Evidence
Let's take a look at the retrocores.com and retrocores-shop.com similarities and you can make your own decision.
I have taken the source from Retrocores Forum page and the Retrocores-shop, since both have striking similarities when it comes to design.
There are also very close similarities in the way Marcus (or whoever) has coded the Forum / Retrocores-Shop, but I don't feel it's necessary to completely go through his comb, nor can I be bothered.
Firstly, the icon. Similar folder structure, naming convention and icon.png attachment.
Retrocores forum pages
Retrocores-shop
Then we have both sites, if you view the sources, you can see incredible similarities here, in just the Head tags alone.
Retrocores
HTML:
<html>
<head>
<title>RetroCores -Forum</title>
<meta name="Author" content="RetroCores" />
<meta http-equiv="content-type" content="text/html;charset=utf-8" />
<meta http-equiv="content-language" content="en" />
<meta name="keywords" content="RetroCores, free online game, free multiplayer game, ots, open tibia server, old tibia, 7.4" />
<meta name="description" content="RetroCores 7.4 is an Open Tibia Server that tries to resemble the old Tibia but with improved functions." />
<meta name="google-site-verification" content="zSBS7FphUvQKQ1aqKlA8rz_Hh02RxvdryU2yjB5ed5c" />
<link rel="stylesheet" href="../global/style_2019_01_15/forum.css?1573127222" type="text/css" media="screen" />
<link rel="stylesheet" href="../global/style_2019_01_15/forum_ckeditor.css?1524766884" type="text/css" media="screen" />
<link rel="shortcut icon" href="../images/design_2019_05_03/icon.png" />
<link rel="alternate" type="application/rss+xml" title="RetroCores" href="../?subtopic=news" />
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js"></script>
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>
<script src="../global/ckeditor_2018_08_16/ckeditor.js?1524811984"></script>
<script src="../global/javascript_2019_01_03/forum.js?1573129144"></script>
</head>
Retrocores-Shop
HTML:
<html>
<head>
<title>Retro-Shop -Money</title>
<meta name="Author" content="RetroCores Shop" />
<meta http-equiv="content-type" content="text/html;charset=utf-8" />
<meta http-equiv="content-language" content="en" />
<meta name="keywords" content="RetroCores, free online game, free multiplayer game, ots, open tibia server, old tibia, 7.4, buy gold, buy items, buy account" />
<meta name="description" content="RetroCores Shop offer various of things in RetroCores such as items, money and accounts." />
<link rel="stylesheet" href="global/style.css?1581671642" type="text/css" media="screen" />
<link rel="shortcut icon" href="images/design_20190122/icon.png" />
<link rel="alternate" type="application/rss+xml" title="RetroCores Shop" href="/?subtopic=home" />
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js"></script>
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>
</head>
Now, let's dissect this a little.
Both sites have
- The exact same indents on the code
- The exact same folder structure for stylesheet, global icon, application rss+xml
- The exact same type of keyword and description, just slightly worded differently, BUT in the exact type of way, pointing for SEO.
- Both load JS Scripts at the head level, rather than at the bottom of the body, which is indicated in Bootstrap (which both are using), puts script sources at the bottom of the body.
Now, let's look at the hosting of the servers.
Both sites are hosted with nginx/1.10.3 Ubuntu, both have SSL Certificates with Let's Encrypt. SSL Certificates expire in 85/86 days.
Both sites are hosted with OVH.
retrocores.com - 54.36.126.163
retrocores.com - 54.38.182.23
Now, let's look at the retrocores.com IP address
IP Geolocation, ISP and other information of IP address 54.36.126.163
ipgeolocation.io
HAUTS-DE-FRANCE, GRAVELINES
And the retrocores-shop.com
IP Geolocation, ISP, country, city, latitude, longitude and other information of IP address 54.38.182.23
ipgeolocation.io
HAUTS-DE-FRANCE, GRAVELINES
Both in the same datacenter.
Both domains are using no-ip.com for nameservers.
Both domains were registered at no-ip.com
Both
[email protected] and
[email protected] use no-ip MX records, meaning they use the same mail server.
View attachment 42541View attachment 42542
I quit this server after realizing that 80% of the server are bots. It's a shame, this server had so much potential. I spoke with Marcus for a few hours and he is a very talented guy, but this was completely fucking retarded on his part.
This is pretty solid evidence, but by no means concrete. Now, you have to think, is this all just coincidences or is Marcus selling shit on a separate website for extra cash on top of what he earns from the server itself?
retrocores.com
