- If "changed email, password", how can you see that they didn't steal the fun?
Did they change the email and password using a vulnerability on freebitco.in (on server), or did a virus exploit a vulnerability on freebitco.in and change it on the device?