Are you unaware that when Maja discussed their identity and potential criminal fraud the response was "Yes, please try that :)"?
I'm curious if the specific challenge to identify them from the user in question matters. Perhaps the pentesting industry should take note.