The Fauxhunter Files
Home
About these Blogs
The Diamond Mine
E-Bay Phishing
Paypal Phishing
This Blog
date order
latest first
Hunt for Carfilhiot
date order
latest first

January 9th, 2006

Just got back yestreday from Carfilhiots island. It was fantsatic. The weather was great and C is a cool guy. And so is Sofia, who arrived unexpected at the new year party. She and C know each other from Easter time because she was there on a student trip – you can read about it on Carfilhiots blog only shes called Suldrun there. Since then she was in a band as a bass player – really cool for a chick! I cant imagine why she stopped the band thing. Anyway.

gingers tank
But there was something strange on Carfilhiots web site – a picture and some code wich I couldnt figure out but it seems to be put there by that frien called Ginger that he talks about. Heres the picture – NOT the original one which is still in place – its meant to be fuzzy because Carfilhiot says we dont know what the code means and dont want to look as if its us.
I read a lot off the internet about codes while I was there but I couldnt decode it.

what i found out

  1. The tank picture has been scanned but the code and the arab writing was photoshoped on the computer
  2. The arab writing says ‘god is good’
  3. The code is not a ‘substitution’ code like we did at school where you just put E for A, F for B and etc.
  4. It looks like evry time you code a letter you change the code by some system
  5. The date on the image file is not long before ginger went.
  6. The log files on ACCESS is much more intresting. The first access is long before the date of the file, so thres been a earlyer verson of the file.
  7. Theres sort of bursts of access and the last is just after the date of this one.
  8. The accesss are from all over. UK USA Canada but mostly Pakistan. The couple of Greek ones are all the same and thats Gingers IP checking the file.

what Im doing

  1. I will keep at the code but its not likely if I get it, and off course its probly in Arab so I could decode it and it still look rubbish.
  2. Ive got a little java program working that checks all the time and lets me know is theres any access to the image at Carfilhiots site.
  3. Especially Im waiting for a new one image to be put up, but nothing yet.
  4. at the moment i am going thru every access and try to identify the IP but nearly all are public access ISP’s and I cant identify the othrs.

December 15th, 2005

I emailed Carfilhiot and he said OK and I got the ticket off Expedia and Kevin used his credit card for me. Fantastic.


December 14th, 2005

I cant beleive it becausr Carfilhiot has invited me to visit his island in Greece over the holidays. At first my Mum is sure this is an internet pedofile. I havent told her hes really just a bank robber heh heh! Anyway the guy shes going out with these days Kevin talked her into it. He goes whose going to believe a pedofile would go after Alfredo hes so unatractive (!) and also like because he wants Mum to himself over the holidays and he says he will buy the ticket for my Chrismas. Which is the best thing any of Mums boyfreinds has done ever and I wasnt even expecting anything from him. Even if he is married already which he is but hes left her.

Anyway Mum says I cant go till afetr Christmas itself so its the 28th.


December 12th, 2005

I spent a lot of time doing nothing but games and stuff instead of scam-baiting. because now I know where Carfilhiot is really I havent got a good project on. Even though I chased up a couple Barclays fake phishers – and reported them but nothing ever happens to these guys.


November 30th, 2005

Wed 30 Nov 05

And found this cool site
and I thought it would be something I could do but no luck.


November 22nd, 2005

Beleive it ornot I have been doing nearly nothing this month exept play this really cool game Samorost. and thres the exams of course.


November 2nd, 2005

Carfilhiot has just confirmed to me his location in the Ionian Ilands and even put it in his website. Actully, he gave me a more acurate address but hes not putting on his site so the quest is over I suppose.


October 28th, 2005

Silly mistake on me because the Samos and Turkey quake didnt hapen till Friday and it was also a very big one (strength 6) so it would of felt pretty dangerous. Mind he could still be lying except hes so casual about it and hes not worried about being found anymore.


October 27th, 2005

GOTCHA! Carfilhiot made the mistake Ive been waiting for.
He talks about an earthquake on monday/tuesday last week thats 17-18 Oct. Now I find out where the quake really is and its Zakynthos but there it would be to strong for what C. feels so he has to be in the Ionian Islands thats where it was much weaker a quake. Still give me a bit of a range.
Too there was one in Samos but I think thats to close to Turkey. But he dint blog it on the day it happens so its still a possible that I never thought of before. Back to the ferry time tables and wheather reports – lucky I kept them all.


October 5th, 2005

Carfilhiot isnt droping many hints theses days, so Ive been looking at a new type of virus I have been seeing where the From: is admin or webmaster or mail @ some domain – in my case fauxhunter.co.uk – and to some user in the same domain saying stuff like YOUR EMAIL ACCOUNT WILL EXPIRE and with a whacking big attachment – like 45Kb.
Their easy to reconize because of the size. You know I spent like sevral hours back tracking one of these thro btinternet back to some poor sods zombie computer on broadband that was whacking these messages out every few secs 24 7. (zombie means its been taken over by a hostile program that instals itself as a service and the owner knows nothing about it.)
Anyway I found the actual IP of the guy, but I dont know who he is. I emailed btinternet about him but I dont suppose they will do anything because hes not the only one as I discoverd.

« Previous PageNext Page »


©Alfredo García 2004-2006 All Rights Reserved Powered by WordPress