Scammer, hijacker steals accounts of affiliate programs, emails, domains, GFY profiles! [Attention!]
 

Hello Webmasters,

We would like to inform you about a person, who hacks email, gfy , domains , affiliate programs accounts, etc.

How does he scam?
- Uses database of logins/emails/passwords to get payments and forces against affiliate programs (we found a lot of accounts in our affiliate programs, which he tried to use in order to get payments). Unfortunately, he has already got 1 payment from us, passing the desirable for reality:
https://gfy.com/showthread.php?t=1123...ous+partner s
Attention to affiliate programs!

- Sells hardlinks using hijacked accounts on GFY and domains he has stolen.

"My domain and GFY account were hijacked at the end of March. Please do not send money to the person, who started this thread as he is no longer in control of the domain."

https://gfy.com/showthread.php?t=1062634

- Pornstarbook.com and GFY account hijacked - https://gfy.com/showthread.php?t=1066...e%4 0yahoo.ca

- Email hacked and some sites/domains stolen
http://tranny-masters.com/bbs//showthread.php?t=11901

"Hi guys, I just wanted to give you a heads up.
Some culprit got access to my email account and via this he got access to my affiliate accounts and domain registrar. I managed to get back control over all affiliate accounts but the guy has gotten a few domains out of my registrars account before I realized what was happening. (Im not very active in adult).
The domains he got where pretty much all my review sites and also www.shemalepornguide.com and my email account. So [email protected] isn't working anymore.
If you have any advice or can help out.. please let me know.
The paxum id/email this thief uses is: [email protected]. It would be great if you had any info on this guy."


This is information about accounts and domains, we've discovered, but, for sure, list can be continued.

He goes under names «Jesper Fosdal» or «Jeremy Harton» or «Kostyantyn Kulykov» and uses following payment options:

Paxum emails: [email protected] ,ha [email protected], [email protected] , [email protected], [email protected], [email protected]
Paypal email [email protected]
Webmoney Z206056737535 (registered just 16 days ago)

Contact details:
Emails: [email protected], [email protected] ,ha [email protected], [email protected] , [email protected], [email protected], [email protected]
Icq: 699852979, ID grisey

IP addresses:
78.140.172.74
184.75.215.122
184.75.213.178
198.144.156.126
184.75.212.82
99.238.7.140
184.75.212.122
184.75.212.98
184.75.214.242
198.144.156.137
198.144.156.57
202.116.1.149
184.75.221.234
199.19.95.160
162.219.176.66

Sites he uses as a proof that he is adult webmaster:
asianpornreviews.com
shemalepornguide.com
SHEMALECOCKMOVIES.COM
asianpornreviews.com
asianpornsitereviews.com
dirtlist.com
maturesexreviews.com
shemalepornguide.com
shemalepornsitesreviews.com
welikeporn.com
etc..


Also he is still a member of GFY community under the nickname !Wow:
https://gfy.com/member.php?u=42438


So, whatever you do, avoid this person in your dealings. If you need us to verify any of this, hit us up on ICQ.

We would like everyone in webmaster society to know about shenanigans of this scammer and avoid making horrible mistakes, dealing with him.

If you have any additional information about this person, you suffered from his actions, please, post in this topic or contact us.

We've already contacted with webmoney, paxum and paypal in order to initiate their inner investigation and block all his account/bills. We also would like specifically ask representatives of these payment systems on this forum to check this person and write in this topic.

Sincerely,
Serious Partners Team.

Hey ,
We will be in touch with you regarding this.

Regards
Chris

He sounds like a real gem - I don't remember coming into contact with him - Thanks...

It's probably GFY user georgeyw

He'll do anything for a few cents :1orglaugh

Why do you think so?

About 3 years ago I had someone get access to my affiliate accounts, email, paypal account, etc...it was such a pain in the ass to get fixed!

another fuckers

bump to this

I'm not sure I understand. I have bought links from this user Wow! before and the links were added to the site as promised.
Are you saying he doesn't actually own these sites?
Actually, his attitude stunk a bit but meh.

Please can you clarify.

Yes I can show you proof that he is not the owner of domains you bought links from. What sites?

From this thread: https://gfy.com/showthread.php?t=1121589

How the hell would ha manage to steal sites, emails and accounts?

bump for more to read

He is not the owner of following domains:
Shemale Porn Guide - http://www.shemalepornguide.com - PR3
Asian Porn Reviews - http://www.asianpornreviews.com - PR3
Jerking Resources - http://www.jerkingresources.com - PR3

Read more about that domains here please:
http://tranny-masters.com/bbs//showthread.php?t=11901

Well I don't know. I have different email and PayPal to the ones you give however if I Google one of the emails I get this thread:
http://www.greenguysboard.com/board/...d.php?p=410156

Interesting :(

One advice for this kind of situation.

Do not use the same email and password between hosting and your personal email and do not use your password for domain hosting for your email whether it's business or personal and last thing to do is DO NOT synchronize all your emails at one place. I have my BB that forwards all email from all email accounts which different password in it!

I don't know what to say about this issue. Just a piece of advice I guess.

Thanks for the heads up

Thanks for the heads up :thumbsup

Thanks for the heads up. Unfortunately there is still lots of scammers around. Had the pleasure to find a few lately.

With that said. Why is he not "So Fucking Banned" yet?

most people that know or have pornstar traffic, know the real owner of pornstarbook, so newbies buying traffic beware, vets will know who the real one is.

Another thread on russian forum about him:
https://www.master-x.com/forum/posti...93968/#2493968
He used brutforse and asked Macdollars.net to pay him immediately for their in-house account that owner created by himself. :thumbsup Also tried to brutforce password of affiliate program owner account on forum master-x.com as master-x.com owner said. tricky asshole!

Nickname fuzzbuzz
IP: 184.75.214.186

Already asking Eric to ban him :pimp

thanks for the heads up helen

Then he returns in disguise with a new nick, probably better to leave leave his account alive :2 cents:

Okay. You are right

thanks for heads up

Chris, any results with bann of that accounts?
Paxum accounts: [email protected] , [email protected], [email protected] , [email protected], [email protected], [email protected]

These emails are also associated with the account:
[email protected]
[email protected] << PayPal
[email protected]

Updates on scammer found at:
http://www.greenguysboard.com/board/...d.php?p=410156

"Details it is then although they are from 2004.

Sergiy Kulykov
161 Forest Run Blvd
Concord, ON L4K 5H3
(905) 417-8368
Basment of partents house

His is know as Kostyantin Kulykov, Dron, Sergiy Kulykov, Jack, Sragmoder, Andrei Perminov, Jack London, Curtis, Monkey, Christopher Pendola and others. All of his registered domains have fake contact details and he pays with paypal.

He appeared in court as Kostyantin Kulykov and was made to pay damages a couple of years ago. Claimed he was a "just a young man who likes to play with computers" and wanted to make a porn site as a game.

Sponsors have mailed checks to those names and various addresses including:
James
KKS Solutions
80 Glen Shields
Concord, Ontario
L4K4P6
(905) 446-3776

He tried a paysite www.ezpornsex.com and his ccbill number was 914365-0000.

I'm sure I posted the sponsors that were paying him at some stage, here are a couple more:
ARS accounts: 70727 and 179924
Pornmegabucks: pmb10650

Domain recovered from him http://www.wipo.int/amc/en/domains/d...2004-0391.html

He hasn't changed his ISP in at least 4 years.
With some trickery I was able to get this from an email I sent him that of course he wouldn't reply to.
Opened: 18-Aug-04 at 08:06:11am (UTC +10:00) - 17hours35mins13secs after sending
Location: Toronto, Ontario, Canada
On: wc06.mtnk.rnc.net.cable.rogers.com (66.185.84.201)

Many of the domains registered by him are up for sale some are not.
dirkreemsandlongbrick.com
nudity-hunter.com
adultlinks4u.com
amateursrus.nu
monkeypost.com
eroticstoriesranks.com
jennahardcoremovies.com
lacylingerie.com
aabsolute.com
amateursxworld.com
hsi-network.com
adultoyz.com
hottsexxx.com
etc

Regards"

Don't like the taste of your own medicine? Who would have thought.

Good work SP :thumbsup

I am not sure how you got my name involved in this.

i am the owner of shemalecockmovies.com , and the whois of that domain is indeed me.

But I do not scam anyone.

Around March last year, I meself had a few accounts hacked. Making my PussyCash payment going to Canada instead of payoneer.

it was send to some : Jason Hart, canada, Willowdale [email protected] .

None of the emails in this thread are related to my paxum ID.

no worries op' are hackers , spammers, scammers too

From namecheap support ticket at 14 August 2012 :

[/quote]
For some reason I see two of my domains are moved out of my name cheap account:

Domain Name: shemalecockmovies.com
Transferred Date : 8/11/2012 11:56:27 AM
Transferred Out To: eNom Inc.

-----

Reply from NameCheap:

Hello Jesper,

We are locking those of your domains which are not locked now. We have also contact Enom.com regarding these transfers. Please scan your computer for malware as EPP codes were requested from US IP address though no pasword reset requests were made.

We will get back to you with the updates as soon as we receive any.
------------------
Kind regards,

Milla S.
Risk Management

[/quote]

have hit you up on ICQ and skype so we can talk. I promise you. I have nothing to do with this!

foz, sorry for that. Your domains are in list just because some of them were stolen by that idiot. Do you have any additional information about him?

I will hit you up later. Again sorry for mistake with your domains.

p.s. We found some more info on that guy and will publish here after we check everything out.

Why don't you go fuck yourself?

:1orglaugh:1orglaugh:1orglaugh

Getsu you are a bad girl. somebody should teach you good manners :pimp

Any new updates on your Child Porn filled website?

https://gfy.com/showthread.php?t=781585

I am going though my sponsor list, coz he hacked other that just PusshCash :( just cant remember what sponsor it was.

Could you please delete the whois on my domain?

I will be out from 19 to 24 tonight. But I will have my phone on me, so just hit me up on ICQ

HAHAHA!!! Karma is a bitch you fucking thieves!!!!!

:1orglaugh:1orglaugh:1orglaugh:1orglaugh:1orglaugh :1orglaugh:1orglaugh:1orglaugh:1orglaugh:1orglaugh :1orglaugh:1orglaugh:1orglaugh:1orglaugh:1orglaugh :1orglaugh

Just had someone hit me up in regards to this situation... person said the check was in the wrong name..

The Check was issued to:

James Smith
9980 dufferin street
po box 20035
maple, Ontario l6a 4m4
Canada

Then he contacts and says check was issued wrong, re-issue to the following name:
Alexander Zhukov or Daily Capital Investments

I compare some stuff, then look him up, and come back at him with a thread from Tranny-Masters about some domains being stolen with the email [email protected] being associated with the theft.. then the icq goes black, logged off.. lol

on linked in I see a :

Kostyantyn Kulykov
Investment Analyst at Daily Capital Investments

Maple, Ontario, Canada
Banking

they used the icq: 699852979 with a name Jason Frank on it.. too many names to not throw up red flags all over the place for me..

I think maybe there is a ring operating out of that location.. Maybe get RCMP to get involved?

http://www.gfy.com/showthread.php?t=...artners&page=2
it/810873-serious-partners-com-ftvgirls-ivonnafuckalot-germangoogirls-ect.html
http://www.gofuckyourself.com/showth...ous-partnersha
http://www.gofuckyourself.com/showth...ous-partnersha


http://i.imgur.com/d73ioma.png
:1orglaugh:1orglaugh:1orglaugh:1orglaugh:1orglaugh :1orglaugh:1orglaugh

What's really weird is http://m.extremetube.com/ descriptor info at the bottom of the page is: Daily Capital Investment Limited

Daily Capital Investment Limited is manwin - that guy asked for Daily Capital Investments, and minus the Limited.

Yeah I know.. just seems weird that they'd use that name.. maybe because they think people know the name and will see the payment and think "oh fuck it" ?

So the person calling out someone runs websites full of stolen content?

Whodatunkit!

bump for serious partners spam

http://www.digitalaptitude.com/wp-co...on-2007-06.jpg