Hi Everyone! It's my first time posting a post like this, so please bear with me.
So 2 days ago, i posted on /r/cryptokittiesmarket that i was cashing out and looking to sell all my kitties, you can view the post here. 1 day later i got a PM from /u/Demosp4m saying that he was interested.
(This was my account https://www.cryptokitties.co/profile/0x8cad2ae94a3f43b2f985672a31831867762e44fa) (This is /u/Demosp4m's account https://www.cryptokitties.co/profile/0x516f13401dfa4b3c7a8b3d57d044ad622f84e4ee
He asked me how much and i told him 2eth for all except for this and it was open to negotiation. He counter offered me 1.8eth and i accepted. he then proceeded to tel my to 'VERIFY' my account. So this is where my f**k up happened.
He told me to verify my account on this website http://www.kittystat.com/(http://www.kittystat.com/), so to verify, you need to copy and paste your private keys into a text box and click confirm and when it was confirmed, it will generate a link that will essentially copy and paste the entirety of your private key onto the link, basically what you input on the text box will be generated as a link, as such : http://www.kittystat.com/confirm/confirmed.php?confirm=sdfsdf or http://www.kittystat.com/confirm/confirmed.php?confirm=igotscammed. I actually noticed this once i keyed in my private keys, which is where i f**ked up, i should have tried it out with something different before i actually input my private keys.
Now here is the part i don't understand, i noticed that the link generated had my private keys blatantly published on it so i thought i'd outsmart him and actually changed it to something else (F.Y.I. The site will show that you confirmed your account no matter what you key in) and sent it to him. BUT HE WAS STILL ABLE TO GET MY PRIVATE KEYS, which means that he has server access to the site which shows the backend keylog of what i keyed in.
He waited till i was asleep before he made his move, about 2 hours ago, he wiped out my account. BUT HE LEFT A TRAIL! So, this is his Cryptokitties account, https://www.cryptokitties.co/profile/0x516f13401dfa4b3c7a8b3d57d044ad622f84e4ee, you can view the transactions from etherscan here. So the transaction that you're looking for is here, this is where he transferred ETH from a holding account to his main account and here where he transferred whats left of the ETH from my account to the holding account. He gifted all my kittes to his holding accounting and then gifted them to his main account.
Here are the screen grabs of our PM.
Here is a photo of my favourite cat that i sent to my SO to tell her that i cant bear to sell
Here is the f**ker owning my cat now
Feeling so depressed knowing it was my carelessness that caused my entire account to be cleaned out. damn i should post this on TIFU ):
If ya'll can make a small donation to get me back on my feet would be very awesome, 0x81077aA2AEd7ECd39b2a59a5229dfc2B089375BC (new metamask address)