• XSS.stack #1 – первый литературный журнал от юзеров форума

LORD1 - Johndoe7 - Strike91 (300K+)

Отслеживать

Knight

Largest Vendor
Premium
Регистрация
10.09.2024
Сообщения
180
Реакции
123
Гарант сделки
10
Депозит
0.0115
PLEASE, HAVE SOME ATTENTION SPAN AND READ THROUGH IT ALL
(This post will be duplicated on Exploit)​

Hello brothers, everyone on the forum. Today I will reveal the exposure of LORD1 new accounts, which are also banned and some are active. The moderators on exploit.in failed to notice how extremely obvious that these are just LORD1 accounts, the first evidence and you may argue the smallest, but read through it.

Naming

First Evidence (you can argue that it is small evidence, I argue no. If you know the psychology you will agree with me 100%)

LORD1 has 7 new main accounts (some banned)

Previous Ripper Accounts:

JohnDoe7 https://xss.pro/members/206617/
LORD1 https://forum.exploit.in/profile/109494-lord1/

NEW ACCOUNTS:

Anduril https://forum.exploit.in/profile/184473-anduril/
BLADE https://forum.exploit.in/profile/183259-blade/
BLADE7 https://ramp**[.]io/members/blade7.3439/
Strike https://ramp**[.]io/members/strike.6650/
Strike91 https://xss.pro/members/415024/
THUNDER7 https://forum.exploit.in/profile/185913-thunder7/
WICK17 https://forum.exploit.in/profile/138483-wick17/
Strike1 https://forum.exploit.in/profile/183877-strike1/
Blackedge https://xss.pro/members/208967/

Actually I just realized a big piece of evidence while writing this.

1752949818756.png


An account with that name appeared while searching, check how Obvious it is, check the date. (Strike91 is active on xss.pro)

New Accounts registration dates between Dec 4 - Jan 13, Extremely Close

Comparison of Names


from LORD1
  • LORD1 → Anduril (Active)
  • LORD1 → BLADE (Semi‑Active)
  • LORD1 → BLADE7 (Semi‑Active)
  • LORD1 →STRIKE(Active)
  • LORD1 → Strike91 (Active)
  • LORD1 → THUNDER7 (Banned)
  • LORD1 → WICK17 (Ripper)
  • LORD1 > STRIKE1 (Ripper)

from JohnDoe7
  • JohnDoe7 → Anduril
  • JohnDoe7 → BLADE
  • JohnDoe7 → BLADE7
  • JohnDoe7 → Strike
  • JohnDoe7 → Strike91
  • JohnDoe7 → THUNDER7
  • JohnDoe7 → WICK17

THUNDER7 and BLADE7 are the most important names here, they have 1 word, and a number, that was used in his previous accounts.

Notice the simple name and besides a number? coincidence right?

Let's move to the next part



Similar Vocabulary

(THIS MESSAGE IS HIS BIGGEST BLUNDER, IT FURTHER CONFIRM WICK17 WAS HIS ACCOUNT)

You'll understand In analysis of WCIK17 account

LORD1 In addition to being a liar and a thief and a scammer, he also is not behaved.

I have received a message on July 17 from ramp4u asking for TOX, newly created account, which is this. When I gave, He started writing this.

1752949927024.png



1752949941774.png


There are 3 main things here

1. The same name WICK100, which is exactly LORD1 because he used that name in another account (WE'LL GO INTO ANALYSIS OF WICK 17 ACCOUNT)
2. Too many use of the word "scum" you will say it's not big piece of evidence just a word anybody can use, well come, let's look on who most used it on exploit.in

1752950035849.png


1752950089801.png


The message I got I deleted the contact, it was from a newly created account on ramp, forget the killing, and 3. he's trying to deanonymize a forum member "me" which is already a violation of the rules

Coincidence? You still have doubts Thinking I am faking it? Let's move to the next part



Deep Dive Into Accounts (Violation of Creating Multiple accounts, and is a ripper, refuses guarantor, and a reseller)
​
BEFORE going into a deepdive analysis, the accounts all have something similar

1. They're all 1 word with numbers next to it (MOSTLY ALL)
2. They all sell the main thing LORD1 sold, exploits, tools (literally all the same tools) and databases
3. They all registered in December or similar dates
4. They're all English Speakers
5. AND MOST OF THEM HAVE inappropriate behavior

BLADE

This account is Important, you'll see how it contribute to evidence later


1752950256044.png


User teresapcooley knew from the beginning, many thought he was joking or just ignored.

1752950318281.png


LORD1 made a mistake here, thinking that this would hurt my reputation. It won't do anything but strengthen my evidence

Listen.

Since I have a shop which sells the same he sells (but his is reselling mine is authentic)

He is trying to take me down, you would think he would do that for anyone

But not for this guy, he didn't make any post for this guy

1752950348078.png


1752950449026.png


is he and BLADE friends? why do they have the same wording and formatting?

Why is BLADE also selling Exploits? English Speaker? Similar formatting of Text? Coincidence?

No, It's his another account, now why is this Important?

It's Important because of this, reselling (more later)

1752950501313.png



THUNDER7
1752950783957.png



User smirnoff, pointed out that this is the RIPPER LORD1 (https://forum.exploit.in/profile/185913-thunder7/reputation/)


1752950826321.png




This is one of his accounts? why? Because the analysis of STRIKE account will reveal why :)

Main Things About Him (EVIDENCE WILL STRENGTHEN AT THE END PLEASE CONTINUE READING)

1.Inappropriate behavior
2. English Speaker
3. Liar (LORD1 Traits), "Flooding" When you are just leaving a comment that's a fact.
4. Selling Exactly What LORD1 is selling


Thanks to user smirnoff, he pointed out the obvious long before me, LORD1,WICK17, Anduril, it is a shame he didn't do it publicly, so this confirms THUNDER7 is also his account (Don't forget formatting of text, etc, also more evidence below)

1752950994854.png




Look to his inappropriate behavior

1752951083921.png




Now I pointed out that what he is selling is bullshit? why? More evidence below (IMPORTANT)

THE MAIN THING IS, LORD1 was trying to scam with the account THUNDER7 (JohnDoe7) Similar right? :)

Because he doesn't have NightHawk 0.3.3 AT ALL. AGAIN, MORE EVIDENCE SOON!

Now, Moderators of Exploit.in banned him "THUNDER7", but failed to ban the rest. This post hopefully make them make a decision on the rest.


(EVERYTHING WILL BE CLEAR CONTINUE READING)


Strike, Strike91

Selling what THUNDER7 selling :) and THUNDER7 Is banned

1752951163358.png


Strike91 is his account at XSS & STRIKE on ramp, this one he doesn't deny it.

Again, sell same thing, English speaker, and the biggest piece of evidence here is

1752951209480.png


Now why is STRIKE selling NightHawk same as THUNDER7?
https://ramp**[.]io/threads/sell-brute-ratel-1-7-cobalt-strike-4-9-1-licensed-nighthawk-0-2-6.2651/

1752951256231.png


1752951277436.png


WHY IS THIS IMPORTANT? LORD1 "STRIKE" IS ACTIVELY TRYING TO SCAM, AND REFUSES EXPLOIT.IN GUARANTOR

https://ramp**[.]io/threads/sell-brute-ratel-1-7-cobalt-strike-4-9-1-licensed-nighthawk-0-2-6.2651/

User USA_Straday have great reputation on XSS, so why would any of this be fake?

This is one of the biggest piece of evidence that LORD1 is actively trying to scam, he posted about NightHawk 0.3.3, now the version reduced to 0.2.6, oh but actually it is 0.2.4

I NOTED IN THE BEGINNING HE DOESN'T HAVE IT (THAT'S WHY, his main selling account "Anduril" doesn't post it, if you have it, why not sell it?)

don't forget my comment ABOVE calling him out.

What is this? are we playing a game? waste customers time (on a tool that you don't have)

STRIKE actively refused Exploit.in guarantor, Why did he say I accept Guarant but ignored the message ?

which is one of 9 violations of rules that he has done (I will list them all below)


WICK17/Blackedge Ripper, Banned.

https://xss.pro/threads/131254/#post-928037

Arguably one of the biggest pieces of evidence.


1752951468954.png


1752951524466.png




Same Formatting, Extremely Similar Name, English Speaker, sells one of things that Anduril Selling (LORD1)

1752951587367.png


See what are the users saying?

1752951622203.png

Why did LORD1 do the same? are they same guy or coincidence?

1752951655956.png


Now, WHY DID an 2023 account WICK17 went active 2 weeks after LORD1 ban on exploit.in? is this also a coincidence?

Is everything a Coincidence?

WICK17

1752951715074.png


1752951723375.png



Wait, I Remember where I have seen this? maybe here?

1752951770981.png



Or here?

1752951826813.png




user "space" stated that wick17 is also LORD1 (https://xss.pro/threads/131254/#post-928037)

1752951933075.png


1752951951885.png



inappropriate behavior AGAIN!

WICK17
1752952227181.png



1752952558191.png


LORD1 + BLADE, Trezor again?

1752952613737.png


inappropriate behavior again.

Again I will say

Now, WHY DID an 2023 account went active 2 weeks after LORD1 ban? is this also a coincidence?

So you're telling me, a person who just got banned, now someone 2 weeks appear, same English speaker, same selling, and a scammer, and with the inappropriate behavior? COINCIDENCE?


Anduril - Liar, Reseller

1752952723211.png

English Speaker, inappropriate behavior Reselling of exactly same tools as LORD1 and also, my work of cracked Cobalt Strike and a license of a great friend of mine (more evidence below)

SIMILARITES BETWEEN HIM AND LORD1

Anduril have this topic as well which LORD1 had (Forget even the selling of databases, nor tools, nor literally everything) Check this

1752952846740.png


1752952878680.png


This take us to another point

1752952904002.png


Do you see the same wording? "Actual."

1752953019118.png

Now why is Cobalt strike 4.9.1 license not working for forum member teresapcooley?

1752953043899.png


Because It has expired, and LORD1 is trying to resell it (asking for a extremely high price again).

So essentially, teresapcooley got scammed, No? Not enough evidence? Coincidence?


1752953092400.png



He again is selling databases, asking for price out of his ass. (It's public database)


(https://forum.exploit.in/topic/252934/?do=findComment&comment=1550554)

Almost like he is trying to scam? NO?

LORD1

1752953357406.png



1752953371735.png


Strike91

1752953418906.png


Anduril

1752953470784.png



Extremely Similar Formatting, You must be blind to not see that it is exactly the same person.

Literally, Literally the same upper case, lower case, and even a "."

IS THIS CONCIDENCE?

1752953560998.png



"Nothing like the leaked free versions"

"leaked shit"

Why do they both confirm that theirs are better? why do they both bash at the leaked versions?

It's almost like they're the same person.

1752953596036.png

"Pentest Tools" "and Others"
1752953603402.png


"Pentest Tools" "and Others"


In addition to being a liar, a scammer, a thief, he is also a reseller

Although the evidence of reselling will be given to admin and moderators, not to public.

What you need to know is he reselling my work, sleepless nights of cracking the tools and then he comes and resell.

User Ailurophile also told me that Shellter Elite, his license is being resold by him, LORD1 is reselling his license, which we have confirmation that I won't post only to admin and moderators.


Violations of Forum Rules
​
1752953796584.png


there is more evidence, This is not the end, these are the one I have - the forum members will definitely help.

His Rules Violations of Rules:

1. Ripper: https://forum.exploit.in/topic/247417/?tab=comments#comment-1505745 https://forum.exploit.in/profile/138483-wick17/
2. Actively Trying To Scam https://forum.exploit.in/topic/252657/ https://ramp**[.]io/threads/sell-brute-ratel-1-7-cobalt-strike-4-9-1-licensed-nighthawk-0-2-6.2651/
3. Inappropriate Behavior, Lying, Swearing, Insulting at Forum Members (Do I even have to put a link?)
4. Reselling (Discussed above, proof only to admin and moderators)
5. Refusal of Guarantor https://ramp**[.]io/threads/sell-brute-ratel-1-7-cobalt-strike-4-9-1-licensed-nighthawk-0-2-6.2651/
6. Deanonymizing & Threatening to Kill (Image Above)
7. Sale of Public Databases (https://forum.exploit.in/topic/252934/)
8. Sale of Non-existent goods (https://forum.exploit.in/topic/254094/?tab=comments#comment-1539886)
9. Work on CIS Countries https://xss.pro/threads/131254/#post-928037
10. Creating Multiple Accounts on The Forums (Mentioned Above)


CONCLUSION, USERS SMIRNOFF AND TERESAPCOOLEY POINTED IT OUT LONG AGO, NOBODY BELIEVED, BUT NOW MY ANALYSIS MAKES IT EXTREMELY OBVIOUS
 

Вложения

  • 1752952860467.png
    1752952860467.png
    44.6 КБ · Просмотры: 9
Knight сказал(а):
I ask moderators weaver and Quake3 to review this since they're on exploit as well

I ask admin to check and read the evidence

& forum members to help with this, Vinki
Завтра ознакомлюсь, спасибо
 
Пожалуйста, обратите внимание, что пользователь заблокирован
There are some fake things here even when just skimming on it. One is that I have never communicated with this user - this TOX correspondence is fake.

The other things that I see is that there was used the word "Actual" or something like that. I think if search can find at least 10+ users using this kind of "Actual" for bumping threads. Or to contact with PM.

This is some complete nonsense. Obviously why. But most important for arbitration there is no evidence at all except some "shared words" like "Actual". In fact this user has stolen licenses from clients before and now this is written simply because I made my prices lower in order to fight that thief.
 
Thank you for your reply your digging yourself more and giving us evidence more because of your lying

"this user has stolen licenses from clients before"

Show evidence

Strike91 I have evidence that you are a reseller of Shellter from a friend of mine, not that it is the main thing here, the main thing is that you are a ripper LORD1

Also, around all the evidence, you come to the vocabulary? (which is important) but this is what you can do at the moment
 
Vinki сказал(а):
Посмотреть вложение 109577
Общение идентично и джону и лорду.
Knight спасибо за находку
Боюсь, admin скажет, что доказательств нет.

Скажу так: нам нужен ещё один участник форума, которого обманут на 300 тысяч, чтобы это выяснить?
 
Пожалуйста, обратите внимание, что пользователь заблокирован
All the TOX conversation are fake (or not mine). Where is the evidence that I wrote these things? It's complete fake. I never refused garant and have 10 deals on Exploit with garant and one here. All these TOX conversationg are fake/not mine.

All other "evidence" is "shared words" like "Actual" or "Contact with PM" which are used for sure by dozens of users on forums.
 
Knight сказал(а):
Боюсь, admin скажет, что доказательств нет.
Так а Админ тут каким делом) Меня деньги интересуют, а не забанят его или нет) Не Админа же кинули на 300к. А нам только в плюс, добавим новые акки в коллекцию=)
 
Strike91 сказал(а):
All the TOX conversation are fake (or not mine). Where is the evidence that I wrote these things? It's complete fake. I never refused garant and have 10 deals on Exploit with garant and one here. All these TOX conversationg are fake/not mine.

All other "evidence" is "shared words" like "Actual" or "Contact with PM" which are used for sure by dozens of users on forums.

I knew he will say TOX Conversation is fake

Because that's the only thing I can't fully prove

Even if I give TOX ID, he will say it's not me, so it's a dead end

But the honest part of my side is this:

1. I get a message from new account in ramp4
2. the user said he is interested in Shellter "coincidence"
3. I give him
4. within 1 minute he send a friend request "interesting, cause LORD1 IS 24/7 active on forum, I have been watching him"
5. he writes that message.
6. he remove me.

I can't 100% prove? yes? what about other evidence?
 
Knight сказал(а):
4. within 1 minute he send a friend request "interesting, cause LORD1 IS 24/7 active on forum, I have been watching him"
да, это правда

Все остальное гляну с утра. Спасибо за инфу. С тебя подозрения сняты=)
 
Самое смешное то, что когда вы упоминаете схожие оскорбления и ругательства во всех его аккаунтах, он вдруг перестаёт оскорблять и ругаться.


🤣🤣🤣
 
I'll add more things before going

Firstly, LORD1 is active all day, why when the topic opened he responded then went offline now for 40 minutes, isn't he online all day? Coincidence?

If a topic about me were opened I'd be available to resolve it (or disapprove in LORD1 case) (he can't disapprove it :) )

But LORD1 Seems uninterested

In Vinki's Picture
This ripper just used another word that was mentioned here in my analysis "clown" (such a stupid person)

He's so stupid it's insane

Making the same account names "STRIKE1" "BLADE7" "THUNDER7"

Analysis of his 2 Replies - show extremely more than anybody thinks

1. deflection: In psychology It's Deflection onto minor, hard‑to‑disprove points (the “deniable”) LORD1 is trying to deny the most deniable thing here, the tox message, because I could make it, fake it, nobody would know (even though I didn't, but you can only trust me on this one). Why LORD1 is not denying the bigger fish here? 9 accounts? accusation of being one of the biggest scammers on xss.pro and exploit.in? If for example a forum member said I am johndoe7 I will probably say that your claim is ridiculous, maybe even get mad,(and yes this is normal human behavior), what LORD1 is doing here is not even trying to engage with the "bigger accusation"

(It remind of this video, I think it is relevant here:
) (He's being accused of something that he's not doing)

(WATCH IT)

If you watch the video, you can see a normal human response to the accusation, but LORD1 clearly shows disinterest here, In fact he does not challenge the claim even slightly, out of fear it will blow all in his face (when something about him is exposed he does the opposite, like trying to act appropriately, but in reality he is spoiled child)
Which is exactly the point 2 I am going to say here

2. Stonewalls: stays silent on the major, well‑supported accusations (the “bigger fish”)


Anyways, Vinki will help and this ripper will be exposed sooner than later.
 
Пожалуйста, обратите внимание, что пользователь заблокирован
To make it clear and I don't think there is need to write much more.

I have never communicated with this user. All TOX conversations are fake/not mine. I have never refused garant. This is fake and I think he should be banned for that. And all these enumerations of many usernames, it's also fake. There is some enumeration and fake TOX conversations - I don't even understand it fully. But I am sure there is no real evidence of any communication simply because there was never such a thing.

The other "evidence" is that I have used words like "actual", "contact with PM", "clown". Then maybe ban all forum users who used these words. It's complete nonsense - I am sure it is used by dozens of users. And about such "evidence" - I can also give: https://xss.pro/threads/76828/ and https://xss.pro/threads/138910/. Compare then "Red Team Tools", same - and formatting seems very similar on the first post of the threads. So ban him.

It's complete nonsense.
 
Strike91 сказал(а):
I have never refused garant
hxxps://r.am.p.4.u.io/threads/sell-brute-ratel-1-7-cobalt-strike-4-9-1-licensed-nighthawk-0-2-6.2651/

You never refused garant? what about when you ignored the buying of NightHawk? It's almost because YOU NEVER HAD IT

Strike91 сказал(а):
So ban him.

Great, do you want it now? or later? how about next week?

He lost any means to disapprove
Strike91 сказал(а):
But I am sure there is no real evidence of any communication simply because there was never such a thing.

Who's talking about communication here, LORD1 why are you still on the TOX message?
Strike91 сказал(а):
I can also give: https://xss.pro/threads/76828/ and https://xss.pro/threads/138910/.

No LORD1, it's not the same formatting, I am my own person not a ripper like you

LORD1 is trying to laugh at forum members intelligence by trying to compare completely different formats and just giving it a go hoping the wind will do its part

Let more people come and read it, let's see how you can come back and also talk about the TOX message for the 5th time
 
Пожалуйста, обратите внимание, что пользователь заблокирован
пиндосы ругаются :smile2:
 
admin


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх