account hijacked - http://gfy.com/showthread.php?t=1066...ice%40yahoo.ca

    - Email hacked and some sites/domains stolen
    http://tranny-masters.com/bbs//showthread.php?t=11901

    "Hi guys, I just wanted to give you a heads up.
    Some culprit got access to my email account and via this he got access to my affiliate accounts and domain registrar. I managed to get back control over all affiliate accounts but the guy has gotten a few domains out of my registrars account before I realized what was happening. (Im not very active in adult).
    The domains he got where pretty much all my review sites and also www.shemalepornguide.com and my email account. So [email protected] isn't working anymore.
    If you have any advice or can help out.. please let me know.
    The paxum id/email this thief uses is: [email protected]. It would be great if you had any info on this guy."


    This is information about accounts and domains, we've discovered, but, for sure, list can be continued.

    He goes under names «Jesper Fosdal» or «Jeremy Harton» or «Kostyantyn Kulykov» and uses following payment options:

    Paxum emails: [email protected] ,ha [email protected], [email protected] , [email protected], [email protected], [email protected]
    Paypal email [email protected]
    Webmoney Z206056737535 (registered just 16 days ago)

    Contact details:
    Emails: [email protected], [email protected] ,ha [email protected], [email protected] , [email protected], [email protected], [email protected]
    Icq: 699852979, ID grisey

    IP addresses:
    78.140.172.74
    184.75.215.122
    184.75.213.178
    198.144.156.126
    184.75.212.82
    99.238.7.140
    184.75.212.122
    184.75.212.98
    184.75.214.242
    198.144.156.137
    198.144.156.57
    202.116.1.149
    184.75.221.234
    199.19.95.160
    162.219.176.66

    Sites he uses as a proof that he is adult webmaster:
    asianpornreviews.com
    shemalepornguide.com
    SHEMALECOCKMOVIES.COM
    asianpornreviews.com
    asianpornsitereviews.com
    dirtlist.com
    maturesexreviews.com
    shemalepornguide.com
    shemalepornsitesreviews.com
    welikeporn.com
    etc..


    Also he is still a member of GFY community under the nickname !Wow:
    http://gfy.com/member.php?u=42438


    So, whatever you do, avoid this person in your dealings. If you need us to verify any of this, hit us up on ICQ.

    We would like everyone in webmaster society to know about shenanigans of this scammer and avoid making horrible mistakes, dealing with him.

    If you have any additional information about this person, you suffered from his actions, please, post in this topic or contact us.

    We've already contacted with webmoney, paxum and paypal in order to initiate their inner investigation and block all his account/bills. We also would like specifically ask representatives of these payment systems on this forum to check this person and write in this topic.

    Sincerely,
    Serious Partners Team.
    Last edited by Eric; 11-01-2013, 06:29 PM.
  • Chris
    Too lazy to set a custom title
    • May 2003
    • 27880

    #2
    Hey ,
    We will be in touch with you regarding this.

    Regards
    Chris
    [email protected]

    Comment

    • EddyTheDog
      Just Doing My Own Thing
      • Jan 2011
      • 25433

      #3
      He sounds like a real gem - I don't remember coming into contact with him - Thanks...

      Comment

      • Harmon
        ( ͡ʘ╭͜ʖ╮͡ʘ)
        • Mar 2004
        • 20012

        #4
        It's probably GFY user georgeyw

        He'll do anything for a few cents
        [email protected]

        Comment

        • Serious-Partner
          Confirmed User
          • Oct 2003
          • 2585

          #5
          Originally posted by Harmon
          It's probably GFY user georgeyw

          He'll do anything for a few cents
          Why do you think so?

          Comment

          • anexsia
            Confirmed User
            • May 2010
            • 5735

            #6
            About 3 years ago I had someone get access to my affiliate accounts, email, paypal account, etc...it was such a pain in the ass to get fixed!

            Comment

            • bluebook18
              Confirmed User
              • Mar 2012
              • 4082

              #7
              another fuckers

              Comment

              • ctggls
                Confirmed User
                • Aug 2012
                • 898

                #8
                bump to this

                Comment

                • nexcom28
                  So Fucking Banned
                  • Jan 2005
                  • 3716

                  #9
                  I'm not sure I understand. I have bought links from this user Wow! before and the links were added to the site as promised.
                  Are you saying he doesn't actually own these sites?
                  Actually, his attitude stunk a bit but meh.

                  Please can you clarify.

                  Comment

                  • Serious-Partner
                    Confirmed User
                    • Oct 2003
                    • 2585

                    #10
                    Originally posted by nexcom28
                    I'm not sure I understand. I have bought links from this user Wow! before and the links were added to the site as promised.
                    Are you saying he doesn't actually own these sites?
                    Actually, his attitude stunk a bit but meh.

                    Please can you clarify.
                    Yes I can show you proof that he is not the owner of domains you bought links from. What sites?

                    Comment

                    • nexcom28
                      So Fucking Banned
                      • Jan 2005
                      • 3716

                      #11
                      From this thread: http://gfy.com/showthread.php?t=1121589

                      How the hell would ha manage to steal sites, emails and accounts?

                      Comment

                      • Zeiss
                        Confirmed User
                        • May 2012
                        • 5189

                        #12
                        bump for more to read


                        Adult Webmasters Guides

                        Comment

                        • Serious-Partner
                          Confirmed User
                          • Oct 2003
                          • 2585

                          #13
                          Originally posted by nexcom28
                          From this thread: http://gfy.com/showthread.php?t=1121589

                          How the hell would ha manage to steal sites, emails and accounts?
                          He is not the owner of following domains:
                          Shemale Porn Guide - http://www.shemalepornguide.com - PR3
                          Asian Porn Reviews - http://www.asianpornreviews.com - PR3
                          Jerking Resources - http://www.jerkingresources.com - PR3

                          Read more about that domains here please:
                          http://tranny-masters.com/bbs//showthread.php?t=11901

                          Comment

                          • nexcom28
                            So Fucking Banned
                            • Jan 2005
                            • 3716

                            #14
                            Well I don't know. I have different email and PayPal to the ones you give however if I Google one of the emails I get this thread:
                            http://www.greenguysboard.com/board/...d.php?p=410156

                            Interesting

                            Comment

                            • ls101
                              Confirmed User
                              • Nov 2012
                              • 713

                              #15
                              One advice for this kind of situation.

                              Do not use the same email and password between hosting and your personal email and do not use your password for domain hosting for your email whether it's business or personal and last thing to do is DO NOT synchronize all your emails at one place. I have my BB that forwards all email from all email accounts which different password in it!

                              I don't know what to say about this issue. Just a piece of advice I guess.
                              Last edited by ls101; 10-30-2013, 05:25 AM.

                              Comment

                              • Kenny B!
                                Confirmed Abuser
                                • Jun 2003
                                • 5718

                                #16
                                Thanks for the heads up
                                Kenny -at- YourPaysitePartner.com
                                Skype: kennyb514

                                Do business with us:
                                Your Paysite Partner
                                Kenny's Pennies
                                Sticky Dollars
                                Radical Cash
                                Indie Bucks
                                Stand Ahead


                                Read My Ambush Interview Here

                                Comment

                                • michael.kickass
                                  Too lazy to set a custom title
                                  • Mar 2009
                                  • 11039

                                  #17
                                  Thanks for the heads up
                                  NICERATIOS - $30 PPS - 50% Rev Share - 5% WM Referral - High Converting Sites!
                                  Any questions about your NICERATIOS account? Vanessa will take care of you: [email protected]

                                  Looking to expand your business in general, maybe sell your sites? Contact me:
                                  [email protected]

                                  Comment

                                  • Jman
                                    Already an AI veteran
                                    • Sep 2003
                                    • 22838

                                    #18
                                    Thanks for the heads up. Unfortunately there is still lots of scammers around. Had the pleasure to find a few lately.

                                    With that said. Why is he not "So Fucking Banned" yet?
                                    Orkestrait NSFW AI
                                    FantasyXXX.AI
                                    Email: [email protected] TG: @jman1216

                                    Comment

                                    • fris
                                      Too lazy to set a custom title
                                      • Aug 2002
                                      • 55679

                                      #19
                                      most people that know or have pornstar traffic, know the real owner of pornstarbook, so newbies buying traffic beware, vets will know who the real one is.
                                      Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence.

                                      Comment

                                      • whOaKemosabe
                                        So Fucking Stoned...
                                        • Aug 2013
                                        • 1968

                                        #20
                                        Originally posted by Serious-Partner
                                        Yes I can show you proof that he is not the owner of domains you bought links from. What sites?

                                        Comment

                                        • Serious-Partner
                                          Confirmed User
                                          • Oct 2003
                                          • 2585

                                          #21
                                          Another thread on russian forum about him:
                                          https://www.master-x.com/forum/posti...93968/#2493968
                                          He used brutforse and asked Macdollars.net to pay him immediately for their in-house account that owner created by himself. Also tried to brutforce password of affiliate program owner account on forum master-x.com as master-x.com owner said. tricky asshole!

                                          Nickname fuzzbuzz
                                          IP: 184.75.214.186
                                          Last edited by Serious-Partner; 10-30-2013, 06:36 AM.

                                          Comment

                                          • Serious-Partner
                                            Confirmed User
                                            • Oct 2003
                                            • 2585

                                            #22
                                            Originally posted by Jman
                                            Thanks for the heads up. Unfortunately there is still lots of scammers around. Had the pleasure to find a few lately.

                                            With that said. Why is he not "So Fucking Banned" yet?
                                            Already asking Eric to ban him

                                            Comment

                                            • whOaKemosabe
                                              So Fucking Stoned...
                                              • Aug 2013
                                              • 1968

                                              #23
                                              Originally posted by Serious-Partner
                                              Already asking Eric to ban him
                                              thanks for the heads up helen

                                              Comment

                                              • wehateporn
                                                Promoting Debate on GFY
                                                • Apr 2007
                                                • 27176

                                                #24
                                                Originally posted by Serious-Partner
                                                Already asking Eric to ban him
                                                Then he returns in disguise with a new nick, probably better to leave leave his account alive

                                                Comment

                                                • Serious-Partner
                                                  Confirmed User
                                                  • Oct 2003
                                                  • 2585

                                                  #25
                                                  Originally posted by wehateporn
                                                  Then he returns in disguise with a new nick, probably better to leave leave his account alive
                                                  Okay. You are right

                                                  Comment

                                                  • _Richard_
                                                    Too lazy to set a custom title
                                                    • Oct 2006
                                                    • 30991

                                                    #26
                                                    thanks for heads up

                                                    Comment

                                                    • Serious-Partner
                                                      Confirmed User
                                                      • Oct 2003
                                                      • 2585

                                                      #27
                                                      Chris, any results with bann of that accounts?
                                                      Paxum accounts: [email protected] , [email protected], [email protected] , [email protected], [email protected], [email protected]

                                                      Comment

                                                      • nexcom28
                                                        So Fucking Banned
                                                        • Jan 2005
                                                        • 3716

                                                        #28
                                                        These emails are also associated with the account:
                                                        [email protected]
                                                        [email protected] << PayPal
                                                        [email protected]

                                                        Comment

                                                        • Serious-Partner
                                                          Confirmed User
                                                          • Oct 2003
                                                          • 2585

                                                          #29
                                                          Updates on scammer found at:
                                                          http://www.greenguysboard.com/board/...d.php?p=410156

                                                          "Details it is then although they are from 2004.

                                                          Sergiy Kulykov
                                                          161 Forest Run Blvd
                                                          Concord, ON L4K 5H3
                                                          (905) 417-8368
                                                          Basment of partents house

                                                          His is know as Kostyantin Kulykov, Dron, Sergiy Kulykov, Jack, Sragmoder, Andrei Perminov, Jack London, Curtis, Monkey, Christopher Pendola and others. All of his registered domains have fake contact details and he pays with paypal.

                                                          He appeared in court as Kostyantin Kulykov and was made to pay damages a couple of years ago. Claimed he was a "just a young man who likes to play with computers" and wanted to make a porn site as a game.

                                                          Sponsors have mailed checks to those names and various addresses including:
                                                          James
                                                          KKS Solutions
                                                          80 Glen Shields
                                                          Concord, Ontario
                                                          L4K4P6
                                                          (905) 446-3776

                                                          He tried a paysite www.ezpornsex.com and his ccbill number was 914365-0000.

                                                          I'm sure I posted the sponsors that were paying him at some stage, here are a couple more:
                                                          ARS accounts: 70727 and 179924
                                                          Pornmegabucks: pmb10650

                                                          Domain recovered from him http://www.wipo.int/amc/en/domains/d...2004-0391.html

                                                          He hasn't changed his ISP in at least 4 years.
                                                          With some trickery I was able to get this from an email I sent him that of course he wouldn't reply to.
                                                          Opened: 18-Aug-04 at 08:06:11am (UTC +10:00) - 17hours35mins13secs after sending
                                                          Location: Toronto, Ontario, Canada
                                                          On: wc06.mtnk.rnc.net.cable.rogers.com (66.185.84.201)

                                                          Many of the domains registered by him are up for sale some are not.
                                                          dirkreemsandlongbrick.com
                                                          nudity-hunter.com
                                                          adultlinks4u.com
                                                          amateursrus.nu
                                                          monkeypost.com
                                                          eroticstoriesranks.com
                                                          jennahardcoremovies.com
                                                          lacylingerie.com
                                                          aabsolute.com
                                                          amateursxworld.com
                                                          hsi-network.com
                                                          adultoyz.com
                                                          hottsexxx.com
                                                          etc

                                                          Regards"

                                                          Comment

                                                          • whOaKemosabe
                                                            So Fucking Stoned...
                                                            • Aug 2013
                                                            • 1968

                                                            #30

                                                            Comment

                                                            • Lichen
                                                              Tube Master
                                                              • May 2004
                                                              • 1640

                                                              #31
                                                              Don't like the taste of your own medicine? Who would have thought.

                                                              Comment

                                                              • wehateporn
                                                                Promoting Debate on GFY
                                                                • Apr 2007
                                                                • 27176

                                                                #32
                                                                Good work SP

                                                                Comment

                                                                • foz
                                                                  Confirmed User
                                                                  • Jun 2005
                                                                  • 55

                                                                  #33
                                                                  I am not sure how you got my name involved in this.

                                                                  i am the owner of shemalecockmovies.com , and the whois of that domain is indeed me.

                                                                  But I do not scam anyone.

                                                                  Around March last year, I meself had a few accounts hacked. Making my PussyCash payment going to Canada instead of payoneer.

                                                                  it was send to some : Jason Hart, canada, Willowdale [email protected] .

                                                                  None of the emails in this thread are related to my paxum ID.

                                                                  Comment

                                                                  • whOaKemosabe
                                                                    So Fucking Stoned...
                                                                    • Aug 2013
                                                                    • 1968

                                                                    #34
                                                                    Originally posted by foz
                                                                    I am not sure how you got my name involved in this.

                                                                    i am the owner of shemalecockmovies.com , and the whois of that domain is indeed me.

                                                                    But I do not scam anyone.

                                                                    Around March last year, I meself had a few accounts hacked. Making my PussyCash payment going to Canada instead of payoneer.

                                                                    it was send to some : Jason Hart, canada, Willowdale [email protected] .

                                                                    None of the emails in this thread are related to my paxum ID.
                                                                    no worries op' are hackers , spammers, scammers too

                                                                    Comment

                                                                    • foz
                                                                      Confirmed User
                                                                      • Jun 2005
                                                                      • 55

                                                                      #35
                                                                      From namecheap support ticket at 14 August 2012 :

                                                                      [/quote]
                                                                      For some reason I see two of my domains are moved out of my name cheap account:

                                                                      Domain Name: shemalecockmovies.com
                                                                      Transferred Date : 8/11/2012 11:56:27 AM
                                                                      Transferred Out To: eNom Inc.

                                                                      -----

                                                                      Reply from NameCheap:

                                                                      Hello Jesper,

                                                                      We are locking those of your domains which are not locked now. We have also contact Enom.com regarding these transfers. Please scan your computer for malware as EPP codes were requested from US IP address though no pasword reset requests were made.

                                                                      We will get back to you with the updates as soon as we receive any.
                                                                      ------------------
                                                                      Kind regards,

                                                                      Milla S.
                                                                      Risk Management

                                                                      [/quote]

                                                                      have hit you up on ICQ and skype so we can talk. I promise you. I have nothing to do with this!

                                                                      Comment

                                                                      • Serious-Partner
                                                                        Confirmed User
                                                                        • Oct 2003
                                                                        • 2585

                                                                        #36
                                                                        foz, sorry for that. Your domains are in list just because some of them were stolen by that idiot. Do you have any additional information about him?

                                                                        I will hit you up later. Again sorry for mistake with your domains.

                                                                        p.s. We found some more info on that guy and will publish here after we check everything out.
                                                                        Last edited by Serious-Partner; 11-01-2013, 08:16 AM.

                                                                        Comment

                                                                        • Google Expert
                                                                          Webmaster
                                                                          • Jun 2004
                                                                          • 14294

                                                                          #37
                                                                          Originally posted by Serious-Partner
                                                                          foz, sorry for that. Your domains are in list just because some of them were stolen by that idiot. Do you have any additional information about him?

                                                                          p.s. We found some more info on that guy and will publish here after we check everything out.
                                                                          Why don't you go fuck yourself?

                                                                          Comment

                                                                          • Serious-Partner
                                                                            Confirmed User
                                                                            • Oct 2003
                                                                            • 2585

                                                                            #38
                                                                            Originally posted by Lichen
                                                                            Don't like the taste of your own medicine? Who would have thought.

                                                                            Comment

                                                                            • Serious-Partner
                                                                              Confirmed User
                                                                              • Oct 2003
                                                                              • 2585

                                                                              #39
                                                                              Originally posted by Getsu
                                                                              Why don't you go fuck yourself?

                                                                              Getsu you are a bad girl. somebody should teach you good manners

                                                                              Comment

                                                                              • whOaKemosabe
                                                                                So Fucking Stoned...
                                                                                • Aug 2013
                                                                                • 1968

                                                                                #40
                                                                                Originally posted by Serious-Partner
                                                                                Getsu you are a bad girl. somebody should teach you good manners

                                                                                Any new updates on your Child Porn filled website?

                                                                                http://gfy.com/showthread.php?t=781585

                                                                                Comment

                                                                                • foz
                                                                                  Confirmed User
                                                                                  • Jun 2005
                                                                                  • 55

                                                                                  #41
                                                                                  I am going though my sponsor list, coz he hacked other that just PusshCash just cant remember what sponsor it was.

                                                                                  Could you please delete the whois on my domain?

                                                                                  I will be out from 19 to 24 tonight. But I will have my phone on me, so just hit me up on ICQ




                                                                                  Originally posted by Serious-Partner
                                                                                  foz, sorry for that. Your domains are in list just because some of them were stolen by that idiot. Do you have any additional information about him?

                                                                                  I will hit you up later. Again sorry for mistake with your domains.

                                                                                  p.s. We found some more info on that guy and will publish here after we check everything out.

                                                                                  Comment

                                                                                  • madeofmoney
                                                                                    So Fucking Banned
                                                                                    • Aug 2013
                                                                                    • 323

                                                                                    #42
                                                                                    HAHAHA!!! Karma is a bitch you fucking thieves!!!!!

                                                                                    Comment

                                                                                    • madeofmoney
                                                                                      So Fucking Banned
                                                                                      • Aug 2013
                                                                                      • 323

                                                                                      #43
                                                                                      Originally posted by Lichen
                                                                                      Don't like the taste of your own medicine? Who would have thought.

                                                                                      Comment

                                                                                      • media
                                                                                        Confirmed Moneymaker
                                                                                        • Apr 2002
                                                                                        • 9853

                                                                                        #44
                                                                                        Just had someone hit me up in regards to this situation... person said the check was in the wrong name..

                                                                                        The Check was issued to:

                                                                                        James Smith
                                                                                        9980 dufferin street
                                                                                        po box 20035
                                                                                        maple, Ontario l6a 4m4
                                                                                        Canada

                                                                                        Then he contacts and says check was issued wrong, re-issue to the following name:
                                                                                        Alexander Zhukov or Daily Capital Investments

                                                                                        I compare some stuff, then look him up, and come back at him with a thread from Tranny-Masters about some domains being stolen with the email [email protected] being associated with the theft.. then the icq goes black, logged off.. lol

                                                                                        on linked in I see a :

                                                                                        Kostyantyn Kulykov
                                                                                        Investment Analyst at Daily Capital Investments

                                                                                        Maple, Ontario, Canada
                                                                                        Banking


                                                                                        they used the icq: 699852979 with a name Jason Frank on it.. too many names to not throw up red flags all over the place for me..

                                                                                        I think maybe there is a ring operating out of that location.. Maybe get RCMP to get involved?
                                                                                        I'm here for the violence!

                                                                                        Comment

                                                                                        • CamTraffic
                                                                                          Confirmed User
                                                                                          • Feb 2008
                                                                                          • 6538

                                                                                          #45
                                                                                          http://www.gfy.com/showthread.php?t=...artners&page=2
                                                                                          http://www.gfy.com/showthread.php?t=810873
                                                                                          http://www.gofuckyourself.com/showth...ous-partnersha
                                                                                          http://www.gofuckyourself.com/showth...ous-partnersha



                                                                                          I am always buying traffic and white labels. Hit me up.
                                                                                          Email me HERE!

                                                                                          Comment

                                                                                          • media
                                                                                            Confirmed Moneymaker
                                                                                            • Apr 2002
                                                                                            • 9853

                                                                                            #46
                                                                                            What's really weird is http://m.extremetube.com/ descriptor info at the bottom of the page is: Daily Capital Investment Limited
                                                                                            I'm here for the violence!

                                                                                            Comment

                                                                                            • Jel
                                                                                              Confirmed User
                                                                                              • Feb 2007
                                                                                              • 6904

                                                                                              #47
                                                                                              Daily Capital Investment Limited is manwin - that guy asked for Daily Capital Investments, and minus the Limited.

                                                                                              Comment

                                                                                              • media
                                                                                                Confirmed Moneymaker
                                                                                                • Apr 2002
                                                                                                • 9853

                                                                                                #48
                                                                                                Originally posted by Jel
                                                                                                Daily Capital Investment Limited is manwin - that guy asked for Daily Capital Investments, and minus the Limited.
                                                                                                Yeah I know.. just seems weird that they'd use that name.. maybe because they think people know the name and will see the payment and think "oh fuck it" ?
                                                                                                I'm here for the violence!

                                                                                                Comment

                                                                                                • DamianJ
                                                                                                  Too lazy to set a custom title
                                                                                                  • Jul 2006
                                                                                                  • 15808

                                                                                                  #49
                                                                                                  So the person calling out someone runs websites full of stolen content?

                                                                                                  Whodatunkit!

                                                                                                  Comment

                                                                                                  • whOaKemosabe
                                                                                                    So Fucking Stoned...
                                                                                                    • Aug 2013
                                                                                                    • 1968

                                                                                                    #50
                                                                                                    bump for serious partners spam

                                                                                                    Comment

                                                                                                    Working...