The Fauxhunter Files
About these Blogs
The Diamond Mine
E-Bay Phishing
Paypal Phishing
This Blog
date order
latest first
Hunt for Carfilhiot
date order
latest first

January 9th, 2006

Just got back yestreday from Carfilhiots island. It was fantsatic. The weather was great and C is a cool guy. And so is Sofia, who arrived unexpected at the new year party. She and C know each other from Easter time because she was there on a student trip – you can read about it on Carfilhiots blog only shes called Suldrun there. Since then she was in a band as a bass player – really cool for a chick! I cant imagine why she stopped the band thing. Anyway.

gingers tank
But there was something strange on Carfilhiots web site – a picture and some code wich I couldnt figure out but it seems to be put there by that frien called Ginger that he talks about. Heres the picture – NOT the original one which is still in place – its meant to be fuzzy because Carfilhiot says we dont know what the code means and dont want to look as if its us.
I read a lot off the internet about codes while I was there but I couldnt decode it.

what i found out

  1. The tank picture has been scanned but the code and the arab writing was photoshoped on the computer
  2. The arab writing says ‘god is good’
  3. The code is not a ‘substitution’ code like we did at school where you just put E for A, F for B and etc.
  4. It looks like evry time you code a letter you change the code by some system
  5. The date on the image file is not long before ginger went.
  6. The log files on ACCESS is much more intresting. The first access is long before the date of the file, so thres been a earlyer verson of the file.
  7. Theres sort of bursts of access and the last is just after the date of this one.
  8. The accesss are from all over. UK USA Canada but mostly Pakistan. The couple of Greek ones are all the same and thats Gingers IP checking the file.

what Im doing

  1. I will keep at the code but its not likely if I get it, and off course its probly in Arab so I could decode it and it still look rubbish.
  2. Ive got a little java program working that checks all the time and lets me know is theres any access to the image at Carfilhiots site.
  3. Especially Im waiting for a new one image to be put up, but nothing yet.
  4. at the moment i am going thru every access and try to identify the IP but nearly all are public access ISP’s and I cant identify the othrs.

December 15th, 2005

I emailed Carfilhiot and he said OK and I got the ticket off Expedia and Kevin used his credit card for me. Fantastic.

December 14th, 2005

I cant beleive it becausr Carfilhiot has invited me to visit his island in Greece over the holidays. At first my Mum is sure this is an internet pedofile. I havent told her hes really just a bank robber heh heh! Anyway the guy shes going out with these days Kevin talked her into it. He goes whose going to believe a pedofile would go after Alfredo hes so unatractive (!) and also like because he wants Mum to himself over the holidays and he says he will buy the ticket for my Chrismas. Which is the best thing any of Mums boyfreinds has done ever and I wasnt even expecting anything from him. Even if he is married already which he is but hes left her.

Anyway Mum says I cant go till afetr Christmas itself so its the 28th.

November 2nd, 2005

Carfilhiot has just confirmed to me his location in the Ionian Ilands and even put it in his website. Actully, he gave me a more acurate address but hes not putting on his site so the quest is over I suppose.

October 28th, 2005

Silly mistake on me because the Samos and Turkey quake didnt hapen till Friday and it was also a very big one (strength 6) so it would of felt pretty dangerous. Mind he could still be lying except hes so casual about it and hes not worried about being found anymore.

October 27th, 2005

GOTCHA! Carfilhiot made the mistake Ive been waiting for.
He talks about an earthquake on monday/tuesday last week thats 17-18 Oct. Now I find out where the quake really is and its Zakynthos but there it would be to strong for what C. feels so he has to be in the Ionian Islands thats where it was much weaker a quake. Still give me a bit of a range.
Too there was one in Samos but I think thats to close to Turkey. But he dint blog it on the day it happens so its still a possible that I never thought of before. Back to the ferry time tables and wheather reports – lucky I kept them all.

September 26th, 2005

Ok my guess at Carfilhiots island is wrong but I am sure now that he is a real person not just an author writing a kind of book. And he has confesed that he sometimes gives a false clue which doesnt suprize me a bit. So I am back to analysing IP numbers.

Here is one he used – which when you look it up doesnt get resolved to a FQDN but seems to be owned by RIPE in Amsterdam but this address is located in Greece.

Then I checked another and it was also RIPE and Greece.

I havent got any Canadian IP for him. So its clear he is or has been in Greece because these arent dial-up.

The UK IPs he uses all resolve to which is a UK dial-up address that is very easy to get an account at and you can phone it from anywhere. It is really a good way to hide where you are. But I have a plan to hone in on him. Anyway he wasnt as upset as I expected when I showed I was tracking him down. You can see from his blog he is an OK guy who I quiet like.

September 24th, 2005

I am quiet suprised. Carfilhiot actully reprinted my email in his blog for any one to see. He is challenging me to tell him what Ive got. Now I can do the same as him and put my guess in here. But
1. I could be wrong and
2. If Im right its bad news for Carfilhiot so I will email my guess.

September 22nd, 2005

Joined up at Palimpsest where Carfilhiot hangs out a lot. It is all about books I never heard of except The de Vinci Code which I think is pretty cool but they dont reckon much on.

Still I PM with Wavid the admin guy at Palimpsest and asked him about Carfilhiot’s IP addresses. Wavid was quite helpful but he think that Carfilhoit is just a fake all the way through. Funny thing is he thinks one of Carfiliots IP’s is from Canada. And the MonkeyFilter posts say Canada. I dont think so. I still think hes in Greece. Im going to email Carf and see how he replys.

September 14th, 2005

Dont ask about the holiday. Actully it was OK but we was all pissed most of the time. But no one was helpless and thre was no what you would call fights but we are all skint and it has taken me 3 days to get well enough to do this. I see Carfilhiot as not been v active either. I have so much to catch up with I had better drop Carf for a week or so and sort my self out. But there was a reply from the MonkeyFilter guy but he says his Carfilhiots IP is always Canada.

« Previous PageNext Page »

©Alfredo García 2004-2006 All Rights Reserved Powered by WordPress