Flagging accounts which are up to sale [DT member actions needed]

[bob123]

It is trivial to fake an IP address...you don’t even need to use a VPN. There are services that will allow you to have what appears to be a residential IP address of a distinct location.

You don't say 

But based on the fact that most accounts offered by the shady person (a.k.a. account seller) only have english posts and this account additionally is active in the german sub, it is very well imaginable that the account got hacked.

We can't be absolutely sure. But if the IP log shows a login from a completely different IP / country while trying to sell this account, it is very probable that it got hacked.
Therefore i will change my neg trust rating to a neutral one if a trustworthy member of this forum confirms the IP log shown.

[marlboroza]

One of accounts tried to scam https://bitcointalk.org/index.php?topic=5158687.0 on larger scale.

[actmyname]

If the account has not been proven to belong to a hacker/seller then nothing should happen to it.

nonnakip did change their password and email however that is not evidence for a hack/sale. It's a warning sign.

[bones261]

If the account has not been proven to belong to a hacker/seller then nothing should happen to it.

nonnakip did change their password and email however that is not evidence for a hack/sale. It's a warning sign.

Am I being heavy handed by giving out a neutral rating and posting in the NastyFans thread to give them a warning?

[actmyname]

Am I being heavy handed by giving out a neutral rating and posting in the NastyFans thread to give them a warning?

Certainly not. But this doesn't call for any flag action above that. In my opinion.

[The-One-Above-All]

Did anyone ever verify if the nutildah account sale had a password change?

https://bitcointalk.org/index.php?topic=5134507.msg50719875#msg50719875

this one seems to be escaping the attention of the account sale hunters.

How about the I.P. did that change during the months of it being on sale to the claim from that account later it was never sold?

Can you really flag accounts up for sale ? what if months later that account posts a message it is no longer up for sale?  that could mean it was never sold right?

[zackie]

As I said, that proves nothing because of VPNs. I could do whatever you or anybody else here wants, there will always be somebody saying: "But this is still no evidence, do this and do that!" This will be a
never ending story. I'm the real zackie and this account is not for sale. Believe it or not, I don't care.

Have you checked https://bitcointalk.org/myips.php ? You have only 30 days to see the account thief's IP address.

Holy crap! Thanks for that link. Here is the result:

2019-06-25 18:52:29   2019-06-25 19:53:15   xx.xxx.xxx.xx   XXXXXXXx, Germany
2019-06-24 22:00:53   2019-06-24 22:01:56   xxxx:xx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx   XXXXXXXX, Germany
2019-06-24 20:03:48   2019-06-24 20:52:38   xxx.xxx.xxx.xxx    XXXXXXX, Germany
2019-06-19 09:38:21   2019-06-20 14:02:48   42.201.183.65   Karachi, Pakistan

Indeed, somebody from Pakistan used my account!

But hey, you know.... I could have used a VPN....

Could you let any trusted member of the community log into your account to verify the IP log ?
Once done - and given that the IP log indeed shows a weird login from pakistan -  i will too remove my negative rating.

Yes, I coud do that. But I'm not very active and therefore I don't know which users are trustworthy. You have to name somebody and let me check.

[bob123]

Yes, I coud do that. But I'm not very active and therefore I don't know which users are trustworthy. You have to name somebody and let me check.

I would suggest LoyceV, if he is up for that.
He also logged into my throwaway account and confirmed the PM's.

If you don't trust him or he doesn't want to do that, anyone from DT1 should be fine.
Just make sure to change your password before handing it out, and afterwards again 

[LoyceV]

I would suggest LoyceV, if he is up for that.
He also logged into my throwaway account and confirmed the PM's.

If you don't trust him or he doesn't want to do that, anyone from DT1 should be fine.
Just make sure to change your password before handing it out, and afterwards again  

I can do this if zackie wants me to. If so:
1. Change your password first
2. PM me the password and the link on https://bitcointalk.org/captcha_code.php (I don't want to expose my IP, and I also don't want to click fire hydrants)
3. I'll check https://bitcointalk.org/myips.php and post (censored) results
4. Change your password again
You'll have to do this within 30 days from the compromised login, otherwise myips.php won't show it anymore.

Update

Have you checked https://bitcointalk.org/myips.php ? You have only 30 days to see the account thief's IP address.

2019-06-25 18:52:29   2019-06-25 19:53:15   xx.xxx.xxx.xx   XXXXXXXx, Germany
2019-06-24 22:00:53   2019-06-24 22:01:56   xxxx:xx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx   XXXXXXXX, Germany
2019-06-24 20:03:48   2019-06-24 20:52:38   xxx.xxx.xxx.xxx    XXXXXXX, Germany
2019-06-19 09:38:21   2019-06-20 14:02:48   42.201.183.65   Karachi, Pakistan

Indeed, somebody from Pakistan used my account!

But hey, you know.... I could have used a VPN....

I can confirm this matches https://bitcointalk.org/myips.php on zackie's account. There is no older entry than 2019-06-19 (and this log shows 30 days).

You (zackie) should change your password again. You can also Reset your captcha code.

[bob123]

Update

Have you checked https://bitcointalk.org/myips.php ? You have only 30 days to see the account thief's IP address.

2019-06-25 18:52:29   2019-06-25 19:53:15   xx.xxx.xxx.xx   XXXXXXXx, Germany
2019-06-24 22:00:53   2019-06-24 22:01:56   xxxx:xx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx   XXXXXXXX, Germany
2019-06-24 20:03:48   2019-06-24 20:52:38   xxx.xxx.xxx.xxx    XXXXXXX, Germany
2019-06-19 09:38:21   2019-06-20 14:02:48   42.201.183.65   Karachi, Pakistan

Indeed, somebody from Pakistan used my account!

But hey, you know.... I could have used a VPN....

I can confirm this matches https://bitcointalk.org/myips.php on zackie's account. There is no older entry than 2019-06-19 (and this log shows 30 days).

You (zackie) should change your password again. You can also Reset your captcha code.

I have removed my negative rating and left a neutral one instead.

@zackie
Did you use the same password for multiple sites ? If so, the chances are high that other accounts of you are compromised as well.
If i were you, i'd check them and maybe change all passwords.

[zackie]

Thanks guys.

[TR45EP]

I decided to use some spare time to get some accounts - which are up to sale - flagged.

• pant-79 https://bitcointalk.org/index.php?action=profile;u=203430

According to him, some of them (the first and/or the second one) are already banned.
However, the remaining ones - which he wanted to sell - are not banned yet.

pant-79 https://bitcointalk.org/index.php?action=profile;u=203430
This account is mine. July 16, I found that I can not log into my account. As a result of the investigation, I found this thread. As I can see from the information you provided, the thieves got access to my account back in June (as they suggested you to buy this acc back in June). The account is signed by my signature, but unfortunately I no longer have access to the email to which I registered the account. I wrote a letter to the site administration. I hope that the site administration will return my account back to me.

[DireWolfM14]

pant-79 https://bitcointalk.org/index.php?action=profile;u=203430
This account is mine. July 16, I found that I can not log into my account. As a result of the investigation, I found this thread. As I can see from the information you provided, the thieves got access to my account back in June (as they suggested you to buy this acc back in June). The account is signed by my signature, but unfortunately I no longer have access to the email to which I registered the account. I wrote a letter to the site administration. I hope that the site administration will return my account back to me.

Follow the instructions in this thread, you may be able to recover your account.

https://bitcointalk.org/index.php?topic=5089777.0

[TR45EP]

pant-79 https://bitcointalk.org/index.php?action=profile;u=203430
This account is mine. July 16, I found that I can not log into my account. As a result of the investigation, I found this thread. As I can see from the information you provided, the thieves got access to my account back in June (as they suggested you to buy this acc back in June). The account is signed by my signature, but unfortunately I no longer have access to the email to which I registered the account. I wrote a letter to the site administration. I hope that the site administration will return my account back to me.

Follow the instructions in this thread, you may be able to recover your account.

https://bitcointalk.org/index.php?topic=5089777.0

Thanks for the link. I have already written a letter with details to recoveries...@bitcointalk.org
I hope that I will regain access to my account. I also see that my account was already sold. Now the one who bought it started a signature campaign. I left him a message clarifying the situation. Perhaps he will be prudent and give me my account back.
I just wanted to write in this thread, because I see that my account count like suspicious. When I get access to it back, I would not want to get a negative trust.

[DireWolfM14]

pant-79 https://bitcointalk.org/index.php?action=profile;u=203430
This account is mine. July 16, I found that I can not log into my account. As a result of the investigation, I found this thread. As I can see from the information you provided, the thieves got access to my account back in June (as they suggested you to buy this acc back in June). The account is signed by my signature, but unfortunately I no longer have access to the email to which I registered the account. I wrote a letter to the site administration. I hope that the site administration will return my account back to me.

Follow the instructions in this thread, you may be able to recover your account.

https://bitcointalk.org/index.php?topic=5089777.0

Thanks for the link. I have already written a letter with details to recoveries...@bitcointalk.org
I hope that I will regain access to my account. I also see that my account was already sold. Now the one who bought it started a signature campaign. I left him a message clarifying the situation. Perhaps he will be prudent and give me my account back.
I just wanted to write in this thread, because I see that my account count like suspicious. When I get access to it back, I would not want to get a negative trust.

There's some odd things that have gone on with that account:

It was created in 2013, and fairly active until September of 2015 exclusively in the Russian local board.  The account posted only two posts in all of 2016, again in the Russian local.  After that, a 20 month break, and the first post upon return is a message in the staked address thread:

Please quote and verify my message. Thanks.

-----BEGIN BITCOIN SIGNED MESSAGE-----
This is pant-79 @ Bitcointalk.org. Today is July 30, 2018. This address is mine.
-----BEGIN SIGNATURE-----
1L1Rtv4w8guaVSbCwqmysWauJDKhVHUMPU
ID4FpM7/J36CVQIji60w+Wyk6GzmA5eUB+6RF+v2IUZMIN+2dagO6ZATGIvqcPKtsuOwOo0uDK+jzDjx9ilzYtk=
-----END BITCOIN SIGNED MESSAGE-----

Since then, only posts in the main board, not one in the Russian local.  Did you buy this account in 2018?  Can you sign a message with the address quoted above?

[LoyceV]

Now the one who bought it started a signature campaign.

Can you sign a message from an old staked address? If so, I'll tag the account until you have it recovered. That'll probably end his signature campaign earnings.

[TR45EP]

pant-79 https://bitcointalk.org/index.php?action=profile;u=203430
This account is mine. July 16, I found that I can not log into my account. As a result of the investigation, I found this thread. As I can see from the information you provided, the thieves got access to my account back in June (as they suggested you to buy this acc back in June). The account is signed by my signature, but unfortunately I no longer have access to the email to which I registered the account. I wrote a letter to the site administration. I hope that the site administration will return my account back to me.

Follow the instructions in this thread, you may be able to recover your account.

https://bitcointalk.org/index.php?topic=5089777.0

Thanks for the link. I have already written a letter with details to recoveries...@bitcointalk.org
I hope that I will regain access to my account. I also see that my account was already sold. Now the one who bought it started a signature campaign. I left him a message clarifying the situation. Perhaps he will be prudent and give me my account back.
I just wanted to write in this thread, because I see that my account count like suspicious. When I get access to it back, I would not want to get a negative trust.

There's some odd things that have gone on with that account:

It was created in 2013, and fairly active until September of 2015 exclusively in the Russian local board.  The account posted only two posts in all of 2016, again in the Russian local.  After that, a 20 month break, and the first post upon return is a message in the staked address thread:

Please quote and verify my message. Thanks.

-----BEGIN BITCOIN SIGNED MESSAGE-----
This is pant-79 @ Bitcointalk.org. Today is July 30, 2018. This address is mine.
-----BEGIN SIGNATURE-----
1L1Rtv4w8guaVSbCwqmysWauJDKhVHUMPU
ID4FpM7/J36CVQIji60w+Wyk6GzmA5eUB+6RF+v2IUZMIN+2dagO6ZATGIvqcPKtsuOwOo0uDK+jzDjx9ilzYtk=
-----END BITCOIN SIGNED MESSAGE-----

Since then, only posts in the main board, not one in the Russian local.  Did you buy this account in 2018?  Can you sign a message with the address quoted above?

Absolutely correct.
1. Due to personal circumstances from 2015 to 2018, I could not pay enough attention to crypto currencies. My activity in this direction has fallen a lot.
2. I am a Russian-speaking person, so there is nothing strange in the fact that my first messages were only in Russian. As proof, I can enter into correspondence in Russian. It is just that when conducting bounty campaigns, posts in local branches are not accepted (very often), therefore I have to write only in English branches.
3. In 2018, I returned to trading in crypto currencies. But so I had the need for additional income, I decided to conduct a bounty campaign.
4. Due to the fact that by 2018, cases of hacking accounts have become frequent, my account was signed by me.
5. Also, the site administration can verify that I have not changed the email since the creation of my account pant-79@mail.ru. Just as it turned out now, the password to the email has long been lost, and the mail.ru administration has deleted accounts that were created before 2012, so I don’t even have the opportunity to restore access to the email.

[TR45EP]

Now the one who bought it started a signature campaign.

Can you sign a message from an old staked address? If so, I'll tag the account until you have it recovered. That'll probably end his signature campaign earnings.

Do you mean to sign my current account with the same address that is signed pant -79? If yes, then of course I can.

[LoyceV]

Do you mean to sign my current account with the same address that is signed pant -79? If yes, then of course I can.

Sign from 1L1Rtv4w8guaVSbCwqmysWauJDKhVHUMPU and say something like:

Code:

Today is July 19, 2019, and my account pant-79 is hacked. This message is posted by user TR45EP to prove ownership

[nonnakip]

My account was hacked and sold. I post some details here.

bitcointalk.org forum is very helpful to restore account to me. I say thank you to this thread. You are real heros!