Bitcoin Forum

Economy => Reputation => Topic started by: holydarkness on February 07, 2022, 12:39:15 PM



Title: [INVESTIGATION] - Possible Alt-cluster of Shillers and Bounty Abuse
Post by: holydarkness on February 07, 2022, 12:39:15 PM
I'm not sure if this is the rigth board, I've been undecided between accusations, reputation, or investigation board since I first stared my investigation of these accounts. Coincidentally, just when I'm about to create my thread and I looked around between the three boards, I saw Masulum made a similar-toned thread on this board, so hopefully this is the right one. Nonetheless, if this is the wrong board for my thread, kindly inform me and I'll move it to the more suitable board

I began to suspecing a foul play when I followed a thread managed by OddEvenBets.com (https://bitcointalk.org/index.php?action=profile;u=1074858) and saw some people there are showing an excessive interests, so I begin to dive and dig further into their history and found that --for the past few month's posts and ignoring older ones-- their posts are limited only to the threads managed by OddEvenBets.com. Such coincidence is rather uncanny and deserve a tad degree of suspicion, so I compiled a table to get an easier visual on tracking which thread is posted by who, and I got this:

https://i.ibb.co/DtSSLKf/Shill.jpg (https://ibb.co/wRxxY6h)

These users are posting on those thread and create a --presumably-- fake interests and supportive discussion like below, which will have a high possibility to mislead inexperinced users and newbies into thinkin that the project being discussed is very interesting:

I am looking for a new and potential project, so it will be difficult to get it listed on centralized exchanges. Do you have any suggestions for a project whose token is about to be listed on centralized exchanges? I want to hear your opinion.
Check out PKT which is listing on Bittrex soon. Not the Playkey shitcoin, but the new project called PKT Cash. I like the team and it is a mined proof of work coin, not a premined token.

Hello fellas, seems like I need your help. I want to go into the gaming sphere but there are so many projects. Can you advise anything new to follow because I want to participate at an early stage, to get a chance to win more rewards
Sure thing bro, now it is better to participate in metaverse systems. Just take a look at AffynOfficial, this is a mobile metaverse play-to-earn system and they have unique utility with the geo-based concept. The sale will be this month btw
Hmm, design looks cool, I like it. So as I got they will release soon and you will be able to purchase lands? It is interesting, I will check how to earn rewards while playing. Maybe I will purchase some tokens at the sale, min limit

To be sure that they're indeed are connected and I am not just paranoid, I dug into their addresses and found that they do transactions between each other. Not only that, while I searched for each of their address I also realized that they  frequently enrolled into same bounties, effectively cheating bounty by enrolling alts. Although I didn't spend time investigating whether these bounties are legit and/or also part of their shilling service or not, this is what it looks from bounty-side:

https://i.ibb.co/FbPBcx5/Bounty.jpg (https://ibb.co/SXLKHst)

As for the proof of connection through transactions are as follows:

Bordijo to Nahratsak (https://ethplorer.io/tx/0x4dba3d5249306c197da4b4a50180d66fd50a8118a5c55bf41072232abeb044d0) 88,732 IFEX
Bordijo to Kovinskii (https://ethplorer.io/tx/0x25c0bdb81ec13acd98dd77b413def3be5b7aae6b0793e2b8020bbffdb6fcd7fa) 425 JDC
Bordijo to Efarilino (https://ethplorer.io/tx/0x1b014d9603ac058c99169d7927708e4a88658033178d6a9c2cb6e7e7eeb82dbd) 425 JDC
Bordijo to Nahratsak (https://ethplorer.io/tx/0xfd81ddf954798f647ef340c7f3ee6e9ae6e434f64f4158d3d5bd769b7b1a846d) 425 JDC
Bordijo to Paypolitan (https://ethplorer.io/tx/0x221cf1997b8db9e6c4d6f78090d352adc27d4cebb83ef4c1f88319c67415121d) 425 JDC
Bordijo to Semehov (https://ethplorer.io/tx/0x2b40ceee05dac86bb5f6fbed12a0be333f63d907b0a684a04f8c993f6c62d36f) 425 JDC
Semehov to Kovinskii (https://ethplorer.io/tx/0x71eedb45ea93fe3daf9fb1a357f39ec05999161fce1b59c42aefd83d23e94d6c) 3.292 ETH
Kovinskii to Semehov (https://ethplorer.io/tx/0x141306ccfd5e70d3d420969fc41a0a97a483cac304625bb4c3e28edf353d8fe7) 3.3 ETH
Kovinskii to Nahratsak (https://ethplorer.io/tx/0xc6a02d9a4b8a557d94f7c2876bc320f08c60e1cef783c918a953c29367784154) 706 IFUM
Kovinskii to Nahratsak (https://ethplorer.io/tx/0xe7b4cf6ad938e6e4dd7e3afb68c97d1ac3b07df763d20825e59ab9e92224e55c) 2 ETH
Natrashak to Kovinskii (https://ethplorer.io/tx/0xa7f4b7a117c94b198f023e96653a73fadef45330bf4c46d35a1281938db42f5c) 0.1 ETH
Natrashak to Paypolitan (https://ethplorer.io/tx/0x5b7a1b5a189361d24fd19a5ec773f66155685d954dc57048b9c76ce4830911f8) 850 IDEX
Natrashak to Paypolitan (https://ethplorer.io/tx/0xd85e5f591afd3c3feaa3b66561ee4310b8adac92179e14f99816035698d707c6) 0.02 ETH
Semehov to Pwaytoken (https://ethplorer.io/tx/0x72c02d42c21dee9764c4eae768f35a7d302d947d476ff51f5b036e20415e167a) 0.043 ETH

https://i.ibb.co/R9yktL8/Transaction.jpg (https://ibb.co/Qfd3hs0)

Their profile and addresses:

Bordijo (https://bitcointalk.org/index.php?action=profile;u=2395536) 0x7f5889c07f310785648712a5075eccd333236043 (https://ethplorer.io/address/0x7f5889c07f310785648712a5075eccd333236043?from=srch)
Efarillino (https://bitcointalk.org/index.php?action=profile;u=2999204) 0x519AF31E48b5369eF620CaE9a071c558f3ae27fa (https://ethplorer.io/address/0x519AF31E48b5369eF620CaE9a071c558f3ae27fa)
GraphLinq Protocol (https://bitcointalk.org/index.php?action=profile;u=3205363) 0x73F79C3D797055633eAAE3815EA791cc628649a1 (https://ethplorer.io/address/0x73F79C3D797055633eAAE3815EA791cc628649a1)
Indacoin (https://bitcointalk.org/index.php?action=profile;u=259161) 0xBACc8802D9220fd2CEdeA6895c2B8fe9CE0bC03C (https://ethplorer.io/address/0xBACc8802D9220fd2CEdeA6895c2B8fe9CE0bC03C)
Kovinskii (https://bitcointalk.org/index.php?action=profile;u=2395235) 0x6EBf583dA147887ae29C9E5A41dCe6fF80DD3358 (https://ethplorer.io/address/0x6EBf583dA147887ae29C9E5A41dCe6fF80DD3358)
krg-token (https://bitcointalk.org/index.php?action=profile;u=2831836) 0xE64AB0063e8Bfc7E070331D0Ae67DA8A0AFFF663 (https://ethplorer.io/address/0xE64AB0063e8Bfc7E070331D0Ae67DA8A0AFFF663)
Legasches (https://bitcointalk.org/index.php?action=profile;u=2377035) 0x88358a49e2aA67D90f5782C5eADe459332EC4d33 (https://ethplorer.io/address/0x88358a49e2aA67D90f5782C5eADe459332EC4d33)
Nahratsak (https://bitcointalk.org/index.php?action=profile;u=2395487) 0x02A092F9fd80E9dD51cac1dc5BC69f42578f004b (https://ethplorer.io/address/0x02a092f9fd80e9dd51cac1dc5bc69f42578f004b)
Paypolitan (https://bitcointalk.org/index.php?action=profile;u=3177374) 0x53198FD6C78d112CB9D1D6a321080E10e11B5cb1 (https://ethplorer.io/address/0x53198FD6C78d112CB9D1D6a321080E10e11B5cb1)
Pwaytoken (https://bitcointalk.org/index.php?action=profile;u=3205332) 0x79BC80b5FD39DbFCB1Fd070e91b19e48c750a708 (https://ethplorer.io/address/0x79BC80b5FD39DbFCB1Fd070e91b19e48c750a708)
Semehov (https://bitcointalk.org/index.php?action=profile;u=2385374) 0x1C34d23367Ca0697417Fc15941593c6C717c8E98 (https://ethplorer.io/address/0x1C34d23367Ca0697417Fc15941593c6C717c8E98)
torex.one (https://bitcointalk.org/index.php?action=profile;u=2654784) 0xdA496b9f2A5E09F3E4f7E959505467e0d0B7f8D2 (https://ethplorer.io/address/0xdA496b9f2A5E09F3E4f7E959505467e0d0B7f8D2)
vetohov (https://bitcointalk.org/index.php?action=profile;u=2385368) 0x2c1Fd7Cc04E059967947104E441a9f8fb88Fc9De (https://ethplorer.io/address/0x2c1Fd7Cc04E059967947104E441a9f8fb88Fc9De)


Title: Re: [INVESTIGATION] - Possible Alt-cluster of Shillers and Bounty Abuse
Post by: Awaklara on February 07, 2022, 02:26:57 PM
Yes, there is no doubt after seeing the cross over of each user's wallet address data, my assumption is that they are the same person.

1. Bordijo (https://bitcointalk.org/index.php?action=profile;u=2395536)
2. Efarillino (https://bitcointalk.org/index.php?action=profile;u=2999204)
3. GraphLinq Protocol (https://bitcointalk.org/index.php?action=profile;u=3205363)
4. Indacoin (https://bitcointalk.org/index.php?action=profile;u=259161)
5. Kovinskii (https://bitcointalk.org/index.php?action=profile;u=2395235)
6. krg-token (https://bitcointalk.org/index.php?action=profile;u=2831836)
7. Legasches (https://bitcointalk.org/index.php?action=profile;u=2377035)
8. Nahratsak (https://bitcointalk.org/index.php?action=profile;u=2395487)
9. Paypolitan (https://bitcointalk.org/index.php?action=profile;u=3177374)
10. Pwaytoken (https://bitcointalk.org/index.php?action=profile;u=3205332)
11. Semehov (https://bitcointalk.org/index.php?action=profile;u=2385374)
12. torex.one (https://bitcointalk.org/index.php?action=profile;u=2654784)
13. vetohov (https://bitcointalk.org/index.php?action=profile;u=2385368)

Proof:
ETH address: 0x519AF31E48b5369eF620CaE9a071c558f3ae27fa
Your telegram username: @dmf3000
- BEP-20: 0x519AF31E48b5369eF620CaE9a071c558f3ae27fa
- Email: viszenka95@gmail.com
Related Addresses:
Code:
- BEP-20: 0x519AF31E48b5369eF620CaE9a071c558f3ae27fa

- BitcoinTalk Profile: https://bitcointalk.org/index.php?action=profile;u=1440423
- Personal ERC-20 tokens compatible ETH wallet: 0x73F79C3D797055633eAAE3815EA791cc628649a1
- BEP-20: 0x73F79C3D797055633eAAE3815EA791cc628649a1
- Email: gadiakvn2000@gmail.com
Related Addresses:
Code:
- BEP-20: 0x73F79C3D797055633eAAE3815EA791cc628649a1

Posted by : niteroy (https://bitcointalk.org/index.php?topic=5076209.msg49242733#msg49242733)
Quote
Bitcointalk username: niteroy
Campaign in which you participate: signature
ETH address: 0x6EBf583dA147887ae29C9E5A41dCe6fF80DD3358

"Proof of authentication
- BEP-20: 0x6EBf583dA147887ae29C9E5A41dCe6fF80DD3358
- Email: cryptofanat777@gmail.com
Related Addresses:
Code:
- BEP-20: 0x6EBf583dA147887ae29C9E5A41dCe6fF80DD3358

In addition, there are several wallet addresses that are used by other users for bounty campaign Apps (which are not in the OP list).
https://i.ibb.co/KyCjg1b/niteroy.png (https://ibb.co/nkhsyW6)

1. DmitFomin (https://bitcointalk.org/index.php?action=profile;u=1776969)
2. Rustamm (https://bitcointalk.org/index.php?action=profile;u=1440423)
3. niteroy (https://bitcointalk.org/index.php?action=profile;u=1129231)



Miscellaneous:
And in the same case, several rosters join the same company.

Proof:
"Proof of authentication
- BEP-20:  0x88358a49e2aA67D90f5782C5eADe459332EC4d33
EMAIL: rojernelson.mail@gmail.com
- Campaigns applied for: Telegram, Twitter"   

"Proof of authentication
- BEP-20:  0x7F5889C07f310785648712a5075eCcd333236043
- Email: bogushandry@gmail.com
- Campaigns applied for: Telegram, Twitter "   

"Proof of authentication
- BEP-20: 0x519AF31E48b5369eF620CaE9a071c558f3ae27fa
- Email: viszenka95@gmail.com
- Campaigns applied for: Telegram, Twitter"   

"Proof of authentication
- BEP-20: 0x02A092F9fd80E9dD51cac1dc5BC69f42578f004b
- Email: vishnevasofi@gmail.com
- Campaigns applied for: Telegram, Twitter"   

"Proof of authentication
- BEP-20: 0x6EBf583dA147887ae29C9E5A41dCe6fF80DD3358
- Email: cryptofanat777@gmail.com
- Campaigns applied for: Telegram, Twitter"   

"Proof of authentication
- BEP-20: 0x2c1Fd7Cc04E059967947104E441a9f8fb88Fc9De
- Email: assas1ncheg@gmail.com
- Campaigns applied for: Telegram, Twitter"   

"Proof of authentication
- BEP-20: 0x73F79C3D797055633eAAE3815EA791cc628649a1
- Email: gadiakvn2000@gmail.com
- Campaigns applied for: - Campaigns applied for: Telegram, Twitter"   

Related Addresses:
Code:
- BEP-20:  0x88358a49e2aA67D90f5782C5eADe459332EC4d33
EMAIL: rojernelson.mail@gmail.com
- BEP-20:  0x7F5889C07f310785648712a5075eCcd333236043
- Email: bogushandry@gmail.com
- BEP-20: 0x519AF31E48b5369eF620CaE9a071c558f3ae27fa
- Email: viszenka95@gmail.com
- BEP-20: 0x02A092F9fd80E9dD51cac1dc5BC69f42578f004b
- Email: vishnevasofi@gmail.com
- BEP-20: 0x6EBf583dA147887ae29C9E5A41dCe6fF80DD3358
- Email: cryptofanat777@gmail.com
- BEP-20: 0x2c1Fd7Cc04E059967947104E441a9f8fb88Fc9De
- Email: assas1ncheg@gmail.com
- BEP-20: 0x73F79C3D797055633eAAE3815EA791cc628649a1
- Email: gadiakvn2000@gmail.com

Miscellaneous: Re: [BOUNTY] 🚀PurrNFT - Join us at the very beginning and be rewarded!🚀 (https://bitcointalk.org/index.php?topic=5373338.0)



edit

Merits earned based on BPIP.org

https://i.ibb.co/PW0jGtR/bordijo.png (https://imgbb.com/)
https://i.ibb.co/h7C3q0f/Efarilino.png (https://imgbb.com/)
https://i.ibb.co/NyTZZBX/nahratsak.png (https://imgbb.com/)
https://i.ibb.co/NVZTZ33/semehov.png (https://imgbb.com/)
https://i.ibb.co/7bxHFgV/vetohov.png (https://imgbb.com/)
https://i.ibb.co/LgMj9wv/c-1.png (https://ibb.co/M1bwPT9)
https://i.ibb.co/nc75THH/c-2.png (https://ibb.co/0MCdkgg)

https://twitter.com/VNiteroy/status/1188122670304583683
Twitter url: https://www.twitter.com/vniteroy
Telegram: @cryptofanat777
- Email: cryptofanat777@gmail.com

Twitter Profile https://twitter.com/wizardiiy   
Telegram username @chylipyper   
Reddit Profile https://www.reddit.com/user/Shone_Stone   
Facebook Profile https://www.facebook.com/profile.php?id=100074090746615   

Twitter Profile https://twitter.com/wizardiiy   
https://twitter.com/FordMustPaul/status/1467464682604617737   
https://twitter.com/PaulTurner1981/status/1469254020514529283   
https://twitter.com/wizardiiy/status/1469222751940624387   
Facebook Profile https://www.facebook.com/profile.php?id=100074090746615

Twitter Profile https://twitter.com/THgyanty    
https://twitter.com/Jonyyffecal/status/1473217532383346690   
https://twitter.com/wizardiiy/status/1473217856758235136   
https://twitter.com/Tander_Gram/status/1473156382610370560   
https://twitter.com/fearlessqwer/status/1473376149526958094?s=20   
https://twitter.com/GillCody1000/status/1473565826959749125   
https://twitter.com/Veybhavi/status/1473218207121129472   
https://twitter.com/furrcriptoO/status/1473218908484157440   
https://twitter.com/kasper_johnso/status/1473156687490080771   
https://twitter.com/fearlessqwer/status/1473376005641449489?s=20   
https://twitter.com/PaulTurner1981/status/1473565778859360257   
Reddit Profile https://www.reddit.com/user/AnnualOill       

- ERC-20:  0x7F5889C07f310785648712a5075eCcd333236043
- Email: bogushandry@gmail.com
Twitter Profile https://twitter.com/CryptoPICHa    
https://twitter.com/wizardiiy/status/1471038948348727300   
https://twitter.com/furrcriptoO/status/1471039261126402048   
https://twitter.com/fearlessqwer/status/1471136923653742594?s=20   
https://twitter.com/PaulTurner1981/status/1471100713564401665   
https://twitter.com/Henry_Toll/status/1471202732518387714   
https://twitter.com/GrydGaming/status/1471039692703473666   
https://twitter.com/Jonyyffecal/status/1471040203334823936   
https://twitter.com/AnimeBosssa/status/1471138907077156874?s=20   
https://twitter.com/Aldridgejos/status/1471100985812525061   
https://twitter.com/kasper_johnso/status/1471203057874743297   
Reddit Profile https://www.reddit.com/user/Trackerqwer    
Facebook Profile https://www.facebook.com/profile.php?id=100074437664255    

Twitter Profile https://twitter.com/ingzoeni   
https://twitter.com/CryptoFYsYa/status/1471816080712781828   
https://twitter.com/wizardiiy/status/1472098594941460483   
https://twitter.com/BILLYDEFI/status/1472290218212532233   
https://twitter.com/NicholasWnf/status/1472662351832924166   
https://twitter.com/wizardiiy/status/1473013528625823744   
https://twitter.com/Aenytoken/status/1471816617902456837   
https://twitter.com/GrydGaming/status/1472099062019198981   
https://twitter.com/_FredFlores_/status/1472290533015961600   
https://twitter.com/JibaylMallick/status/1472662671820480512   
https://twitter.com/GrydGaming/status/1473013769374732291   
Reddit Profile https://www.reddit.com/user/OldbutGoodfo   

- Email: assas1ncheg@gmail.com
Twitter Profile https://twitter.com/JibaylMallick   
https://twitter.com/Jonyyffecal/status/1469218023928209410   
https://twitter.com/grYzZzlIY/status/1469418485021245442   
https://twitter.com/CryptoPICHa/status/1469775364268429315   
https://twitter.com/Roy_Rivera3/status/1470339801043939335   
https://twitter.com/NicholasWnf/status/1470672180098781185   
https://twitter.com/JibaylMallick/status/1471048209313275904   
https://twitter.com/mgtguiV/status/1471815063803727878   
https://twitter.com/BygByrdTrades/status/1471815368180215808   
https://twitter.com/wizardiiy/status/1472098078899556357   
https://twitter.com/BILLYDEFI/status/1472289756188975113   
Reddit Profile https://www.reddit.com/user/Coffe_my_life   
Facebook Profile https://www.facebook.com/profile.php?id=100074662954906   

Twitter Profile https://twitter.com/mentruky    
https://twitter.com/mgtguiV/status/1468142749115371524   
https://twitter.com/grYzZzlIY/status/1468143100417740805   
https://twitter.com/Henry_Toll/status/1468148013885497345   
https://twitter.com/dantradernet/status/1468692078469263362?s=20   
https://twitter.com/GillCody1000/status/1468087185316278273   
https://twitter.com/Veybhavi/status/1468143587615465473   
https://twitter.com/wizardiiy/status/1468143998959333377   
https://twitter.com/Tander_Gram/status/1467746173930950657   
https://twitter.com/dantradernet/status/1468691871232843784?s=20   
https://twitter.com/Aldridgejos/status/1468087861949779969   

Twitter Profile https://twitter.com/Veybhavi   
https://twitter.com/FordMustPaul/status/1467464682604617737   
https://twitter.com/wizardiiy/status/1469222751940624387   
Facebook Profile https://www.facebook.com/priscilla.charles.311/   


Title: Re: [INVESTIGATION] - Possible Alt-cluster of Shillers and Bounty Abuse
Post by: holydarkness on February 08, 2022, 01:43:34 PM
As much as I tried to find a hard evidence --tx hash, duplicate username, ec.-that ties the threads owner, OddEvenBets.com, to these cluster of shillers, I can't find any, it's only logical that those accounts above are the sock puppet of OddEvenBets, given they exclusively post on OddEvenBets' threads only. I bumped into a wall, probably because I didn't aware of software and sites to extract such information --I've tried the handy ninjastic, though-- I would really appreciate if anyone can help on this matter.

I wonder if it's necessary to tag these accounts with negative trust due to the nature of their shilling,  bumping, and cheating bounties, as well as raising a newbie flag on OddEvenBets. Anyway, will report these accounts to the list of known alt (https://bitcointalk.org/index.php?topic=2544574.0).


Title: Re: [INVESTIGATION] - Possible Alt-cluster of Shillers and Bounty Abuse
Post by: decodx on February 08, 2022, 08:10:50 PM
I wonder if it's necessary to tag these accounts with negative trust due to the nature of their shilling,  bumping, and cheating bounties, as well as raising a newbie flag on OddEvenBets. Anyway, will report these accounts to the list of known alt (https://bitcointalk.org/index.php?topic=2544574.0).

A negative tag would be appropriate if they are involved in bounty cheating (by enrolling with multiple alts) and there is sufficient evidence that these accounts are connected. As for shilling and bumping OddEvenBets threads, we may not find any links within the forum. They may just be hired accounts through some of the bumping services.