Bitcoin Forum
December 10, 2019, 07:32:29 AM *
News: Latest Bitcoin Core release: 0.19.0.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Big farm... or not? (48 alts connected)  (Read 107 times)
Ratimov
Full Member
***
Online Online

Activity: 196
Merit: 495


Margin enthusiast


View Profile
October 11, 2019, 06:41:16 AM
Merited by witcher_sense (2), madnessteat (1), zasad@ (1)
 #1

Hi. I'll start my story by opening a large farm of 30 accounts, 18 of which were already banned, and I first explored them for BAN evasion and  merit abuse, but later on I began to find more and more matches and the number of accounts increased to 48.

I'll start with Boss95rnd,because it is on this account that most of the addresses that other users will have are published.
Originally, the farm looked like this:

Boss95rnd -          10/3/2018 4:21:43 PM   password reset via secret question
dadisde -            11/24/2018 9:39:51 PM   Changed to Archived status   Autoban user
Vanderbleek -       12/8/2018 1:12:35 AM   Changed to Archived status   Autoban user
aalavandan -          1/8/2019 4:54:58 AM   Changed to Archived status   Autoban user
DominickA86 -      2/19/2019 8:52:03 PM   Changed to Archived status   Autoban user
ajdar.muxin.79 - 7/16/2019 10:11:30 PM   Changed to Archived status   Autoban user 
Correlll -             7/16/2019 10:14:11 PM   Changed to Archived status   Autoban user
clipto -               7/16/2019 10:06:14 PM   Changed to Archived status   Autoban user
cupruri -             7/16/2019 10:14:11 PM   Changed to Archived status   Autoban user
crzybilly -           7/16/2019 10:11:30 PM   Changed to Archived status   Autoban user
dipeco -             7/16/2019 10:08:52 PM   Changed to Archived status   Autoban user
der_troll -           7/16/2019 10:14:11 PM   Changed to Archived status   Autoban user
igor.vanyutin.83-7/16/2019 10:08:52 PM   Changed to Archived status   Autoban user
installer -           7/16/2019 10:11:30 PM   Changed to Archived status   Autoban user
pufenduy -         7/16/2019 10:06:14 PM   Changed to Archived status   Autoban user
siorapokk -         7/16/2019 10:08:52 PM   Changed to Archived status   Autoban user
chriseasan -         7/23/2019 8:19:46 PM   Changed to Archived status   Autoban user
Tarion -               8/24/2019 9:11:19 PM   Changed to Archived status   Autoban user
#Darren
cudora                
cribusen
cichaescut         
coaprotet
confreslamp
dcomomal
Patrix_1
r_delossa
Vickyphred
vanya.pronin.1983
zabir.brutov

Boss95rnd banned himself on October 3, 2018 by trying to change password through a secret question
https://bpip.org/profile.aspx?p=Boss95rnd
Code:
10/3/2018 4:21:43 PM password reset via secret question
Then he created a theme in Meta, where he explained the situation and there was used his first alt dadisde ,which will also be used in the bounty.
Hello dear BTT Admins,
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account Boss95rnd has been hacked/lost. Please reset the email to ccrreeppss2@list.ru. The current date is 03.10.2018.
-----BEGIN SIGNATURE-----
0xb1AC9db0d6a1eC291F427ad03fc3B632E1E93a56
-----END BITCOIN SIGNED MESSAGE-----
dadisde belongs to a group of users who have many similarities and features, for example, they all have the rank Copper Member and were registered in a short period of time.

siorapokk -      Copper Member - Date Registered:   September 26, 2018, 01:54:30 AM - 9/28/2018 4:41:53 PM   password changed
chriseasan -    Copper Member -  Date Registered:   September 26, 2018, 02:31:51 AM - 9/28/2018 4:27:42 PM   password changed
dadisde -        Copper Member -  Date Registered:   September 26, 2018, 02:44:42 AM - 9/28/2018 4:31:44 PM   password changed
cichaescut -    Copper Member -  Date Registered:   September 26, 2018, 04:05:40 PM - 11/1/2018 4:24:05 PM   password changed
coaprotet -     Copper Member -  Date Registered:   September 26, 2018, 04:36:26 PM - 10/25/2018 11:55:05 AM   password changed
cupruri -        Copper Member -  Date Registered:   September 26, 2018, 05:02:56 PM - 10/26/2018 2:08:18 PM   password changed
confreslamp - Copper Member -  Date Registered:    September 26, 2018, 05:34:21 PM - 11/1/2018 6:20:45 PM   password changed
dcomomal -    Copper Member -  Date Registered:   September 28, 2018, 06:35:45 PM - 11/1/2018 4:46:38 PM   password changed
dipeco -         Copper Member -  Date Registered:   September 28, 2018, 06:38:22 PM - 10/26/2018 12:55:53 PM   password changed
cudora -        Copper Member -  Date Registered:   September 28, 2018, 09:45:01 PM - 10/25/2018 11:51:54 AM   password changed
cribusen -     Copper Member -   Date Registered:   September 28, 2018, 10:38:13 PM - 11/1/2018 6:22:16 PM   password changed

All these accounts have changed their passwords from September 28 to November 1, most likely the accounts were hacked or bought.
Recently I spoke with a accounts seller, he provided me with information about a part of this list, but they were all in the rank newbie. He also noted that some of them had already been sold.

Bceм пpивeт пpoдaм aккayнты JR.Member + пoчтa пo 300 pyблeй зa 1 aккayнт
нa aккayнтe 42 Activity
(Aккayнты мoи)
Taк жe пpoдaм oптoм
5 aккayнтoв пo цeнe 1300 pyблeй
10 aккayнтoв пo цeнe 2400 pyблeй
50 aккayнтoв 10000
100 aккayнтoв 18000 pyблeй
Пишитe в тeлeгy @Freshmindoff


cichaescut        
coaprotet         
cupruri             
confreslamp    
dcomomal     
cudora               
cribusen          

This group of accounts may also have been bought or hacked, some have nearby registration dates and almost all have changed their passwords.

Vickyphred -           Jr. Member -  Date Registered:      June 20, 2018, 03:51:30 PM -   5/26/2019 12:28:59 PM   woke up
vanya.pronin.1983 -Member -      Date Registered:  August 26, 2018, 08:06:17 PM - 10/1/2018 6:27:46 PM   password changed
zabir.brutov -          Jr. Member - Date Registered:   August 26, 2018, 08:20:55 PM - 10/5/2018 3:33:57 PM   password changed
ajdar.muxin.79 -     Jr. Member - Date Registered:   August 26, 2018, 08:33:59 PM - 10/5/2018 3:38:38 PM   password changed
igor.vanyutin.83 -    Member -     Date Registered:   August 27, 2018, 12:18:59 PM - 10/6/2018 8:09:46 AM   password changed
Correlll -                 Member -     Date Registered:   October 18, 2017, 10:27:27 AM - 10/5/2018 9:31:24 AM   password changed
r_delossa -              Member -    Date Registered:   October 18, 2017, 10:31:14 AM - 10/4/2018 3:13:41 PM   password changed
Patrix_1 -               Member -     Date Registered:   October 18, 2017, 11:28:27 AM - 10/7/2018 3:32:10 PM   password changed
pufenduy -              Member -     Date Registered:   October 19, 2017, 05:48:43 PM - 10/5/2018 12:05:29 PM   password changed

The next group of accounts has an old registration. Also bought or hacked and all accounts have password changed.

DominickA86 -   Member -          Date Registered:   May 11, 2011, 09:45:51 AM -             9/30/2018 12:43:26 PM   password changed
aalavandan -     Member -           Date Registered:   May 14, 2011, 11:31:27 AM -             9/30/2018 12:52:06 PM   password changed
Tarion -             Member -           Date Registered:   May 11, 2011, 11:48:05 AM -             10/1/2018 1:10:38 PM   password changed
Vanderbleek -   Sr. Member -      Date Registered:   October 20, 2011, 09:36:04 PM -        10/3/2018 11:40:36 AM   password changed
der_troll -        Sr. Member -       Date Registered:   November 25, 2012, 08:25:20 PM -     10/18/2018 9:08:23 AM   password changed
#Darren -        Sr. Member -       Date Registered:   March 31, 2013, 06:01:10 AM -           10/30/2018 10:41:42 PM   password changed
installer -         Full Member -      Date Registered:   January 24, 2014, 08:33:05 PM -        3/30/2019 1:08:56 AM   password changed
clipto -             Member -            Date Registered:   March 19, 2014, 05:29:40 PM -           9/26/2018 7:33:02 PM   password changed
crzybilly -         Sr. Member -      Date Registered:   March 22, 2015, 11:00:44 AM -           9/26/2018 7:29:12 PM   password changed

Proof of the relationship between accounts:

Boss95rnd
Eth: 0xb1AC9db0d6a1eC291F427ad03fc3B632E1E93a56
Facebook: nikita.monastirskiy
Instagram: _faktastika_
Telegram: @nik95rnd

dadisde
Instagram: _faktastika_
Twitter: nik95rnd
Facebook: nikita.monastirskiy

Vanderbleek
https://bitcointalk.org/index.php?topic=5036112.msg46461275#msg46461275 (closed topic)
Telegram: cryptofanforever
cryptofanforever - will be found on other accounts. As the farm grew, new addresses were constantly added.
Proof:
Bitcointalk: cudora
Telegram: @cryptofanforever
Bitcointalk: cudora
Telegram: @nik95rnd

aalavandan
Twitter: @nik95rnd
Facebook: nikita.monastirskiy

DominickA86
https://bitcointalk.org/index.php?topic=4990965.msg46366066#msg46366066 (closed topic)
Telegram: @nik95rnd

ajdar.muxin.79
Eth: 0x20151c34d01d6785493f3416b3f82812a3dbb46f
Medium: @nik95rnd
Eth: 0x20151c34d01d6785493f3416b3f82812a3dbb46f  - This wallet will also meet in other accounts with old addresses.
Proof:clipto

Correlll
Telegram: @cryptofanforever
Telegram: @nik95rnd

clipto
Telegram: @nik95rnd
ETH: 0x20151c34d01d6785493f3416b3f82812a3dbb46f

cupruri
Telegram: @cryptofanforever
ETH: 0xA71cb9eE868821153Aa254fd08c8e185feA87584
Telegram: @nik95rnd

crzybilly
Telegram: @nik95rnd

dipeco
https://bitcointalk.org/index.php?topic=5117960.msg50059700#msg50059700 (closed topic)
Telegram: @nik95rnd

der_troll
https://bitcointalk.org/index.php?topic=5135250.msg51319699#msg51319699 (closed topic)
Telegram: @nik95rnd

igor.vanyutin.83
Telegram: @nik95rnd

installer
https://bitcointalk.org/index.php?topic=5151587.msg51537004#msg51537004 (closed topic)
Telegram: @nik95rnd

pufenduy
telegram: @nik95rnd

siorapokk
Telegram: @nik95rnd

chriseasan
Telegram: @nik95rnd

Tarion
https://bitcointalk.org/index.php?topic=5163998.msg52088414#msg52088414 (closed topic)
Facebook: nikita.monastirskiy
Instagram: _faktastika_

#Darren
Telegram: @nik95rnd

cudora
Telegram: @nik95rnd

cribusen
ETH: 0xA71cb9eE868821153Aa254fd08c8e185feA87584
0xA71cb9eE868821153Aa254fd08c8e185feA87584 - This wallet will also meet in other accounts with old addresses.
Proof: cupruri

cichaescut - This account has no addresses in the posts and no direct evidence of any relation to this farm.
From circumstantial proofs: Account from account seller's list, password changed, language change in one period with other Copper Member accounts, similar registration date

coaprotet
https://bitcointalk.org/index.php?topic=4862998.msg47493095#msg47493095 (closed topic)
Instagram: _faktastika_

confreslamp
Telegram: @nik95rnd

dcomomal
Telegram: @nik95rnd

Patrix_1
ETH: 0xb1ac9db0d6a1ec291f427ad03fc3b632e1e93a56
Telegram: @nik95rnd
ETH: 0x20151c34D01D6785493F3416b3f82812a3dbB46F

r_delossa
ETH: 0x20151c34D01D6785493F3416b3f82812a3dbB46F
https://bitcointalk.org/index.php?topic=5125221.msg50376850#msg50376850 (closed topic)
Telegram: @nik95rnd

vanya.pronin.1983
Telegram: @nik95rnd

zabir.brutov
Telegram: @nik95rnd

Vickyphred
In addition to @nik95rnd,account  Vickyphred also has new nicknames:

Telegram: @nik95rnd
Twitter: ukeme0
Steemit: @unfredo
Telegram: @unfredo
Twitter: brightphreda
https://bitcointalk.org/index.php?topic=5170862.msg52547158#msg52547158 (closed topic)
Reddit: unfredo

There are 3 accounts with these addresses:
Unfredo -        6/7/2018 7:07:32 PM   password reset via email - 5/16/2019 2:23:39 PM   Changed to Archived status   Autoban user
Phonexy -       6/9/2019 8:28:55 PM   password changed
Brandonkelv - 6/7/2019 5:01:42 PM   password change

Unfredo
Telegram: @unfredo
Reddit: Italyberg
Italyberg - this telegram nickname is also found at account Ucheman ,which continues the chain of alts and connects one group of accounts with another.
Reddit: unfredo
Facebook: bright.phreda.3

Phonexy
Facebook: bright.phreda.3
Reddit: unfredo
Telegram: @unfredo
Twitter: @ukeme0
ETH: 0x9F3285d33a66483De7AaabB99F81467A292C3018
0x9F3285d33a66483De7AaabB99F81467A292C3018 - this wallet also leads to the Ucheman account.

Brandonkelv
Facebook: bright.phreda.3
Twitter: brightphreda
Medium: @brightphreda
Reddit: unfredo

Ucheman - 5/18/2019 6:34:31 AM   password changed
From the growing clump of new nicknames and addresses we understand that Ucheman is related to this farm. Changed password may indicate that the account has been purchased or hacked like others.
Ucheman
Reddit: Italyberg
Eth: 0x9F3285d33a66483De7AaabB99F81467A292C3018


x50 is our everything
1575963149
Hero Member
*
Offline Offline

Posts: 1575963149

View Profile Personal Message (Offline)

Ignore
1575963149
Reply with quote  #2

1575963149
Report to moderator
1575963149
Hero Member
*
Offline Offline

Posts: 1575963149

View Profile Personal Message (Offline)

Ignore
1575963149
Reply with quote  #2

1575963149
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
Ratimov
Full Member
***
Online Online

Activity: 196
Merit: 495


Margin enthusiast


View Profile
October 11, 2019, 06:42:05 AM
Last edit: October 11, 2019, 03:34:43 PM by Ratimov
 #2

Other nicknames have also appeared in the Ucheman account:

https://bitcointalk.org/index.php?topic=5170862.msg52471639#msg52471639 (closed topic)
Telegram: @teehoney
https://bitcointalk.org/index.php?topic=5162093.msg51733139#msg51733139 (closed topic)
Twitter: @nsiman
Telegram: @lasisi123
ETH: 0x1714ea3Cce6E6B8680eeaB0EB03e51b6C4E2797e
Reddit: Abdulmalikbc

With the advent of these addresses, we identify 5 more related accounts:

nsiman -     9/4/2019 9:53:47 AM   woke up - 1/1/1970 12:00:00 AM   Changed to Archived status   Autoban user
Moshaid
lasisi1
Osaremien
Morningstarz4

We see the following coincidences in them:
nsiman
ETH: 0x1714ea3Cce6E6B8680eeaB0EB03e51b6C4E2797e
Telegram: @lasisi123
Twitter: Nsiman

Moshaid
Telegram: @teehoney
Telegram: Muibat1
Also, telegram Muibat1 have a account Sophiew ,which indicates the connection of these accounts.

lasisi1
Telegram: @lasisi123
Eth: 0x1714ea3Cce6E6B8680eeaB0EB03e51b6C4E2797e
Twitter: ekemzzythomas
Twitter ekemzzythomas also has an account Chicky213 that indicates a connection between these accounts.

Osaremien
Twitter: nsiman

Morningstarz4
Reedit: Abdulmalikbc

From these 5 accounts we see 2 more accounts that use the same addresses:

Sophiew -    5/12/2019 11:49:00 AM   woke up
Chicky213 - 8/17/2018 12:11:31 PM   password changed

Sophiew
Telegram: Muibat1

Chicky213
Twitter: ekemzzythomas
ETH: 0xF72E3f6e2e1971A0b4eBdE38d4bF4F4b02C5ed8A

This wallet also occurs in the account Queenofeast:

Queenofeast - Show the last posts of this person
Eth: 0xF72E3f6e2e1971A0b4eBdE38d4bF4F4b02C5ed8A

The following is a controversial relationship between past accounts and the following 6 accounts.The name's the same, Abdulmalikbc ,but it's from different social networks.I have not received an unambiguous response from other users as to whether  this is considered direct evidence or not.
If this fact is not taken into account, we again observe the relationship of 6 accounts with the rest of the accounts:

Lekatoo - 1/29/2019 9:33:11 PM   Changed to Archived status   Autoban user
bellokudi
Abdulbc
Samunto
mishti -          9/1/2018 2:06:56 PM   password reset via email
Mishti143 - 8/28/2018 12:45:25 PM   password reset via email

Lekatoo
Telegram: @Lekato
Twitter: @Samuntoo
Eth: 0x77585bD467ceA7B76A6B5C2Aa0ea44F328342134

bellokudi
ETH: 0x77585bD467ceA7B76A6B5C2Aa0ea44F328342134
telegram: @Lekato
Email: Gideonolalekan3@gmail.com        
Twitter: @abdulmlikbc
Facebook: muktar.abdulmalik1
Telegram: @Abdulmalikbc

Abdulbc
Telegram: @Abdulmalikbc
Telegram: @Lekato
Twitter: abdulmlikbc
Facebook: muktar.abdulmalik1

Samunto
telegram: @Lekato
ETH: 0x77585bD467ceA7B76A6B5C2Aa0ea44F328342134

mishti
Telegram: @Mishti143
Twitter: mishti22536361
Facebook: sudipta.dakshit.1

Mishti143
Email : visu46692@gmail.com
Telegram: @Mishti98
Facebook: sudipta.dakshit.1
Twitter: mishti22536361
@Mishti98-this address can be used to associate 1 more account mishti with the others

https://bitcointalk.org/index.php?topic=5081119.msg48681325#msg48681325
telegrame: @Abdulmalikbc


There are no more accounts related to this farm and yes, I have seen that the topic of these accounts has already come up several times
18 Accounts Connected:
Two accounts connected
But it wasn't a complete picture of the connection between accounts, it was just parts of it.Only one question remains, whether it's a large farm or several small farms.For a complete understanding of all the interrelationships of the farm, I have drawn a diagram showing the links between the accounts.There are 48 accounts in the scheme.




All these accounts were in the bounty.Here is a list of all the wallets that were specified in the accounts and to which the tokens were transferred:
0xb1AC9db0d6a1eC291F427ad03fc3B632E1E93a56
0x20151c34d01d6785493f3416b3f82812a3dbb46f

Many accounts still have addresses that aren't mentioned anywhere else, I'll put them all in one archive at once, in case they show up somewhere.

Archive

Merit abuse between accounts:



If we analyze some accounts, we can see cases of possible purchase of merit and transfusion between other accounts to achieve the next rank.Maybe it was the merit distributions between their accounts that were not noticed with the same addresses from this list or it's a parallel farms or a friend farms.

Account Slark may have been hacked, as evidenced by the numerous reviews in  trust, after the hacking started transfusing merit by 10 per 1 transaction.Boss95rnd was also among those to whom Slark sent 10 merit .Boss95rnd sent merits to his alt vanya.pronin.1983,next step is the clear distribution of merit among the other alts, the full picture can be seen on the chart.

Account crzybilly that was broken into or purchased for the farm,sent merit Huntler1993.On the same account sent merit and other farm account under the nickname Vanderbleek, which was also hacked or bought.

der_troll, which is also either hacked or bought, the day before the password change, one day sent merit to increase the rank Jr. Member accounts 74kedr and f1gm3nt, possibly accounts from another farm.

patrickrn32 sent merit to Vickyphred and Samunto at different times to reach the rank Jr. Member .

Patrix_1 received 10 merit from a merit seller MalReynolds and immediately distributed them to 5 accounts on the same day,namely ladaturekova, romeolopez21, alister.kain, kritiana008, aldorexxx to achieve the rank  Jr. Member, most likely another parallel farm.

r_delossa received one day from 2 accounts Xubu and entropi 10 merit and the same day, after 2 hours, sent 5 merit to another account fsn.

Yemolou sent merit cribusen and siorapokk with a difference of 1 day.

pufenduy received at different times the merit part of  merit was bought from the same seller MalReynolds who sold merit Patrix_1.
pufenduy sent merit 3 accounts: armack18, Answer United, fukkkxdfs in one day to obtain the rank Jr. Member.These accounts could also be part of some farm.

b]Correlll[/b] bought 10 merit from a seller of merit NILIcoin (see the entry in his trust), and then immediately transferred them to 4 accounts Klaviaturos, Azcoinbig, PWK91, payback_pbck to reach the rank Jr. Member,these four accounts can also be part of a farm.

Lekatoo received from Miiike, Wapinter, btcltcdigger 1 merit in a matter of hours.All the assessed posts were removed or it could be one post.

TimeTeller sent 1 merit cupruri, cudora and Moshaid to reach the rank Jr. Member.


And lastly, ban evasion.

BANNED:

dadisde - 11/24/2018 9:39:51 PM banned
ETH: 0xb1AC9db0d6a1eC291F427ad03fc3B632E1E93a56

DominickA86 - 2/19/2019 8:52:03 PM banned
https://bitcointalk.org/index.php?topic=4990965.msg46366066#msg46366066
Telegram: @nik95rnd

BAN EVASION:

#Darren
Telegram: @nik95rnd
cudora
Telegram: @nik95rnd
confreslamp
Telegram: @nik95rnd
dcomomal
Telegram: @nik95rnd
Patrix_1
ETH: 0xb1AC9db0d6a1eC291F427ad03fc3B632E1E93a56
Telegram: @nik95rnd
r_delossa
https://bitcointalk.org/index.php?topic=5125221.msg50376850#msg50376850 (closed topic)
Telegram: @nik95rnd
vanya.pronin.1983
Telegram: @nik95rnd
zabir.brutov
https://bitcointalk.org/index.php?topic=5165081.msg51926169#msg51926169 (closed topic)
Telegram: @nik95rnd
Vickyphred
Telegram: @nik95rnd


BANNED:

Unfredo - 5/16/2019 2:23:39 PM banned
Facebook: bright.phreda.3
Reddit: unfredo

BAN EVASION:

Phonexy
Facebook: bright.phreda.3
Reddit: unfredo
Brandonkelv
Facebook: bright.phreda.3
Reddit: unfredo

BANNED:

nsiman - banned 1/1/1970 12:00:00 AM(Huh??) strange record, last message is dated June 28, 2018, 12:20:52 PM
ETH: 0x1714ea3Cce6E6B8680eeaB0EB03e51b6C4E2797e
Twitter: https: Nsiman
Telegram: @lasisi123

BAN EVASION:

Ucheman
ETH: 0x1714ea3Cce6E6B8680eeaB0EB03e51b6C4E2797e
Telegram: @lasisi123
lasisi1
Telegram: @lasisi123
Osaremien
Twitter: https: Nsiman

BANNED:

Lekatoo - 1/29/2019 9:33:11 PM banned
Telegram: @Lekato

BAN EVASION:

bellokudi
Telegram: @Lekato
Abdulbc
Telegram: @Lekato
Samunto
Telegram: @Lekato



Thank you for your attention. Sorry for the mistakes. Smiley

x50 is our everything
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!