Bitcoin Forum
May 24, 2024, 11:40:54 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: 2 Legendary (1 green trust) 1 senior seems to be compromised/hacked/sold  (Read 293 times)
coinlocket$ (OP)
Legendary
*
Offline Offline

Activity: 2380
Merit: 1512


#1 VIP Crypto Casino


View Profile
April 01, 2019, 11:48:42 AM
 #1

Huge gap on their post history, participating on same bounties around September and more accounts involved.


dadon
User705
btcdemon




User705

https://bitcointalk.org/index.php?action=profile;u=119418;sa=showPosts;start=60
http://archive.fo/mF5b1


dadon

https://bitcointalk.org/index.php?action=profile;u=170023;sa=showPosts;start=60
http://archive.fo/JVmvD


btcdemon

https://bitcointalk.org/index.php?action=profile;u=337009;sa=showPosts;start=60
http://archive.fo/1XkLM


From here and here

https://docs.google.com/spreadsheets/d/1VAY4_xLCDCRit5wZTJSWf6UDCyM_vWP_9Hcj9OUeQLg/preview?usp=embed_googleplus#gid=102473056
https://docs.google.com/spreadsheets/d/1JJscrOsH2WJzdmvUhl52qJkvsWg1aUnkX_9Y7-0JKgU/preview?usp=embed_googleplus#gid=180114258

I've found their eth addresses

dadon 0xcdF937C04b6b87871Bc83fc67f982216Fc212b1E
User705 0x70a18B0F75AB3B4B30c088D32a7cDC28b9B2503d
btcdemon 0xB6AA22C732062F7ea60d570839dd4713F4afb663

From here we can found those 3

https://etherscan.io/address/0xb6aa22c732062f7ea60d570839dd4713f4afb663#tokentxns

https://etherscan.io/address/0xcdf937c04b6b87871bc83fc67f982216fc212b1e#tokentxns

https://etherscan.io/address/0x70a18b0f75ab3b4b30c088d32a7cdc28b9b2503d#tokentxns


I will not copy paste everything but he bounces (SEDO)  tokens on different address till get them all here

Code:
0x7F5847c0cd2c23327d9A24357a9F99C8EE100e79

https://etherscan.io/address/0x7f5847c0cd2c23327d9a24357a9f99c8ee100e79#tokentxns

Any idea on what is this address?


.
.BITCASINO.. 
.
#1 VIP CRYPTO CASINO

▄██████████████▄
█▄████████████▄▀▄▄▄
█████████████████▄▄▄
█████▄▄▄▄▄▄██████████████▄
███████████████████████████████
████▀█████████████▄▄██████████
██████▀██████████████████████
████████████████▀██████▌████
███████████████▀▀▄█▄▀▀█████▀
███████████████████▀▀█████▀
 ▀▀▀▀▀▀▀██████████████
          ▀▀▀████████
                ▀▀▀███

.
......PLAY......
Avirunes
Legendary
*
Offline Offline

Activity: 3094
Merit: 1468


View Profile WWW
April 02, 2019, 03:07:18 AM
 #2

Code:
0x7F5847c0cd2c23327d9A24357a9F99C8EE100e79

Any idea on what is this address?


Seems like an exchange address to me. Deposit address >> 0x7f5847c0cd2c23327d9a24357a9f99c8ee100e79 (exchange address)

I haven't yet checked the seclogs and other connections.
Yaunfitda
Hero Member
*****
Offline Offline

Activity: 2856
Merit: 593



View Profile
April 02, 2019, 04:36:44 AM
 #3

Code:
0x7F5847c0cd2c23327d9A24357a9F99C8EE100e79

Any idea on what is this address?


Seems like an exchange address to me. Deposit address >> 0x7f5847c0cd2c23327d9a24357a9f99c8ee100e79 (exchange address)

I haven't yet checked the seclogs and other connections.

dadon - https://bpip.org/profile.aspx?p=dadon

Code:
Security/Moderator Log
8/31/2018 6:44:57 AM     woke up



btcdemon - https://bpip.org/profile.aspx?p=btcdemon
Code:
Security/Moderator Log
9/5/2018 1:36:55 PM     woke up

███████████████████████████████
███████████████████████████████
███▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀███████████
█████████████▀▀        ▀▀██████
██████▀▀▀▀▀▀              ▀████
██████████▀     ▄▄██▄▄     ▀███
██████████      ██████      ███
██████████▄     ▀▀██▀▀     ▄███
██████▄▄▄▄▄▄              ▄████
█████████████▄▄        ▄▄██████
███▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄███████████
███████████████████████████████
███████████████████████████████
.
|
▄▄███████▄▄
▄████▀▀▀▀▀▀▀████▄
▄███▀▄▄███████▄▄▀███▄
▄██▀▄█▀▀▀█████▀▀▀█▄▀██▄
▄██▄██████▀████░███▄██▄
███░████████▀██░████░███
███░████░█▄████▀░████░███
███░████░███▄████████░███
▀██▄▀███░█████▄█████▀▄██▀
▀██▄▀█▄▄▄██████▄██▀▄██▀
▀███▄▀▀███████▀▀▄███▀
▀████▄▄▄▄▄▄▄████▀
▀▀███████▀▀
SSC NAPOLI
OFFICIAL EUROPEAN
BETTING PARTNER
|.ROLLBOTS.|
▄▄███████▄▄
▄███████████████▄
▄███████████████████▄
▄██▀▀▀▀▀▀▀▀▀▀▀▀▀▀█████▄
▄█████████▀████████▀████▄
██████▄▄▄█████▄▄█████████
█████████████████████████
██████▀▀▀█████▀▀█████████
▀█████████▄████████▄████▀
▀██▄▄▄▄▄▄▄▄▄▄▄▄▄▄█████▀
▀███████████████████▀
▀███████████████▀
▀▀███████▀▀
ROLLBIT COIN
TRADE RLB NOW!
|...PLAY NOW...
Veleor
Legendary
*
Offline Offline

Activity: 1484
Merit: 1653


Rêlêå§ê ¥ðµr MïñÐ


View Profile WWW
April 02, 2019, 05:29:46 AM
 #4

Huge gap on their post history, participating on same bounties around September and more accounts involved. ~

Pay attention to the fact that three accounts were active on the same day the last time.

March 27, 2019, 08:40:59 AM [archive] dadon
March 27, 2019, 05:39:08 AM [archive] User705
March 27, 2019, 05:24:18 AM [archive] btcdemon
Harlot
Hero Member
*****
Offline Offline

Activity: 1806
Merit: 671


View Profile
April 02, 2019, 11:35:27 AM
 #5

The strange thing here is if this was a hacked or bought account all three account would have changed their email or password by which all of them have not shown in their profile. I know the evidence is big against the accounts but I don't see the reason why the alleged account farmer will still be using the same email address and the same password. So I think the only way to prove that this is being played by one person is one of then have a mistake on putting some of his credentials on another one of his accounts.
morvillz7z
Legendary
*
Offline Offline

Activity: 2198
Merit: 2025


Join the world-leading crypto sportsbook NOW!


View Profile
April 02, 2019, 01:24:09 PM
 #6

The strange thing here is if this was a hacked or bought account all three account would have changed their email or password

I'd say you don't necessarily need to change either of them. I've seen plenty of hacked old accounts with no records of email or password change.

Looking at btcdemon, he appears to be a native English speaker given the posts he has made between 2014-2015. Promoting some sort of a dice game called  BTCDEMON.

Archived seclog shows - November 07, 2017, 07:12:25 AM - btcdemon - woke up

After that, 4 weird posts made in 2017, trying to sell some scam ECH tokens:

Dear all member!
Demand for ownership ECH and lending is too great. So we will sell another 2 million ECH.


Bounty reports:

#Proof of authentication
Joined twitter campaign
Telegram Username: @btcdemon
Twitter links: https://twitter.com/Bitlady2


and zero posts made in English:

бнб xaйпyeт тaк нa фoнe нoвocтeй o ycпeшнo пpoвeдeнныx aйcиo нa coбcтвeннo плaтфopмe бинaнca. нo в цeлoм и oбщeм движeния зaмeтны.



  ▄▄███████▄███████▄▄▄
 █████████████
▀▀▀▀▀▀████▄▄
███████████████
       ▀▀███▄
███████████████
          ▀███
 █████████████
             ███
███████████▀▀               ███
███                         ███
███                         ███
 ███                       ███
  ███▄                   ▄███
   ▀███▄▄             ▄▄███▀
     ▀▀████▄▄▄▄▄▄▄▄▄████▀▀
         ▀▀▀███████▀▀▀
░░░████▄▄▄▄
░▄▄░
▄▄███████▄▀█████▄▄
██▄████▌▐█▌█████▄██
████▀▄▄▄▌███░▄▄▄▀████
██████▄▄▄█▄▄▄██████
█░███████░▐█▌░███████░█
▀▀██▀░██░▐█▌░██░▀██▀▀
▄▄▄░█▀░█░██░▐█▌░██░█░▀█░▄▄▄
██▀░░░░▀██░▐█▌░██▀░░░░▀██
▀██
█████▄███▀▀██▀▀███▄███████▀
▀███████████████████████▀
▀▀▀▀███████████▀▀▀▀
▄▄██████▄▄
▀█▀
█  █▀█▀
  ▄█  ██  █▄  ▄
█ ▄█ █▀█▄▄█▀█ █▄ █
▀▄█ █ ███▄▄▄▄███ █ █▄▀
▀▀ █    ▄▄▄▄    █ ▀▀
   ██████   █
█     ▀▀     █
▀▄▀▄▀▄▀▄▀▄▀▄
▄ ██████▀▀██████ ▄
▄████████ ██ ████████▄
▀▀███████▄▄███████▀▀
▀▀▀████████▀▀▀
█████████████LEADING CRYPTO SPORTSBOOK & CASINO█████████████
MULTI
CURRENCY
1500+
CASINO GAMES
CRYPTO EXCLUSIVE
CLUBHOUSE
FAST & SECURE
PAYMENTS
.
..PLAY NOW!..
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!