Bitcoin Forum
May 05, 2024, 10:07:19 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [Investigation][Merit Abuse][Ban Evasion] sale666, cerunnos, sp383, xz etc  (Read 142 times)
Timelord2067 (OP)
Legendary
*
Offline Offline

Activity: 3668
Merit: 2217


💲🏎️💨🚓


View Profile
July 28, 2020, 01:00:52 PM
 #1

14 Accounts Connected: (Note: Banned shown in red / Inactive in Blue)

Decksperiment, hosaka, koguma, xz, cerunnos, sp383, shoggot, kamrulhasan001, xiaolin1579, sale666, PhilippeD, juperos, deliveryman, Sale666-2,

Proof:

Background
:


Sale666-2 recently started a thread to get their old account back which they claim was hacked.  Getting my old account back

I noticed that the old account was last active the same day Sale666-2 started their first thread to recover that account almost two years ago to the day.

6/13/2018 12:03:56 AM    password changed    sale666

20 June 2018, 01:45:05 Date Registered:    Sale666-2
20 June 2018, 10:07:49 Last Active:       sale666

Nb: Times shown by BPIP are Month, day , year.  Times shown by BitCoinTalk are GMT +10.

Hello someone has stolen my account

lovesmayfamilis then noticed that the five UID's that gave cerunnos merit (of which sale666 was one) all did so in a short window on the 9th of April 2018 for a thread post the 5th of December 2017.

...
Sending merit in one day from 5 accounts to the old message.  to account  2017


...
My opinion is that sale666 was hacked, but for some reason, I am more inclined that this account is linked to a seller profile




deliveryman, Decksperiment, koguma, shoggot, xiaolin1579, sale666

give merit to

cerunnos

gives merit to

sp383




In that thread I then notice various connections such as password change date/time etc:

Two of the UID's that gave cerunnos merits changed their passwords in a 24 hour period:

7/2/2018 12:03:46 PM    password changed koguma
7/3/2018 1:15:27 PM    password changed Decksperiment

Another merit giver and the merit recipient both changed their passwords in ~ 36 hour window:

4/23/2018 9:10:21 PM    password changed xiaolin1579
4/25/2018 7:33:42 AM    password changed cerunnos

koguma Registration Date:4/6/2013 12:28:08 PM (Active 755 days ago)
sale666 Registration Date:12/29/2013 11:32:46 PM (Active 767 days ago)
shoggot Registration Date:5/4/2013 9:24:30 PM (Active 786 days ago)

deliveryman Registration Date:4/4/2014 8:26:18 PM (Active 495 days ago)
xiaolin1579  Registration Date:12/9/2013 5:23:10 AM (Active 499 days ago)

These two UID's have also been banned less than ten days apart:

xiaolin1579 3/17/2019 12:56:37 AM    Changed to Archived status    Autoban user
deliveryman 3/26/2019 11:35:07 AM    Changed to Archived status    Autoban user




deliveryman (5 merits), Decksperiment (1 merit), koguma (1 merit), shoggot (1 merit), xiaolin1579 (1 merit), sale666 (1 merit) give cerunnos their ten merits combined

Quote
4/10/2018 12:00:10 AM    Award - Merit (Daily)    Most Merited (5) on 2018/04/09 https://bitcointalk.org/index.php?topic=2246596.msg25761671#msg25761671

Three hours later cerunnos gives sp383 five merits to:

Quote
4/10/2018 2:53:30 AM    cerunnos (Summary)    sp383 (Summary)    5    Re: how to become a trader

Their details are:

sp383 https://bpip.org/Profile?p=sp383

Quote
Registration Date:5/2/2013 9:02:30 PM (Active 719 days ago)
4/25/2018 8:09:37 AM    password changed    sp383
08 August 2018, 00:33:33 Last Active:       sp383
6/15/2019 9:54:43 PM    Changed to Archived status    Autoban user   sp383

Scrolling back up we find that these dates correspond with the merit givers:

4/23/2018 9:10:21 PM    password changed xiaolin1579
4/25/2018 7:33:42 AM    password changed cerunnos
4/25/2018 8:09:37 AM    password changed    sp383

sp383 Registration Date:5/2/2013 9:02:30 PM (Active 719 days ago)
koguma Registration Date:4/6/2013 12:28:08 PM (Active 755 days ago)
sale666 Registration Date:12/29/2013 11:32:46 PM (Active 767 days ago)
shoggot Registration Date:5/4/2013 9:24:30 PM (Active 786 days ago)

sp383 does not pass their merits onto any other UID, however, they received merit from another UID ( xz )

https://bpip.org/smerit.aspx?to=sp383&from=xz

4/10/2018 2:48:28 AM    xz (Summary)    sp383 (Summary)    5    Re: Settle an argument please?

Quote
Merit Fans of sp383
Profile    Number    Sum
xz    1    5
cerunnos    1    5




kamrulhasan001, hosaka, PhilippeD, juperos

give merit to

xz

gives merit to:

sp383




Uncanny if a coincidence:

4/9/2018 2:19:56 PM    hosaka (Summary)    xz (Summary)    2    Re: Do you keep buying?
4/9/2018 2:23:36 PM    kamrulhasan001 (Summary)    xz (Summary)    5    Re: is it risky to turn all my money to bitcoins?
4/9/2018 2:25:45 PM    kamrulhasan001 (Summary)    xz (Summary)    1    Re: Do you keep buying?
4/9/2018 2:41:57 PM    juperos (Summary)    xz (Summary)    1    Re: Do you keep buying?
4/9/2018 2:50:05 PM    PhilippeD (Summary)    xz (Summary)    1    Re: Do you keep buying?

4/9/2018 6:05:39 PM    koguma (Summary)    cerunnos (Summary)    1    Re: Schools Are Officially Accepting Bitcoin for Tuition
4/9/2018 6:14:58 PM    sale666 (Summary)    cerunnos (Summary)    1    Re: Schools Are Officially Accepting Bitcoin for Tuition
4/9/2018 6:17:22 PM    xiaolin1579 (Summary)    cerunnos (Summary)    1    Re: Schools Are Officially Accepting Bitcoin for Tuition
4/9/2018 6:20:15 PM    Decksperiment (Summary)    cerunnos (Summary)    1    Re: Schools Are Officially Accepting Bitcoin for Tuition
4/9/2018 9:26:56 PM    shoggot (Summary)    cerunnos (Summary)    1    Re: Schools Are Officially Accepting Bitcoin for Tuition
4/9/2018 9:22:53 PM    deliveryman (Summary)    cerunnos (Summary)    5    Re: What if, we advertise bitcoin on T.V.?

4/10/2018 2:48:28 AM    xz (Summary)    sp383 (Summary)    5    Re: Settle an argument please?
4/10/2018 2:53:30 AM    cerunnos (Summary)    sp383 (Summary)    5    Re: how to become a trader




Our two family trees are as follows:

abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz

deliveryman, Decksperiment, koguma, shoggot, xiaolin1579, sale666

give merit to

cerunnos

abcdefghijk
.

kamrulhasan001, hosaka, PhilippeD, juperos

give merit to

xz

gives merit to:

sp383
<<----->>

<<----->>
gives merit to:

sp383




Gathering all the registration dates, last active, as well as the dates when the merits were given, we can see the following:


Registration Date:3/14/2014 4:15:13 PM (Active 243 days ago)    juperos
Registration Date:12/23/2010 6:27:19 PM (Active 265 days ago)    Decksperiment
Registration Date:4/4/2014 8:26:18 PM (Active 323 days ago)    deliveryman
Registration Date:12/9/2013 5:23:10 AM (Active 411 days ago)    xiaolin1579
Registration Date:3/12/2014 8:24:52 AM (Active 414 days ago)    PhilippeD
Registration Date:4/25/2013 3:52:59 AM (Active 666 days ago)   xz
Registration Date:4/25/2013 5:30:43 AM (Active 667 days ago)    cerunnos
Registration Date:5/2/2013 9:02:30 PM (Active 720 days ago)   sp383
Registration Date:10/29/2013 2:43:51 PM (Active 738 days ago)    kamrulhasan001
Registration Date:6/20/2011 4:55:00 AM (Active 745 days ago)    hosaka
Registration Date:4/6/2013 12:28:08 PM (Active 756 days ago)   koguma
Registration Date:12/29/2013 11:32:46 PM (Active 769 days ago)   sale666
Registration Date:5/4/2013 9:24:30 PM (Active 788 days ago)   shoggot


24 December 2010, 04:27:19 Date Registered:    Decksperiment

20 June 2011, 14:55:00    Date Registered:    hosaka

06 April 2013, 22:28:08 Date Registered:    koguma

25 April 2013, 13:52:59 Date Registered:    xz
25 April 2013, 15:30:43 Date Registered:    cerunnos

03 May 2013, 07:02:30 Date Registered:      sp383
05 May 2013, 07:24:30 Date Registered:       shoggot

30 October 2013, 00:43:51 Date Registered:    kamrulhasan001

09 December 2013, 15:23:10 Date Registered:    xiaolin1579
30 December 2013, 09:32:46 Date Registered:   sale666

12 March 2014, 18:24:52 Date Registered:    PhilippeD
15 March 2014, 02:15:13 Date Registered:    juperos
05 April 2014, 06:26:18 Date Registered:    deliveryman

22 January 2018, 22:19:40 Last actual post:    sale666

4/9/2018 2:19:56 PM    hosaka (Summary)    xz (Summary)    2    Re: Do you keep buying?
4/9/2018 2:23:36 PM    kamrulhasan001 (Summary)    xz (Summary)    5    Re: is it risky to turn all my money to bitcoins?
4/9/2018 2:25:45 PM    kamrulhasan001 (Summary)    xz (Summary)    1    Re: Do you keep buying?
4/9/2018 2:41:57 PM    juperos (Summary)    xz (Summary)    1    Re: Do you keep buying?
4/9/2018 2:50:05 PM    PhilippeD (Summary)    xz (Summary)    1    Re: Do you keep buying?

4/9/2018 6:05:39 PM    koguma (Summary)    cerunnos (Summary)    1    Re: Schools Are Officially Accepting Bitcoin for Tuition
4/9/2018 6:14:58 PM    sale666 (Summary)    cerunnos (Summary)    1    Re: Schools Are Officially Accepting Bitcoin for Tuition
4/9/2018 6:17:22 PM    xiaolin1579 (Summary)    cerunnos (Summary)    1    Re: Schools Are Officially Accepting Bitcoin for Tuition
4/9/2018 6:20:15 PM    Decksperiment (Summary)    cerunnos (Summary)    1    Re: Schools Are Officially Accepting Bitcoin for Tuition
4/9/2018 9:26:56 PM    shoggot (Summary)    cerunnos (Summary)    1    Re: Schools Are Officially Accepting Bitcoin for Tuition
4/9/2018 9:22:53 PM    deliveryman (Summary)    cerunnos (Summary)    5    Re: What if, we advertise bitcoin on T.V.?

4/10/2018 12:00:10 AM    Award - Merit (Daily)    Most Merited (5) on 2018/04/09
4/10/2018 2:48:28 AM    xz (Summary)    sp383 (Summary)    5    Re: Settle an argument please?
4/10/2018 2:53:30 AM    cerunnos (Summary)    sp383 (Summary)    5    Re: how to become a trader

4/23/2018 9:10:21 PM    password changed    xiaolin1579
4/25/2018 7:28:28 AM    password changed   xz
4/25/2018 7:33:42 AM    password changed    cerunnos
4/25/2018 8:09:37 AM    password changed       sp383

5/31/2018 9:14:29 PM    password changed   shoggot
01 June 2018, 07:14:09 Last Active:       shoggot

6/13/2018 12:03:56 AM    password changed    sale666

20 June 2018, 01:45:05 Date Registered:    Sale666-2
20 June 2018, 10:07:49 Last Active:       sale666

7/2/2018 10:21:16 AM    password changed   juperos
7/2/2018 12:03:46 PM    password changed    koguma
03 July 2018, 00:15:35 Last Active:       koguma
7/3/2018 1:15:27 PM    password changed   Decksperiment
7/12/2018 4:04:21 PM    password changed   kamrulhasan001
7/14/2018 10:03:07 AM    password changed   hosaka
14 July 2018, 20:04:11    Last Active:       hosaka
21 July 2018, 20:44:33 Last Active:       kamrulhasan001
7/23/2018 2:43:11 PM    password changed   juperos

08 August 2018, 00:33:33 Last Active:       sp383

9/28/2018 1:34:03 AM    password changed   PhilippeD
30 September 2018, 18:02:13 Last Active:    cerunnos
30 September 2018, 22:37:41 Last Active:    xz

11/11/2018 9:31:42 AM    woke up         xiaolin1579
11/11/2018 1:12:42 PM    password changed   xiaolin1579

3/17/2019 12:56:37 AM    Changed to Archived status    Autoban user   xiaolin1579
3/26/2019 11:35:07 AM    Changed to Archived status    Autoban user   deliveryman

5/3/2019 12:47:52 PM    manual recovery, ownership change queued (completed)          koguma
5/3/2019 2:47:52 PM    manual recovery, ownership change queued             koguma
5/10/2019 1:25:01 PM    manual recovery, previously-queued ownership change completed       koguma

10 June 2019, 13:55:24 Last Active:       PhilippeD
13 June 2019, 20:09:23 Last Active:       xiaolin1579
6/15/2019 9:54:43 PM    Changed to Archived status    Autoban user   sp383

7/1/2019 7:23:18 AM    woke up         Sale666-2

09 September 2019, 12:52:38 Last Active:    deliveryman

06 November 2019, 17:33:03 Last Active:    Decksperiment

28 November 2019, 19:43:05 Last Active:    juperos
2/22/2020 7:07:07 PM    woke up         Sale666-2


Conclusion:

All 13 UID's that participate in the merit swapping are alts given their activity times and dates match up.

Related Addresses:

Code:
0xd2553a5e9896bdecea5530a4a3070bcd28311128 Decksperiment

DscQGZuYePXtmNQypSnVrCB2rF5G5zXYZH koguma
DqFK5nS4Abmr4mTv3hkKMUNC6JZtBU9tum shoggot

Miscellaneous:

Ban Evasion.  User may have transferred the merits between accounts then put them on ice to sell at a later date.

@posi and @ChiNgadOr have previously identified xiaolin1579 as being part of a multiple alt racket as tagged by @CryptopreneurBrainboss and @coinlocket$ on their trust feedback wall

At least two of the users have been slapped with negative feedback trust for ponzi activity & one by @Vod for delusional activites...

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!