Title: A signature scammer/account buyer/farmer Post by: coolcoinz on November 13, 2018, 11:20:03 AM Just putting the facts here for you to evaluate.
First spotted: https://bitcointalk.org/index.php?topic=2020019.msg47826624#msg47826624 What I found that confirms it (not using archive because their posts are quoted by other people in those threads, he won't be able to delete them): uszaty43 https://bitcointalk.org/index.php?action=profile;u=326943 used to post in Polish. Jakby byl to shit to powiedzialbym ze po co kupowac gowno jak mozna samemu naprodukowac... Forma pytania to inna kwestia.Zachecam do zaznajomienia sie z WP.Sama perspektywa Anona to pewny zarobek 500-1000% moze i wiecej.Jakoze to watek ogolnodostepny preferowanym jezykiem jest angielski,wiec rowniez zachecam do poslugiwania sie nim tak aby wszyscy mogli uczestniczyc w dyskusji. Let me apologise guys ,I wrote some info about Nav@Waldozaur12 and quickly come back into english;) In October 2017 he sold this account and wasn't tagged. https://bitcointalk.org/index.php?topic=2074472.msg20726055#msg20726055 and joined a signature campaign right away. https://bitcointalk.org/index.php?topic=2255703.msg22828542#msg22828542 Did not use Polish since then. hahahafr used to post in French. Bonjour à tous, Hypothèse : je vends pour 1000 euros de bitcoins, je rapatrie l'argent par virement SEPA sur mon compte bancaire. Question : je déclare ces 1000 euros dans la case 5KU ? ou bien uniquement la case 5KY ? ou bien je met 1000 dans la case 5KU et 1000 aussi dans la case 5KY ? Gap in posting November 2016 - October 2017 No French post under new management, most likely hacked. minersday https://bitcointalk.org/index.php?action=profile;u=229588 Post gap from August 2015 to March 2017 GreatOrchid https://bitcointalk.org/index.php?action=profile;u=364362 Post gap November 2016 - March 2017 Most likely hacked along with minersday Now for the good part. All above accounts stopped posting on the same day. July 21, 2018 All above accounts joined the same campaign on the same day November 11, 2018 All above accounts did the same mistake when joining. They copied the personal text along with the word "personal text" All above accounts were inactive since their campaign application. https://i.imgur.com/gHxVI3B.jpghttps://i.imgur.com/BQ2DUm9.jpg There are some other posters that also did the mistake in text, and are most likely owned by the same person. dead_m92 https://bitcointalk.org/index.php?action=profile;u=228551 Anonylz https://bitcointalk.org/index.php?action=profile;u=153613 shursight https://bitcointalk.org/index.php?action=profile;u=294993 I'll check their posts and add more later. Title: Re: A signature scammer/account buyer/farmer Post by: Hexah on November 13, 2018, 01:50:30 PM Seems pretty valid but I guess it's better that I archived the buy and sell of uszaty43 in here:
Archived (https://archive.st/archive/2018/11/bitcointalk.org/ls04/) Better to archive everything you find. Title: Re: A signature scammer/account buyer/farmer Post by: coinlocket$ on November 13, 2018, 03:40:54 PM As told to op This is everything I've found.
I'm almost 100% sure that some of them are alts (probably 5-6) but I can't proof it, since he is "clever" and he hides himself. One of them Is a 100% cheater.
Title: Re: A signature scammer/account buyer/farmer Post by: The Sceptical Chymist on November 13, 2018, 03:50:42 PM In October 2017 he sold this account and wasn't tagged. I just scanned this thread here and haven't looked into it fully, but this is more evidence that there was an influx of shitposters/bounty spammers in roughly October 2017, and there seems to have been a big hack before then or some serious account sales as well as a lot of new members joining in order to spam for bounties.<snip> Gap in posting November 2016 - October 2017 <snip> Post gap from August 2015 to March 2017 <snip> Post gap November 2016 - March 2017 This guy just got banned here (https://bitcointalk.org/index.php?topic=5068557.0) (don't know what for yet), and he registered in Oct. 2017, and I've seen a few others like that. Seems strange to me. Anyway, I'm going to go back and read the OP here a bit closer. Title: Re: A signature scammer/account buyer/farmer Post by: coinlocket$ on November 13, 2018, 04:31:32 PM PROFILE: shursight (https://bitcointalk.org/index.php?action=profile;u=294993)
ETH: https://bitcointalk.org/index.php?topic=3132539.msg32410077#msg32410077 ARCHIVE: https://web.archive.org/web/20181113152713/https://bitcointalk.org/index.php?topic=3132539.msg32410077 This is can be a bounty abuser, but he probably used account hijack (yes it worked with some tokensuite's managers, they don't look at anything). Since he used random bitcointalk's profiles I can't find alts but because we have a transaction with others people from the spreadsheet we can suppose he is an abuser. here the account Code: 0x0AC52c015D298422FEEd47F233918f9c58ab4Fb4 https://etherscan.io/address/0x0AC52c015D298422FEEd47F233918f9c58ab4Fb4#tokentxns https://puu.sh/C19ig/4738d225ef.png https://docs.google.com/spreadsheets/d/1q6V0_DXmOOoawUlkGfGjUwVowwjqhBksbgwcthwmej8/edit#gid=1827284077 Wort of redtrust? Call of DTs. Around 5 others accounts posted here: https://bitcointalk.org/index.php?topic=5068434.msg47867278#msg47867278 have a very similar line of shitposting, joining same campaigns and "btcwallet" but found 0 guilty transactions so far, they are probably alts, not all of them, some but I can't prove it. Title: Re: A signature scammer/account buyer/farmer Post by: coolcoinz on November 13, 2018, 09:27:55 PM As told to op This is everything I've found. Thanks for help. I'm almost 100% sure that some of them are alts (probably 5-6) but I can't proof it, since he is "clever" and he hides himself. One of them Is a 100% cheater. <snip> It's my belief that linking addresses is only one of many things that can point to an abuser. People are known to receive red trust for as little as being in control of a bought account, or trying to sell an account. I'm sure that all these accounts are controlled by the same person, who is most likely involved in the purchase of uszaty43 and hacking of hahahafr. These 2 accounts offer probably the most damning evidence since they were local posters before being hacked/bought and stopped right after, at the same time completely changing their style of posting. They both synched, begun taking breaks from posting at the same time, and even joining the same campaigns on the same day. Under normal circumstances, the campaign member would start posting after getting in, wouldn't he? None of these accounts have made a single post since applications. I don't see them trying to deny anything. This person most likely owns more accounts and is posting for many different campaigns. This is the reason why he recently got sloppy and used too many accounts in one campaign, probably to increase his chance of getting in, or hedge against the possibility of a campaign he's currently in ending/him being kicked. There's also one more interesting thing. It's not a group of farmers, but a single person. His posts are identical, and there are some mistakes that keep occuring. Now that I've noticed it, I can find other accounts under his management with ease. Probably 10 min of digging per account would be enough to know if it's him. Title: Re: A signature scammer/account buyer/farmer Post by: coinlocket$ on November 29, 2018, 03:31:15 PM Some updates:
GreatOrchid Transaction 13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3 https://www.blockchain.com/btc/tx/13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3 Addresses 1BFg584AWU8CbMjJVVKSJdWHDU3PmdiBkc 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU uszaty43 Transaction c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e https://www.blockchain.com/btc/tx/c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e Addresses 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU hahahafr Transaction 30b838740ab2c80c3d2fbb4ddf65ae650cc465b33be424f3b351f0d0c1f72924 https://www.blockchain.com/btc/tx/30b838740ab2c80c3d2fbb4ddf65ae650cc465b33be424f3b351f0d0c1f72924 Addresses 1N71xosjZFPGZATHUJ7Pkj5J7bb3nyuM4z 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL hahahafr Transaction 1cf1645a2a1db6ecac803eb611e51d0b05eba301f4e285c4295a8511158c7dfa https://www.blockchain.com/btc/tx/1cf1645a2a1db6ecac803eb611e51d0b05eba301f4e285c4295a8511158c7dfa Addresses 1N71xosjZFPGZATHUJ7Pkj5J7bb3nyuM4z 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL Anonylz Transaction c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e https://www.blockchain.com/btc/tx/c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e Addresses 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL Yes this can prove nothing but, the odds that these address are linked without connections so clearly are very low. Title: Re: A signature scammer/account buyer/farmer Post by: coolcoinz on December 01, 2018, 06:27:25 PM Yes this can prove nothing but, the odds that these address are linked without connections so clearly are very low. It can prove a lot if you take other things into account. We have accounts that belonged to different people in the past and were sold in the same year. They applied into signature campaigns, started posting in a very similar manner, making the same spammy 1-2 sentence posts with the same mistakes. Next, they took exactly the same break in posting, followed by waking up on the same day and applying to the same signature campaign. They even made the same mistake in personal text when they applied. Now, you've found proof of them sending coins to the same address. On top of it all, the accounts that we called out did not even try to explain the coincidences. GreatOrchid, hahahafr and uszaty43 are not posting anymore. Title: Re: A signature scammer/account buyer/farmer Post by: Veleor on March 30, 2019, 05:46:54 AM <...> uszaty43 https://bitcointalk.org/index.php?action=profile;u=326943 used to post in Polish. Jakby byl to shit to powiedzialbym ze po co kupowac gowno jak mozna samemu naprodukowac... Forma pytania to inna kwestia.Zachecam do zaznajomienia sie z WP.Sama perspektywa Anona to pewny zarobek 500-1000% moze i wiecej.Jakoze to watek ogolnodostepny preferowanym jezykiem jest angielski,wiec rowniez zachecam do poslugiwania sie nim tak aby wszyscy mogli uczestniczyc w dyskusji. Let me apologise guys ,I wrote some info about Nav@Waldozaur12 and quickly come back into english;) In October 2017 he sold this account and wasn't tagged. https://bitcointalk.org/index.php?topic=2074472.msg20726055#msg20726055 and joined a signature campaign right away. https://bitcointalk.org/index.php?topic=2255703.msg22828542#msg22828542 Did not use Polish since then. <...> Another topic where uszaty43 was selling account: https://bitcointalk.org/index.php?topic=1835356 (Archive (http://archive.li/aMb0O)) GreatOrchid Transaction 13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3 https://www.blockchain.com/btc/tx/13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3 Addresses 1BFg584AWU8CbMjJVVKSJdWHDU3PmdiBkc 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU uszaty43 Transaction c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e https://www.blockchain.com/btc/tx/c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e Addresses 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU <...> Profile GreatOrchid has been banned: https://bpip.org/profile.aspx?p=GreatOrchid Title: Re: A signature scammer/account buyer/farmer Post by: coolcoinz on April 05, 2019, 05:45:11 PM Profile GreatOrchid has been banned: https://bpip.org/profile.aspx?p=GreatOrchid Good find, thanks. He doesn't seem to care and is avoiding the ban by still using his other accounts: livingfree https://bitcointalk.org/index.php?topic=5127908.msg50465653#msg50465653 minersday https://bitcointalk.org/index.php?topic=5128198.msg50463972#msg50463972 Anonylz https://bitcointalk.org/index.php?topic=5089180.msg50465860#msg50465860 Title: Re: A signature scammer/account buyer/farmer Post by: coinlocket$ on April 02, 2020, 09:37:18 PM Just adding: http://archive.vn/wip/m5wVV
Main thread: https://bitcointalk.org/index.php?topic=5125884.new#new Let's see if that thread will stay of he will replies. |