Topic: Another ANN bumping group+ Interesting merit transfers (Read 1140 times)

Thanks Rikafip! Great jobs for all parties involved in this operation!


Hehe yes, I meant WerSalit, not Pastrana. Most likely, the account was sold. The ex-owner looked like a normal user, involved into bringing benefit to the forum... Also, good observation with Pastrana. I also observed those 100 merits received for a single post in the anniversary contest. 38 were from Basorexia though but however, it was a great amount of merits earned back then. Maybe they wanted to use this account for rank up, for looking more serious, then gave up? Who knows...


Yes, indeed... There doesn't seem any way of connecting them, excepting for the names. But still looks a bit curious to me

---

The problem is that so far mods didn't take action for the last reports I made (for Pastrana, 6eTxoBeH, WerSalit, Gucci Flip Flops, Vlone, camerali, Drugs?, Oprah). Only a few of them were handled. On the opposite side, the reports made for the previous group (IgorDV, Scrachit, kossvet, yurikkk, Bad Lightyear, Timothy Martinez, Sheesh, Virgil YNWA, Sarah Snyder, Zillakami, conceptinion, Fevy and kuzmich12) are almost entirelly handled (deleted). You can see that by looking at the posts of each profile: IgorDV has 17 posts, Scrachit - 32, kossvet - 0, yurikkk - 0, Bad Lightyear - 0, Timothy Martinez - 0, Sheesh - 0, Virgil YNWA - 0, Sarah Snyder - 0, Zillakami - 0, conceptinion - 34, Fevy - 9 and kuzmich12 - 0. I don't know why the reports for the second group are left unhandled so much... I hope the mods will delete also the remaining posts though.

Once again good job! Ucacoin thread has been completely cleaned as well, and for now bumpers gave up, no new posts in the last couple of days. Let's hope they give up now whole project has been busted.


I guess you mean WerSalit, Pastrana has been used for thread bumping right from the beginning, and later on used for 10th anniversary contest where he managed to amass decent amount of merit. Regarding WerSalit, you are right, he seemd like a legit user at the beginning, and then his posting behaviour changed. It coincides with the break he had from November 2018 and February 2019, when he woke up and changed the password. After that  he immediately started shilling with rest of his buddies  My guess is that account changed the owner.


Based on Kamilaz post history, basically impossible to prove any connection. No address, no social media used, Kamilaz wasn't part of thread bumping etc just relatively similar names.

Today I finally managed to find time to report all posting history of all these users. I had their accounts opened in different tabs since Friday, but I didn't have time until now. Interestingly, someone took the job ahead of me and reported a few posts of each account. I saw that as I refreshed the tabs before clicking on "Show the last posts of this person".

So... 3 hours later I finished reporting 761 posts of all these accounts, this being almost all their posts. The exceptions were 10-20 posts in total which were good posts and some which were written in local boards, which I couldn't see as I have these boards on ignore list.

Curiously, one of these users - pastrana - seemed to be a "normal" user in the past, prior heading to ANN bumping lol. If you look at his oldest posts you'll see some related to plagiarism investigations, merit abuse investigations, helping others with banned accounts, reporting a Legendary member for spam and so on. Unfortunately, he turned evil after a short while...

Also, an idea crossed my mind about one account mentioned by nutildah: Zillakami. Could it be that this Zillakami is connected to Kamilaz, an account banned after the Hack Forums invasion? Zillakami... Kamilaz... sound like inverting the second half of the name with the first half.


Great catch my dear cinephile! Flag supported!

Seems like they didn't just hired bumping accounts. After some  digging (as I usually do when there is similar project that hired bumpers), I found out that  they are also part of MLM scheme that sells some kind of magical beauty products, and we all know that in these scams average people loose money and top few get rich, as in all pyramid like schemes. Anyway, I made thread about then in scam accusation board, feel free to support the flag!

[SCAM] UCACOIN-Latest project of known MLM scheme "Verway"

Seven pages of trash for Ucacoin ann thread!
Based on what I have seen so far I gave them negative feedback for hiring bumping spammers.
Never hire anyone to write something in your topics.

Good find, I added Ucacoin to that list. Regarding accounts used, tagged them as well, even though I doubt that will stop them, since they freely used already tagged accounts, so they probably dont really care about that much. But well, it's worth trying, in the worst case scenario they will start using new accounts, as they usually do.


That guy is some piece of work, he made nice profit on this forum and all of this started with anniversary contest, which he exploited to the fullest. First through merit sale, and then he  he scammed bunch of people for some collectibles that he never delivered. Weird thing is that this guy still doesn't have any flags against him, while i thought he will get Type 2/Type 3 by now. Maybe at least Flag Type 1 should be raised, to warn newbies and guests?

Have no fear, the cleaner is here
Excepting ~10 posts, I reported all the posting history of these members mentioned by nutildah -- 541 posts. Mods are already working on my reports, as far as I see. As soon as I'll have time I'll start "working" also on the accounts above mentioned by Rikafip.

This farm is back, now spamming for a project called UCACOIN. I'm gonna go ahead and tag all of them. One tag wasn't enough to stop them but maybe 2 will be, who knows.

Here's a few recent additions to this particular farm, some of which have also commented in the IndexChain thread:

IgorDV
Scrachit
kossvet
yurikkk
Bad Lightyear
Timothy Martinez
Sheesh
Virgil YNWA
Sarah Snyder
Zillakami
conceptinion
Fevy
kuzmich12

Like the other merited accounts in this farm, most merit for this farm was obtained from Basorexia.

Yeah, I already mentioned this guy in my first post of this topic. All that merit he received has the same main source- Basorexia, either directly or through those alt accounts. All this started with bitcointalk anniversary contest, that gave them chance to get some easy merit, that they sold/used for alts later on.


Nice finding. Every time abusers complain, they just dig their hole a little bit deeper!

Seems like this guy also bought his merit, https://bitcointalksearch.org/user/aleksandrov-1305565

He is the author and a manager probably of [BOUNTY] [ICO] | CETAN - financial core of the cryptoworld, banking, debit card

All of the merits that he received came from negative trust users.
Here they are:
Oprah
6eTxoBeH
Basorexia
Klid

I just saw the thread that he created and it is a clear red flag for me.

I give you summarize why people can say you purchasing merit from Baxoresia

• Baxoresia activity is very suspicious and he also said if he's selling merit [1] [2]
• According to Baxoresia post history, he never post in both Indonesian local board or Russian local board... so this point is Baxoresia probably didn't understand both Indonesian dan Russian language
• Many member deserve more to get merit than you+Hokilucky92 because you're only creating low value post and repeating other user said. But why only you+Hokilucky92 get merit from Baxoresia?

---

Maybe you think that proof is not strong and don't deserve to get red tag... then what about this case?


archived

archived


archived

It's very clear you're bounty cheater and deserve red tagged from DT member

True, there are several red flags, but just wanted to hear 2nd (and more experienced) opinion.

There is one more account that looked fishy but I didn't include him  for the same reason, AlexW333. After same digging, here is what i found so far, beside him being very active in Relictum thread:
1. Out of  3 merits sent so far, 2 were to now banned account Nikolyovin for post nr. 1 and post nr. 2
2. This is where things get interesting. He sent 1 merit to coll3 that looks like his alt account. Same address used
Archive

Archive

Same twitter account
Archive

Archive

On top of that, they are in the same bounty, Relictum.
Archive

Archive


It is interesting to see that all those  tagged accounts stopped with activity for now, but in PIVX thread they decided to make fresh account, and continue with business as usual
SamoroDev
Herbanitos
NederlandMen
Since they are fresh accounts made just for one purpose- spamming in PIVX thread, is it good enough reason to get them nuked?

Because you're not, that's why not. You're just another shitposting spammer for hire with a hacked account.

You decided to reply to this thread with this account because it had the weakest link of evidence that you were working as a professional spammer. Well let's solidify the evidence a bit.

You were part of the IATOKENS bounty with some other spammers mentioned above:

Chesterjems
tttuida
astrologer123

There's at least one other from that campaign I noticed that wasn't included in the list, I'm adding them now:

gunbars (Relictum Pro, INDEX Chain)

Was there a Telegram group or other platform conducting an off-forum bounty that pays per post on Bitcointalk? That's the only other explanation I can imagine, which is still the equivalent of being a paid spammer.

Exactly. Why not. What the hell do you climb into someone else's life?

The only thing you've done since your account "woke up" this time around is post spam for Relictum. Your one merit was obtained from a banned account who also gave merits to rank up several other farmed accounts, and you have already been mentioned as possibly being part of an account farm in 2 other threads:

https://bitcointalksearch.org/topic/m.52721107
https://bitcointalksearch.org/topic/m.41961118

But let me guess, you're the original owner of your 2011 account. You just learned nothing over the last 9 years and are now genuinely interested in low-quality shitcoin projects.

What the hell? Why am I tagged? I do not belong to any group of spammers. Who gave you the right to just tagged accounts based solely on your guesses?

Great job, thanks for taking the initiative! I am going to set about tagging them as well.


Edit:


I'm 90% sure they are, and seeing as how the account was created in 2011, its definitely a hacked account anyway.

Nice catch, looks like he got banned  https://bpip.org/profile.aspx?id=2756145



Since I have some time on my hands, I started working on that list. I focused mostly on those that were/are active in MASS, Relictum, and recently started PIVX thread. Some accounts are previosuly tagged, so I didn't include those, but i can add here as well if needed.


Chesterjems Jr Member, active in Relictum, IndexChain, MASS
tttuida Jr Member, active in Relictum and IndexChain
Gringofale Jr member, active in Relictum, MASS, PIVX, IndexChain, Crybet
bitcok Member, active in Relictum, MASS, IndexChain
CriptonMember Jr Member, active in Relictum, MASS, IndexChain
Enemi42Jef Jr Member, active in Relictum, MASS, PIVX, IndexChain
astrologer123 Jr Member active in Relictum, MASS, IndexChain
nicwenzel Jr member active in MASS, relictum, IndexChain, Crybet
Cristianvilil Jr member, active in Relictum, MASS, IndexChain, Crybet
ekopcie Jr Member, active in Relictum, MASS, IndexChain, Crybet
armack18 Jr Member, active in Relictum ( I am not 100% sure that this guy is part of bumping group)
klontbiter Jr Member, active in Relictum, MASS, PIVX, IndexChain
Listratennt Newbie, active in MASS, PIVX
Cremangravi Newbie, active in MASS, PIVX
Samorodnf Newbie, active in MASS, PIVX
GruHabiiml Newbie, active in MASS, PIVX
HermanFry Newbie, active in MASS, PIVX
Meniksl0 Newbie, active in PIVX


There is also merit share between some of those accounts, that all starts from BitmarkInvest , who was already tagged for merit abuse. This is how it goes:

• BitmarkInvest sends 2 merit to Gringofale, and then he sends 1 to another name on the list, Enemi42Jef.
• BitmarkInvest sends 2 merit to CriptonMember for shill post in Crybet ANN, and then he sends 1 to  Cristianvilil.
• BitmarkInvest sends 2 merit to ekopcie. Naturally, he sends 1 to their buddy,  Klontbiter

I saw this guy marketing a spamming service:


He uses the Telegram name @Mixa_nnbb, same as banned users MelnikBitok and Smart man (as pointed out by KTChampions). I reported him for ban evasion, I would be appreciative if you guys could do the same as these types of services are dumb and create spam for the forum.

The reason why this is relevant is because this user has also been posting in the Relictum Pro thread with spammy one-liners along with some of the other accounts mentioned in this thread. They are now spamming for another thread as well:

[MASS] Decentralized HARD DRIVE mining cryptocurrency

This is another giant bumping service (or perhaps an extension of the first one) with dozens of accounts waiting to be tagged. Later I will catalog them all here, am a bit busy now, but wanted to leave this as a reminder to myself. Of course you guys can get started listing them here if you want.

Yes, really suspicious activity. I did a little investigation today, and there’s also a Piskaev account.

Yep, in this case that excuse is as plausible as that old one  with dog and homework.


Based on your last merit transaction, I would say business is still going strong. You sent tome merit few days ago to Piskaev, known sock puppet account that worked on bunch of threads (Crybet, IndexChain, Burstex, MalwareChain, Livecoin etc). Or maybe this is just one of your alt accounts?

Just don't say it's been hacked again.

Yes, every time I did something wrong too my account was compromised and I changed my email and password to prove this theory.

You said that your account has been hacked more than a week ago, but what about merit transfers before that, from March 13th  and onwards, to accounts that are obviosuly part of the bumping group? And if your account has been compromised, how come you didn't make new account, and warn the others about the issue? That would be the first thing I would do.


Another thing, can you explain this post on your [AUCTION] Football stickers and cards 2007-2014. thread? Seems to me like you were shilling your own auction thread.
https://archive.fo/HY5Nc

What's interesting about this account is that it was also working with rest of the previously mentioned accounts , bumping those threads (Imagecoin,Wolfpackbot), and all that was done long before this so called hacking. So I don't buy your story and explanation

My account have been hijacked more than a week ago.
Some Merits seems to have been sold. Since today account is under my control again.
My apologizes.

I checked Relictum a bit, couldn't find plagiarism or fake team members. Maybe someone with more technical knowledge can see through their buzzwords and  bs and make a case against them.

---

Regarding Basorexia, few new suspicious merit transfers happened.  After being 5 days offline, he came back on April 6th, and in a matter of few minutes he  sent following merits to 4 newbie accounts:

2 merits sent to Oi95_back for post made back in 2018.
https://bitcointalksearch.org/topic/m.47102561
https://archive.fo/JOJrs

1 merit sent to Hokilucky92
https://bitcointalksearch.org/topic/m.54088192
https://archive.vn/wHlaq

1 merit sent to user SUSUBADAK
https://bitcointalksearch.org/topic/m.54021646
https://archive.vn/UnPl1

6 merit sent to user BuyOwnEx for post made in July 2018
https://bitcointalksearch.org/topic/m.42686874
https://archive.vn/Nwo89


What's even worse, some forum members sent him BTC in exchange for personalized  figurines, and they are still waiting for those, without him replying to their messages, therefore he got tags from them as well.  https://bitcointalksearch.org/topic/collectible-cards-of-bitcointalk-users-5204109  Could this be his exit scam?

It is a big problem and a lot of people get financially harmed by this. 

Supported & tagged.

These bumping services are getting on my nerves now.....

That is alright, by wording was inadequate! So what would you say about these? In particular that "Blockchain 5.0" looks like a scam that is highly probable to have hired the bumpers.

Now when you mentioned merit purchasing, look at the 5 newbie accounts that got 1 merit each from Basorexia:

Kilkalika000 registered on March 29th 2020 and made 15 posts so far, out of that, 14 are in Russian language, and only 1 in English-the one merited by Basorexia

eR4 registered back in October 2019, but he was inactive until  March 29th 2020 . So far he made 36 posts; 33 are in Russian, 2 are bounty reports, and 1 is in English- merited by Basorexia

KIRI44442 also registered in October 2019, but he was also inactive until March  29th. He made 15 posts; 14 in Russian, 1 in English- exactly the one merited by Basorexia

zanoza1924 registered on March 29th 2020, and so far he  made 12 posts; 11 in Russian, 1 in English, and the one that got merit from Basorexia

Marfolone  registered on March 22nd but he was inactive until March 30th .He made 17 posts; 16 in Russian and 1 in English. Only his first post ever was in English, and the one that got merit from Basorexia, after that he only writes in Russian local board.

Again coincidences, all accounts  started being active on March 29th/March30, write exclusively in Russian, but only merit they got is for their single post in English from a single user  (Kilkalika000 being exception as he got 1 more merit for his single  English post)


I might misunderstood your previous post, but yeah i agree with what you said, it should be done on a case by case basis, and I'll take a look at it. Since 99% of all projects are pure bs, chances are good  that something can be found.

This practice will certainly never stop if thread owners are not flagged. I believe we can not apply a singular stance, that is flag all threads or not flag all threads. We should evaluate each case individually. For the projects that were linked, there is nothing to indicate any kind of strong legitimacy or autonomy that would make it unlikely that they hired these people. I am not asking for opinions on a general stance, but rather these particular cases!

I'm adding the other accounts that received the majority (if not all) of their merits from Basorexia, and obtained exactly the right amount of merits to rank up:

cryptogod322 (10 merits) - 6 from Basorexia, 4 from Pastrana
Stasonelison (10 merits) - 5 from Pastrana, 4 from Drugs?
Hellkas (10 merits) - 9 from Pastrana
Kiid (10 merits) - 9 from Basorexia

-cryptogod322 connected through participation in Relictum Pro bounty
-Kiid posted in Relictum Pro thread

It should also be noted that the 38 merits sent to Pastrana by Basorexia was the exact amount of merits needed for them to become a Full Member (100).

Here are some lower-level accounts all participating in the Trustee Wallet Russian signature bounty that received most (if not all) of their merits from Basorexia or Pastrana:

donatello345 - 1 merit from Pastrana
sovkysom39 - 1 merit from Basorexia (on day of joining campaign)
cryptogod322 - 6 from Basorexia, 4 from Pastrana
Stasonelison - 5 from Pastrana, 4 from Drugs?
truehider - 5 from Basorexia

Then there's a who 'nother farm in the IndexChain thread... looks like there was a lot of merit purchasing going on from MalReynolds (who was negged for merit selling a while back). I'm getting a bit tired and I have to go back to work so I asked Alex_Sr if he could take a look at it, because he is good at this stuff.

I'm going to take a day or two before I do any tagging. Sometimes its better to let things digest before acting.

Flags supported.


This becomes pattern really, sending just the right amount of merit needed  for rank up, and it happened to 6 accounts mentioned here (Pastrana,  6eTxoBeH, Drugs?, Oprah , cryptogod322 and kiid).


I had no idea that Aleksandr_ov has been banned already, thanks  for that. Yeah this looks like a much bigger group of accounts, and thanks to that anniversary contest they managed to rank up quite a few accounts. It is reasonable to assume that they are all controlled by same person and therefore case of ban evading, but it is a bit harder to prove that without same address use.


So far i was reluctant to do that as i noticed from older and more experienced members that they don't do that for ANN that hire bumping services unless they have other proof of scam, but maybe this is exactly what is needed, in order for them to stop. I would like to hear  opinions about this issue as well.

OP's of ANN threads:
https://bitcointalksearch.org/user/indexchain-2761657
https://bitcointalksearch.org/user/rbounty-2752550
https://bitcointalksearch.org/user/michaelcutajar-2756993
https://bitcointalksearch.org/user/cryptoninja22-2630097
https://bitcointalksearch.org/user/mceme-1396424
https://bitcointalksearch.org/user/oculor-2540270
https://bitcointalksearch.org/user/wolfpackbot-2357920

---

I think we should tag them as well, given the circumstances. Even if you take a brief look you can conclude that it is all fraudulent, for example "Blockchain 5.0" (no such thing exists and indicates a scam). Opinions?

I noticed something fishy about this account a while back, too.

On March 20, account cryptogod322 made a lackluster post in the WO thread, for which he received 4 merits from Pastrana (not a WO regular):


To which I replied:



I thought maybe that was his first post in the WO, but I was wrong, he had one 2 days earlier for which he received 6 merits from Basorexia:


Its not the worst post to be meriting, but the fact that this user was sent exactly 10 merits in 2 days (in order to reach Member status) is kind of bizarre.

So where else has cryptogod322 been posting? Well, he joined the Relictum Pro bounty, for one.

This user received 30 merits from Basorexia and was banned a few days ago. He opened this thread, which received 10 merits from Basorexia and 3 merits from Oprah. There appears to be many, many more accounts involved in this farm. They likely all belong to the same person, and thus are all ban evading.

https://bitcointalk.org/index.php?action=trust;flag=1521
https://bitcointalk.org/index.php?action=trust;flag=1522
https://bitcointalk.org/index.php?action=trust;flag=1523
https://bitcointalk.org/index.php?action=trust;flag=1524
https://bitcointalk.org/index.php?action=trust;flag=1525
https://bitcointalk.org/index.php?action=trust;flag=1526
https://bitcointalk.org/index.php?action=trust;flag=1527
https://bitcointalk.org/index.php?action=trust;flag=1528

---

Tagging shortly. Good work!

Yep, it is the obvious case of the thread bumping group, as its simply too much similarity in their post history to be just a coincidence. They follow each other around on the same threads, and for some Ann list is even longer than I showed on the screenshot. Another coincidence that I just noticed is that 6/8  accounts  that are in this bumping group +Basorexia were last active on April 1st.

Regarding possible merit abuse, that thing is harder to prove. Maybe someone else can see additional pattern here, or some other connections.

To think Oprah would sink this low.
And she had a good career and tons of money. Guess corona took a different toll on everyone

Good research again OP.
It is more than obvious they are all connected for bumping crap on altcoin section.

While keeping an eye on IndexChain and Relictum ANNs that are currently being bumped by one of those services , i noticed group of accounts that are working together for quite some time through various threads, and that have interesting merit history.

First let's see their  post activity on various ANNs, that all used bumping services.



Accounts
Pastrana
6eTxoBeH
WerSalit
Gucci Flip Flops
Vlone
camerali
Drugs?
Oprah

ANN threads
[ANN] [IndexChain-IDX] Safe+Private+Hybrid POW/ POS/ MN ♔♕
[ANN] Relictum Pro | Blockchain 5.0 of the latest generation
✅[ANN]FPCC✅FOREX TRADING, CRYPTO CURRENCY AND TRADE AI FIELD✅
🔥🔥[ANN]: [TOKEN] NAIRAX: StableCoin | POS | staking | Commerce🌍🔴✅
[ANN] IMAGECOIN PRIVACY SEND AND SHARE IMAGES IN BLOCKCHAIN
[ANN] OCUL| POS & Masternode rewards up to 50% |Micro tasks photography platform
[ANN] [X11 POW/MN] WolfpackBOT Cryptocurrency Trading BOT (WOLF) [ANN]

---

Another interesting thing about this group of accounts is their merit history. 4/8 accounts  in this group got merits from the  same account- Basorexia. And all those merits were sent quite after posts were made:

38 merit sent to Pastrana for his 10th anniversary work,  sent on  February 24th 2020 .
https://bitcointalksearch.org/topic/m.52914074

10 merit sent to 6eTxoBeH on February 24th 2020, for the post he made back in July 2019 (and that's his only merit)
https://bitcointalksearch.org/topic/m.51708774

8 merit sent to Drugs? on March 10th 2020, for post made  in November 2019, and that merit made him Member rank.
https://bitcointalksearch.org/topic/contestnow-selling-10-years-of-bitcointalk-commemorative-coldkey-5195845

8 merit sent to Oprah on March 23rd 2020, for post made in December 2019 also made Member rank with this.
https://bitcointalksearch.org/topic/m.53465661

There is another connection between those  accounts, and its through user  Aleksandr_ov. On the screenshot below you can see his  merit history. If you check all those users that gave him merit (6eTxoBeH, Oprah, Kiid) you will see that source of their merit is Basorexia as well.



All this is just a coincidence or something else going on here?