u/ThiccLatinaBabe

I was checking the website (felzenergy.com) of an influencer who recently passed away (Joe Felz) and had been researching “free energy.”

The site currently shows a fake Cloudflare-style verification that tells visitors to run a PowerShell command to prove they’re human.

I pulled the payload without executing it. The first stage downloads another blob from the same IP, allocates RWX memory with VirtualAlloc, copies the payload into memory, and runs it with CreateThread.

So the chain is basically:

fake verification -> PowerShell -> downloaded shellcode -> RWX memory -> CreateThread

I have not detonated the second stage. I also have no evidence this has anything to do with his death or research; the site may simply have been compromised.

If anyone is able to check it out and report back on what that is, that'd be much appreciated.

I was checking the website (felzenergy.com) of an influencer (Joe Felz) who recently passed away and had been researching “free energy.”

The site currently shows a fake Cloudflare-style verification that tells visitors to run a PowerShell command to prove they’re human.

I pulled the payload without executing it. The first stage downloads another blob from the same IP, allocates RWX memory with VirtualAlloc, copies the payload into memory, and runs it with CreateThread.

So the chain is basically:

fake verification -> PowerShell -> downloaded shellcode -> RWX memory -> CreateThread

I have not detonated the second stage. I also have no evidence this has anything to do with his death or research; the site may simply have been compromised.

If anyone is able to check it out and report back on what that is, that'd be much appreciated.

https://preview.redd.it/zmnhmti687ih1.png?width=1108&format=png&auto=webp&s=1dcb632d5fdad0e68d58f61b7863db76b91eda52

https://preview.redd.it/mrpwxv7787ih1.png?width=996&format=png&auto=webp&s=8fc932ccbac3b70097b24fbdfc42d316bbfe55d9

I’m looking for some advice because I’m not sure which account is worth sticking with long-term.

I have two Guild Wars 2 accounts:

• An old ArenaNet account that I created over 10 years ago. It has my original characters, veteran/birthday rewards, and I remember having some exclusive welcome items or skins.
• A newer Steam account where I’ve bought the expansions and have been playing more recently.

From what I’ve learned, it seems accounts can’t be merged, and expansions purchased on Steam don’t transfer to ArenaNet accounts.

I’m trying to decide whether to:

1. Keep playing on the Steam account and transfer over as much gold and as many tradeable items as possible from the old account.
2. Go back to the old ArenaNet account and rebuy the expansions so I keep all the veteran rewards, birthday gifts, and account history.

For those of you who have been in a similar situation, what would you do?

Are 10+ years of birthday rewards and veteran account progression valuable enough that you’d rebuy the expansions, or would you just stay on the Steam account?

Also, are there any account-bound rewards or older exclusive items that are easy to overlook but would make the old account significantly more valuable?

I’d appreciate any opinions before I commit to one account.