Just adding: http://archive.vn/wip/m5wVV
Main thread: https://bitcointalk.org/index.php?topic=5125884.new#new
Let's see if that thread will stay of he will replies.
Topic: A signature scammer/account buyer/farmer (Read 687 times)
Profile GreatOrchid has been banned: https://bpip.org/profile.aspx?p=GreatOrchid
Good find, thanks. He doesn't seem to care and is avoiding the ban by still using his other accounts:
livingfree
https://bitcointalksearch.org/topic/m.50465653
minersday
https://bitcointalksearch.org/topic/m.50463972
Anonylz
https://bitcointalksearch.org/topic/m.50465860
<...>
uszaty43 https://bitcointalksearch.org/user/uszaty43-326943 used to post in Polish.
In October 2017 he sold this account and wasn't tagged.
https://bitcointalksearch.org/topic/m.20726055
and joined a signature campaign right away.
https://bitcointalksearch.org/topic/m.22828542
Did not use Polish since then.
<...>
uszaty43 https://bitcointalksearch.org/user/uszaty43-326943 used to post in Polish.
Jakby byl to shit to powiedzialbym ze po co kupowac gowno jak mozna samemu naprodukowac... Forma pytania to inna kwestia.Zachecam do zaznajomienia sie z WP.Sama perspektywa Anona to pewny zarobek 500-1000% moze i wiecej.Jakoze to watek ogolnodostepny preferowanym jezykiem jest angielski,wiec rowniez zachecam do poslugiwania sie nim tak aby wszyscy mogli uczestniczyc w dyskusji.
Let me apologise guys ,I wrote some info about Nav@Waldozaur12 and quickly come back into english;)
Let me apologise guys ,I wrote some info about Nav@Waldozaur12 and quickly come back into english;)
In October 2017 he sold this account and wasn't tagged.
https://bitcointalksearch.org/topic/m.20726055
and joined a signature campaign right away.
https://bitcointalksearch.org/topic/m.22828542
Did not use Polish since then.
<...>
Another topic where uszaty43 was selling account: https://bitcointalksearch.org/topic/want-to-sell-my-bitcointalk-account-1835356 (Archive)
GreatOrchid
Transaction 13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3
https://www.blockchain.com/btc/tx/13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3
Addresses 1BFg584AWU8CbMjJVVKSJdWHDU3PmdiBkc 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU
uszaty43
Transaction c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
https://www.blockchain.com/btc/tx/c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
Addresses 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU
<...>
Transaction 13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3
https://www.blockchain.com/btc/tx/13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3
Addresses 1BFg584AWU8CbMjJVVKSJdWHDU3PmdiBkc 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU
uszaty43
Transaction c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
https://www.blockchain.com/btc/tx/c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
Addresses 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU
<...>
Profile GreatOrchid has been banned: https://bpip.org/profile.aspx?p=GreatOrchid
Yes this can prove nothing but, the odds that these address are linked without connections so clearly are very low.
It can prove a lot if you take other things into account.
We have accounts that belonged to different people in the past and were sold in the same year.
They applied into signature campaigns, started posting in a very similar manner, making the same spammy 1-2 sentence posts with the same mistakes.
Next, they took exactly the same break in posting, followed by waking up on the same day and applying to the same signature campaign. They even made the same mistake in personal text when they applied. Now, you've found proof of them sending coins to the same address.
On top of it all, the accounts that we called out did not even try to explain the coincidences. GreatOrchid, hahahafr and uszaty43 are not posting anymore.
Some updates:
GreatOrchid
Transaction 13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3
https://www.blockchain.com/btc/tx/13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3
Addresses 1BFg584AWU8CbMjJVVKSJdWHDU3PmdiBkc 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU
uszaty43
Transaction c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
https://www.blockchain.com/btc/tx/c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
Addresses 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU
hahahafr
Transaction 30b838740ab2c80c3d2fbb4ddf65ae650cc465b33be424f3b351f0d0c1f72924
https://www.blockchain.com/btc/tx/30b838740ab2c80c3d2fbb4ddf65ae650cc465b33be424f3b351f0d0c1f72924
Addresses 1N71xosjZFPGZATHUJ7Pkj5J7bb3nyuM4z 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL
hahahafr
Transaction 1cf1645a2a1db6ecac803eb611e51d0b05eba301f4e285c4295a8511158c7dfa
https://www.blockchain.com/btc/tx/1cf1645a2a1db6ecac803eb611e51d0b05eba301f4e285c4295a8511158c7dfa
Addresses 1N71xosjZFPGZATHUJ7Pkj5J7bb3nyuM4z 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL
Anonylz
Transaction c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
https://www.blockchain.com/btc/tx/c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
Addresses 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL
Yes this can prove nothing but, the odds that these address are linked without connections so clearly are very low.
GreatOrchid
Transaction 13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3
https://www.blockchain.com/btc/tx/13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3
Addresses 1BFg584AWU8CbMjJVVKSJdWHDU3PmdiBkc 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU
uszaty43
Transaction c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
https://www.blockchain.com/btc/tx/c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
Addresses 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU
hahahafr
Transaction 30b838740ab2c80c3d2fbb4ddf65ae650cc465b33be424f3b351f0d0c1f72924
https://www.blockchain.com/btc/tx/30b838740ab2c80c3d2fbb4ddf65ae650cc465b33be424f3b351f0d0c1f72924
Addresses 1N71xosjZFPGZATHUJ7Pkj5J7bb3nyuM4z 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL
hahahafr
Transaction 1cf1645a2a1db6ecac803eb611e51d0b05eba301f4e285c4295a8511158c7dfa
https://www.blockchain.com/btc/tx/1cf1645a2a1db6ecac803eb611e51d0b05eba301f4e285c4295a8511158c7dfa
Addresses 1N71xosjZFPGZATHUJ7Pkj5J7bb3nyuM4z 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL
Anonylz
Transaction c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
https://www.blockchain.com/btc/tx/c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
Addresses 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL
Yes this can prove nothing but, the odds that these address are linked without connections so clearly are very low.
As told to op This is everything I've found.
I'm almost 100% sure that some of them are alts (probably 5-6) but I can't proof it, since he is "clever" and he hides himself.
One of them Is a 100% cheater.
Thanks for help. I'm almost 100% sure that some of them are alts (probably 5-6) but I can't proof it, since he is "clever" and he hides himself.
One of them Is a 100% cheater.
It's my belief that linking addresses is only one of many things that can point to an abuser. People are known to receive red trust for as little as being in control of a bought account, or trying to sell an account.
I'm sure that all these accounts are controlled by the same person, who is most likely involved in the purchase of uszaty43 and hacking of hahahafr. These 2 accounts offer probably the most damning evidence since they were local posters before being hacked/bought and stopped right after, at the same time completely changing their style of posting. They both synched, begun taking breaks from posting at the same time, and even joining the same campaigns on the same day.
Under normal circumstances, the campaign member would start posting after getting in, wouldn't he? None of these accounts have made a single post since applications. I don't see them trying to deny anything. This person most likely owns more accounts and is posting for many different campaigns. This is the reason why he recently got sloppy and used too many accounts in one campaign, probably to increase his chance of getting in, or hedge against the possibility of a campaign he's currently in ending/him being kicked.
There's also one more interesting thing. It's not a group of farmers, but a single person. His posts are identical, and there are some mistakes that keep occuring. Now that I've noticed it, I can find other accounts under his management with ease. Probably 10 min of digging per account would be enough to know if it's him.
PROFILE: shursight
ETH: https://bitcointalksearch.org/topic/m.32410077
ARCHIVE: https://web.archive.org/web/20181113152713/https://bitcointalk.org/index.php?topic=3132539.msg32410077
This is can be a bounty abuser, but he probably used account hijack (yes it worked with some tokensuite's managers, they don't look at anything).
Since he used random bitcointalk's profiles I can't find alts but because we have a transaction with others people from the spreadsheet we can suppose he is an abuser.
here the account
https://etherscan.io/address/0x0AC52c015D298422FEEd47F233918f9c58ab4Fb4#tokentxns
https://docs.google.com/spreadsheets/d/1q6V0_DXmOOoawUlkGfGjUwVowwjqhBksbgwcthwmej8/edit#gid=1827284077
Wort of redtrust? Call of DTs.
Around 5 others accounts posted here: https://bitcointalksearch.org/topic/m.47867278 have a very similar line of shitposting, joining same campaigns and "btcwallet" but found 0 guilty transactions so far, they are probably alts, not all of them, some but I can't prove it.
ETH: https://bitcointalksearch.org/topic/m.32410077
ARCHIVE: https://web.archive.org/web/20181113152713/https://bitcointalk.org/index.php?topic=3132539.msg32410077
This is can be a bounty abuser, but he probably used account hijack (yes it worked with some tokensuite's managers, they don't look at anything).
Since he used random bitcointalk's profiles I can't find alts but because we have a transaction with others people from the spreadsheet we can suppose he is an abuser.
here the account
Code:
0x0AC52c015D298422FEEd47F233918f9c58ab4Fb4
https://etherscan.io/address/0x0AC52c015D298422FEEd47F233918f9c58ab4Fb4#tokentxns
https://docs.google.com/spreadsheets/d/1q6V0_DXmOOoawUlkGfGjUwVowwjqhBksbgwcthwmej8/edit#gid=1827284077
Wort of redtrust? Call of DTs.
Around 5 others accounts posted here: https://bitcointalksearch.org/topic/m.47867278 have a very similar line of shitposting, joining same campaigns and "btcwallet" but found 0 guilty transactions so far, they are probably alts, not all of them, some but I can't prove it.
In October 2017 he sold this account and wasn't tagged.
Gap in posting November 2016 - October 2017
Post gap from August 2015 to March 2017
Post gap November 2016 - March 2017
I just scanned this thread here and haven't looked into it fully, but this is more evidence that there was an influx of shitposters/bounty spammers in roughly October 2017, and there seems to have been a big hack before then or some serious account sales as well as a lot of new members joining in order to spam for bounties.Gap in posting November 2016 - October 2017
Post gap from August 2015 to March 2017
Post gap November 2016 - March 2017
This guy just got banned here (don't know what for yet), and he registered in Oct. 2017, and I've seen a few others like that. Seems strange to me. Anyway, I'm going to go back and read the OP here a bit closer.
As told to op This is everything I've found.
I'm almost 100% sure that some of them are alts (probably 5-6) but I can't proof it, since he is "clever" and he hides himself.
One of them Is a 100% cheater.
I'm almost 100% sure that some of them are alts (probably 5-6) but I can't proof it, since he is "clever" and he hides himself.
One of them Is a 100% cheater.
| _________________________________________ | _____________________ | ____________________________ | _____________________________________________________________ |
| ETH | ACCOUNTlink | ETH on forum | ARCHIVE |
| 39D2xiHtwqhRUR4gvGPimJJdC3ALcCMZpv | GreatOrchid | https://bitcointalksearch.org/topic/onehash-signature-campaign-open-2020019 | https://web.archive.org/web/20181113142113/https://bitcointalk.org/index.php?topic=2020019.msg47808834 |
| 0x29392440458A59f3ceEb519A4Ef7b581E0b10a00 | GreatOrchid | https://bitcointalksearch.org/topic/m.41813032 | https://web.archive.org/web/20181113142116/https://bitcointalk.org/index.php?topic=3479652.msg41813032 |
| 1CVRDSQ36gU8wTRWvTHJcEYHEpkjhGk5PM | GreatOrchid | https://bitcointalksearch.org/topic/m.27431216 | https://web.archive.org/web/20181113142119/https://bitcointalk.org/index.php?topic=2664813.msg27431216 |
| 1BFg584AWU8CbMjJVVKSJdWHDU3PmdiBkc | GreatOrchid | https://bitcointalksearch.org/topic/m.23473505 | https://web.archive.org/web/20181113142123/https://bitcointalk.org/index.php?topic=2312863.msg23473505 |
| _________________________________________ | _____________________ | ____________________________ | _____________________________________________________________ |
| ETH | ACCOUNTlink | ETH on forum | ARCHIVE |
| 3LNYpNSPWEG1ZyEKbSoectDACsWxWKLnJc | uszaty43 | https://bitcointalksearch.org/topic/onehash-signature-campaign-open-2020019 | https://web.archive.org/web/20181113143727/https://bitcointalk.org/index.php?topic=2020019.msg47808945 |
| 1EZ8mm7C2MBEQDBe91k3e2CtwE5QyYZiLX | uszaty43 | https://bitcointalksearch.org/topic/m.27431408 | https://web.archive.org/web/20181113143731/https://bitcointalk.org/index.php?topic=2664813.msg27431408 |
| 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL | uszaty43 | https://bitcointalksearch.org/topic/m.22828542 | https://web.archive.org/web/20181113143734/https://bitcointalk.org/index.php?topic=2255703.msg22828542 |
| _________________________________________ | _____________________ | ____________________________ | _____________________________________________________________ |
| ETH | ACCOUNTlink | ETH on forum | ARCHIVE |
| 37LujTGCrkxfm9y6MpD5tkUo7pXbdL4kAi | minersday | https://bitcointalksearch.org/topic/onehash-signature-campaign-open-2020019 | https://web.archive.org/web/20181113151853/https://bitcointalk.org/index.php?topic=2020019.msg47809016 |
| 0xa821cD4A91fEC29085708751cf7F8A0a425c79F7 | minersday | https://bitcointalksearch.org/topic/bountyoio-onlineio-change-the-internet-25m-bounty-rewards-3479652 | https://web.archive.org/web/20181113151857/https://bitcointalk.org/index.php?topic=3479652.msg41809962 |
| 39W3iT94QGpdf4f3BLNfFw8Ri23PJzZVTx | minersday | https://bitcointalksearch.org/topic/m.25663538 | https://web.archive.org/web/20181113151901/https://bitcointalk.org/index.php?topic=1935179.msg25663538 |
| _________________________________________ | _____________________ | ____________________________ | _____________________________________________________________ |
| ETH | ACCOUNTlink | ETH on forum | ARCHIVE |
| 37Zt8QAvpffkga21t1fLaM7W58Tr1jotgz | dead_m92 | https://bitcointalksearch.org/topic/onehash-signature-campaign-open-2020019 | https://web.archive.org/web/20181113151906/https://bitcointalk.org/index.php?topic=2020019.msg47809521 |
| 1CkJySCNF8ceibmtr2Y9rRq4697pcKuvzL | dead_m92 | https://bitcointalksearch.org/topic/m.25199494 | https://web.archive.org/web/20181113151910/https://bitcointalk.org/index.php?topic=2459832.msg25199494 |
| 1PSdTUYiTuECNhdPFBCX8YKGdpQoehbcRr | dead_m92 | https://bitcointalksearch.org/topic/m.21869485 | https://web.archive.org/web/20181113151914/https://bitcointalk.org/index.php?topic=2180378.msg21869485 |
| _________________________________________ | _____________________ | ____________________________ | _____________________________________________________________ |
| ETH | ACCOUNTlink | ETH on forum | ARCHIVE |
| 3F2H6A4X2He3by4dDf6qJsTU8HY1Ypu6zy | Anonylz | https://bitcointalksearch.org/topic/onehash-signature-campaign-open-2020019 | https://web.archive.org/web/20181113152700/https://bitcointalk.org/index.php?topic=2020019.msg47813001 |
| 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU | Anonylz | https://bitcointalksearch.org/topic/seniors-bountie-signature-campaign-full-00008-per-post-2436243 | https://web.archive.org/web/20181113152703/https://bitcointalk.org/index.php?topic=2436243.msg24987070 |
| 0xD734bf9feA30C045f8dacCB5ee305b782a47bbb1 | Anonylz | https://bitcointalksearch.org/topic/m.41706053 | https://web.archive.org/web/20181113152706/https://bitcointalk.org/index.php?topic=3479652.msg41706053 |
Seems pretty valid but I guess it's better that I archived the buy and sell of uszaty43 in here:
Archived
Better to archive everything you find.
Archived
Better to archive everything you find.
Just putting the facts here for you to evaluate.
First spotted: https://bitcointalksearch.org/topic/m.47826624
What I found that confirms it (not using archive because their posts are quoted by other people in those threads, he won't be able to delete them):
uszaty43 https://bitcointalksearch.org/user/uszaty43-326943 used to post in Polish.
In October 2017 he sold this account and wasn't tagged.
https://bitcointalksearch.org/topic/m.20726055
and joined a signature campaign right away.
https://bitcointalksearch.org/topic/m.22828542
Did not use Polish since then.
hahahafr used to post in French.
Gap in posting November 2016 - October 2017
No French post under new management, most likely hacked.
minersday
https://bitcointalksearch.org/user/minersday-229588
Post gap from August 2015 to March 2017
GreatOrchid https://bitcointalksearch.org/user/greatorchid-364362
Post gap November 2016 - March 2017
Most likely hacked along with minersday
Now for the good part.
All above accounts stopped posting on the same day. July 21, 2018
All above accounts joined the same campaign on the same day November 11, 2018
All above accounts did the same mistake when joining. They copied the personal text along with the word "personal text"
All above accounts were inactive since their campaign application.
There are some other posters that also did the mistake in text, and are most likely owned by the same person.
dead_m92
https://bitcointalksearch.org/user/deadm92-228551
Anonylz
https://bitcointalksearch.org/user/anonylz-153613
shursight
https://bitcointalksearch.org/user/shursight-294993
I'll check their posts and add more later.
First spotted: https://bitcointalksearch.org/topic/m.47826624
What I found that confirms it (not using archive because their posts are quoted by other people in those threads, he won't be able to delete them):
uszaty43 https://bitcointalksearch.org/user/uszaty43-326943 used to post in Polish.
Jakby byl to shit to powiedzialbym ze po co kupowac gowno jak mozna samemu naprodukowac... Forma pytania to inna kwestia.Zachecam do zaznajomienia sie z WP.Sama perspektywa Anona to pewny zarobek 500-1000% moze i wiecej.Jakoze to watek ogolnodostepny preferowanym jezykiem jest angielski,wiec rowniez zachecam do poslugiwania sie nim tak aby wszyscy mogli uczestniczyc w dyskusji.
Let me apologise guys ,I wrote some info about Nav@Waldozaur12 and quickly come back into english;)
Let me apologise guys ,I wrote some info about Nav@Waldozaur12 and quickly come back into english;)
In October 2017 he sold this account and wasn't tagged.
https://bitcointalksearch.org/topic/m.20726055
and joined a signature campaign right away.
https://bitcointalksearch.org/topic/m.22828542
Did not use Polish since then.
hahahafr used to post in French.
Bonjour à tous,
Hypothèse : je vends pour 1000 euros de bitcoins, je rapatrie l'argent par virement SEPA sur mon compte bancaire.
Question : je déclare ces 1000 euros dans la case 5KU ? ou bien uniquement la case 5KY ? ou bien je met 1000 dans la case 5KU et 1000 aussi dans la case 5KY ?
Hypothèse : je vends pour 1000 euros de bitcoins, je rapatrie l'argent par virement SEPA sur mon compte bancaire.
Question : je déclare ces 1000 euros dans la case 5KU ? ou bien uniquement la case 5KY ? ou bien je met 1000 dans la case 5KU et 1000 aussi dans la case 5KY ?
Gap in posting November 2016 - October 2017
No French post under new management, most likely hacked.
minersday
https://bitcointalksearch.org/user/minersday-229588
Post gap from August 2015 to March 2017
GreatOrchid https://bitcointalksearch.org/user/greatorchid-364362
Post gap November 2016 - March 2017
Most likely hacked along with minersday
Now for the good part.
All above accounts stopped posting on the same day. July 21, 2018
All above accounts joined the same campaign on the same day November 11, 2018
All above accounts did the same mistake when joining. They copied the personal text along with the word "personal text"
All above accounts were inactive since their campaign application.
There are some other posters that also did the mistake in text, and are most likely owned by the same person.
dead_m92
https://bitcointalksearch.org/user/deadm92-228551
Anonylz
https://bitcointalksearch.org/user/anonylz-153613
shursight
https://bitcointalksearch.org/user/shursight-294993
I'll check their posts and add more later.
Jump to: