OP 30 January, 2021 - 05:05 AM
(This post was last modified: 30 January, 2021 - 05:27 AM by Chromeon.)
Info by team from Quartz Inc.
@Qrowio:
(REMEMBER WE ARE NOT TRASHING THE SERVICE - JUST THE WEBSITE DEVELOPER) Today we have two "Developers". H7ML and X3R0TYP3 (Both were/are Team Otimus Members) They have "recently" charged a Proxy service (Shadow Proxy) $350 for a website. You may be thinking this is normal, which yeah it kind of is until you realise what they have done. Domain: https://www.shadow-proxy.com/ Let's start - The design is fucking disgusting (check the screenshots) - Colour scheme practically doesn't exist - No actual design going for it - The Navbar is shocking - Useless elements in the HTML File - Useless CSS scattered throughout the CSS File. - Attempt at meta tags is fucking disgusting. - Adding a favicon that doesn't even exist. - CSS in the HTML file - kind of retarded. - Random JS files? - Copy and pasted JS at the bottom that does nothing - https://shadow-proxy.com/xD/faq.php - Tons of HTML & CSS for this? - Unclosed elements at the bottom. - <script src="https://cyber-services.net/dist/js/main.min.js"</script> - ^ Called at the bottom for what reason? Copy and paste? - https://shadow-proxy.com/xD/tos.php - Tons of HTML & CSS for this? - Unclosed elements at the bottom & top - An entire part of this page does absolutely nothing - Footer element but no footer? - <script src="https://cyber-services.net/dist/js/main.min.js"</script> - ^ Called at the bottom for what reason? Copy and paste? - https://shadow-proxy.com/xD/ - I couldn't take a look at this fully mainly because I don't have an account or backend access. - <meta name="author" content="x3R07YP3"> - Skid tried to take credit saying the dashboard was his.
Landing page is a template
- The design is fucking disgusting as well (Check the screenshots) - So much unused CSS (Check screenshot) - almost 60% of the main CSS goes unused. https://cdn.discordapp.com/attachments/8...nknown.png They took base templates and fucking cannibalized them. https://cdn.discordapp.com/attachments/7.../index.png https://cdn.discordapp.com/attachments/8...nknown.png https://preview.themeforest.net/item/ape...1611355900 I couldn't be bothered to search for the Index template by you can see above it was made by Devazo - Landing.
@Zertex:
Hey guys, so this time it's my turn to expose something. I'm sure many of you have heard of Shadow Proxies (https://shadow-proxy.com/), and you should probably know that it's run / owned by Otimus (Legend / Infinit). Because of this, I looked into what proxies they are providing. One of their proxies is:
Now, this clearly shows that the proxies are owned by Otimus, as "Sultaan" is one of Legends alts.
Now lets see where this IP is from. https://i.imgur.com/GPuEAzb.png As we can see, it's an IP owned by "Clouvider Limited". Now, if you do just a little bit more digging, you'll find that Clouvider Limited, are the IP's used by NordVPN. https://i.imgur.com/Mqs2LqA.png https://i.imgur.com/1EWp71g.png So as always, don't be stupid, don't get scammed.
-------------------- -------------------- -------------------- --------------------
Proof both "pools" are identical.
https://media.discordapp.net/attachments...height=630
Pool One | Only Weekly and Monthly customers can access it.
https://cdn.discordapp.com/attachments/8...ly_5_2.txt
Pool Two | Only Lifetime Customers can view it.
https://media.discordapp.net/attachments...height=630
https://cdn.discordapp.com/attachments/8...ly_1_1.txt
https://media.discordapp.net/attachments...height=630
As viewable in the screenshot, both pools are of identical IP addresses.|
-------------------- -------------------- -------------------- --------------------
https://cdn.discordapp.com/attachments/8...Weekly.txt
https://cdn.discordapp.com/attachments/8...n_Only.txt
Original Download Links
-------------------- -------------------- -------------------- --------------------
As stated in FAQ #5, the Threads Allowed are 100 to 500, but clearly that is not the case
https://i.imgur.com/CLRSxDe.png
The Owner is saying that the Pool Two is upto 950 threads.
https://i.imgur.com/F5kfFZp.png
Also saying that Pool One is only upto 350 Threads, but they are the EXACT same pool.
https://i.imgur.com/kJ2GHwK.png
The staff team is instructed to collect the customer's IP Address to add them to the data-base and "activate" the proxies, but you can clearly see the proxies aren't IP-Bound, but are user:pass.
-------------------- -------------------- -------------------- --------------------
The customers have been actively and consistently lied to and manipulated into thinking they are paying for a better pool with their lifetime membership, however they are getting the exact same pool as the normal customers.
-------------------- -------------------- -------------------- --------------------
The Shadow-Proxy bot also has a
command for users to "refresh" their proxy pool, but once again it obviously does nothing.
-------------------- -------------------- -------------------- --------------------
https://media.discordapp.net/attachments...height=630
When in the Admin Panel, you can clearly see the tab for "Shadow Bot Status" is just a series of text boxes where we would enter fake information such as "Bot Online" and "Working" where it would never update if the bot went offline.
https://media.discordapp.net/attachments...height=630
https://media.discordapp.net/attachments...height=630
For the "Refresh Proxies Pool" option on the website, it's just another text bot where we as support teams would lie to the customers about their product.
https://imgur.com/cKaI2NQ
If we head over to the other side of the panel as a customer, we can see that the text boxes are indeed there.
The button in blue to "refresh the pool" just refreshed the page and displays whatever text we have entered in the admin panel.
As well as the bot status
https://i.imgur.com/Os00PeN.png
We can also see that the customers are never updated once added in the database, as these proxy pools on this panel aren't even a thing anymore.
-------------------- -------------------- -------------------- --------------------
The bandwidth usage page is just a random chart that shows the EXACT same numbers all the time.
https://media.discordapp.net/attachments...height=630
Source didn't even buy the "special pool" but I've used "75" of it.
We can also tell this is faked becuase I've user more "number" in the Today Used bar as the This Week bar.
https://media.discordapp.net/attachments...height=630
Viewing their FAQ again, we can see that "HTTP and socks5 proxies are the only ones available at the moment." though Socks5 were NEVER EVER available to customers or given out, only HTTP. Numerous customers have asked them about this, but they are then ignored.
"Yes They Are Good For Everything" "You can get high cpm on Minecraft, Yahoo, Netflix, Spotify,PSN etc." They clearly advertise the proxies as being unbanned on all sites, but the proxies are raped and banned within minutes of the pool coming online.
PERSONALLY NOT TRASHING I JUST WANT TO GET THIS OUT THERE.
@
(REMEMBER WE ARE NOT TRASHING THE SERVICE - JUST THE WEBSITE DEVELOPER) Today we have two "Developers". H7ML and X3R0TYP3 (Both were/are Team Otimus Members) They have "recently" charged a Proxy service (Shadow Proxy) $350 for a website. You may be thinking this is normal, which yeah it kind of is until you realise what they have done. Domain: https://www.shadow-proxy.com/ Let's start - The design is fucking disgusting (check the screenshots) - Colour scheme practically doesn't exist - No actual design going for it - The Navbar is shocking - Useless elements in the HTML File - Useless CSS scattered throughout the CSS File. - Attempt at meta tags is fucking disgusting. - Adding a favicon that doesn't even exist. - CSS in the HTML file - kind of retarded. - Random JS files? - Copy and pasted JS at the bottom that does nothing - https://shadow-proxy.com/xD/faq.php - Tons of HTML & CSS for this? - Unclosed elements at the bottom. - <script src="https://cyber-services.net/dist/js/main.min.js"</script> - ^ Called at the bottom for what reason? Copy and paste? - https://shadow-proxy.com/xD/tos.php - Tons of HTML & CSS for this? - Unclosed elements at the bottom & top - An entire part of this page does absolutely nothing - Footer element but no footer? - <script src="https://cyber-services.net/dist/js/main.min.js"</script> - ^ Called at the bottom for what reason? Copy and paste? - https://shadow-proxy.com/xD/ - I couldn't take a look at this fully mainly because I don't have an account or backend access. - <meta name="author" content="x3R07YP3"> - Skid tried to take credit saying the dashboard was his.
Landing page is a template
Code:
/* Template Name: Devazo - Landing Author: Themesdesign Version: 1.0.0 Created: Sep 2019 File Description: Main Css file of the template */
@Zertex:
Hey guys, so this time it's my turn to expose something. I'm sure many of you have heard of Shadow Proxies (https://shadow-proxy.com/), and you should probably know that it's run / owned by Otimus (Legend / Infinit). Because of this, I looked into what proxies they are providing. One of their proxies is:
Code:
178.238.10.4:32455:sultaan:6NASEV2AQFGP5LLKH8DIEHRD
Now lets see where this IP is from. https://i.imgur.com/GPuEAzb.png As we can see, it's an IP owned by "Clouvider Limited". Now, if you do just a little bit more digging, you'll find that Clouvider Limited, are the IP's used by NordVPN. https://i.imgur.com/Mqs2LqA.png https://i.imgur.com/1EWp71g.png So as always, don't be stupid, don't get scammed.
-------------------- -------------------- -------------------- --------------------
Proof both "pools" are identical.
https://media.discordapp.net/attachments...height=630
Pool One | Only Weekly and Monthly customers can access it.
https://cdn.discordapp.com/attachments/8...ly_5_2.txt
Pool Two | Only Lifetime Customers can view it.
https://media.discordapp.net/attachments...height=630
https://cdn.discordapp.com/attachments/8...ly_1_1.txt
https://media.discordapp.net/attachments...height=630
As viewable in the screenshot, both pools are of identical IP addresses.|
-------------------- -------------------- -------------------- --------------------
https://cdn.discordapp.com/attachments/8...Weekly.txt
https://cdn.discordapp.com/attachments/8...n_Only.txt
Original Download Links
-------------------- -------------------- -------------------- --------------------
As stated in FAQ #5, the Threads Allowed are 100 to 500, but clearly that is not the case
https://i.imgur.com/CLRSxDe.png
The Owner is saying that the Pool Two is upto 950 threads.
https://i.imgur.com/F5kfFZp.png
Also saying that Pool One is only upto 350 Threads, but they are the EXACT same pool.
https://i.imgur.com/kJ2GHwK.png
The staff team is instructed to collect the customer's IP Address to add them to the data-base and "activate" the proxies, but you can clearly see the proxies aren't IP-Bound, but are user:pass.
-------------------- -------------------- -------------------- --------------------
The customers have been actively and consistently lied to and manipulated into thinking they are paying for a better pool with their lifetime membership, however they are getting the exact same pool as the normal customers.
-------------------- -------------------- -------------------- --------------------
The Shadow-Proxy bot also has a
Code:
.refresh
-------------------- -------------------- -------------------- --------------------
https://media.discordapp.net/attachments...height=630
When in the Admin Panel, you can clearly see the tab for "Shadow Bot Status" is just a series of text boxes where we would enter fake information such as "Bot Online" and "Working" where it would never update if the bot went offline.
https://media.discordapp.net/attachments...height=630
https://media.discordapp.net/attachments...height=630
For the "Refresh Proxies Pool" option on the website, it's just another text bot where we as support teams would lie to the customers about their product.
https://imgur.com/cKaI2NQ
If we head over to the other side of the panel as a customer, we can see that the text boxes are indeed there.
The button in blue to "refresh the pool" just refreshed the page and displays whatever text we have entered in the admin panel.
As well as the bot status
https://i.imgur.com/Os00PeN.png
We can also see that the customers are never updated once added in the database, as these proxy pools on this panel aren't even a thing anymore.
-------------------- -------------------- -------------------- --------------------
The bandwidth usage page is just a random chart that shows the EXACT same numbers all the time.
https://media.discordapp.net/attachments...height=630
Source didn't even buy the "special pool" but I've used "75" of it.
We can also tell this is faked becuase I've user more "number" in the Today Used bar as the This Week bar.
https://media.discordapp.net/attachments...height=630
Viewing their FAQ again, we can see that "HTTP and socks5 proxies are the only ones available at the moment." though Socks5 were NEVER EVER available to customers or given out, only HTTP. Numerous customers have asked them about this, but they are then ignored.
"Yes They Are Good For Everything" "You can get high cpm on Minecraft, Yahoo, Netflix, Spotify,PSN etc." They clearly advertise the proxies as being unbanned on all sites, but the proxies are raped and banned within minutes of the pool coming online.
PERSONALLY NOT TRASHING I JUST WANT TO GET THIS OUT THERE.