One of Sallahs associates received an anonymous email in April claiming Cryptsys servers were located at Vault Networks Inc. in Miami. Sallah said he demanded Vault Networks confirm whether it has Cryptsys servers. In the meantime, he confirmed on his own that Vault Network has Cryptsys servers.
Vault Networks, in response to a court order, agreed to provide access to Cryptsys severs. Sallah said he will try to determine wallet information and will try to secure funds for investors benefit.
Well, this investigation is seriously Fucked (with a capital F)!
Sallah: We have control of the website, but don't have a clue as to what servers hosted it. If only...
Associate: Sallah, we just received an anonymous email claiming that Cryptsy's servers are at Vault Networks Inc.
Sallah: Finally, we're getting somewhere and I can earn my salt.
Sallah: Vault Neworks Inc., we demand you confirm you haz Cryptsy's servers.
Sallah: Nevermind. We confirmed it on our own. Can we please have access?
If only there were a Bitcoin doctor next door to Cryptsy's servers at 100 N. Biscayne Blvd., Miami.
12:08:26 up 244 days, 22:15, 1 user, load average: 24.77, 23.57, 23.41
Thu Nov 13 22:03:59 EST 2014
22:04:04 up 245 days, 8:11, 1 user, load average: 23.73, 24.08, 24.19
logan tty1 01Aug14 103days 0.86s 0.34s -bash
Linux maindrawer3 3.8.0-29-generic #42~precise1-Ubuntu SMP Wed Aug 14 16:19:23 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
/root/.Lucky7Coin
root
blk0001.dat blkindex.dat database db.log debug.log log.0000000001 Lucky7Coin.conf lucky7coin.dat Lucky7Coind.pid peers.dat wallet.dat
591.tar.gz auth.log.postattack bitcointools coinlist.txt concealcoin copy_daemons.php daemons.txt fluttercoin gitlist.txt Infinitecoin-V2 litebar Luckycoin navajocoin OSC performCollection.php postattacklogs razor rkhunter-1.4.2 rpcallows.txt senddime.sh StableCoin tmp.txt viacoin
rpcallowip=192.51.0.0/16
rpcuser=bigvern
rpcpassword=redacted
inet 204.11.237.74/27 brd 204.11.237.95 scope global eth0
net6 fe80::1a03:73ff:fef1:3f44/64 scope link
inet 192.51.100.243/16 brd 192.51.255.255 scope global eth1
root 12931 10.0 0.2 1089720 288184 ? SLsl Oct13 4525:51 BitcoinDarkd -daemon
root 575 56.9 0.4 1207784 442284 ? SLsl Nov11 2005:26 Ocoind -daemon -rescan
root 989 11.8 0.2 971052 246968 ? SLsl Jul12 21255:29 asiacoind -daemon
root 24107 0.0 0.0 4408 612 ? S 21:57 0:00 sh -c ps auwx|grep -i bitcoin|head -2|tail -1
root 12994 0.3 0.1 1396728 177584 ? SLsl Oct13 168:39 litecoinxd -daemon
root 24116 0.0 0.0 4408 612 ? S 21:57 0:00 sh -c ps auwx|grep -i litecoin|head -2|tail -1
root 24121 0.0 0.0 4408 612 ? S 21:57 0:00 sh -c ps auwx|grep -i dogecoin|head -1|tail -1
root 24126 0.0 0.0 4408 612 ? S 21:57 0:00 sh -c ps auwx|grep -i darkcoin|head -1|tail -1
#0 2 1,5 /usr/bin/php /root/backup_wallets.php
-rw-r--r-- 1 root root 1179 Apr 14 2014 /root/backup_wallets.php
$password = redacted;
$query = "select * FROM currencies where rpcport > 0";
$build = 1;
$link = mysql_connect('192.51.100.248, cryptsy_web, panda121);
mysql_select_db('cryptsy', $link);
$query = "select * FROM currencies where rpcport > 0";
$result = mysql_query($query);
$backupfolder = date("YmdH");
passthru("mkdir /root/backups/".$backupfolder."/");
http://cqcounter.com/whois/
Associate: Sallah, we just received an anonymous email that somebody by the name of Horus the Sun worked for Cryptsy.
Sallah: Shit! That's gonna be a tough one to crack because he didn't use his real name. Put that info in the BitJohn file. We may get lucky down the road with another anonymous email so to connect the dots.
Sallah: Your Honor, wes need mores moneys to continue this investigation. Me and my staff can't handle the wealth of information emailed to us on a daily basis.
Court: Granted. Take it out of future moneys awarded in that case.