Topic: Farm of Combo campaign rule breaking accs - page 2. (Read 1192 times)

What you doing here is really good and it can expose a lot of things! Keep the good job up!  

If you feel at anytime you don't have enough time and need help with something, even the easiest and most boring things, hit me up I gladly help you out.
I am still a bit new here and would see things without taking any side at all.

Cheers / CC.


EDIT: If anyone could be kind and have time, could you please tell me how this people that have multiple accounts how they do? How can they have the time for this?
They must do this like a full time job and not have a real job? (No I don't want to learn how to do it, I am just curious  ) - sorry if it's to much off topic.

OP, could you please help compile the list of all this connected accounts as one so that it's easier to click, tag them and not miss out any like we did in this grand account farm bust?
It doesn't have to be detailed, but for just easier follow up.

No, I'm not sure. But luckily it depends on if I want to do something at the time or not. It's not a job. If I'll feel that I don't want to do something like that I can do what I want, if I will have some time and interest in investigation I can make new part. I'm free to do or not to do. But if there will be less nonsense in topics it is good.

As for interest of the farm holder, he probably doesn't want to attract additional attention not to risk too many of his accounts to be revealed additionally.

But wait - are you sure you want to spend that much time getting evidence from every suspect account you suspect?

I hope you'll actually get what you deserve for your efforts - but I think most of the accounts you mentioned don't seem to care about these accusations, or they just aren't aware of this thread. Neither account has spoken on this thread - clearly showing that their mindset towards this thread is the same.

Here we have a farm of accounts which got their ranks prior merit system implementation. So when we catch them, this farmer has less opportunity to take part in signature campaign. So there probably will be less trash in the topics. Of course he has more accounts, but sooner or later he'll face with a situation when he'll need to buy more accounts or to try to make new and to get ranks for them, but it's not as easy. So this still has sense.

If we'd talked about newbies and social media bounty participants then it was less practical to waste time on alt accounts as it is easy to make as many new ones as an abuser will like. But signature campaigns is IMO not the same.

One of the problems associated with finding connected accounts in any situation is that no matter how may you find there could be several more that you never linked or never thought could be related.

In many cases, we find a farm and link several accounts but the puppeteer is controlling several other accounts and several other farms (or other farm operators are being mentioned in the Reputation board) which means we are always playing catch-up. Like you I would not be surprised if there were more names to be added to the list you compiled.

I'm sure there are much more interconnected accounts. And that's right, it takes lot of time both catching and then drawing up a reference post. Dozens of addresses and accounts, many have connections to other accounts, which have further connections. As you can see there are connections with some other investigations which caught some of accounts of this huge farm.

Of course there is a probability that there are several farms with account trading between them, but as to me it doesn't matter too much. One farm or several farms but we see cheating, low quality posting, bounty abusing, and even probably scam. If they didn't trash the topics with nonsense I'd hardly start searching, but lots of rubbish instead of discussion makes me a bit disappointed.

There probably be more parts in this investigation. Maybe someone will see some idea for own investigation of some interconnections of this farm. But mentioned accounts are surely not the entire list of all accounts of this farm.

surprising catch.
blockchain transactions from addresses that are used for quite a long time. moreover, the account you added has a history of password changes in 2018, as well as multiple address changes. (I didn't check everything). there is an assumption that the account has changed hands from the previous farm account.
it must have taken a lot of your time to check every blockchain transaction of that many accounts. but maybe more accounts are exposed.

Looks like this farm is much bigger than even it looked at first. I guess if to dig deeper there can be probably hundreds of accounts.

Part 3. Nody.ai Bounty Campaign
Nody.ai Bounty Campaign prohibited alt account participation. — archive.org.

And here we see several accounts with the same writing pattern:
↔️CapGelatik — Nody.ai
↔️monineklutak — Nody.ai
↔️newdevices — Nody.ai — archive.org
↔️globalpain — Nody.ai — archive.org
SaveOurSea — Nody.ai
↔️GelatikKembar — Nody.ai
↔️Dollar_Hunter — Nody.ai — archive.org
↔️Kopetunto — Nody.ai — archive.org
↔️kapalmabur — Nody.ai — archive.org
↔️Desscount — Nody.ai
↔️Smitty Werben Man Jensen — Nody.ai
↔️Inspiron14 — Nody.ai — archive.org
judaspriest — Nody.ai
↔️ningrum — Nody.ai — archive.org
(Those ones without a profile link were already mentioned in previous two parts in this topic above.)

Now let's go to where their Ethereum addresses connections lead.

↔️ 0 address belongs to
-> 1 address which was a transaction with address 0 which belongs to
---> 2 address with transaction with 1 address

+link when address is mentioned in someone else's investigation

newdevices
↔️0x1D9B611D2C022d6Cd561E909aa150e57668eA282 — proof — archive.org
-> 0xc8Bf049EBa102F178Cb7cC195320B95008287c5A
---> 0x758d99B5676F58fC0fB2187c49655e7ae305562F seggardinggins — proof — archive.org
---> 0xBd9604362d066597e2275bd5a9e5bc8c178C04Dd moon sorcerers — proof — archive.org
---> 0xB1557822c88B45Ac79cbFDcCEf7B4a09F229F61b lousie9 — proof — archive.org (Trust: "Part of the Spammer Blacklist", ref)
---> 0xe31eAE620F424Be87CA1927087c0732Df2585A7F boris singer — proof — archive.org
---> 0xC6061752bedd656403eE6a68CB93f6Ea6D15070A globalpain — proof — archive.org
---> 0xb961eF5bc5812E9B41d643a319Aa74497A135644 galundan9 — proof — archive.org
---> 0xf26b182E53B3f1f97046654C5F92399a7A65113c bendernine — proof — archive.org
---> 0x516d862d66CaC1d5CDED4FdFE417cc735dc6927b gaston castano — proof — archive.org (Trust: "Part of the Spammer Blacklist", ref)
---> 0x59F904327d7c05F3Ad817b359DCbA818B1c69eBA ameliana — proof — archive.org
---> 0x2FF3585FcEb8A221559bF56ee3Dafa469dD7a807 concitta — proof — archive.org

globalpain
↔️0xC6061752bedd656403eE6a68CB93f6Ea6D15070A — proof — archive.org
-> 0xc8Bf049EBa102F178Cb7cC195320B95008287c5A
---> look at the list at newdevices

Kopetunto
↔️0xB309C7b8295Cb4537909024DE55ffcc1fd6133C1 — proof — archive.org
-> 0x6224c6ec62e67fc548d580c99C09Fb309877B547 Untomabur — proof — archive.org
---> 0x24c327F6837E1636b76fa90658F422ec48039b61
--->
-> 0x24c327F6837E1636b76fa90658F422ec48039b61 byff4g — proof — archive.org (Trust: "Newbie manipulates other member's profile & registers in campaign.", ref),  Sendi blackspade team — proof — archive.org
---> 0xE5B6669047015c54DaE8Ea1BA0Ba4f37ca5d276a Sendi blackspade team — proof — archive.org
---> 0x4F80f6caFF6c5bf843ed4Fc18971E7D235630C38 Dollar_Hunter — proof — archive.org
---> 0x6224c6ec62e67fc548d580c99C09Fb309877B547 Untomabur
---> 0xAE4f473998f48FB9237130B51e27c70DFEe17358 Leftneck — proof — archive.org
---> 0x871AC2Af1922070B40a3e19A3dD442Dd6421A7bE Wedhus123 — proof — archive.org
---> 0x5D743A5bCdC195057D87C282B6157a326af1250a lkjhg — proof — archive.org (Trust: big negative review from JollyGood)
---> 0xF34a72627424Bf9e70bE1C87b8D3Ff5FdDA00295 Dextroboy — proof — archive.org (Trust: "Accounts Connected: id=1107613, id=1119400.", ref)
-> 0xBeF8660508031CFc1eD8038fDe67548dA4e18749
---> 0x9eA46FB5AF9bE7a939b2d171B1B1C28f76d892bF kapalmabur — proof — archive.org

Dollar_Hunter
↔️0x4F80f6caFF6c5bf843ed4Fc18971E7D235630C38 — proof — archive.org
-> 0x24c327F6837E1636b76fa90658F422ec48039b61  look at the list at Kopetunto
-> 0xAE4f473998f48FB9237130B51e27c70DFEe17358 Leftneck
---> 0x24c327F6837E1636b76fa90658F422ec48039b61
---> 0x871AC2Af1922070B40a3e19A3dD442Dd6421A7bE Wedhus123
---> 0x47e461C227761DAc38b06e511b84363C5e1DE8F5 Sarcasm — proof — archive.org (Trust: "Shitposter."), Sungoku — proof — archive.org (Trust: "Cheating bounty with alt accounts.", ref)
-> 0x873A6dE20E76a7C55E0c6e3241553977158deB81 Inspiron14 — proof —archive.org
-> 0x07474C06A769F218Bd972848C53870eCC0E9C643
---> 0x873A6dE20E76a7C55E0c6e3241553977158deB81 Inspiron14
---> 0x7a01955771CF68F3a83e147Ff40e4B792A1a6612 Landakhitam — proof — archive.org (Trust: "Cheating bounty with alt accounts.", ref) +link

kapalmabur
↔️0x9eA46FB5AF9bE7a939b2d171B1B1C28f76d892bF — proof — archive.org
-> 0xBeF8660508031CFc1eD8038fDe67548dA4e18749
---> 0xB309C7b8295Cb4537909024DE55ffcc1fd6133C1 Kopetunto — proof — archive.org
---> 0x4361d51DF6FC53AE84343BCe6F10232D2bD0927e Kopetunto — proof — archive.org

ningrum
↔️0x250aAd4c8A21738F989928e2360fcB5D45155A1A — proof — archive.org
-> 0x7D914AcF2eBb814f7f16815300C14d4cC61A2bfd
---> 0x47e461C227761DAc38b06e511b84363C5e1DE8F5 Sarcasm, Sungoku
---> 0xeaEc1c8cf892c30195D3619320c9a7874856765C +link
---> 0xe95BAD0D7a8d503348366A7A652616c5aa81D42b Sungoku — proof — archive.org
-> 0xffFB3906ce99271e315A751eb8279241a67abb1A Mysbanickma — proof — archive.org
-> 0xf18526d01f9fA91f8c138200cfd773F0D8b2Bae7 +link

With all evidence shown there's no doubt that the two accounts were alts, but the question to asked the user is that how possible is it for him to have participated in a campaign he took no time in reading the rules, am sure it's a deliberate act to prove that he's wise enough to outsmart the campaign manager, here he has broken two of the rules which are very important to note, using of alts and the use of AI for posting, the two accounts will definitely enough the reward of being tagged red for doing this.

I went through another one signature campaign and found some more accounts with the same writing style, but most of accounts I found don't have interconnections through blockchain so I'm not going to name nor these accounts nor the campaign at the moment. But there is one more account connected with those I mentioned in the first post.

monineklutak
His main ETH-address is 0xA3C4b0Af1412571b0378cafA82948efBed611633 — proof — archive.org

This address has transaction to 0xd265BAdCb90b76d283A362AD3A232C3B74AbAd48 and there's a transaction to the same address from 0x1fA2a6A39c240d27B5C3F1C18CD2ae6574F87467 (belongs to Inspiron14 mentioned in the first post — proof —archive.org)
And there is another transaction to 0x53625afF45021D961900daDbeb1535b92F2Cd00d, and this address we already know as connected with Inspiron14, lunnatic and Desscount.

So now I thought that 0x53625afF45021D961900daDbeb1535b92F2Cd00d is connected to so many accounts. And I looked at all addresses had transactions with it. Some are from forum users.

0x53625afF45021D961900daDbeb1535b92F2Cd00d
↔️0xCCA942e29bD8B0664F1689979C37e53d4cc918dd
pucunghul — proof — archive.org
Has a tag: "Accounts Connected: pucunghul (u=1112518), kiemponxs (u=1093120), colenax (u=1104031)
Cheating signature campaign with alt accounts." Ref.

↔️0x2087500147D070DeC3187Ad84426CB16858D9e6E
Desscount (proof in the first post)
Has several tags including: "Linked accounts Bitcointalk: 966189, 111993 - https://imgur.com/hRdomti."

↔️0x2873F28e551F270338EA4de73189f7F18e3d141A
lunnatic (proof in the first post)
Has several tags including: "Hacked/sold account."

↔️0xCC4a232e6CD9ADfb89AA62EDc8D38C9E212298E0
generous — proof — archive.org
Has several tags including: "Account sales encourage scams, spam, and account farming."

↔️0xA3C4b0Af1412571b0378cafA82948efBed611633
monineklutak (proof in this post above)
Has a tag: "Part of the Spammer Blacklist: this user has made at least 195 replies that are not up to forum standards."

↔️0x5bF54a3E37eB1974B64e7257241D6a53faaD2354
BladeXX — proof — archive.org

↔️0x873A6dE20E76a7C55E0c6e3241553977158deB81
Inspiron14 (proof in the first post)

↔️0xe95BAD0D7a8d503348366A7A652616c5aa81D42b
Sungoku — proof — archive.org
Has a tag: "Cheating bounty with alt accounts." Link to proof on interconnection with MasNizzer and Landakhitam.

↔️0x43aC11F24873E31D35bc988CD7ebD008eBCED37a
dewanaga — proof — archive.org

↔️0x503b444A2B2d95b501C78D99D2302C75154E0e1d
One single transaction from this address. It is not an address of any forum user, but it is mentioned as an address of a scammed exchange BCNEX. Maybe it was just a buy on this exchange, don't know.

---

Well, I see there are tags about account trading or hacking in some of accounts which are found interconnected, so I suppose this farm can be much much bigger.

Basically those accounts are not created to cheat the same campaign - most likely as an alternative to joining another campaign especially about accounts with similar names. However, over time - this mindset can change, especially if no one is aware of the activity and returns to find no connection between the two. Yesterday I found 3 different accounts created around 2015 ^{[2 Legendary and 1 Hero]} - but all 3 didn't join the same campaign or maybe I missed something. The three of them collect a number of bounty campaign results in the form of ETH and BNB in ​​the same wallet - but I don't think that's ever a problem as long as they don't cheat.

Of course some cheaters are too stupid or don't realize that the account names they created are too similar to be suspected of being an alt. They can argue - but who wants to believe them after there is a connection between accounts?

If someone has to cheat by creating many accounts to cheat a campaign, why make the names look similar. There's no how they would have exhausted the combination of 26 alphabets and 10 numbers.

It is very likely. Desscount's account has a tag from icopress about interconnection with now inactive Arcas. And Arcas has multiple tags about that account is bought or hacked. lunnatic has the same couple of tags. So it is possibly a farm of bought or hacked accounts and there could be much more of not found yet.

SaveOurSea - Date Registered: September 28, 2017, 01:34:26 PM


Smitty Werben Man Jensen - Last Active: July 17, 2023, 04:11:20 PM - https://archive.ph/PpUmi
waONE - Last Active:July 17, 2023, 04:59:43 PM - https://archive.ph/fXpYI
CapGelatik - Last Active: July 17, 2023, 05:05:34 PM - https://archive.ph/N6hKl


Desscount - Last Active: July 18, 2023, 02:03:23 AM - https://archive.ph/EUlnV
Inspiron14 - Last Active:   July 18, 2023, 02:04:15 AM  - https://archive.ph/6uv02
judaspriest - Last Active: July 18, 2023, 04:57:30 AM - https://archive.ph/PUEat
SaveOurSea - Last Active: July 18, 2023, 05:05:14 AM - https://archive.ph/pJoyB

lunnatic - Last Active: July 22, 2023, 09:01:52 AM - https://archive.ph/xrs2l


Are you guys seeing a pattern? I think this farm might be having more accounts.

I didn't check the connection between the wallets of any of the users you mentioned - but I seem curious about two accounts created on the same day that were potentially alt from the same user. Both usernames appear to have the same characters - that's no coincidence.

CapGelatik - Date Registered: September 26, 2017, 12:55:48 PM
GelatikKembar - Date Registered: September 26, 2017, 02:12:58 PM

@jokers10, most likely they are Alt, aside from transactional connections, I found quickly the Twitters used by: @CapGelatik and @Inspiron14, both of them are on your inquiry list.

Proof:

[ Archive ]

[ Archive ]

There are at least two Alt connected via Twitter that they use.

Maybe others are the same. the evidence above is strong.

---

No doubt @CapGelatik and @Inspiron14, pure Alt connected, based on the Address they use, 100% both Alt.

Additional evidence:

[ Archive ]

[ Archive ]

I saw many AI posters in Combo subscription campaign and one day decided to go through all its participants. And I found several users who have the same pattern of posting: usually one sentence split into three rows. It looked like they are all the parts of one big low quality posting alt account farm. Combo campaign prohibits alt account participation. So this is a violation.

Same writing style makes it nearly obvious that it is a farm, but it is not a proof by itself. So I decided to go through their blockchain addresses. If to look at their bitcoin addresses, then many of accounts which have any transactions have an interconnection through using the same Fixed Float exchange, but they have different addresses for this exchange, so I don't think this proof is good enough.

But there are interconnections through Ethereum addresses for 5 of 8 campaign participants and one more account not from campaign.

I marked accounts for which I don't yet see good proofs with grey.

If any hints on how to find other accounts of this farm or how to find proofs for accounts that I didn't find interconnections except writing style yet, it would be good.

↔️lunnatic — Combo — archive.org
↔️Desscount — Combo —archive.org
↔️Inspiron14 — Combo —archive.org
judaspriest — Combo —archive.org
↔️Smitty Werben Man Jensen — Combo —archive.org
SaveOurSea — Combo —archive.org
waONE — Combo —archive.org
↔️CapGelatik — Combo —archive.org
-----
↔️GelatikKembar

lunnatic
↔️0x2873F28e551F270338EA4de73189f7F18e3d141A — proof — archive.org
has transactions to 0x53625aff45021d961900dadbeb1535b92f2cd00d, interconnected with:
1. 0x2087500147d070dec3187ad84426cb16858d9e6e, Desscount
2. 0x873A6dE20E76a7C55E0c6e3241553977158deB81, Inspiron14

Desscount
↔️0x2087500147d070dec3187ad84426cb16858d9e6e — proof —archive.org
has transactions to 0x53625aff45021d961900dadbeb1535b92f2cd00d, interconnected with:
1. 0x2873F28e551F270338EA4de73189f7F18e3d141A, lunnatic
2. 0x873A6dE20E76a7C55E0c6e3241553977158deB81, Inspiron14

Inspiron14
↔️0x446bF788446B40Ca07e42fb1986c4366e46302A2 — proof —archive.org
used by GelatikKembar also
↔️0x6e50e0Cf3A42180F497d44113D7F897313573FB3 — proof —archive.org
used by CapGelatik also
↔️0x873A6dE20E76a7C55E0c6e3241553977158deB81 — proof —archive.org
has transactions to 0x53625aff45021d961900dadbeb1535b92f2cd00d, interconnected with:
1. 0x2873F28e551F270338EA4de73189f7F18e3d141A, lunnatic
2. 0x2087500147d070dec3187ad84426cb16858d9e6e, Desscount

Smitty Werben Man Jensen
↔️0xf7d2836418B055567c9F34e45080baa50955a638 — proof —archive.org
has transactions to 0x4d97326518a5fabf299dac021ea1101e4b9be318, interconnected with:
1. 0x618E9257d2eeaAbc98B7137e91751F334Abd8911, CapGelatik

CapGelatik
↔️0x618E9257d2eeaAbc98B7137e91751F334Abd8911 — proof —archive.org
has transactions to 0x4d97326518a5fabf299dac021ea1101e4b9be318, interconnected with:
1. 0xf7d2836418B055567c9F34e45080baa50955a638, Smitty Werben Man Jensen
↔️0x6e50e0Cf3A42180F497d44113D7F897313573FB3 — proof —archive.org
used by Inspiron14 also

GelatikKembar
↔️0x446bF788446B40Ca07e42fb1986c4366e46302A2 — proof —archive.org
used by Inspiron14 also

I'm doing such a big for me investigation with several interconnections through blockchain for first time so if there are any mistakes, then please name them. And again, if any hints on how to find more proofs, please share them. I guess there are probably more accounts in this farm, at least we can see that GelatikKembar didn't take part in this campaign, but there are interconnections with his account through blockchain.