As we are obviously unaware how the hacker got access to
Season., I'm surprised that this question keeps coming up if you think about it logically.
- Original owner created a Sythe account Season.. They logged on the account. → IP logged.
- Original owner created a Sythe account Seasons Skill. They logged on the account. → IP logged.
- As a result of the above, there should be a match between these two accounts, unrelated to the hacker.
[*]There was no claim made that the IP of the hacker (at the time) matched Season. in any way (that I've seen from all of the tracing and backtracking).
IP being searched (31.49.83.66) ~300 posts analyzed
Mortar
DinaH
Roughly 98% of the IP's used by
Mortar and
DinaH resolve to the same ISP (
British Telecommunications Plc), located in Great Britain.
Accounts
Mortar and
Mining Spana were banned for this report:
http://www.sythe.org/report-scammer-archive/1737048-mortar-mining-spana.html
Additional accounts to be aware of
(creation dates: 06-19-10, 06-29-10, 07-02-10)
Deductions
Season. may have been hacked by a user and
Seasons Skill was created as a result. However, the IP in question does not appear on either account, which makes this case irrelevant
(aside from the fact a scam resulted which would need repaid). What is relevant, however, is there exists an IP match linking
DinaH to
Mortar, which was created after a permanent ban was issued. The range of dates between the matches is curious, but it must be seen as irrelevant, as roughly 98% of the IP's used match the aforementioned ISP
(if you do an entire listing of the IP's for both accounts, the trend is very obvious [i.e. it is not a coincidence]).
It is safe to say all of the aforementioned accounts are linked and should be seen as one. Although a hacking may have occurred, this is not the primary objective when investigating this case as the scam report will always require a refund.
Final judgment
- Ban for serial vading.
- The user scammed (glremme) must be repaid.
- DinaH is required to pardon if they ever wish to return to the site.
I would recommend changing the ban reason for all accounts for the sake of clarity.