Nevermind is still not clear to me how you can create a wallet inside a wallet.
I think what you don't know here is how Walletexplorer identifies addresses and link addresses. Supposedly I have an address A and address B in same wallet. Walletexplorer won't identify unless if I use inputs from both addresses(A & B) in one transaction.
Examples:
5 inputs from different addresses being used in one transaction and it links them as one wallet (check Sender) in wallet explorer.
Now if one uses inputs from different addresses into one transaction then it would prove that user owns both the addresses and thats how Walletexplorer connects two addresses.
Explanation to your caseIn your case, the abuser didn't used those all inputs in one transaction that is why it doesn't identifies it under the same wallet and gives them a different wallet identifier.
Even if they have all addresses under the same wallet in their wallet client. Walletexplorer would only join them on the basis of multiple inputs from different address in a transaction.
I have these addresses in same wallet:
now if you check them in wallet explorer:
[1] 1M7tF1x755ZVGDhnxFsihjbsQ9Y5o4hKnf has this wallet identifier : 5f6d6e04fe40ac77
[2] 1ESRQXBjqKGJ3Ab6nZFe2DamubR96FvkPL has this: a2f099555f
[3] 1Jjng2okreb2jDbvcPDdhD3HxZJVTSBAgw has this: 4fc0ecaaeb
[4] 14zWdxyV3NqEtSkwuyGJW94BhDq3dF9bLy has this: 359cc7650e
All different because I haven't joined them in any of my transactions but yet I happen to have them in same wallet.
ETFbitcoin also explained the same thing. PM me anytime if you have further questions
(I was unaware of CoinJoin earlier and now I have understood and it is completely different so I have edited and omitted errors as I made in this post.)