~ OpenSea ~
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⣴⣶⠾⠿⠿⠯⣷⣄⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣼⣾⠛⠁⠀⠀⠀⠀⠀⠀⠈⢻⣦⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⣾⠿⠁⠀⠀⠀⢀⣤⣾⣟⣛⣛⣶⣬⣿⣆⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣾⠟⠃⠀⠀⠀⠀⠀⣾⣿⠟⠉⠉⠉⠉⠛⠿⠟⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⡟⠋⠀⠀⠀⠀⠀⠀⠀⣿⡏⣤⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⣠⡿⠛⠀⠀⠀⠀⠀⠀⠀⠀⠀⠙⣷⡍⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣀⣀⣤⣤⣤⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⣠⣼⡏⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠙⠷⣤⣤⣠⣤⣤⡤⡶⣶⢿⠟⠹⠿⠄⣿⣿⠏⠀⣀⣤⡦⠀⠀⠀⠀⣀⡄
⢀⣄⣠⣶⣿⠏⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠉⠓⠚⠋⠉⠀⠀⠀⠀⠀⠀⠈⠛⡛⡻⠿⠿⠙⠓⢒⣺⡿⠋⠁
⠉⠉⠉⠛⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠉⠁⠀
<--------------------------------------------------------------->
| #00 -- Introduction |
<--------------------------------------------------------------->
Credits:
* https://pwnforums.st/User-retard
* https://pwnforums.st/User-pine
Meet Simon Carreras, father, spouse, hardworking american, but most importantly, ransomware operator and serial scammer.
From being busted for credit card fraud to scamming skids for two figures, being on the run in Florida, larping 0days, doing ransomware attacks on the US government and begging for crypto on BreachForums (right before getting drained).
Our guest was well acquainted with crime before the start of his online presence, being arrested in 2006 for fraud and grand theft.
One may think than marrying his blob of a wife, Beverly Louise, would change this man's actions, but he moved forward in the path of crime, despite it bearing no fruit due to his profound mental retardation.
Unfortunately, this tragic excuse of a man was far from done, once again arrested back in 2016, and on the run in 2025, even getting featured in a Fugitive Friday! (https://www.instagram.com/p/DI3tcuXs_hZ)
Additionally, he let the domain he was using for his electrical company's email expire which happened to have a Microsoft account registered under it, so we were able to register the domain and gain access to his OneDrive as well as his Outlook which is full of his and his son's screenshots, personal photos, and sensitive emails. The screenshots his son took have not been included in this paste (they were mostly just of Roblox and Fortnite anyway).
Here are the results of his actions.
Note:
After this document was compiled, we got further information confirming that not only he was the scammer we knew him as, but also sexually abused his step-daughter, to ensure the victim's privacy, proof is not going to be added in the public release of this dox.
<--------------------------------------------------------------->
| #01 -- Personal Information |
<--------------------------------------------------------------->
Name: Simon Peter Carreras
Aliases:
* PhineasFisher
* PhineasFisherman
* NyxVector
* blinkzk
* DrunkHacker
* DEMONRTZ
* BlackOps
* Traador
* dmacheats
* EL33TACID
Age: 42
Gender: Male
Date of Birth: 1984-01-12
SSN: 595-24-3729
Bank info:
* VyStar Credit Union, REGULAR CHECKING ACCOUNT, ******1086
Addresses:
* 6036 George Wood Ln E, Jacksonville, FL 32244
* 28 Pope Ln, Palm Coast, FL 32164
Companies:
* Carreras Electrical LLC
- Dissolved 2023-05-23 (https://simon.island.st/documents/dissolved.pdf)
- Which may have to do with STEVEN M REESER vs CARRERAS ELECTRICAL, LLC
* Carreras Electrical Services LLC
- https://www.bizprofile.net/fl/jacksonville/carreras-electrical-services-llc
- Dissolved as well
* Serv-all
- https://www.myfloridalicense.com/LicenseDetail.asp?id=4ED13255BDD9A9593A006B5457B9993A
* SPC ELECTRIC INC.
- https://www.flcompanyregistry.com/companies/spc-electric-inc (https://archive.ph/DRPBR)
- https://www.bizprofile.net/fl/palm-coast/spc-electric-inc
- Registered under his wife's name LOL
IPs:
* 97.103.240.123
Cryptocurrency wallet addresses:
* BTC: bc1qnvruh3cecxypvhq30zqtz9209gtpnkdrsmcqmk
* DOGE: DGJM6ZjMQ2iMVdXn6GeQ7VErFNotjNjgPB
* ETH: 0xfDD806a685EE3A31cE92253B6911C499b3a5eb6e
* SOL: GZevcRWhV2eH15yrwzcENi9LwuKJb56QPE8cr14JATFF
<--------------------------------------------------------------->
| #02 -- Family |
<--------------------------------------------------------------->
Mother: Bienvenida G. Carreras | Age: Deceased (64 at date of death; 2020-02-11) | DOB: 1955-08-25
Father: Irvin Carreras (Simon also has a brother of the same name) | DOB: 1952-04-17
Wife:
* Name: Beverly Louise Carreras
* Addresses:
- 114 Park Cir, Palatka, FL 32177
* Facebook: https://www.facebook.com/beverly.louise.129
* Emails:
- [email protected]
- Used on:
* Poshmark
- Username: beverly_louise
- Last seen: 2025-12-31
- https://poshmark.com/closet/beverly_louise (https://archive.ph/t9XqB)
<--------------------------------------------------------------->
| #03 -- Online Presence |
<--------------------------------------------------------------->
Projects (All AI generated, lol):
* https://nightmare.st | 199.250.251.182:443
* BlackOps:
- Domains: blackops.is (45.156.87.193:3000), blackops-dark.com
Forum profiles:
* https://breachforums.as/User-PhineasFisherman
* https://breachforums.as/User-DrunkHacker (previously User-blinkzk)
* https://darkforums.me/User-blinkzk
* https://patched.to/User/drunkhacker
* https://patched.to/User/demonrtz
Session:
* 0526087a4b7a4cf960f37ac74d685ec935577183717fb39294cd660ce48e6aff05
* 0514b8e791ff663874cb8eb221b96326963a34d869c16dcd96a7e7952db5a9c707 (old)
Signal:
* Blinkzk.73
* BlinkZK.54
Telegram:
* @drunkhacker (deleted) | ID: 8104426169
- Display names:
* 2026-02-20 > Traa dor
* 2025-07-01 > Traado
* 2025-07-01 > xқOrxKorX
* 2025-06-26 > EL33TΑCIＤ
* 2025-04-05 > DrunkHacker
- Past usernames: @Traadorx, @TeamBlackOps_Traador, @x_kOr_x, @EL33T_ACID
- Messages sent in groupchats: https://simon.island.st/8104426169_messages.txt
* @blinkzkx (deleted) | ID: 7697665852
- Groups:
* @LogsChatt (https://t.me/LogsChatt) Ads group (Apr 29, 2025)
* @MarlinSalfishVerizon (https://t.me/MarlinSalfishVerizon) Verizon Pixel 1/XL Bootloader Research (Feb 24, 2025)
* @rastacloudlogs (https://t.me/rastacloudlogs) RASTA CLOUD LOGS CHAT (Jan 16, 2025)
* @mortediam (likely deleted)
Facebook:
[1] https://www.facebook.com/simon.carreras.2025
[2] Simon Carreras
- Email: [email protected]
- Phone: +1 (912) 546-0906
Twitter:
* https://x.com/bloodandbounty
* https://x.com/simon_carreras
* https://x.com/moneyfast123
Bugcrowd: https://bugcrowd.com/h/BlinkZK84 (recently deleted or made inaccessible, no archives D:)
Linkedin:
* https://www.linkedin.com/in/simon-carreras-a48b23228
* https://www.linkedin.com/in/simon-carreras-800364282
* https://za.linkedin.com/company/black-diamond-projects
GitHub:
* https://github.com/BlackOps-IS (all AI generated)
* https://github.com/SimonCar84
Fiverr:
* https://www.fiverr.com/traador_
- For only $15, Simon will do a quick cybersecurity vulnerability scan.
- Performed by a Security+ certified professional.
CashApp (using his Wife's name under "BlackOpsHackers", lol):
- Name: Beverly Carreras
- Phone: +1 (912) 548-5778
- https://cash.app/$BlackOpsHackers
Emails:
* [email protected] | Used on: BreachForums
* [email protected]
* [email protected]
* [email protected]
- Recovery: [email protected]
- Phone: +1 (912) 796-9635
- Used on:
* BreachForums
* TikTok
- ID: 7519194338926265399
- https://www.tiktok.com/@dmacheatsgg
* AirBnB
- Phone: +1 (407) 704-0408
* [email protected] | Used on: Twitter
* [email protected] | Used on: Twitter
* [email protected]
- Recovery: [email protected]
- Phone: +1 (912) 548-5778
[email protected]
- Name: Eric Zak
- Recovery: [email protected]
* [email protected]
- Used on:
* Quora
- ID: 1682565557
- https://www.quora.com/profile/Simon-Carreras-1
* GitHub
- ID: 181609809
- https://github.com/SimonCar84
* MyFitnessPal
- ID: 274620003200125
- https://www.myfitnesspal.com/profile/SimonCarreras
* Google Maps
- Google ID: 107643631231453003579
- Reviews: https://www.google.com/maps/contrib/107643631231453003579/reviews
<--------------------------------------------------------------->
| #04 -- Information from Stealer Logs |
<--------------------------------------------------------------->
Hardware:
* CPU: AMD Ryzen 7 7800X3D
* GPU: NVIDIA GeForce RTX 4080
* RAM: 64 GB
Passwords:
* Mateo0112$
* Ihateyou2$
* Ikeash32!
* Asshole0112
* Ilovebeverly0112$
* Ilovebeverly0112
* 2PMuqaR!:QCxNET
* Whereudisud0112$
* 0Wz6yM7tsVcpPS
* Bradyp1026
* Ilovemateo0112
<--------------------------------------------------------------->
| #05 -- Images |
<--------------------------------------------------------------->
File list: https://simon.island.st
Drivers License:
* https://simon.island.st/DriversLicense_SSN.jpg
* https://simon.island.st/DriversLicense_SSN_turned.jpg
* https://simon.island.st/holding_dl.jpeg
- If you look in the background of this image there seems to be what appears to be a red bra, we hope, for the health of his marriage, that it's his wife's.
Screenshots from OneDrive: https://simon.island.st/nyx_screenshots
Simon struggling to even upload a plugin to MyBB: https://simon.island.st/nyx_screenshots/Screenshot%202025-03-31%20194130.png
Simon looking himself up: https://simon.island.st/nyx_screenshots/Screenshot%202025-04-23%20152107.png
Pine impersonator on Simon's failed forum???: https://simon.island.st/nyx_screenshots/Screenshot%202025-04-10%20183733.png
BF shoutbox PMs: https://simon.island.st/nyx_screenshots/Screenshot%202025-04-01%20233925.png
Documents from Simon's email: https://simon.island.st/documents
<--------------------------------------------------------------->
| #XX -- Misc |
<--------------------------------------------------------------->
What makes this character special is outside the realm of the information provided above, here we document some of the events that make him so unique.
Fugitive Friday
<--------------------------------------------------------------->
Long after his successive arrests in 2006-2007 and 2016, he found himself under the scope of law enforcement once again, this time for insurance fraud.
Notably, he was featured in Fugitive Friday, a program the Clay County Sheriff's office was running to ask for public help locating fugitives.
https://hoodline.com/2025/04/clay-county-sheriff-s-office-seeks-public-s-aid-in-locating-fugitive-simon-carreras-suspected-of-insurance-fraud-in-orange-park-fl
Patched scam report
<--------------------------------------------------------------->
He was first reported for scamming in the Patched forums, when, after claiming to hold PayPal funds, he refused to release around $150 from another user, which led to his ban both on Patched and BreachForums.
https://patched.to/Thread-scam-report-against-drunkhacker-150
DrunkHacker's first dox
<--------------------------------------------------------------->
He was previously identified in early 2025 by an user on BreachForums, the methods remain unknown, although it's probably one of the many pathways this retard allowed to happen.
https://breachforums.as/Thread-RESOLVED-5150-DrunkHacker-same-person
It also claims @5150 to be Simon, so far we have no proof of this.
Blinkzk ransomware operations
<--------------------------------------------------------------->
In mid-to-late 2025, not happy with being free after his earlier troubles with LE, he decided to start a ransomware campaign under the name Blinkzk, it came as a surprise, since the moniker blinkzk is directly linked to his IRL identity.
Slop infosec report:
https://cyberxtron.com/resources/blogs/targeted-ransomware-and-data-exfiltration-attacks-against-automotive-manufacturing-industry-6775
The targets were Royal Enfield, an indian motor company, and some institution under the government of Nevada, this latter incident leading to losses over $1.5M.
The OpenSea catastrophe
<--------------------------------------------------------------->
The avid reader may think the information presented so far is already outrageous, but Simon was far from done, and made the (in hindsight, unfortunate) decision of claiming to have an exploit on OpenSea, the decentralized NFT marketplace.
OpenSea is a marketplace for selling NFTs, anyone can list and buy, at the time of writing, it's the biggest NFT marketplace by a huge margin.
He claimed to be able to steal any NFT, ordering them for 0 ETH, such an exploit would be invaluable, instead, he decided to list it for $100K.
You don't have to be a genius to realize this is an obvious scam, and it wasn't long until both security researchers and forum users called out the scam:
- https://breachforums.as/Thread-RESOLVED-PhineasFisher-Attempted-100K-scam-through-fake-OpenSea-0-day
This event led to forum wide clowning and scrutiny on his accounts, and as you can see, it did not end too well for him.
⠀⠀⠀⠀⠀⠀⠀⠀⣾⣛⡿⡿⢽⣶⣤⣀⣀⣀⣀⣀⣀⣠⣴⣤⣄⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⢠⣿⢬⡭⢭⣭⣽⣗⡋⠈⠉⣿⣿⣿⣿⣿⣿⣿⣿⣷⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⡞⠁⣂⡠⠾⢛⣛⣀⣀⠀⠀⠙⠛⢿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣶⣤⣤⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⣟⠛⠃⡀⣀⡉⠀⠄⠄⠈⠉⠑⠢⣄⡉⠻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣷⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠈⠉⠉⠁⠀⠀⠀⢀⡀⠀⠀⠀⠀⠀⠈⠲⣍⣿⣿⣿⣿⣿⣿⣿⡉⠛⢿⣿⣷⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣰⢿⣿⣖⠿⣯⢆⠀⠀⢁⠞⠉⠙⠻⠿⣿⣿⣿⣿⣦⣀⣩⣿⣿⣷⡄⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⣤⡄⠀⠀⠀⢀⡴⠛⢓⡜⢿⣿⣆⢀⢿⠀⠀⢻⣄⡀⠀⠀⠀⢒⣛⣫⣿⡟⠻⢿⠿⣾⡻⣿⡆⠀⠀⠀⠀⠀⠀⠀
⢀⡀⢤⣤⢾⣿⣷⠄⢀⡠⠈⣄⠤⠀⠛⢾⣿⣿⣾⡎⠀⠀⠀⠈⠛⠒⠀⠀⠀⠀⠀⢈⣑⡒⠤⠄⣀⣈⣭⠗⠀⠀⠀⠀⠀⠀⠀
⡏⠈⠉⠉⣿⣿⣿⠍⠹⣿⡄⠉⠻⢶⣌⠀⠻⣿⣿⣿⣷⣶⣴⣾⣿⣿⣿⣿⣿⣿⣶⣶⣶⣶⣶⣦⣄⣒⣊⠀⠀⠀⠀⠀⠀⠀⠀
⠹⡦⡁⠀⠸⡟⣿⣤⢬⢿⠀⠀⠀⠀⠉⡷⣄⠙⠻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠿⣿⣿⣿⣿⣿⣶⣤⣤⣀⠀⠀
⠀⠙⢾⡴⠄⡀⢸⣿⡏⠁⠀⠀⠀⠀⠀⠈⠪⡓⢤⡈⠙⠻⢿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣷⣷⣿⣟⢵⣆⣈⣍⣿⣿⣿⣿⣷⡄
⠀⠀⠀⢷⣿⣿⣿⣿⣧⡀⠀⠀⠀⠀⠀⠀⠀⠈⠂⢌⡓⠢⢤⣉⠉⠛⠻⢿⣿⣿⣿⣿⣿⡿⠿⣿⣿⣿⠿⠛⠛⠛⠛⢛⣨⣿⡗
⠀⠀⠀⢰⣿⣿⣿⣿⣿⣿⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠑⠲⠤⠍⣒⡂⠀⢼⡉⠛⠁⠀⠀⠀⣠⠟⠻⠙⠉⠀⠁⣉⣁⡠⠔⠀
⠀⠀⠀⠸⣿⣿⣿⣿⣿⣿⣿⣿⣷⣤⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠁⠒⡇⠀⠀⠀⠀⠈⢀⡠⠔⠒⠀⠉⠉⠀⠀⠀⠀⠀
⠀⠀⠀⠀⢹⡘⢿⣿⣿⣿⣿⣿⣿⣿⣿⣶⣿⡿⣕⢆⠀⠀⠀⠀⠀⠀⠀⠀⠀⠳⠤⠄⠰⠤⠚⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⢳⡎⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣶⣺⡄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⢻⣿⣾⣿⣿⣿⣿⣿⣿⠿⢿⣿⣿⣿⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⢀⡶⠏⠉⠻⢿⣿⣿⣿⣿⣿⡷⠆⠙⠿⣿⣧⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠘⣄⠀⠀⠀⠈⣛⣿⡿⠟⢿⣷⣮⣸⡐⠛⣿⣷⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠙⠯⢒⣲⠄⠀⠀⠀⢄⣠⠀⠈⠿⣿⡀⠀⢻⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠈⠉⠉⠉⠐⠲⢌⣓⠤⣀⠀⠀⠀⠈⢳⠄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠑⠂⠭⠝⣒⠻⠟⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
- retard & pine