Commit Graph

311 Commits

Author SHA1 Message Date
633a2e16bb sync: auto-sync from HOWARD-HOME at 2026-06-16 00:24:18
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-16 00:24:18
2026-06-16 00:24:27 -07:00
0fa2861162 sync: auto-sync from HOWARD-HOME at 2026-06-16 00:03:10
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-16 00:03:10
2026-06-16 00:03:21 -07:00
791a6c07d8 sync: auto-sync from HOWARD-HOME at 2026-06-15 23:43:51
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-15 23:43:51
2026-06-15 23:44:00 -07:00
794059c8cc sync: auto-sync from HOWARD-HOME at 2026-06-15 23:34:02
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-15 23:34:02
2026-06-15 23:34:11 -07:00
ac88b59405 sync: auto-sync from HOWARD-HOME at 2026-06-15 23:24:56
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-15 23:24:56
2026-06-15 23:25:05 -07:00
6daddefa5b sync: auto-sync from HOWARD-HOME at 2026-06-15 23:04:23
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-15 23:04:23
2026-06-15 23:04:31 -07:00
1bad793caf sync: auto-sync from HOWARD-HOME at 2026-06-15 22:06:13
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-15 22:06:13
2026-06-15 22:06:20 -07:00
51659fa60b sync: auto-sync from HOWARD-HOME at 2026-06-15 21:59:42
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-15 21:59:42
2026-06-15 21:59:51 -07:00
c7f92d186a sync: auto-sync from HOWARD-HOME at 2026-06-15 20:40:48
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-15 20:40:48
2026-06-15 20:40:59 -07:00
29b749bc6b sync: auto-sync from HOWARD-HOME at 2026-06-15 19:25:09
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-15 19:25:09
2026-06-15 19:25:17 -07:00
a51c6f0712 sync: auto-sync from GURU-5070 at 2026-06-15 14:43:03
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-15 14:43:03
2026-06-15 14:43:19 -07:00
0a37a7daef sync: auto-sync from GURU-5070 at 2026-06-15 11:20:33
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-15 11:20:33
2026-06-15 11:20:56 -07:00
227f871bc7 sync: auto-sync from Mikes-MacBook-Air.local at 2026-06-14 08:36:19
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-06-14 08:36:19
2026-06-14 08:36:21 -07:00
6f9520ff35 sync: auto-sync from GURU-5070 at 2026-06-14 06:29:50
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-14 06:29:50
2026-06-14 06:30:07 -07:00
e878a529f6 sync: auto-sync from GURU-5070 at 2026-06-14 05:40:26
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-14 05:40:26
2026-06-14 05:40:44 -07:00
b5f9e35183 sync: auto-sync from GURU-5070 at 2026-06-14 05:33:01
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-14 05:33:01
2026-06-14 05:34:46 -07:00
f7045ecda1 sync: auto-sync from GURU-5070 at 2026-06-13 20:21:10
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-13 20:21:10
2026-06-13 20:21:37 -07:00
609a6acaf2 sync: auto-sync from GURU-5070 at 2026-06-13 15:49:09
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-13 15:49:09
2026-06-13 15:49:30 -07:00
76c8682346 sync: auto-sync from HOWARD-HOME at 2026-06-12 22:34:17
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-12 22:34:17
2026-06-12 22:34:27 -07:00
ed40bc8090 sync: auto-sync from HOWARD-HOME at 2026-06-12 17:02:02
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-12 17:02:02
2026-06-12 17:02:16 -07:00
25de6dc8b9 sync: auto-sync from Mikes-MacBook-Air.local at 2026-06-12 13:52:32
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-06-12 13:52:32
2026-06-12 13:52:33 -07:00
f745182a60 chore: clean up tracked tmp/ scratch; graduate ix-server audit + scanner
Removed 44 scratch files that got committed into the tracked root tmp/
(grok/gemini second-opinion rounds r1-r7, rmm-diag-* dumps, ns*.out
captures, and throwaway helpers jssh.py/addnpmnat.php/delnpmnat.php/
cleanup.sh/fix_ws_agent.py) — all from the resolved RMM command_type
'cmd' investigation, already captured in session logs + the gururmm wiki.

Graduated the three non-scratch artifacts per TEMP_GRADUATION.md:
- tmp/site-scan.sh -> scripts/cpanel-wp-site-scan.sh (+ header)
- tmp/ix-site-audit.md -> clients/internal-infrastructure/reports/2026-03-16-ix-server-cpanel-wp-audit.md
- tmp/ix-scan-results.txt -> clients/internal-infrastructure/reports/2026-03-16-ix-server-scan-results.txt

tmp/ is now empty.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-12 06:13:07 -07:00
557cd25e09 sync: auto-sync from GURU-5070 at 2026-06-12 05:57:38
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-12 05:57:38
2026-06-12 05:58:05 -07:00
47ab1d2593 sync: auto-sync from GURU-5070 at 2026-06-11 11:20:07
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 11:20:07
2026-06-11 11:20:20 -07:00
09f2a5ad3f sync: auto-sync from GURU-5070 at 2026-06-11 08:41:42
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 08:41:42
2026-06-11 08:41:56 -07:00
665afd6d1d sync: auto-sync from GURU-5070 at 2026-06-11 08:22:42
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 08:22:42
2026-06-11 08:22:55 -07:00
f03cdc4360 sync: auto-sync from GURU-5070 at 2026-06-11 08:02:42
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 08:02:42
2026-06-11 08:02:55 -07:00
09e1d45e20 sync: auto-sync from GURU-5070 at 2026-06-11 08:00:04
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 08:00:04
2026-06-11 08:00:19 -07:00
72e0e0a28e sync: auto-sync from HOWARD-HOME at 2026-06-10 20:21:07
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 20:21:07
2026-06-10 20:21:23 -07:00
417a2dea07 sync: auto-sync from GURU-5070 at 2026-06-10 20:18:48
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-10 20:18:48
2026-06-10 20:19:05 -07:00
Winter Williams
4c436743d1 sync: auto-sync from GURU-BEAST-ROG at 2026-06-10 15:47:04
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-10 15:47:04
2026-06-10 15:47:12 -07:00
6eea89c6bc sync: auto-sync from GURU-5070 at 2026-06-10 15:18:03
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-10 15:18:03
2026-06-10 15:18:16 -07:00
7a0de133d4 sync: auto-sync from HOWARD-HOME at 2026-06-10 14:34:34
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 14:34:34
2026-06-10 14:34:43 -07:00
ea50eb1ad5 sync: auto-sync from HOWARD-HOME at 2026-06-10 14:04:01
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 14:04:01
2026-06-10 14:04:10 -07:00
767ec285e6 sync: auto-sync from HOWARD-HOME at 2026-06-10 13:25:54
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 13:25:54
2026-06-10 13:26:10 -07:00
10d471a639 sync: auto-sync from HOWARD-HOME at 2026-06-10 13:15:14
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 13:15:14
2026-06-10 13:15:27 -07:00
e95940388a sync: auto-sync from HOWARD-HOME at 2026-06-10 12:28:50
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 12:28:50
2026-06-10 12:29:01 -07:00
Winter Williams
041a6b4bc6 sync: auto-sync from GURU-BEAST-ROG at 2026-06-10 10:18:35
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-10 10:18:35
2026-06-10 10:18:40 -07:00
Winter Williams
73e9309892 sync: auto-sync from GURU-BEAST-ROG at 2026-06-10 10:09:59
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-10 10:09:59
2026-06-10 10:10:08 -07:00
1e7d148580 sync: auto-sync from GURU-5070 at 2026-06-09 17:27:28
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-09 17:27:28
2026-06-09 17:28:17 -07:00
46e58ef7b5 sync: auto-sync from HOWARD-HOME at 2026-06-09 17:08:26
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-09 17:08:26
2026-06-09 17:08:39 -07:00
88a800ad93 sync: auto-sync from GURU-5070 at 2026-06-09 16:18:12
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-09 16:18:12
2026-06-09 16:18:52 -07:00
c97c91aba7 sync: auto-sync from GURU-5070 at 2026-06-09 10:52:48
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-09 10:52:48
2026-06-09 10:53:34 -07:00
19b0e50ac4 sync: auto-sync from HOWARD-HOME at 2026-06-09 10:33:12
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-09 10:33:12
2026-06-09 10:33:25 -07:00
7b762623ff sync: auto-sync from GURU-5070 at 2026-06-09 10:13:37
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-09 10:13:37
2026-06-09 10:14:16 -07:00
ee012d08c7 report(kittle): IC3 complaint filed - submission ID aa2ef504... (2026-06-09)
IC3 filed 2026-06-09 12:46 EST. Stamped the submission ID on the report; bank freeze letters
(Truist/First State/Chase) updated with the IC3 # and real Kittle/ACG contacts - now turnkey to send.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-09 09:49:35 -07:00
75a0d2ef53 report(kittle): fraud PREVENTED - City stopped payment, Foam Factory confirmed mule
Per Kittle bookkeeper (2026-06-09): City of Tucson stopped the payment before any funds reached
the attacker (no completed loss; attempted $130k+). Kittle confirms no Foam Factory relationship,
confirming both receiving accounts are mules. Also: Ken un-restricted from sending (Outbox/Drafts
verified empty first); Lori was never restricted.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-09 09:15:07 -07:00
14c67db3bb report(kittle): fold confirmed invoice amounts into IC3 report
Inv #31468 $123,776.75 (confirmed), Inv #31400 ~$8,818, Inv #31453 $41,231 (open);
total identified exposure $130,000+ since the ACH change redirects all City->Kittle payments.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-09 08:04:36 -07:00
3f96f5a52d report(kittle): IC3 BEC/ACH-fraud complaint package
Consolidated FBI IC3 report for the Kittle payment-redirection fraud: victim/payer info,
fraudulent mule accounts (Truist 053201607/1410020505238; Foam Factory First State + Chase),
targeted City of Tucson payments (Inv #31400 ~$8,818 6/9 EFT; Inv #31468 $123,776.75),
attacker IPs/domains/phone, full timeline, and evidence inventory. Evidence package assembled
to Downloads/Kittle-IC3-Package (report + 2 ACH form PDFs + recovered emails + 171-event audit CSV).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-09 07:52:24 -07:00
62255a86f3 sync: auto-sync from GURU-BEAST-ROG at 2026-06-08 18:57:41
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-08 18:57:41
2026-06-08 18:57:46 -07:00