[User Generated] - Known alts of anyone

[Lauda]

When I made the suggestion that TomatoCage sign a message with the wallet they staked in their own thread, he/she/it went off line. (and still hasn't posted since last year)

Has anyone who is participating in this discussion (or otherwise) directly asked Tomatocage for a signed message? If he is unable to or *unwilling to* provide one, then you could assume that the account is compromised considering the influx of hacked accounts. It would be very trivial to provide adequate evidence of the original owner being in possession of the account this way.
I also don't see why the negative has been given. If we were leaving DT negatives whenever someone made any kind of accusation, I would need to send out another few hundred/thousands negatives. Meanwhile, TomatoCago does not leave negatives to Quickseller who (among other things):
1) Has made a lot of baseless accusations (see QS vs. zepher et. al.).
2) Has sold DT accounts to known scammers: https://bitcointalk.org/index.php?topic=1902308.0.

[Timelord2067]

When I made the suggestion that TomatoCage sign a message with the wallet they staked in their own thread, he/she/it went off line. (and still hasn't posted since last year)

Has anyone who is participating in this discussion (or otherwise) directly asked Tomatocage for a signed message? If he is unable to or *unwilling to* provide one, then you could assume that the account is compromised considering the influx of hacked accounts. It would be very trivial to provide adequate evidence of the original owner being in possession of the account this way.
I also don't see why the negative has been given. If we were leaving DT negatives whenever someone made any kind of accusation, I would need to send out another few hundred/thousands negatives.

Yup over yoder on their own Stake your Bitcoin address here thread at 10:59:23 this morning and they were last online at 13:00:53 my time. GMT +10

https://bitcointalk.org/index.php?topic=996318.msg19132941#msg19132941 - http://archive.is/rubpd#selection-10791.0-10853.71

*edit* it's now twelve hours after that post.

[DarkStar_]

Is there an easy way to search for addresses on a profile?

User darkfriend77 was hacked recently, and I believe the hacker put the address 1mEtvFncZqXLF5UM2dWHnX3bqy6xrTeWK on darkfriend77's profile. Taking a look at the address 1mEtvFncZqXLF5UM2dWHnX3bqy6xrTeWK, you find 2 transactions - one where the address gets 0.035BTC from BitMixer.io, and one where the address sends all the funds to 37uKbVCLAnmGQ2CRazgv7fgYWs8LkfwFE8, which I can't further trace. The transaction where the funds were sent is 700bbb545b810ab1c47ed4b72686b09b66e4eb401913cacf80480191aa1762ce, which has 7 inputs from 7 different addresses, all from BitMixer.io. Seems like a hacker is hacking accounts, and using them to farm the BitMixer.io campaign. I tried searching for some of the other addresses using google, however I could not find match on bitcointalk.

[Timelord2067]

Is there an easy way to search for addresses on a profile?

User darkfriend77 was hacked recently, and I believe the hacker put the address 1mEtvFncZqXLF5UM2dWHnX3bqy6xrTeWK on darkfriend77's profile. Taking a look at the address 1mEtvFncZqXLF5UM2dWHnX3bqy6xrTeWK, you find 2 transactions - one where the address gets 0.035BTC from BitMixer.io, and one where the address sends all the funds to 37uKbVCLAnmGQ2CRazgv7fgYWs8LkfwFE8, which I can't further trace. The transaction where the funds were sent is 700bbb545b810ab1c47ed4b72686b09b66e4eb401913cacf80480191aa1762ce, which has 7 inputs from 7 different addresses, all from BitMixer.io. Seems like a hacker is hacking accounts, and using them to farm the BitMixer.io campaign. I tried searching for some of the other addresses using google, however I could not find match on bitcointalk.

Try here https://www.bctalkaccountpricer.info/?token=okreii6i - http://archive.is/ohiZl

or for other wallet addresses try here: https://www.walletexplorer.com/wallet/2b9baf6a2d90f7b8?from_address=1mEtvFncZqXLF5UM2dWHnX3bqy6xrTeWK

[Timelord2067]

I'm wondering if LittleDigger's return from extended off-line is another hacked account - first TomatoCage came back now LittleDigger:

Code:

Name: 	LittleDigger u=61012 http://archive.is/qRtMc
Posts: 	743
Activity: 	448
Position: 	Sr. Member
Date Registered: 	29 June 2012, 01:39:52
Last Active: 	Today at 08:38:13

I can see LittleDigger has posted four times since mid March 2017 after having been offline for two years ( 20 January 2015, 15:18:39 ) LittleDigger *was* a member of the SexCoin community, and yet the four posts look like a newbie scammer posts. (ie all of a sudden LittleDigger has tried to sign up for a gambling signature campaign...)

https://bitcointalk.org/index.php?action=profile;u=61012;sa=showPosts http://archive.is/6hc9A

[Timelord2067]

Huh?

Code:

Name: 	Mesmer88 u=49027 http://archive.is/Ync9u
Posts: 	0
Activity: 	0
Position: 	Brand new
Date Registered: 	04 January 2012, 21:53:51
Last Active: 	12 May 2017, 10:08:51

Code:

Name: 	BlueCorp u=53117 http://archive.is/99dlt
Posts: 	94
Activity: 	42
Position: 	Jr. Member
Date Registered: 	05 March 2012, 10:38:54
Last Active: 	12 May 2017, 11:18:02

Code:

Name: 	TomatoCaqe u=54545 http://archive.is/zMxKP
Posts: 	29
Activity: 	14
Position: 	Newbie
Date Registered: 	26 March 2012, 16:33:34
Last Active: 	12 May 2017, 11:21:40

Code:

Name: 	amytron u=54053 http://archive.is/bbSma
Posts: 	74
Activity: 	28
Position: 	Newbie
Date Registered: 	20 March 2012, 06:20:36
Last Active: 	12 May 2017, 11:24:22

then a week later TomatoCage comes back to life?

Did chronicsky really suggest I pay theymos to do what the staff should have been doing all along?

Isn't that the whole purpose of this thread is because no-one else is prepared to investigate the connections?

I'm happy to wait until users such as Lauda rizzlarolla Avirunes actmyname Gunthar etc come on and have a chance to review the information, hopefully they can expand on it.

In late breaking news I've noticed this:

Accounts Connected:

Mesmer88, TomatoCaqe, amytron,

Code:

Name: 	Mesmer88 u=49027 http://archive.is/xLT6W

Date Registered: 	04 January 2012, 21:53:51
Last Active: 	24 November 2016, 22:50:59

Code:

Name: 	TomatoCaqe u=54545 http://archive.is/CjBxh
Posts: 	29
Activity: 	14
Position: 	Newbie
Date Registered: 	26 March 2012, 16:33:34
Last Active: 	24 November 2016, 23:16:00

Trust: 	-4: -2 / +0

Whoever created these two fake accounts is keeping them active as evidenced by their last active being within thirty minutes of each-other.

*edit*

and...

Code:

Name: 	amytron u=54053 http://archive.is/HL6IU
Posts: 	74
Activity: 	28
Position: 	Newbie
Date Registered: 	20 March 2012, 06:20:36
Last Active: 	24 November 2016, 23:10:31

So BlueCorp , Tomatocaqe and amytron

hmmm

...and mesmer88...

[QuestionAuthority]

Since you seem like the resident expert, I've got one for your research project Timelord. Back about 4-5 years ago I had many conversations with Stephen Gornick. He was a very polite and knowledgeable bitcoin enthusiast. His language and vernacular are easy for me to recognize.

I think the current user hacked his account because he seems a little retarded now. I suppose it's possible that Stephen got into a motorcycle accident and bounced his head off the highway but it's most likely not him. I'm afraid he is a scammer and will take advantage of people here. He may even have multiple accounts.

Thanks in advance for your time.

[Timelord2067]

Since you seem like the resident expert, I've got one for your research project Timelord. Back about 4-5 years ago I had many conversations with Stephen Gornick. He was a very polite and knowledgeable bitcoin enthusiast. His language and vernacular are easy for me to recognize.

I think the current user hacked his account because he seems a little retarded now. I suppose it's possible that Stephen got into a motorcycle accident and bounced his head off the highway but it's most likely not him. I'm afraid he is a scammer and will take advantage of people here. He may even have multiple accounts.

Thanks in advance for your time.

Well... 2015 was certainly patchy posting with some months only a handful of posts, then there was a four month gap in posting from Nov 2015 to March 2016 after which it becomes regular again.

Just a handful of foreign language posts in a dozen or so languages which, after nearly 10,000 posts is to be expected.

https://www.bctalkaccountpricer.info/?token=53qqvrcs - http://archive.is/RClT3 is inconclusive.

There's a multitude of wallet addresses from creation to June 2013 (54 in total), then none until just six after early September 2015 which is before the four month gap in posting. (making a total of sixty wallet addresses - I haven't looked at whether some or all are theirs or not...)

Code:

1FQYeDRoqf4F3CKscs8X2CZbEhnjXVhgH9 First posted on: November 07, 2016, 08:22:34 AM
1VihZyJCXqiEk2CPqR1a9U4bKxnU4reoc First posted on: October 29, 2015, 09:27:15 PM
1DsZaXefjvAJ7mXgyH5jTkMpXdF1Qc62RM First posted on: October 06, 2015, 09:53:17 PM
1H8BbtfMJ3rk6V9d6Z12gFmqJCVWTAMPfG First posted on: October 06, 2015, 09:53:17 PM
1PdQFCYCZQ6CNS7ovzpwX77pX1sU88tWJb First posted on: September 02, 2015, 01:40:09 PM
33X5m4XAsxbuotvtJYFUiX7r11R6Uvjf5W First posted on: September 02, 2015, 11:25:47 AM

Nothing jumps out and says "unusual" so, unless you have any solid proof, then there's nothing further to look at.


You certainly seem quick to slap Red Paint ^TM without any proof:

actmyname 0: -0 / +0   2017-04-18   100.00000000      This person scammed 100 Bitcoins from multiple people over a period of months.

[actmyname]

actmyname 0: -0 / +0   2017-04-18   100.00000000      This person scammed 100 Bitcoins from multiple people over a period of months.

Ah, don't worry about that there. It's not malicious feedback from QA.

It was retaliation towards a feedback that was referenced to a cynical comment, so I'd think nothing of it. The original feedback was removed, as well.

[irfan_pak10]

This guy did a really great effort. Now I need someone else who can dig some more info about these multi accounts.

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!
Hey,
I am from russian BTT local and I must report about multiaccount cheater detected.
This is user "targetmlrd". See proof below. His multiaccounts BTT usernames are: DmitryMarkov, MarryBit, VadimWorld92, Altmannn, AndyLowley, JusticeLife, CryptoDoncov, AndrewDuakyn.
He greatly deceived you in aeternity's signature part1, blog, russian thread moderation bounty campaigns.
In aeternity's russian thread he made fictitious activity to get more stakes, he asking and answering himself to his multiaccounts. For example, especially see page #14 in russian thread https://bitcointalk.org/index.php?topic=1791710.260 where you can see all those multi usernames (almost all of them have bancor or sonm avatars/signature now).
In aeternity's signature part1 bounty spreadsheet you can see his multiaccounts DmitryMarkov, MarryBit, AndyLowley, JusticeLife
In blog bounty he participated as VadimWorld92.

Proof
All of those accounts registered on October 2016, I think to participate in Iconomi, vSlice and other bounties. All usernames have the same style of naming. All messages of those acoounts have the same writing style with some same words. All twitter accounts, related to them, in same style too and all was last active month ago with last retweets about TaaS and Edgeless: @CryptoWorld92, @D_Markovv, @MarryByte, @LowleyAndy, @altmantrader, @CryptoProfixxx, @AndrewDuakyn.
And main proof is to explore payment ETH adresses in public bounty spreadsheets of vSlice, Edgeless, TaaS and other. Everybody can see how tokens migrate from his multiaccount ETH adresses to one address:
for example see about vSlice tokens https://etherscan.io/address/0x0f5f6e9f54b43466d7c6ae753abd7b05b3eeb5a4#tokentxns wich transfered from
0x8435328AebfE971df220dACf6F387bAE19b66556   VadimWorld92
0x996Cf37e8fB98999ABFf59A7f116D1e7f2B08847   DmitryMarkov
0x6fb50c245D42147AF9A58BB17C0bAe1DeF9a4Da4   CryptoDoncov
0xbB18910616EcF5D51Cc8303d66E7C7Bf43A617E9   AndyLowley
0x8DcBb728B00c442Dbd6337B2d14730Ba2ad186fD   Altmannn
0xF90C096Bf0Fa1A9eB0008200763d50B5bBC46eFf   MarryBit
these addresses are from vSlice bounty spreadsheet and the same in other projects.

Also we can see follow across transfers:
VadimWorld92 0x8435328AebfE971df220dACf6F387bAE19b66556  and  AndrewDuakyn 0xFbfCbb268EaBf8c9DBA46D7BdcD7451ABb01eDC6 to here https://etherscan.io/address/0x9d9127ace4f60b99aff20ebf295e804177ace93d#tokentxns

Then from AndrewDuakyn 0xFbfCbb268EaBf8c9DBA46D7BdcD7451ABb01eDC6 to targetmlrd 0x09F3480871B1a3384f948841C29eEe9C1392E776

And can find more and more

[hilariousandco]

And main proof is to explore payment ETH adresses in public bounty spreadsheets of vSlice, Edgeless, TaaS and other. Everybody can see how tokens migrate from his multiaccount ETH adresses to one address:
for example see about vSlice tokens https://etherscan.io/address/0x0f5f6e9f54b43466d7c6ae753abd7b05b3eeb5a4#tokentxns wich transfered from
0x8435328AebfE971df220dACf6F387bAE19b66556   VadimWorld92
0x996Cf37e8fB98999ABFf59A7f116D1e7f2B08847   DmitryMarkov
0x6fb50c245D42147AF9A58BB17C0bAe1DeF9a4Da4   CryptoDoncov
0xbB18910616EcF5D51Cc8303d66E7C7Bf43A617E9   AndyLowley
0x8DcBb728B00c442Dbd6337B2d14730Ba2ad186fD   Altmannn
0xF90C096Bf0Fa1A9eB0008200763d50B5bBC46eFf   MarryBit
these addresses are from vSlice bounty spreadsheet and the same in other projects.

Also we can see follow across transfers:
VadimWorld92 0x8435328AebfE971df220dACf6F387bAE19b66556  and  AndrewDuakyn 0xFbfCbb268EaBf8c9DBA46D7BdcD7451ABb01eDC6 to here https://etherscan.io/address/0x9d9127ace4f60b99aff20ebf295e804177ace93d#tokentxns

Then from AndrewDuakyn 0xFbfCbb268EaBf8c9DBA46D7BdcD7451ABb01eDC6 to targetmlrd 0x09F3480871B1a3384f948841C29eEe9C1392E776

And can find more and more

Is there more than these ones:

https://bitcointalk.org/index.php?action=profile;u=895458 targetmlrd
https://bitcointalk.org/index.php?action=profile;u=912318 DmitryMarkov
https://bitcointalk.org/index.php?action=profile;u=906985 MarryBit
https://bitcointalk.org/index.php?action=profile;u=912326 VadimWorld92
https://bitcointalk.org/index.php?action=profile;u=914387 Altmannn
https://bitcointalk.org/index.php?action=profile;u=907324 AndyLowley
https://bitcointalk.org/index.php?action=profile;u=948631 JusticeLife
https://bitcointalk.org/index.php?action=profile;u=912237 CryptoDoncov
https://bitcointalk.org/index.php?action=profile;u=903146 AndrewDuakyn

Russians sure like to get busy. One Russian guy was caught with over 200 accounts. Wouldn't surprise me if these were related.

[Timelord2067]

@irfan_pak10:

Was that a private message? Or, where did it come from?

[irfan_pak10]

@irfan_pak10:

Was that a private message? Or, where did it come from?

Yup he PMed me.

[Wandika]

He deserves to be banned  because of massive account abuse on bounty campaign. He already earn dozen of bucks from cheating.

[Mefestofel_Mefis]

@irfan_pak10:

Was that a private message? Or, where did it come from?

Yup he PMed me.

I see that he used the multi accounts in the aeternity company the manager of which you are.
 I think that it is necessary to deprive of him all awards.

[irfan_pak10]

He deserves to be banned  because of massive account abuse on bounty campaign. He already earn dozen of bucks from cheating.

I see that he used the multi accounts in the aeternity company the manager of which you are.
 I think that it is necessary to deprive of him all awards.

Please, guys, hold your fire, we are investigating and better know what to do with multi accounts holders.

Regards

[Chris!]

He deserves to be banned  because of massive account abuse on bounty campaign. He already earn dozen of bucks from cheating.

I see that he used the multi accounts in the aeternity company the manager of which you are.
 I think that it is necessary to deprive of him all awards.

Please, guys, hold your fire, we are investigating and better know what to do with multi accounts holders.

Regards

Lol I finally see a post from the famous irfan_pak10! You have no idea how many times I see your name when looking for alt accounts.


I'm hoping to start picking this up again. I had a lot going on IRL. It's too bad too because I was right in the middle of an investigation and it looks like I'll have to start it over because the web of posts/addresses is just too confusing and I didn't exactly have it consolidated and organized yet.

[romeorickl64]

Can someone help me with this to be written in proper format?
https://bitcointalk.org/index.php?topic=1944079.0
I'll update the thread as soon as i become online tomorrow,i need to go for a sleep.

Also MOD or ADMIN, please do care with them, and i really don't know how to move this whole post from there.

Got some treatment from one of the alt account,i removed the bad images and reposting them here

You are so useless here and there like no job
Anyways nobody will respond to gini day where there are people who want to deal with other people's business
Yes I already deh I want a vacuum from the bitcointalk world
Congratulations you enjoy your stupidity

[Patatas]

Can someone help me with this to be written in proper format?

Yes I would,the list is too long! Please archive whatever threads possible.

Also MOD or ADMIN, please do care with them, and i really don't know how to move this whole post from there.

Admins or Mods don't give a shit.You don't need to move the entire post from there,like I said I'll help you organize it.

You are so useless here and there like no job
Anyways nobody will respond to gini day where there are people who want to deal with other people's business
Yes I already deh I want a vacuum from the bitcointalk world
Congratulations you enjoy your stupidity

He is just few hours away from getting all of his accounts tagged.

[ONLYfree]

Accounts Connected:

ONLYfree -16: -4 / +0, racey -2: -1 / +0, douaa -2: -1 / +0, imane -16: -4 / +0, bitodigg -2: -1 / +0,

Proof:

Hacker from Morocco https://bitcointalk.org/index.php?topic=1850600.msg18425324#msg18425324 (Archive)

Related Addresses:

Wallet [080550a33e] https://www.walletexplorer.com/wallet/080550a33e09aaa2/addresses

Miscellaneous:

Ponzi, Self Vouching, multiple UID's in the same threads...

What is that? Hacker from Marocco? OR you lost your mind? I have nothing to do with these account.