Suspicious notes and users

[ErGo]

again, that should be a warning to everybody to register BEFORE spending, at least to avoid such "reverse hits"

Correct!

[joergb30]

it is a 2-day hit which might mean that it is a reverse hit...

you're right, I didn't notice !!
notgroschen is a big user and it can be that he spend the money before registering !!

again, that should be a warning to everybody to register BEFORE spending, at least to avoid such "reverse hits"

I don't believe that notgroschen is a honorable user because it's not the first time.
Please remember this old hit in serie: same behaviour, same comment, but 189 days time difference
http://forum.eurobilltracker.com/viewto ... en#p908619" onclick="window.open(this.href);return false;

Plesase delete this entry because it's definitely not a real hit.

[Phaseolus]

Cleaning girls do not delete bills upon order, but once someone is proven to be a cheater. We will open the file and run the usual investigation.

[ErGo]

The results of other investigations:

Svennie96 (32974): 19288 notes deleted
cobrakan (173462): 504 notes
varsova (171356): 7 notes
eddy639 (177176): 1 note
VerapoiS (26957): 6 notes
LiLi22 (154748): 1 note

[Schach]

Schach:

a lot of new users at the last days from the USA:
2012-10-15 snjarosmarlo Lingbo
2012-10-15 dbridedresses Newyork
2012-10-15 encasteranto Lingbo
2012-10-15 aolderbaumtuanh Newyork
2012-10-15 hceforchtwalla Lingbo
2012-10-15 lahlfieldtracy Stillwater
2012-10-15 tiffanynecklace Stillwater
2012-10-15 raburlingttamma Tungelsta 13754
2012-10-14 arackmancedr Lingbo
2012-10-14 nraguinascass Tungelsta 13754
2012-10-14 yantryvanch Newyork
2012-10-14 eoutletuggs Stillwater
2012-10-14 ejerseysnhl Atlanta
2012-10-14 askogstadoliva Newyork
2012-10-13 eedetjenprinc Lingbo
2012-10-13 ndiscountlondon Tungelsta 13754
2012-10-13 saccorsiamos Newyork
2012-10-13 sowndsdani Newyork
2012-10-12 rneryan Tungelsta 13754
2012-10-12 naltonvict Tungelsta 13754
2012-10-01 eveningpatterns Newyork
2012-10-01 alladayvon Tungelsta 13754
2012-10-01 ouggsonline Atlanta
2012-09-30 lcasellirodr Stillwater
2012-09-30 ahadoanfabi Tungelsta 13754
2012-09-30 ezzielme Stillwater
2012-09-30 iarguliskelv Lingbo
2012-09-30 dieldmign Tungelsta 13754
2012-09-30 tkburltiffany Stillwater
2012-09-30 geugayl Lingbo
2012-09-30 dcanadatown Atlanta
2012-09-29 uconloguetheda Lingbo
2012-09-29 oalemayoupasqu Lingbo
2012-09-29 bbalboyc Stillwater
2012-09-28 orrejoearl Tungelsta 13754
2012-09-28 aerthiaummell Newyork
2012-09-28 nsanige Lingbo
2012-09-28 grtaughfion Tungelsta 13754
2012-09-28 nelinchan Stillwater
2012-09-27 sertsara Stillwater
2012-09-27 lkoulalisalet Newyork
2012-09-26 nylaehnstace Atlanta
2012-09-26 vhavas Tungelsta 13754


all notes enter "0"

[an-148]

it's an automatic registration (through some software) used to introduce spams into the site: it already happened before

[Eureka.72]

2012-10-19 15:16:21 Xxxxx2837xxx Rxxxxx Trenčín ( Eslováquia, 911 08)
2012-10-19 15:16:21 Xxxxx2837xxx Rxxxxx Trenčín ( Eslováquia, 911 08)
2012-10-19 15:16:21 Xxxxx2837xxx (+) Rxxxxx Trenčín ( Eslováquia, 911 08)
2012-10-19 15:16:21 Xxxxx2837xxx (+) Rxxxxx Trenčín ( Eslováquia, 911 08)

User spartan1964

[Eureka.72]

The results of other investigations:

Svennie96 (32974): 19288 notes deleted

Bad news for me, apparently i lose a hit that never was...

2007-08-15 Uxxxx9357xxx Vale de Cambra,Tienen 1508 159 Svennie96

Anyway, good job Cleaning Ladies.

[Eureka.72]

2012-10-19 15:19:41 Yxxxx1144xxx Nxxxxx Trenčín ( Eslováquia, 911 08)
2012-10-19 15:19:41 Yxxxx1144xxx Nxxxxx Trenčín ( Eslováquia, 911 08)
2012-10-19 15:19:41 Yxxxx1144xxx Nxxxxx Trenčín ( Eslováquia, 911 08)
2012-10-19 15:18:05 Xxxxx0523xxx Exxxxx Trenčín ( Eslováquia, 911 08)
2012-10-19 15:18:05 Xxxxx0523xxx (*) Exxxxx Trenčín ( Eslováquia, 911 08)

User spartan1964

[Eureka.72]

Something strange with this hit...
Maybe, same user and two accounts.

2012-10-22 11:38:14 Vxxxx9018xxx Mxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Vxxxx9018xxx Mxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Vxxxx9018xxx Mxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Xxxxx1780xxx Rxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Nxxxx4876xxx Fxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Nxxxx4876xxx Fxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Vxxxx5785xxx Mxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Pxxxx3688xxx Rxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Uxxxx9631xxx Lxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Uxxxx9631xxx Lxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Lxxxx1923xxx Gxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Lxxxx1923xxx Gxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Lxxxx1923xxx Gxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Xxxxx9673xxx Rxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Vxxxx2793xxx Mxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Vxxxx2793xxx Mxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:38:14 Vxxxx2276xxx Mxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:24:53 Uxxxx3017xxx Lxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:24:53 Uxxxx3017xxx (+) Lxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:24:53 Xxxxx7730xxx Exxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:24:53 Xxxxx9182xxx Exxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:24:53 Xxxxx9182xxx Exxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:24:53 Xxxxx7334xxx Rxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:24:53 Yxxxx1412xxx Nxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:24:53 Yxxxx2471xxx Nxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:24:53 Yxxxx2471xxx Nxxxxx Zaragoza ( Espanha, 50010)
2012-10-22 11:24:53 Yxxxx2471xxx Nxxxxx Zaragoza ( Espanha, 50010)

User: yomismamente

[FoxyGreen]

I think there might be something slightly fishy concerning user US-Dollar. A hit ratio of 1:60.5 from notes entered in the USA (242 notes entered, 4 hits) sounds quite high compared to the expected 1:195 (or rather 1:208, assuming US-Dollar's notes wouldn't count). Judging from the user name, could this be a case of location faking?
http://de.eurobilltracker.com/profile/?user=41574" onclick="window.open(this.href);return false;

Please also note that user US-Dollar has added details on where the bills were received to ALL of his/her hits, except these two alledgedly found in Saint Cloud, Florida:
http://de.eurobilltracker.com/notes/?id=81300668" onclick="window.open(this.href);return false;
http://de.eurobilltracker.com/notes/?id=64461565" onclick="window.open(this.href);return false;
Call me crazy, but I think this is suspicious.

--Foxy--

[FoxyGreen]

Please have a look at this hit:
http://de.eurobilltracker.com/notes/?id=89672077" onclick="window.open(this.href);return false;

If my translation is correct, the comment by user M005E5 (http://de.eurobilltracker.com/profile/?user=148418" onclick="window.open(this.href);return false;) reads "My mother-in-law and appiukko have just arrived back home after having spent Christmas in Kathmandu. Of course, I asked them for their wallet of euros."

In this case, shouldn't be the place where this note (and possibly some others) were found, rather than Nepal?

[STP]

Actual translation is: My mother-in-law and father-in-law came to have X-mas holiday here in Kathmandu, so of course I asked if they happen to have any Euros with them. So M005E5 was at that moment in Nepal.

[avij]

a lot of new users at the last days from the USA

Around 80 such users have now been removed. They were all registered from the same Chinese IP address, which has now been banned.

[Ernesto_due]

a lot of new users at the last days from the USA

Around 80 such users have now been removed. They were all registered from the same Chinese IP address, which has now been banned.

Applause !!!