Are those alts? Let's investigate 5 merits for the one who can prove it.

[coinlocket$]

I was looking on this signature https://bitcointalk.org/index.php?topic=5125389.0 and my eye noticed this

oegarod u=1006363
https://bitcointalk.org/index.php?topic=5125389.msg50345642#msg50345642
Archive: http://archive.fo/BJSxD#selection-5241.0-5241.7

slackcryptoz u=1006323
https://bitcointalk.org/index.php?topic=5125389.msg50345660#msg50345660
Archive: http://archive.fo/pXSlE#selection-7151.0-7151.12

They both used a new virgin segwit address so we can't find transactions.

What we can do is looking on their post history and investigate, this is what I got so far

oegarod uses on his profile
https://bitcointalk.org/index.php?action=profile;u=1006363
Archive: http://archive.fo/l4bT8

Code:

1Pixb29WcPA5BcDQA9jRWVTmrNGd5WXoYB
0x29aD57Dd1C8f7CC4cC2c6F5E6ddc1ab965b2f396

slackcryptoz uses on his profile
https://bitcointalk.org/index.php?action=profile;u=1006323

Code:

1NMFJc1X9BxsQ7NuHyJTPrkWG6CVK19StG
0x192BD62404A1aAB74Ea97da32E0D19C047bb4C87

Archive: http://archive.fo/mvoL7

We have not so much bet let's investigate more on these bitcoin addresses, one is new but already we have one thing or better 3 things,

2 transactions in common and no cashout for those transaction

https://www.blockchain.com/it/btc/address/1Pixb29WcPA5BcDQA9jRWVTmrNGd5WXoYB
1Pixb29WcPA5BcDQA9jRWVTmrNGd5WXoYB


https://www.blockchain.com/it/btc/address/1NMFJc1X9BxsQ7NuHyJTPrkWG6CVK19StG
1NMFJc1X9BxsQ7NuHyJTPrkWG6CVK19StG


https://etherscan.io/address/0x29ad57dd1c8f7cc4cc2c6f5e6ddc1ab965b2f396 (linked to permabanned account https://bitcointalk.org/index.php?topic=2181508.msg23626035#msg23626035)
https://etherscan.io/address/0x192bd62404a1aab74ea97da32e0d19c047bb4c87

What we can look now at the merit history and see if we can find more  

*You must have EARNED a minimum of 5 Merit in the last 120 days to participate in this Campaign.
*Do not enroll alt-accounts in this campaign. If it is found out you've done so you'll be removed without payment or notice.

The only relevant thing is the quoted one, they will probably not accepted on the campaing but I like the feeling to be a small Sherlock so

Merit summary for oegarod

Merit: 252
Sent in the last 120 days
Today at 02:19:35 AM: 1 to Hhampuz for [OPEN] BestMixer Signature Campaign | Sr. Members - Legendary | Up to 0.01225BTC
March 25, 2019, 07:38:44 PM: 2 to jvdp for Re: Active bounty with reached softcap?

Received in the last 120 days
Today at 02:09:13 AM: 2 from Anait for Re: Favoritism vs Addiction


Merit sent by slackcryptoz from January 24, 2018 until March 22, 2019 (source)


Sat Jun 23 02:17:27 2018: 1 to Anait (history) for deleted post
Tue Feb 20 04:49:09 2018: 1 to litepresence (history) for Re: How to known a good ICO



Merit received by slackcryptoz from January 24, 2018 until March 22, 2019 (source)

Have you notice nothing? I did:

The user Anait in on both profiles, so let's get more on this user


Anait uses on his profile

Code:

1GeJx6V9GsYZcoTfFZqieaDQd3fJprJN4W
0x8AaFF7BCAa3fDecdc504e55100D116718F64135B

Archive: http://archive.fo/IueR7

What about his btc address? another address whit the same 2 transactions and no cashout
https://www.blockchain.com/it/btc/address/1GeJx6V9GsYZcoTfFZqieaDQd3fJprJN4W


So now what do we need to do? Investigate on this user merit (missing the today transaction till new Friday theymos merit.txt file)

Merit sent by Anait from January 24, 2018 until March 22, 2019 (source)




Merit received by Anait from January 24, 2018 until March 22, 2019 (source)


Tue Jul 10 17:10:14 2018: 2 from Zaizoun (history)for Re: I will pray for you! (literally)
Tue Jul  3 08:52:01 2018: 1 from G2z_Riya (history)for Re: BTC is back ? is that good time to invest ?
Wed Jun 27 06:31:28 2018: 1 from xIIImaL (history)for Re: ⚽⚽World Cup and crypto, what do you think?⚽⚽
Sat Jun 23 02:17:27 2018: 1 from slackcryptoz (history)for deleted post
Sat Jun 23 02:01:08 2018: 2 from ASHLIUSZ (history)for deleted post
Thu May 17 04:08:33 2018: 1 from Altas (history)for Re: India closes doors for Crypto Currency
Sun Feb 25 00:53:19 2018: 2 from n0ne (history)for Re: [2018-02-24]Gifting Bitcoin Is One Way a Person Can Avoid Paying Crypto-Taxes
Wed Jan 31 20:35:32 2018: 1 from Slow death (history)for Re: Bitcoin worth $25k in 2018

And what do we notice here?

These profiles:

Zaizoun
G2z_Riya
xIIImaL
slackcryptoz
ASHLIUSZ
Altas
n0ne

Now we need to look also from patterns here




Those 2 are actually on the same signature same logout and seems to have same transaction on the past



Same transaction from, sane singature on the past?
1L7bityoFcXwZAXoKQm6wVFkiusKW1pMMr

https://www.blockchain.com/btc/address/1L7bityoFcXwZAXoKQm6wVFkiusKW1pMMr


For now I stopped my investigation here.

I think

oegarod
slackcryptoz
Anait
G2z_Riya

Are alts

and
ASHLIUSZ
n0ne

can be alt, Idk If under the same person. (notice they both use bitcoin and eth addresses on profiles, another "strange coincidence"

Notice same patterns from similar profiles, logout, activity, number of posts etc.

[morvillz7z]

I looked at oegarod and slackcryptoz accounts briefly and found some additional information that further links them both.

Registered on the same date back in 2017:




They both applied for Multi Asset Security Token Signature Campaign on the same date, posts within a minute...also edited a day later within 4 minutes:



https://bitcointalk.org/index.php?topic=5112783.msg49854845#msg49854845

https://archive.fo/GfJXo

[coinlocket$]

Keep in mind they can be or they can not be alts, it's only a suspect for now based on the id registration and "randomly" joined the same campaign (2 times)

[morvillz7z]

How many more coincidences do we need? 

Just for the heck of it...there is exactly 20-day post gap between their last posts and MAST signature campaign applications. Time gap on both posts made on February 01 is 10minutes. Looking for plagiarism is what we need to do, multi-account signature campaign abusers often tend to copy and paste as they struggle to produce 100+ original posts per week. (I will look into it tomorrow).





https://archive.fo/x3Z2R#selection-925.1-1039.389

https://archive.fo/QPUfl#selection-511.1-639.121

[Hhampuz]

FWIW, I probably wouldn't accept either of these participants due to their post history. Much appreciated with the investigative work here coinlocket$!

[YOSHIE]

Accounts behave strangely, you can say alt, by connecting with each other.
Enough for evidence, or need to be investigated deeper.

Connected account:

1. Nekoma2018
2. Psalmy2cute
3. winbk15
4. Kaneki11
5. Akeeto
6. AMANULAT
7. weaverkaggs
8. Locotoni
9. winjk02
10. MrSpasybo
11. biternet
12. GAronov
13. eldarbek
14. winbk14
15. catbuizz4
16. loinguyen1984

ETH address Related:

Code:

1. 0xe32c340433A440A800277CA53627d99b4414345c
2. 0x628DF842a6CE463475b024Fc7a981Fcc8b917568
3. 0x29535BB9b64059983B7eb475e4D9Fd56490beFB2
4. 0x1FEfB1e64313c8cf9AeF6215797d3f264cAcBA18
5. 0x004edCC6a582EEA4691100d4ed35ed119d39d35a

Just proof of being connected:

Proof of authenticity
Facebook: http://Facebook.com/Mary.tanpinnu
Twitter: http://Twitter.com/bossman06011439
Wallet address: 0xe32c340433A440A800277CA53627d99b4414345c

( archive

Btt username: psalmy2cute
Link to your profile: https://bitcointalk.org/index.php?action=profile;u=1153318;sa=summary
Erc20 wallet: 0xe32c340433A440A800277CA53627d99b4414345c
Telegram username : @bossman

( archive

Twitter username: @ScottEric14
Twitter url: https://twitter.com/ScottEric14
Twitteraudit:https://www.twitteraudit.com
Followers: 3236
ERC20 Wallet address:0x628DF842a6CE463475b024Fc7a981Fcc8b917568

Twitter username: @ScottEric14
Twitter url: https://twitter.com/ScottEric14
Twitteraudit:https://www.twitteraudit.com
Followers: 3236
ERC20 Wallet address:0x628DF842a6CE463475b024Fc7a981Fcc8b917568

( archive )

Proof of authenticity
Facebook: https://www.facebook.com/lydiaros.ogbode.98
Twitter: http://Twitter.com/scottEric14
Address: 0x1Ab59fE1e699fdf3624FD2B5295Da3Eca45F7a71

( archive

Post: https://bitcointalk.org/index.php?topic=4631237.msg41926666#msg41926666

week 1
Bitcointalk UserName : akeeto
Telegram Username : kanekitty
Campaign Participated : telegram, facebook, twitter
Ethereum Wallet Address : 0x1Ab59fE1e699fdf3624FD2B5295Da3Eca45F7a71

facebook; https://web.facebook.com/lydiaros.ogbode.98

( archive )

BitcoinTalk ID: AManulat
BitcoinTalk URL: https://bitcointalk.org/index.php?action=profile;u=1591002
Twitter ID: @j_tolop
Telegram ID: @JTolop
ERC20 Wallet Address: 0x004edCC6a582EEA4691100d4ed35ed119d39d35a

( archive )

WEEK 2 - FEBRUARY 15, 2018 - FEBRUARY 21, 2018
spreadsheet : 453
eth : 0x1FEfB1e64313c8cf9AeF6215797d3f264cAcBA18

( archive )

# # # Proof of joined post
Bitcointalk username: weaverkaggs
Campaign in which you participate: Telegram
ETH address: 0x1fefb1e64313c8cf9aef6215797d3f264cacba18

( archive )

ETH address: 0x1fefb1e64313c8cf9aef6215797d3f264cacba18

( archive )

BitcoinTalk ID: AManulat
BitcoinTalk URL: https://bitcointalk.org/index.php?action=profile;u=1591002
Twitter ID: @j_tolop
Telegram ID: @JTolop
ERC20 Wallet Address: 0x004edCC6a582EEA4691100d4ed35ed119d39d35a

( archive )

(29/1 – 4/2)
BCT username: MrSpasybo
Profile link: https://bitcointalk.org/index.php?action=profile;u=1308842
ETH Wallet: 0xBc38F2403e277634d14Ad9638122052599A57e0F
Twitter URL: https://twitter.com/MSpasybo

( archive )

Post: https://bitcointalk.org/index.php?topic=3207011.msg40235097#msg40235097

#Proof of authentication #Proof of participation:
- Bitcointalk profile link: https://bitcointalk.org/index.php?action=post;topic=3207011.0;num_replies=1910
- Twitter Profile Link : https://twitter.com/Kanokko59007907
- Facebook Profile Link : https://www.facebook.com/kanokkorn.rattanasamai

( archive )

Post: https://bitcointalk.org/index.php?topic=3828804.msg40145888#msg40145888

Username bitcointalk: GAronov
LINK: https://bitcointalk.org/index.php?action=profile;u=2090445

TWITTER CAMPAIGN
UserName Twitter: @georg_aronov
URL Twitter: https://twitter.com/georg_aronov

( archive )

#Proof of authentication
1)Telegram username: @kfh9893287492834
2)Bitcointalk profile URL: https://bitcointalk.org/index.php?action=profile;u=1798656

( archive

Post: https://bitcointalk.org/index.php?topic=3713694.msg39593634#msg39593634

Telegram Airdrop
Bitcointalk username : catbuizz4
Telegram username : @catbuizz4
ETH address : 0x29535BB9b64059983B7eb475e4D9Fd56490beFB2

( archive )

#Proof of Authentification

Bitcointalk username: winbk14
Profile link: https://bitcointalk.org/index.php?action=profile;u=2126022
ETH Address (only one) : 0x29535BB9b64059983B7eb475e4D9Fd56490beFB2
Joining: Telegram Advertising Bounty (Phase 2)

( archive )

#JOIN AIRDROP

Medium ID : @loinguyen19842018
BitcoinTalk URL Profile: https://bitcointalk.org/index.php?action=profile;u=2104418
Telegram Username: @loi_nguyen

( archive

[morvillz7z]

Blockfolioz, G2z_Riya and Anait enroll together in MAST signature campaign. Applications submitted in the same day within 7 minutes.

All three accounts edit their posts on the very next day; edits happen within 8mins.



The same 20-day post gap can be seen here (for some reason Anait makes two extra posts but February 1st post aligns perfectly with the other two; 20min gap :







archive1, archive2, archive3


Shockingly, earlier this year they join another signature campaign (MoonX) in the exact same order, 4 minutes apart.



Posts prior to their MoonX applications happen in the span of 6 minutes, 12 hours earlier - same day.

archive1, archive2, archive3

[coinlocket$]

Summoning the artificial @loyceV AI. Can you scrap unedited?

https://bitcointalk.org/index.php?topic=4979978.msg44913950#msg44913950
https://bitcointalk.org/index.php?topic=4979978.msg44913988#msg44913988

[morvillz7z]

`snip`

Do you think they may have posted different BTC addresses? It's probably something else and rather insignificant but definitely worth a shot if LoyceV has access to these posts.

I looked at the oegarod and slackcryptoz accounts one more time. Besides the BTC transactions you found, the posting timeframe, their registration dates, I accidentally noticed that their bestmixer avatars are somehow broken/pixelated. You can see it here, they just look weird: https://archive.fo/GfJXo#selection-5921.0-5921.7

There are two more accounts with avatars that look "damaged", one probably has nothing to do with them, but Virtual miner like Blockfolioz, G2z Riya and Anait has a MoonX campaign application posted around the same time as the other 3, and you've previously investigated his MOZO BTC addy: 3BMEXUS2p6gE4ePxgKxrfN7is3fYmEQC9g.

[coinlocket$]

Yeah is a shot but we can try it, sometimes those farmers make mistakes https://bitcointalk.org/index.php?topic=5117790.msg50051758#msg50051758 and copypasted wrong data.

Well if the avatar is the same pixeled and is/was not downloadable from the bounty means that is probably uploaded local from the same pc

[LoyceV]

Summoning the artificial @loyceV AI. Can you scrap unedited?

No, sorry
I started saving new posts on September 12 last year, these posts were made on August 30.

[yahoo62278]

Both applied in Windice signature campaign within minutes of each other a few hours ago.

[morvillz7z]

More non-coincidental applications by these two.

Note who is the third account posting right after oegarod and slackcryptoz - ReiMomo

Him applying for bestmixer campaign ten minutes before his two buddies (p.s all three posts are now deleted, I suppose they are aware of this thread).

And again, ReiMomo in MAST two minutes after slackcryptoz' entry.

[akamit]

Coincidence is a rare thing and it doesn't happen very often.

If there was a way to check the IPs then it could be very helpful for investigations.

Theymos may help but it is very unlikely I think, I have seen such case only once. How abt mods, do they have the privilege to check IPs?

[Quickseller]

I want to point out that the accounts all having the same transaction being sent to their addresses is probably them all receiving a payout from a signature campaign they were enrolled in at the same time.

If they were both created at the same time, consistently enroll in similar campaigns within minutes of eachother, and are last active within minutes of eachother, they are probably the same person. The most telling piece of evidence presented in this thread is the enrolling within minutes of eachother many times, and I don't think this can be explained away as a coincidence.

I don't believe these people are doing any kind of harm to anyone, even if the "TOS" of the campaign is along the lines of "one account per person". If someone is making very good posts, it would benefit the company being advertised if one person is using two accounts to advertise. If someone is making bad posts with two accounts, the campaign manager should have not accepted either account in the first place.

I looked at their history, and think they are probably harmless. If they were to scam, I would prefer they be not exposed as alts until after they have (tried to) harm someone. The reason for this, is if they use oegarod to scam for example, he might think he is only risking the reputation and income generated by oegarod, but if the reputation and income from slackcryptoz is also affected, the scam may not be profitable for him. Also, if it is seen that scammers lose reputation/income from many accounts they control they thought were not connected, then others will be more hesitant to scam in the first place. Lastly, someone reviewing these types of threads can see what they can do to avoid detection, and not lose the reputation/income of their alt accounts when they harm someone via scamming.

[coinlocket$]

I don't believe these people are doing any kind of harm to anyone, even if the "TOS" of the campaign is along the lines of "one account per person".

If it is "against" the TOS, they are doing an untrusted thing enrolling on the same campaign, sadly I haven't a lot of time on these weeks but they seem to have more and more accounts.

Also, in my opinion, this is a "harm" to who wants legitly join a signature but he can't since people like this one do it with a ton of accounts, even if they can be good posts like this one https://bitcointalk.org/index.php?topic=5118846.msg50120062#msg50120062 (sadly I have no time to check them all also you know I'm not paid to do it)

[asche]

Enough for me to paint em red.

Thank you for the investigation, be it solely for abusing bounty campaigns when they apply at the same time for the same bounty.

At worst I am wrong, but it will make them come here and give us the girlfriend or neighbour explanation

[coinlocket$]

Blockfolioz, G2z_Riya and Anait enroll together in MAST signature campaign. Applications submitted in the same day within 7 minutes.

Yes, those 3 are 3 Alts, may be owned by the same owner.



https://bitcointalk.org/index.php?topic=4979978.msg44913950#msg44913950 http://archive.fo/wa6aE
https://bitcointalk.org/index.php?topic=4979978.msg44913988#msg44913988 http://archive.fo/IZLnk
https://bitcointalk.org/index.php?topic=4979978.msg44914133#msg44914133 http://archive.fo/8C5MG



https://bitcointalk.org/index.php?topic=5112783.msg49855003#msg49855003 http://archive.fo/YDGxJ
https://bitcointalk.org/index.php?topic=5112783.msg49855051#msg49855051 http://archive.fo/A5F9L
https://bitcointalk.org/index.php?topic=5112783.msg49855108#msg49855108 http://archive.fo/qmkYt

This can't be casual and I think is statistically almost impossible.
Probably going to tag them as well.

Mumble mumble, more patterns.

Merit sent by Anait from January 24, 2018 until March 29, 2019 (source)

Thu Mar 28 03:09:13 2019: 2 to oegarod (history) for Re: Favoritism vs Addiction



Merit received by Anait from January 24, 2018 until March 29, 2019 (source)

Tue Jul 10 17:10:14 2018: 2 from Zaizoun (history)for Re: I will pray for you! (literally)
Tue Jul  3 08:52:01 2018: 1 from G2z_Riya (history)for Re: BTC is back ? is that good time to invest ?
Wed Jun 27 06:31:28 2018: 1 from xIIImaL (history)for Re: ⚽⚽World Cup and crypto, what do you think?⚽⚽
Sat Jun 23 02:17:27 2018: 1 from slackcryptoz (history)for deleted post
Sat Jun 23 02:01:08 2018: 2 from ASHLIUSZ (history)for deleted post
Thu May 17 04:08:33 2018: 1 from Altas (history)for Re: India closes doors for Crypto Currency
Sun Feb 25 00:53:19 2018: 2 from n0ne (history)for Re: [2018-02-24]Gifting Bitcoin Is One Way a Person Can Avoid Paying Crypto-Taxes
Wed Jan 31 20:35:32 2018: 1 from Slow death (history)for Re: Bitcoin worth $25k in 2018

Merit sent by G2z_Riya from January 24, 2018 until March 29, 2019 (source)

Thu Feb 14 04:17:11 2019: 1 to romero121 (history) for Re: Martingale strategy in Sports Betting
Tue Jul  3 08:52:01 2018: 1 to Anait (history) for Re: BTC is back ? is that good time to invest ?
Tue Feb 20 07:34:43 2018: 1 to Wipro (history) for Re: gpu or antminer s9 for mining many different of coins - 2000/3000$



Merit received by G2z_Riya from January 24, 2018 until March 29, 2019 (source)

Tue Jul  3 00:07:42 2018: 2 from Duzter (history)for Re: Remember, Bitcoin is the best Cryptocurrency to Hodl.
Mon Jul  2 23:59:28 2018: 2 from n0ne (history)for Re: Women's interest in crypto trade increasing

[omer-jamal]

also there are Merit between Nekoma2018 & Kaneki11

Nekoma2018 send 2 Merit to Kaneki11 for Re: 🔴🚀🚀[BOUNTY] ...

[Quickseller]

I don't believe these people are doing any kind of harm to anyone, even if the "TOS" of the campaign is along the lines of "one account per person".

[...]
Also, in my opinion, this is a "harm" to who wants legitly join a signature but he can't since people like this one do it with a ton of accounts, even if they can be good posts [...]

I don't think it is fair to say that someone is doing harm to others (in a sense they are scamming) if they are so good at something that they are crowding out other people from being able to participate in a trade. Logically speaking if someone who can make a lot of posts that are very good, a smart campaign manager will give a custom deal requiring more posts that pays more than a "normal" spot, and multiple "normal" spots would be removed from that campaign.

I think if one person enrolls many alts in a campaign who post a bunch of garbage, I think it would be more accurate to say the campaign manager is scamming the company ultimately paying for the advertising, more than the person who enrolls the alts because it is the campaign manager not doing what they are being paid to do -- screen and vet campaign participants.