Bitcoin Forum
October 18, 2019, 07:45:01 AM *
News: Latest Bitcoin Core release: 0.18.1 [Torrent]
 
   Home   Help Search Login Register More  
Warning: One or more bitcointalk.org users have reported that they strongly believe that the creator of this topic is a scammer. (Login to see the detailed trust ratings.) While the bitcointalk.org administration does not verify such claims, you should proceed with extreme caution.
Pages: [1]
  Print  
Author Topic: Cheating bounties with 9 alt accs- Need DT  (Read 335 times)
pat25
Full Member
***
Offline Offline

Activity: 686
Merit: 102


View Profile
May 12, 2018, 09:50:29 PM
 #1

Hello, I have found another person who tries to cheat bounties with alt accounts.
Casper - Signature campaign
https://docs.google.com/spreadsheets/d/1D2zLx4yB8D3JMWTHO6gX4ecbsT5KH2sPfhjS_QAW2p0/edit#gid=506071250
Line 96-105

Look at: date of register, turkish local thread posts mainly.

Links to profiles
https://bitcointalk.org/index.php?action=profile;u=220981
https://bitcointalk.org/index.php?action=profile;u=190024
https://bitcointalk.org/index.php?action=profile;u=253016
https://bitcointalk.org/index.php?action=profile;u=374577
https://bitcointalk.org/index.php?action=profile;u=175291
https://bitcointalk.org/index.php?action=profile;u=170973
https://bitcointalk.org/index.php?action=profile;u=220986
https://bitcointalk.org/index.php?action=profile;u=268652
https://bitcointalk.org/index.php?action=profile;u=123583

1571384701
Hero Member
*
Offline Offline

Posts: 1571384701

View Profile Personal Message (Offline)

Ignore
1571384701
Reply with quote  #2

1571384701
Report to moderator
1571384701
Hero Member
*
Offline Offline

Posts: 1571384701

View Profile Personal Message (Offline)

Ignore
1571384701
Reply with quote  #2

1571384701
Report to moderator
PLAY NOW
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1571384701
Hero Member
*
Offline Offline

Posts: 1571384701

View Profile Personal Message (Offline)

Ignore
1571384701
Reply with quote  #2

1571384701
Report to moderator
kakaman
Newbie
*
Offline Offline

Activity: 18
Merit: 4


View Profile
May 13, 2018, 01:50:19 AM
 #2

date of register, turkish local thread posts mainly.
are not proof bro!

learn

https://bitcointalk.org/index.php?topic=2544574.msg37046279#msg37046279
Coolcryptovator
Hero Member
*****
Online Online

Activity: 574
Merit: 861


Don't Panic, It's Organic 🌷


View Profile WWW
May 13, 2018, 05:45:13 AM
 #3

I think this is not enough proof. Try to gather more proof. And edit your thread with more proof. Specially need to match eth address or transaction made between them.

HCP
Legendary
*
Offline Offline

Activity: 1120
Merit: 1838

<insert witty quote here>


View Profile
May 13, 2018, 09:48:37 AM
 #4

Can't comment on them all being alts, as you haven't presented any proof using linked ETH addresses etc... However, I'd say what you DID find are some (most likely) "sold" or "hacked" accounts that should probably be tagged as such:

1. start - A last posting gap from 2016 to 2018... switch from Chinese to Posting only in Bounties and in Turkish??!? Huh

2. tammyla - HUGE posting gap from 2014 to 2018... and suddenly the user goes from all Chinese posts in Chinese local board... to almost perfect English!!?! Shocked

3. dustinfroe - Another posting gap... and then a switch from English to Turkish.

4. velho - Yet another large posting gap and a swap form English to Turkish

5. jedimindtriks - Posting gap... switch from Mining/English to Bounties/Turkish - anyone else seeing the common theme here? Tongue

6. jari76 - Large posting gap... +language switch

7. a83748619 - Yet another large posting gap and magic language change

8. w709190200 - 2 year gap + language switch... also, this one may have already been sold back in 2016 as well, with the gap there and English to Chinese switch

9. googlemi - Smaller gap (1 year), but another Chinese -> Bounty/Turkish swap

pat25
Full Member
***
Offline Offline

Activity: 686
Merit: 102


View Profile
May 13, 2018, 09:55:14 AM
 #5

Well, it requires a lot of time and skill to find some ETH transactions to prove that they are connected.
pat25
Full Member
***
Offline Offline

Activity: 686
Merit: 102


View Profile
May 13, 2018, 09:56:26 AM
 #6

Can't comment on them all being alts, as you haven't presented any proof using linked ETH addresses etc... However, I'd say what you DID find are some (most likely) "sold" or "hacked" accounts that should probably be tagged as such:

1. start - A last posting gap from 2016 to 2018... switch from Chinese to Posting only in Bounties and in Turkish??!? Huh

2. tammyla - HUGE posting gap from 2014 to 2018... and suddenly the user goes from all Chinese posts in Chinese local board... to almost perfect English!!?! Shocked

3. dustinfroe - Another posting gap... and then a switch from English to Turkish.

4. velho - Yet another large posting gap and a swap form English to Turkish

5. jedimindtriks - Posting gap... switch from Mining/English to Bounties/Turkish - anyone else seeing the common theme here? Tongue

6. jari76 - Large posting gap... +language switch

7. a83748619 - Yet another large posting gap and magic language change

8. w709190200 - 2 year gap + language switch... also, this one may have already been sold back in 2016 as well, with the gap there and English to Chinese switch

9. googlemi - Smaller gap (1 year), but another Chinese -> Bounty/Turkish swap

Thank you, you did a great work!
I hope this will be enough to tag them all Wink
marlboroza
Legendary
*
Offline Offline

Activity: 1344
Merit: 1650


Exchange Bitcoin quicky--https://blockchain.com.do


View Profile WWW
May 13, 2018, 11:06:06 AM
 #7

Quote

Chinese -> English -> Turkish

Quote
Portuguese -> Off topic farming rank in 2016 -> Turkish

Accounts velho, dustinfroe and start activated on February 11. and joined DIW bounty
Account tammyla activated on February 21 and joined DIW bounty(irrelevant)
Accounts velho, distinfroe, start and tammyla joined Gilgamesh bounty on March 04.
Accounts jedimindtricks, jari76, a83748619, w709190200 and googlemy activated on March 9. and all 9 accounts joined Docademic bounty.
All 9 accounts joined Betex bounty on April 16.

pat25
Full Member
***
Offline Offline

Activity: 686
Merit: 102


View Profile
May 13, 2018, 06:30:32 PM
 #8

Quote

Chinese -> English -> Turkish

Quote
Portuguese -> Off topic farming rank in 2016 -> Turkish

Accounts velho, dustinfroe and start activated on February 11. and joined DIW bounty
Account tammyla activated on February 21 and joined DIW bounty(irrelevant)
Accounts velho, distinfroe, start and tammyla joined Gilgamesh bounty on March 04.
Accounts jedimindtricks, jari76, a83748619, w709190200 and googlemy activated on March 9. and all 9 accounts joined Docademic bounty.
All 9 accounts joined Betex bounty on April 16.
Thank you for your work! This have to prove that the accounts are connected.

HCP
Legendary
*
Offline Offline

Activity: 1120
Merit: 1838

<insert witty quote here>


View Profile
May 14, 2018, 02:03:09 AM
 #9

Well, it requires a lot of time and skill to find some ETH transactions to prove that they are connected.
Ain't that the truth! If I have some time, I'll have a look later tonight when I get off shift...

Chinese -> English -> Turkish


Portuguese -> Off topic farming rank in 2016 -> Turkish
Looks like I missed a few posts...

In other news... Just discovered that if you have "ignored" certainly boards, messages from those boards don't show when you view the posting history of a user! Tongue

pat25
Full Member
***
Offline Offline

Activity: 686
Merit: 102


View Profile
May 14, 2018, 07:45:27 PM
 #10

I don´t see any negative trust on their profiles... Why DT members do not care about that?
When I was interested in buying accounts, I received negative trust immediately, not that I bought any account...
The Pharmacist
Legendary
*
Offline Offline

Activity: 1666
Merit: 3124



View Profile
May 14, 2018, 08:13:02 PM
 #11

I don´t see any negative trust on their profiles... Why DT members do not care about that?
When I was interested in buying accounts, I received negative trust immediately, not that I bought any account...
Well in your case, what you were asking about was blatantly obvious.  Posting gaps and language changes aren't rock-solid proof.  Yes, I've left people negs because of both of those things but there's always some doubt, however small, that the account was hacked or bought.

In the case of this thread, I just haven't had a chance to go through these profiles to take a look for myself.  I know damn well you're not actually complaining about DT members not being as efficient as you'd like them to be--you're complaining because you got tagged and not these accounts here.  Stop pretending it's otherwise.

HCP
Legendary
*
Offline Offline

Activity: 1120
Merit: 1838

<insert witty quote here>


View Profile
May 15, 2018, 03:36:02 AM
Last edit: May 15, 2018, 04:24:14 AM by HCP
 #12

Ok, it would seem that at least one of these accounts might be an alt of a large scale alt-account abuser... deebtt

Here we see "start" inexplicably using the twitter https://twitter.com/cemaatimuslum - http://archive.is/HXzYs#selection-3313.0-3313.33 in amongst all their posts using twitter: @4yam3

This "cemaatimuslum" account seems to be the main twitter of deebtt, who has already been tagged for having some 60+ alt accounts abusing campaigns - http://archive.is/qN1sh#selection-477.0-477.33



Also, I haven't been able to find an "address" link amongst all these accounts there are some *very* complicated connections between these accounts (see below), despite them all seeming to participate in the same bounties and following the same "post gap, switch to Turkish" history pattern. It's possible they're just very organised, or they're actually just a group of individuals all joining the same campaigns. I can certainly understand why The Pharmacist is hesitant to tag them up.

EDIT: Found some links between some of these accounts (but no concrete proof):

ETH "distribution" account: 0xff1a971bd60b127f077028e9a1b1e58627efdabc
This account seems to be distributing small amounts (0.002) of ETH amongst all the other accounts... maybe so they can shift tokens? Huh... here we find a link between:

start: https://etherscan.io/address/0x0a1356257c4ded4284469f4af472590ecd59b6f8
dustinfroe: https://etherscan.io/address/0x13AacA2bbA64C7EF0C8B0A08604256c770d8897d
jedimindtriks: https://etherscan.io/address/0x1f01cab113cccb4b848cf9a68c31dc28853d043b
jari76: https://etherscan.io/address/0x4C9d7BFD195BEea55D793864A05C2821cEe06C1B
w709190200: https://etherscan.io/address/0xA18A65A22b713fE3CEdcBF34De5327c1f4Dcfa11
googlemi: https://etherscan.io/address/0x749C20dA956526Eb4D749C5B9FdfFF82684FF03a

as they all received payments from the "0xff1a97" address... but I can't find any links apart from that...

ETH address 0x9949C7eb27e93Fd1b4Eb580C6039F4376b893764 seems to be another such distribution address... send a lot of 0.001 ETH payments out to multiple addresses like:

tammyla: https://etherscan.io/address/0x892F9071429BD509EA147055Cf4B5d7705A21fec

Also... Tammyla (0x892F9071429BD509EA147055Cf4B5d7705A21fec) sent ETH to velho (0xB90E9f6303Ad691868fFe2C50eC7099cbda711FC) in this transaction


However, none of these transactions really "proves" that they're all Alt accounts... it certainly isn't like other cases we have seen where you can see alts all sending their tokens to one collection address. Unless you can find some more concrete proof, I don't see any reason that a DT member would want to tag these guys... (except maybe "start" for being an alt of "deebtt")

pat25
Full Member
***
Offline Offline

Activity: 686
Merit: 102


View Profile
May 15, 2018, 08:43:53 AM
 #13

Ok, it would seem that at least one of these accounts might be an alt of a large scale alt-account abuser... deebtt

Here we see "start" inexplicably using the twitter https://twitter.com/cemaatimuslum - http://archive.is/HXzYs#selection-3313.0-3313.33 in amongst all their posts using twitter: @4yam3

This "cemaatimuslum" account seems to be the main twitter of deebtt, who has already been tagged for having some 60+ alt accounts abusing campaigns - http://archive.is/qN1sh#selection-477.0-477.33



Also, I haven't been able to find an "address" link amongst all these accounts there are some *very* complicated connections between these accounts (see below), despite them all seeming to participate in the same bounties and following the same "post gap, switch to Turkish" history pattern. It's possible they're just very organised, or they're actually just a group of individuals all joining the same campaigns. I can certainly understand why The Pharmacist is hesitant to tag them up.

EDIT: Found some links between some of these accounts (but no concrete proof):

ETH "distribution" account: 0xff1a971bd60b127f077028e9a1b1e58627efdabc
This account seems to be distributing small amounts (0.002) of ETH amongst all the other accounts... maybe so they can shift tokens? Huh... here we find a link between:

start: https://etherscan.io/address/0x0a1356257c4ded4284469f4af472590ecd59b6f8
dustinfroe: https://etherscan.io/address/0x13AacA2bbA64C7EF0C8B0A08604256c770d8897d
jedimindtriks: https://etherscan.io/address/0x1f01cab113cccb4b848cf9a68c31dc28853d043b
jari76: https://etherscan.io/address/0x4C9d7BFD195BEea55D793864A05C2821cEe06C1B
w709190200: https://etherscan.io/address/0xA18A65A22b713fE3CEdcBF34De5327c1f4Dcfa11
googlemi: https://etherscan.io/address/0x749C20dA956526Eb4D749C5B9FdfFF82684FF03a

as they all received payments from the "0xff1a97" address... but I can't find any links apart from that...

ETH address 0x9949C7eb27e93Fd1b4Eb580C6039F4376b893764 seems to be another such distribution address... send a lot of 0.001 ETH payments out to multiple addresses like:

tammyla: https://etherscan.io/address/0x892F9071429BD509EA147055Cf4B5d7705A21fec

Also... Tammyla (0x892F9071429BD509EA147055Cf4B5d7705A21fec) sent ETH to velho (0xB90E9f6303Ad691868fFe2C50eC7099cbda711FC) in this transaction


However, none of these transactions really "proves" that they're all Alt accounts... it certainly isn't like other cases we have seen where you can see alts all sending their tokens to one collection address. Unless you can find some more concrete proof, I don't see any reason that a DT member would want to tag these guys... (except maybe "start" for being an alt of "deebtt")

Ohh my goot! You are awesome, how did you find so much information? You are a cryptodetective  Grin
But you and marlboroza spent a lot of time by searching informations about these accounts and still we can´t do nothing Sad
pat25
Full Member
***
Offline Offline

Activity: 686
Merit: 102


View Profile
May 21, 2018, 07:26:39 AM
 #14

Another probably stolen account:
#94 kidamazo - posting gap and switch from Chinese to English and Russian + Attempt to legalize account

As you can see, it is not enough to prove that the account is bought or hacked.


But I would like to know, if someone buy Legendary member, changes email, password and woke up from a long period of inactivity - it is considered as a hacked or bought account? Will you tagg the account? Because I see many tagged legendaries for this ... But member accounts are not in your interest?
Coolcryptovator
Hero Member
*****
Online Online

Activity: 574
Merit: 861


Don't Panic, It's Organic 🌷


View Profile WWW
May 21, 2018, 09:00:07 AM
 #15


No one will tag unless you provide eth or token transaction between them or any other strong evidences. Only registered or joined on bounty same date it dose not mean they are connected.

pat25
Full Member
***
Offline Offline

Activity: 686
Merit: 102


View Profile
May 21, 2018, 04:46:28 PM
 #16


Language switch, poor quality of posts, almost same posts, only in turkish, everything is okay, right?
HCP
Legendary
*
Offline Offline

Activity: 1120
Merit: 1838

<insert witty quote here>


View Profile
May 21, 2018, 10:06:03 PM
 #17

No one will tag unless you provide eth or token transaction between them or any other strong evidences. Only registered or joined on bounty same date it dose not mean they are connected.
Language switch, poor quality of posts, almost same posts, only in turkish, everything is okay, right?
Some of the evidence is fairly circumstantial... unless accounts have posted the same cryptocurrency address or external account name (telegram/facebook/twitter) from different BitcoinTalk accounts, I (personally) don't think that we can confidently say accounts are "alts" based purely on token transfers either (although some are getting tagged for it). Are token transfers suspicious? yes... are they proof of alt accounts? I'm not 100% convinced unless there is other evidence to back it up.


But I would like to know, if someone buy Legendary member, changes email, password and woke up from a long period of inactivity - it is considered as a hacked or bought account? Will you tagg the account? Because I see many tagged legendaries for this ... But member accounts are not in your interest?
Things like the language switch and posting gaps etc tend to indicate an account has possibly be sold or hacked... again, isn't a definite proof. If you have absolute proof that the account was bought/sold then you'll find DT members who will tag it.

pat25
Full Member
***
Offline Offline

Activity: 686
Merit: 102


View Profile
May 26, 2018, 09:19:30 PM
 #18

No one will tag unless you provide eth or token transaction between them or any other strong evidences. Only registered or joined on bounty same date it dose not mean they are connected.
Language switch, poor quality of posts, almost same posts, only in turkish, everything is okay, right?
Some of the evidence is fairly circumstantial... unless accounts have posted the same cryptocurrency address or external account name (telegram/facebook/twitter) from different BitcoinTalk accounts, I (personally) don't think that we can confidently say accounts are "alts" based purely on token transfers either (although some are getting tagged for it). Are token transfers suspicious? yes... are they proof of alt accounts? I'm not 100% convinced unless there is other evidence to back it up.


But I would like to know, if someone buy Legendary member, changes email, password and woke up from a long period of inactivity - it is considered as a hacked or bought account? Will you tagg the account? Because I see many tagged legendaries for this ... But member accounts are not in your interest?
Things like the language switch and posting gaps etc tend to indicate an account has possibly be sold or hacked... again, isn't a definite proof. If you have absolute proof that the account was bought/sold then you'll find DT members who will tag it.

" unless accounts have posted the same cryptocurrency address or external account name (telegram/facebook/twitter) from different BitcoinTalk accounts, "

This should not be taken as multiaccounting, I think that many users here posting someone else's telegram or friend´s telegram (because they do not have telegram, or they do not want to be bothered)
Or they buy new twitter or facebook account.
Also my blog was misused several times by another bitcointalk profile.
HCP
Legendary
*
Offline Offline

Activity: 1120
Merit: 1838

<insert witty quote here>


View Profile
May 27, 2018, 01:30:37 AM
 #19

" unless accounts have posted the same cryptocurrency address or external account name (telegram/facebook/twitter) from different BitcoinTalk accounts, "

This should not be taken as multiaccounting, I think that many users here posting someone else's telegram or friend´s telegram (because they do not have telegram, or they do not want to be bothered)
Or they buy new twitter or facebook account.
Also my blog was misused several times by another bitcointalk profile.
On it's own... maybe not for the external accounts like Twitter/FB etc... as it seems the new "scam" is to claim another users posts as your own. But it certainly would add to the level of certainty that the accounts were alts if you find instances where they are claiming the same cryptocurrency wallet address. What use would it be for a scammer to have the coins sent to some innocent guys wallet? Tongue

Honestly, I'm beginning to wonder if we should even care about all this twitter/FB/Telegram campaign multi accounting... Huh If <xyzICO> don't do their own due diligence and wants to give away <xyzCoins> to anyone that can put a name and a link in a Google Spreadsheet and start spamming (or copying) posts on Twitter/FB/Telegram... do we really care? Huh I honestly don't see ANY of that nonsense unless people start posting reputation threads for them.

I'm personally more concerned about all the shitposters in the general forums posting away for their sig campaigns... necroposting threads from 2016... adding incomprehensible google translate nonsense into discussion threads... asking the same question that has been asked (and answered) about 3246286 times etc.

pat25
Full Member
***
Offline Offline

Activity: 686
Merit: 102


View Profile
May 27, 2018, 07:48:51 AM
 #20

" unless accounts have posted the same cryptocurrency address or external account name (telegram/facebook/twitter) from different BitcoinTalk accounts, "

This should not be taken as multiaccounting, I think that many users here posting someone else's telegram or friend´s telegram (because they do not have telegram, or they do not want to be bothered)
Or they buy new twitter or facebook account.
Also my blog was misused several times by another bitcointalk profile.


I'm personally more concerned about all the shitposters in the general forums posting away for their sig campaigns... necroposting threads from 2016... adding incomprehensible google translate nonsense into discussion threads... asking the same question that has been asked (and answered) about 3246286 times etc.

Well, it is because signature campaign requires some posts per week, so bounty participants have to post - they have to, they do not want and I think this is the main problem.
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!