Is St4yInTh3D4rk a hacked or sold account?

[Avirunes]

Sorry everyone,as the evidence says I am not the same person who had this account until 2016 and pulled out an exit scam from zonecoin project.

Since I got this account I never involved any shady activity like taking loans or buying or selling anything or any other thing a scammer will do from high ranked accounts.I am just here to contribute to other fellow forum members with my crypto knowledge.I didn't really participated on many signature campaigns other than bustadice since that I am giving my effort to help other people.

I don't know I can be given an excuse for accepting the real fact,let the community decide what will be the result.

Post details how you got the account. I checked all the archive.is seclogs and found only two recorded that I had posted above.

There is no record in seclog between the post made by the last owner and the first post you made after account got under your possession. I am not convinced until proofs are posted publicly.

[St4yInTh3D4rk]

Sorry everyone,as the evidence says I am not the same person who had this account until 2016 and pulled out an exit scam from zonecoin project.

Since I got this account I never involved any shady activity like taking loans or buying or selling anything or any other thing a scammer will do from high ranked accounts.I am just here to contribute to other fellow forum members with my crypto knowledge.I didn't really participated on many signature campaigns other than bustadice since that I am giving my effort to help other people.

I don't know I can be given an excuse for accepting the real fact,let the community decide what will be the result.

Post details how you got the account. I checked all the archive.is seclogs and found only two recorded that I had posted above.

There is no record in seclog between the post made by the last owner and the first post you made after account got under your possession. I am not convinced until proofs are posted publicly.

To be honest,I got this from someone on facebook groups when I was searching for how to make money when I was in need.

Since that I am using this account and changed email and password immediately after I got it from him.

[suchmoon]

To be honest,I got this from someone on facebook groups when I was searching for how to make money when I was in need.

Since that I am using this account and changed email and password immediately after I got it from him.

When was that? Date? Same day that you started posting on this forum?

[St4yInTh3D4rk]

To be honest,I got this from someone on facebook groups when I was searching for how to make money when I was in need.

Since that I am using this account and changed email and password immediately after I got it from him.

When was that? Date? Same day that you started posting on this forum?

Yes,I started to post on the same day.

[suchmoon]

To be honest,I got this from someone on facebook groups when I was searching for how to make money when I was in need.

Since that I am using this account and changed email and password immediately after I got it from him.

When was that? Date? Same day that you started posting on this forum?

Yes,I started to post on the same day.

Was it November 8, 2017?

[St4yInTh3D4rk]

Was it November 8, 2017?

Yes,Exactly from this post: http://archive.is/GKVu0#selection-755.1-755.6

[suchmoon]

To be honest,I got this from someone on facebook groups when I was searching for how to make money when I was in need.

Since that I am using this account and changed email and password immediately after I got it from him.

When was that? Date? Same day that you started posting on this forum?

Yes,I started to post on the same day.

Was it November 8, 2017?

Exactly from this post: http://archive.is/GKVu0#selection-755.1-755.6

Awesome. Except you didn't change the password or the e-mail address on that day, or at any point in 6 months prior, or 12 days after (didn't check later but it doesn't really mater). You reset the password on that day. I can think of two possible scenarios:

1) You're the original owner and forgot your password. Very unlikely due to the massive change in language proficiency.
2) You hacked (or otherwise obtained) the original owner's e-mail account and stole their Bitcointalk account. Very likely given that you just lied about how you got it.

Am I missing anything?

[Avirunes]

To be honest,I got this from someone on facebook groups when I was searching for how to make money when I was in need.

Since that I am using this account and changed email and password immediately after I got it from him.

When was that? Date? Same day that you started posting on this forum?

Yes,I started to post on the same day.

Was it November 8, 2017?

Exactly from this post: http://archive.is/GKVu0#selection-755.1-755.6

Awesome. Except you didn't change the password or the e-mail address on that day, or at any point in 6 months prior, or 12 days after (didn't check later but it doesn't really mater). You reset the password on that day. I can think of two possible scenarios:

1) You're the original owner and forgot your password. Very unlikely due to the massive change in language proficiency.
2) You hacked (or otherwise obtained) the original owner's e-mail account and stole their Bitcointalk account. Very likely given that you just lied about how you got it.

Am I missing anything?

^^Exactly^^

Your story of finding it from a facebook group is very hard to believe since it leaves why would a guy leave an account username and password on a facebook group. He could have sold it.

There are some further things that I find suspicious while you were in Eroiy's Signature campaign. I have no good proof of those accounts being linked but if anyone wants to go through their posting history and try to check with this user then I will send their names in Pm to run a check.

Am I missing anything?

Hit the nail right at dot

[St4yInTh3D4rk]

To be honest,I got this from someone on facebook groups when I was searching for how to make money when I was in need.

Since that I am using this account and changed email and password immediately after I got it from him.

When was that? Date? Same day that you started posting on this forum?

Yes,I started to post on the same day.

Was it November 8, 2017?

Exactly from this post: http://archive.is/GKVu0#selection-755.1-755.6

Awesome. Except you didn't change the password or the e-mail address on that day, or at any point in 6 months prior, or 12 days after (didn't check later but it doesn't really mater). You reset the password on that day. I can think of two possible scenarios:

1) You're the original owner and forgot your password. Very unlikely due to the massive change in language proficiency.
2) You hacked (or otherwise obtained) the original owner's e-mail account and stole their Bitcointalk account. Very likely given that you just lied about how you got it.

Am I missing anything?

^^Exactly^^

Your story of finding it from a facebook group is very hard to believe since it leaves why would a guy leave an account username and password on a facebook group. He could have sold it.

Did I said I found username and pass on facebook? I found a user and he sold that to me.So he may sold me a hacked account.

[suchmoon]

Did I said I found username and pass on facebook? I found a user and he sold that to me.So he may sold me a hacked account.

You're missing the point. There is no record of a password change or an e-mail change. You said you changed both, and it would make sense if you actually bought the account. But it doesn't look like you did.

[St4yInTh3D4rk]

Did I said I found username and pass on facebook? I found a user and he sold that to me.So he may sold me a hacked account.

You're missing the point. There is no record of a password change or an e-mail change. You said you changed both, and it would make sense if you actually bought the account. But it doesn't look like you did.

When I got the account there is no email in it so I created new email and added it into this profile then later changed my password via email.

[suchmoon]

Did I said I found username and pass on facebook? I found a user and he sold that to me.So he may sold me a hacked account.

You're missing the point. There is no record of a password change or an e-mail change. You said you changed both, and it would make sense if you actually bought the account. But it doesn't look like you did.

When I got the account there is no email in it so I created new email and added it into this profile then later changed my password via email.

Ok, not a bad story. It's possible that you would use password reset instead of password change and call it password change. I don't believe it but it's not me you have to convince.

[DireWolfM14]

When I got the account there is no email in it so I created new email and added it into this profile then later changed my password via email.

Is that even possible?  I don't know how the forum functioned back then, but if I'm not mistaken an email address is mandatory for account creation.  I'm starting to regret attempting to help you save your account.  If this is indeed a hacked account that changes everything.

There are some further things that I find suspicious while you were in Eroiy's Signature campaign. I have no good proof of those accounts being linked but if anyone wants to go through their posting history and try to check with this user then I will send their names in Pm to run a check.

The thought occurred to me that St4yInTh3D4rk's lack of interest in defending the account might be due to having alts to which he could switch his focus.  Pm me what you've found and I'll try to make time to dig deeper as well.

[suchmoon]

When I got the account there is no email in it so I created new email and added it into this profile then later changed my password via email.

Is that even possible?  I don't know how the forum functioned back then, but if I'm not mistaken an email address is mandatory for account creation.  I'm starting to regret attempting to help you save your account.  If this is indeed a hacked account that changes everything.

I feel there is a very convenient language barrier, real or feigned. "got this from someone on facebook groups" means "met someone on facebook groups and got it from them", "change" means "add" or "reset", so "no email" can mean "no valid email" I guess. This is quite pointless.

[1miau]

At first, thanks for addressing the concerns here, @St4yInTh3D4rk

I believe you that you might not have the intention to scam anyone here and you look more trustworthy than the original owner (more due to the fact that the original owner pulled an exit-scam). But honestly I can't do much here. You know well that involvements in account sales are discouraged and accounts involved in it risk to get a red tag:

Actually selling the bitcointalk account are allowed but not encouraged so the sold account and the buyer and seller will get red tag if they get caught,so the moderators have nothing to do with that,if you want to stay away from scam then you need to stay away from account selling.

http://archive.is/OEDOK#selection-925.0-925.13

In comparison to most account buyers who deny their actions, I appreciate it that you admitted it having bought your account.

Since I'm relatively new to DT and not an experienced sold account detector I don't want to be a decisive factor about your account being tagged or not and I'm open to change my rating if some other DT members think you should be untagged. In addition, I will talk to your bounty manager.
Buying accounts is not a good idea, you know that. The date of your account purchase was way too late to be considered as legal (I don't know exactly when the view of the community regarding account sales changed).

And your story about Facebook is also a little bit weird, especially that your account was without mail. Like DireWolfM14 said I think it's not possible to have an account without mail and the questioned point of time was only a little bit than 1 year ago.

I would like if you can list the steps how you got the account from your first action until you posted the first post here. But I don't want to make too much hope for you, I don't know any case where a detected account buyer escaped without red tag lately.

[Avirunes]

St4yInTh3D4rk was a participant in Eroiy signature campaign which started on 26th Jan 2018 and ended on 2nd March 2018. The campaign had special rates for those who had earned merits. St4yInTh3D4rk applied and was accepted on 27th Jan 2018.

This is the merit history of St4yInTh3D4rk

Merit sent by St4yInTh3D4rk from January 24, 2018 until March 22, 2019 (source)


Tue Jan 30 13:54:36 2018: 2 to jrrsparkles (suspected)(history) for Re: Where to find the best wallets..
Tue Jan 30 08:37:36 2018: 2 to supermine (suspected)(history) for Re: myetherwallet.com is big scam



Merit received by St4yInTh3D4rk from January 24, 2018 until March 22, 2019 (source)


Mon Jan 28 16:10:29 2019: 1 from o48o (history)for Re: Are there any cloud mining services that aren't scams?
Mon Jan 28 10:00:40 2019: 1 from mocacinno (history)for Re: Are there any cloud mining services that aren't scams?
Wed Jan 16 16:34:11 2019: 1 from bL4nkcode (history)for Re: MyEtherWallet introduces "MEWconnect" for Android & new interface in beta phase
Mon Feb 12 07:15:30 2018: 5 from Thanasis (suspected)(history)for Re: Bounty Rewards: Sell immediately or HODL?
Thu Feb  1 16:47:47 2018: 2 from liuqi (suspected)(history)for Re: My EOS Balance in Exodus Wallet disappeared!
Thu Feb  1 13:30:10 2018: 1 from playboy654 (suspected)(history)for Re: u think myerherwallet.com
Thu Feb  1 07:18:17 2018: 1 from semobo (suspected)(history)for Re: Facebook bans cryptocurrency ads..
Tue Jan 30 06:52:45 2018: 2 from jrrsparkles (suspected)(history)for Re: How do I get merit and trust?

Interesting part is that user started receiving merit while in campaign. So I have marked all the accounts who have sent him/received merits.

Here is the catchy part: All those who I have marked as (suspected) have sent merits/received in their merit history to each others.

semobo (http://loyce.club/Merit/history/348980.html)
jrrsparkles (http://loyce.club/Merit/history/226526.html)
playboy654 (http://loyce.club/Merit/history/1330856.html)
liuqi (http://loyce.club/Merit/history/113294.html)
Thanasis (http://loyce.club/Merit/history/305365.html)
supermine (http://loyce.club/Merit/history/21690.html)


Want to know what others think of this?


I already checked one account of this list and it seems like this one Thanasis is a bought account.

The actual user used to post about his trading bot and posted last on September 25 , 2017 : https://bitcointalk.org/index.php?topic=643235.msg22208725#msg22208725

On October 5, 2017 suddenly started posting in discussion threads https://bitcointalk.org/index.php?topic=1945593.msg22609061#msg22609061


Also on October 5, 2017 according to seclog's archive it seems like three password changes were made on that day.

Code:

October 03, 2017, 06:55:48 PM - Thanasis - password changed [1]
October 05, 2017, 11:51:04 AM - Thanasis - password changed [2]
October 05, 2017, 01:31:23 PM - Thanasis - password changed [3]

Reference:
[1] http://archive.is/Za1US#selection-85995.0-85999.19
[2] http://archive.is/Za1US#selection-79643.0-79647.19
[3] http://archive.is/Za1US#selection-79275.0-79279.19



Just a side note: There is already a thread from ThePharmacist about supermine account being suspected as hacked/sold : https://bitcointalk.org/index.php?topic=5091064.msg48957146#msg48957146

[1miau]

[...]

Nice research, I've not the time to start digging right now but it took me no more than 1 minute to get another posting gap for another user:

jrrsparkles

April 06, 2014
http://archive.is/TNlWu#selection-2239.0-2239.11

December 12, 2017
http://archive.is/UYuKO#selection-2355.0-2355.11

Post history: http://archive.is/S1Ew3#selection-1117.1-1117.35


About the Merit received / sent during Eroiy signature campaign I don't think that it's very meaningful, it was a few days after the Merit System started and people sent Merit frequently.
Address connections would be interesting here but I've no time to dig deeper right now.

Good research anyway @Avirunes, +1

[unibitcoinist]

jrrsparkles (suspected)(history) for Re: Where to find the best wallets..

Surprisingly jrrsparkles is also a hacked/bought account.
Before April 2014, he posted in mining (altcoins) only and went inactive. Came back at December 12, 2017 and posted in Help and Beginners, replied in a thread someone asking for best bounty.
Merit circle mostly limited to supermine, thanasis, stayinthedark. No doubt it's another alt of stayinthedark. Sorry stayinthedark, you are not anymore allowed to stay in the dark 

[Avirunes]

jrrsparkles (suspected)(history) for Re: Where to find the best wallets..

Surprisingly jrrsparkles is also a hacked/bought account.
Before April 2014, he posted in mining (altcoins) only and went inactive. Came back at December 12, 2017 and posted in Help and Beginners, replied in a thread someone asking for best bounty.
Merit circle mostly limited to supermine, thanasis, stayinthedark. No doubt it's another alt of stayinthedark. Sorry stayinthedark, you are not anymore allowed to stay in the dark  

I looked back into archives earlier and jrrsparkles was one of the newbies in 2017 which woke up. Many newbies in that log were waking up just with some seconds apart. What further more suspicious is that jrrsparkles woke up 1-2 day near when Thanasis changed his password.

I have to look up into archives again.

[DireWolfM14]

I'm now convinced that jrrsparkles, semobo, and St4yInTh3D4rk are under the control of the same person.  There may me more accounts yet to discover.  Those three accounts in particular seem to have the same posting styles, use the same broken English, and make the same punctuation errors.  The evidence is all circumstantial, and I would prefer to find blockchain connections between the addresses used by the accounts.  Unfortunately I have not been able to.  

If true, the owner of these accounts is abusing the Bustadice campaign by having the accounts jrrsparkles and St4yInTh3D4rk enrolled concurrently.

jrrsparkles: *none found*
semobo: 12thqwSQVwsfjFJ6FExGme6oiFv3h3fudB
St4yInTh3D4rk: 12oJAhTPSm3u12kwEqDoBAYGCgxR4tZK6h

Once again, St4yInTh3D4rk has been silent since the prospects of alt accounts was mentioned.  That also seems odd.