Legendary account 'MintCondition' with green trust has very likely been hacked

marlboroza

legendary

Activity: 1932

Merit: 2270

Quote from: Timelord2067 on June 15, 2018, 12:05:14 AM

Thanks for reconfirming the connections I made on a few of these accounts eighteen months ago. (Kolder, Omegasun Grim07 etc)

Shame people didn't heed my findings then. Roll Eyes

They said they bought twitter account, they can't really say they bought ethereum wallet private key http://archive.fo/I20zk#selection-4799.0-4799.48 half year after your finding.

I wonder why blockeye has sent me PM that he can't find this topic.

Quote

Good day!
I can't find the thread so I decided to message you.
This is the same statement I will post on the thread.
Today my penalty was lift off so I can answer already accusation to me.

I'll bump this for them, it seems that after 5 days they can't find topic.

Tldr:

Grimm007 is linked with accounts paloder, philprime, omegasun here https://bitcointalksearch.org/topic/m.16053407

And accounts grim007 PhilipPrime Daisy14 Goms Gaugh Dahhi PhilPrime Omegasun xwILL Bitcoin Markethere are linked here https://bitcointalksearch.org/topic/m.16405478

accounts omegasun, kolder and grim007 are linked here https://bitcointalksearch.org/topic/m.16789014 and somewhere above in this thread via ethereum address.

You (BlockEye) applied to twitter bounties with the same address which is used by accounts Wandika and Grimm007 to apply to bounty campaigns linked here https://bitcointalksearch.org/topic/m.39743956.

May I remind other memebers that account Grimm007 was tagged by 4 times in the past:

And account blockeye:

I am shocked.

@Blockeye why do you share the same ethereum address as account Grim007 which was tagget by 4 DT members in the past?
Why do you use https://archive.fo/jw16z#selection-6557.277-6557.364 term "the other guy" while "the other guy is linked to your account via the same ethereum address used to participate in bounty campaigns?

Edit

More accounts: (Gohs, Gahs, Dank14, Das, Dinki, Dassi).

Proofs are inside thread https://bitcointalksearch.org/topic/i-didnt-cheat-anyone-5182721 (archived http://archive.is/ACF5P)

Timelord2067

legendary

Activity: 3668

Merit: 2218

💲🏎️💨🚓

Thanks for reconfirming the connections I made on a few of these accounts eighteen months ago. (Kolder, Omegasun Grim07 etc)

Shame people didn't heed my findings then. Roll Eyes

marlboroza

legendary

Activity: 1932

Merit: 2270

https://etherscan.io/tokentxns?a=0x7975ba3d96195df9f17671867d94000265713dbe
Who is owner of this address?

Blockeye retwitted this:

And has received 75.89 ethos tokens:

I couldn't find ethos bounty, but I realized that Ethos is actually Bitquence which was rebranded(you can find that info in smart contract or here https://bitcointalksearch.org/topic/ann-ethos-the-people-powered-cryptocurrency-platform-universal-wallet-1964187).

So, bitquence bounty https://bitcointalksearch.org/topic/bqx-bitquence-bounty-program-earn-bqx-for-your-support-1965790 has twitter spreadsheet:
https://docs.google.com/spreadsheets/d/1VN61OS92gyZSHlYorDMfVVf90n3jl-HKTGbhBXVthNE/edit#gid=757700675

Is is a bird? Is it a plain? No, it is BlockEye under number 1075:

Using this addy 0x7975BA3d96195DF9f17671867d94000265713DBE

But why do I think I have seen this address somewhere? Strange. CTRL+F in this thread or:

Grim007:

Quote from: Wandika on April 24, 2017, 09:50:07 AM

Bitcointalk username: : Wandika
Forum rank: Member
Posts count: 85
ETH address: 0x7975BA3d96195DF9f17671867d94000265713DBE

thanks!

BlockEye claims Wandika was "the other guy":

Quote

Here is my drama or possibly an excuse?
Atriz offer me writing article for verify project for double stakes and I sold my stakes in one of my facebook GC regarding crypto since I don't want token. After I announce about my stakes for sale. He offer me to buy it. I don't have time to check if I receive the token so he just added me on a GC with other guy and he tell us to transfer now the token to him. I feel sorry for the accused for being connected on bunch of account because of his business.

https://archive.fo/jw16z#selection-6553.0-6557.459

Also, you can find BlockEye using the same address in SkibCoin bounty looking at https://docs.google.com/spreadsheets/d/1OtUCvldZmjp07sx8vGdUpF_7He0ZvuzrfPLasrFM5wA/edit#gid=685774789 under #47, #57 & #62.

But probably better proof can be found in Yahoo's SunContract campaign because there is solid proof that BlockEye participated in twitter campaign https://archive.fo/UPmja#selection-2831.0-2881.55.
Spreadsheet:
https://docs.google.com/spreadsheets/d/1hqOIwgo5ZDdZ3a8rpErNSP2jHnUv5BHB8ad6l3DKPHs/edit#gid=1506040137

And proof that BlockEye received tokens to mentioned addy:

Which means BlockEye IS Kodler's alt account and alt account of accounts mentioned above.

Is this now solid proof? Roll Eyes

I'll quote this one more time:

Quote

Atriz offer me writing article for verify project for double stakes and I sold my stakes in one of my facebook GC regarding crypto since I don't want token. After I announce about my stakes for sale. He offer me to buy it. I don't have time to check if I receive the token so he just added me on a GC with other guy and he tell us to transfer now the token to him. I feel sorry for the accused for being connected on bunch of account because of his business.

"Other guy" story isn't true because they are alt accounts.
So real question(again) here is:

Is BlockEye = aTriz??

Anyway, to edit this one more time with connected accounts(new and old one):
grim007, grim07, Omegasun, Mintcondition, Casabrandy, IKZIR31, pratamaPR31, Gastotade, Armstand, Lumada, Blamsud, vasrasus, Wandika, Palodar, Kolder, PhilPrime, Bitcoin Market, xWill, Dahhi, Gaugh, Goms, Daisy14, BlockEye.

I probably broke forum rules with this post

KWH

legendary

Activity: 1904

Merit: 1045

In Collateral I Trust.

Quote from: ?? on ??

Hello. I'm currently Ban so if it's ok to post here to respond to this issue then I will go.
snip

No, you are ban evading. You are only allowed to post a thread in Meta about your ban.

marlboroza

legendary

Activity: 1932

Merit: 2270

EDIT
^^^
Ok, someone deleted blockeye's post which was just above this one. Anyway, here it is https://archive.fo/jw16z#selection-6353.0-6353.10

Quote from: PhilPrime on May 01, 2017, 09:54:43 PM

Bitcointalk username: Philprime
Forum rank: Full Member
Posts count: 301
ETH address: 0xA858d07154c02AaDdc5A22F427A919C6693d0cc0

https://archive.fo/gKBZk

So what we have here in this 951f744903d2c9013c65de1957bc883718d91358 address:

1) Hacked account
2) aTriz
3) Bunch of proven alt accounts doing all kind of shady things(buying accounts, trust farming, bounty abuse)

And you.

Nothing really surprise me, you were ingaged in account trading in the past https://archive.fo/VkZ3N https://archive.fo/JMS11 etc

Are you aTriz?

On side note, that addy contains tokens worth $100,000, I believe aTriz has something to repay.

digaran

copper member

Activity: 1330

Merit: 899

🖤😏

I think where he said "sir" to LoyceV caused this finding right? nice to see that you guys are doing what you are supposed to do. tag them green trust garbage posters. Wink

marlboroza

legendary

Activity: 1932

Merit: 2270

I've researched this eth addy https://etherscan.io/tokentxns?a=0x951f744903d2c9013c65de1957bc883718d91358

Does this look like accumulating address for tokens to anyone? Especially this part:

Code:

0xbf2752794d79a45b4e9e17a6829eb26f28e12ecf
0xeecfffc6a36f7c9482338d21e6c3dd59a8e7620b
0x988128a546f59084178e57b33a7922aebab9ee7e
0x43544bf79639353f86eb5b443def511384050507
0x6d4531145e5342a4fb0ff676d06844027f39a497
0x7fced058e5b49865b303b4daa2f6096fe0c25e3c

Quote from: MintCondition on May 21, 2018, 01:01:48 PM

#JOIN

Bitcointalk username: Mintcondition
Forum rank: Legendary Member
Posts count: 1064
ETH address: 0x6D4531145E5342a4fb0FF676d06844027f39A497

Quote from: Gastotade on April 30, 2017, 04:05:07 AM

Bitcointalk username: Gastotade
Forum rank: Jr. Member
Posts count: 42
ETH address: 0xBf2752794D79a45b4E9E17a6829Eb26F28e12ECf

https://archive.fo/kTeUB

Quote from: Armstand on September 10, 2017, 04:17:12 AM

Joined Twitter Campaign, pls add mine for ETH address column,
Twitter: arm_stand
ETH:
0xeecfFfc6A36F7C9482338D21e6C3Dd59A8E7620b

Cheers,

https://archive.fo/mYyVZ

Quote from: Lumada on September 09, 2017, 11:23:37 PM

Pls add my ETH in spreadsheet for Twitter
Bitcointalk Username - Lumada
ETH - 0x988128a546F59084178E57B33A7922aEbab9Ee7e

Quote from: Blamsud on September 09, 2017, 11:07:39 PM

I'm participating in a Twitter bounty campaign, please add my ETH wallet in a spreadsheet

Bitcointalk Username: Blamsud
Twitter Username: FreshBitcoin
Twitter Link: https://twitter.com/FreshBitcoin
ETH address: 0x43544bf79639353F86eB5b443DeF511384050507

Back to back https://archive.fo/QMxn7

Account vasrasus

Quote from: Casabrandy on July 05, 2017, 09:38:42 PM

Twitter username: @cassabrandy
Twitter url: https://twitter.com/cassabrandy
Followers : 8632
ETH address: 0x8D89ddA8134EE907F67C8b2448970eFB3819686e

https://archive.fo/G8str

Quote from: Wandika on June 08, 2017, 07:08:06 PM

Bitcointalk username: Wandika
Forum rank: Sr member
Posts count: 243
Waves or ETH address: 0x8e364444365dEc5A73b8cBc7Cfa5116fEC83F0C1

https://archive.fo/Z8I1g

vasrasus again:

Quote from: vasrasus on July 05, 2017, 08:29:27 PM

Twitter username: @vasrasus
Twitter url: https://twitter.com/vasrasus
My ETH address: 0x3B0bEf9bf5b7cf21021a358Dde146f920527753c

https://archive.fo/GLmF4

The same addy:

Account Palodar

Quote from: Joel_Jantsen on August 27, 2016, 01:50:32 AM

Bitcointalk username: Kolder
Forum rank: Hero member
Posts count: 733
Waves or ETH address: 0xB1b359735382f355Ab09d056D02B238b5BA1C9AC

https://archive.fo/2u0DU

The same addy used by account PhilPrime

Quote from: Joel_Jantsen on August 27, 2016, 01:50:32 AM

ETH address: 0x7975BA3d96195DF9f17671867d94000265713DBE

https://archive.fo/TJG03

The same addy was used by account Grim007:

Quote from: Kolder on March 21, 2018, 02:50:45 AM

#JOIN

Bitcointalk username: Kolder
Forum rank: Hero Member
Posts count: 1168
ETH address: 0x5e74D42dd1b11AE7d59E5dd4d67012448bEd22Fc

https://archive.fo/NNRWu

Account PhilPrime

Quote from: Kolder on June 06, 2017, 07:34:32 AM

Username: kolder
Profile link:https://bitcointalksearch.org/user/kolder-662310;sa=summary
Language:Filipino
Portfolio/Experiece/previous translations links:
~
ETH Addy: 0xB1b359735382f355Ab09d056D02B238b5BA1C9AC

https://archive.fo/TK6Wi

Account Grim007

Quote from: Wandika on September 10, 2017, 02:16:54 AM

I joined Twitter bounty pls add mine on the list
Bitcointalk Account: Wandika
ETH ADD: 0x12316c2AC49fa5Bd7AC418036f0141e7DB3dB5Ea

https://archive.fo/zaQjG

First address belongs to account BlockEye

Quote from: BlockEye on August 29, 2017, 06:31:19 AM

Username: Blockeye
Language: Filipino
Portfolio/experience/previous translations links

EDGELESS - https://bitcointalksearch.org/topic/m.18005988

Do you want to reserve white paper translation Y
Do you want to reserve website translation Y
ETH address: 0x6D28A807294834ce01Ed8ce610A8B86619A2dE46

I want to try this time. I hope that Irfan grants this. Grin

Accounts connected: :

grim007 -16: -4 / +0
Mintcondition -13: -4 / +3
Casabrandy -4: -2 / +0
IKZIR31 -4: -2 / +0
pratamaPR -4: -2 / +0
Gastotade 0: -0 / +0
Armstand 0: -0/ +0
Lumada 0: -0/ +0
Blamsud 0: -0/ +0
vasrasus 0: -0/ +0
Wandika 0: -0/ +0
Palodar -2: -1 / +0
Kolder 1: -1 / +2
PhilPrime -8: -3 / +0
BlockEye, 41: -0 / +7

Undecided

Edited and updated.

Editing this again Roll Eyes

Quote from: hilariousetc on June 07, 2018, 12:06:17 PM

~
And the new one is just your average Filipino shitposter who's managed to get himself a trusted Legendary account by the looks of it.

You are wrong Don.

Look at the dates and accounts, this is straight trust farming between MintCondition and Kodler:
Account Kodler:

Account MintCondition:

Minerjones:

Hhampuz:

actmyname

copper member

Activity: 2562

Merit: 2504

Spear the bees

Quote from: marlboroza on June 07, 2018, 02:21:41 PM

Quote from: Avirunes on June 07, 2018, 02:50:53 PM

Tagged. Don't think polo is connected to Casabrandy since there actually are idiots that copy the post above theirs (due to laziness or what have you) but the polo group is definitely abusing campaigns.

Avirunes

legendary

Activity: 3094

Merit: 1468

Quote from: marlboroza on June 07, 2018, 02:21:41 PM

-snip-

Thanks for searching from address part. It is now clear that cassbrandy is another face of this user. Well I am gonna add some more connections to the account and link where the buying and selling thing is going on.

Quote from: Casabrandy on November 28, 2017, 10:05:35 PM

Bitcointalk Username: casabrandy
Facebook Url: https://www.facebook.com/cassie.brandy.169

Week 3
https://web.facebook.com/DitCoin/posts/509853872746944
https://web.facebook.com/cassie.brandy.16/posts/171961113392995
https://web.facebook.com/mohsin.alam.39/posts/1492938547448767

Archived: http://archive.is/rpNil#selection-2153.0-2159.62

We got one unique user : mohsin.alam.39 linking with IKZIR31

Quote from: IKZIR31 on November 29, 2017, 01:05:49 AM

Archived: http://archive.li/iUfV4#selection-4277.25-4277.39

Adds on two more leads: riskyiiee and ido.jerom. ido.jerom after searching connects no one. However searching riskyiiee leads to pratamaPR31

Quote from: pratamaPR31 on May 08, 2018, 08:21:48 AM

Archived: http://archive.li/6X0tm#selection-5383.25-5383.34

Seems like a regular buyer buying from local threads usually.

Quote from: IKZIR31 on November 29, 2017, 09:53:10 AM

dicari akun minimal full member...
masalah harga ...
minimal 1jt
kalau harga sesuai dengan akun
langsung saya ambil ...
telegram
@rizkipratama31
081362787228

marlboroza

legendary

Activity: 1932

Merit: 2270

In addition

Mintcondition used this address to join campaign

Quote from: MintCondition on May 21, 2018, 01:01:48 PM

#JOIN

Bitcointalk username: Mintcondition
Forum rank: Legendary Member
Posts count: 1064
ETH address: 0x6D4531145E5342a4fb0FF676d06844027f39A497

Casabrandy used the same addy:

Quote from: Casabrandy on April 29, 2018, 12:04:14 AM

#JOIN

Bitcointalk username: Casabrandy
Forum rank: Hero Member
Posts count: 789
ETH address: 0x6D4531145E5342a4fb0FF676d06844027f39A497

Quote from: MintCondition on August 14, 2017, 10:56:17 AM

#JOIN

Also, they used this addy:
Bitcointalk username: Mintcondition
Forum rank: Hero Member
Posts count: 681
ETH address: 0xb777641e9bd087581c68c1dC161dbf39EE4DF445

Accounts cheated many bounty campaigns(utrust, viu etc)

~~Now, this is something I don't understand.~~
poloniexwhale, damnMscollec and cyrixcer are part of different farming group *

Account Casabrandy tried to apply to campaign using this username:

Quote from: Casabrandy on December 01, 2016, 09:31:04 PM

Btctalk name : poloniexwhale
Post count : 124
Add appropriate signature code : yes
XAUR wallet addy : 0xa950bda879ff300ad48079dd3ec626010512be8a

https://archive.fo/G0w4p

And they said it was mistake:

Quote from: poloniexwhale on December 02, 2016, 09:44:49 PM

Quote from: Casabrandy on December 02, 2016, 07:03:25 PM

Quote from: Casabrandy on December 01, 2016, 09:31:04 PM

Btctalk name : poloniexwhale
Post count : 124
Add appropriate signature code : yes
XAUR wallet addy : 0xa950bda879ff300ad48079dd3ec626010512be8a

Btctalk name : casabrandy
Post count : 124
Add appropriate signature code : yes
XAUR wallet addy : 0xa950bda879ff300ad48079dd3ec626010512be8a

Wtf! I forgot to change the very special info. Poor me.
Sorry poloniexwhale for having messed up with you.
I'm just rush to apply here. Grin

Am I in blacklist because of you? Angry

People generally have quoted the previous post and change info, you should do more careful thing dude next time.

I check his post habbit, totally diffenrent with mine, I am not his alt, or vice versa.

Account poloniexwhale used this addy to participate in campaign:

Quote from: poloniexwhale on January 08, 2017, 08:59:41 PM

Name: poloniexwhale
Post count: 168
Rank: Full Member
Bitcoin address:1PMzT36Z3eGwPZE6PLL3yFfYQ6fJzMgHuo

https://archive.fo/flpzR

Account damnMscollec used this addy:

Quote from: damnMscollec on November 22, 2016, 10:25:16 AM

Flashcoin wallet address or email address: will add it when i have it
Link to Profile: https://bitcointalksearch.org/user/damnmscollec-886662
Bitcointalk Rank: Member
Current number of posts: 80
Bitcoin Address to send the payment: 1FkZdeFRTfZe6PYZsKGzCAKtwmg5F3StLX

https://archive.fo/F1oZU

Account cyrixcer used this addy:

Quote

Link to Profile: https://bitcointalksearch.org/user/cyrixcer-374021
Bitcointalk Rank: Member
Current number of posts: 63
Bitcoin Address to send the payment: 1KWYCeanUxvTWfaiiejHdWxP9KJAmqQw6J

https://archive.fo/aR2sJ

All addressed...

Code:

1FkZdeFRTfZe6PYZsKGzCAKtwmg5F3StLX
1KWYCeanUxvTWfaiiejHdWxP9KJAmqQw6J
1PMzT36Z3eGwPZE6PLL3yFfYQ6fJzMgHuo

...are part of this wallet https://www.walletexplorer.com/wallet/02ddbd930d363850/addresses

Poloniexwhale https://archive.fo/We0PV and damnMscollec https://archive.fo/NAZF1 enrolled in the same signature campaign, both accounts are not active since 12. and 16. October 2017.
Both accounts registered on August 08, 2016, while cyrixcer registered on September 04, 2014(1 post, 2 years gap, possible bought account?)

Strange.

Any thoughts on this?

edited*

SFR10

legendary

Activity: 2968

Merit: 3406

Crypto Swap Exchange

Quote from: hilariousetc on June 07, 2018, 12:06:17 PM

average Filipino shitposter who's managed to get himself a trusted Legendary account by the looks of it.

That's pretty accurate (even his/her local posts).

Quote from: hilariousetc on June 07, 2018, 12:06:17 PM

Looking into it there's a huge gap in his posts. The account stops posting on September 12, 2013 then reappears on February 18, 2017 and you can see the stark change in the quality of his posts. Last post where he even 'signs off':

In addition to that:
- I was able to find from the archived pages, the time it changed password (checks out):

Quote from: https://archive.fo/99IAs#selection-11061.0-11065.19

February 18, 2017, 02:44:21 AM - MintCondition - password changed

hilariousetc

legendary

Activity: 2786

Merit: 3029

Join the world-leading crypto sportsbook NOW!

https://bitcointalksearch.org/user/mintcondition-21178 MintCondition

Noticed this user shitposting on one of sylon's campaigns (no surprises there) and something just seemed odd (unusual to see a Legendary posting like a Filipino Newbie).

Looking into it there's a huge gap in his posts. The account stops posting on September 12, 2013 then reappears on February 18, 2017 and you can see the stark change in the quality of his posts. Last post where he even 'signs off':

Quote from: MintCondition on September 12, 2013, 07:48:27 AM

Hi guys,

On 2013-07-31 we announced the imminent shutdown of the ABCPool getwork servers because the costs have become unbearable in the face of dwindling interest. For those who did not have automatic payout enabled, we allowed for an extra month to withdraw any leftover earnings. Today, almost two weeks after this deadline, we have shut down the remaining parts of ABCPool, leaving only the public part of the website for historical purposes.

Our database and payment engine have been brought offline too, so we can no longer accept any new requests for withdrawals. We will however manually handle the three requests currently still in progress.

Thanks for the ride everybody,
MC & Chlorine, signing off.

Then reappears trying to get a custom addy:

Quote from: MintCondition on February 17, 2017, 11:39:05 PM

hello sir LoyceV. how much is the cost for this cutom addy?

Prefix: 1MintC
public key: 0484D0A03001396477653D79CA8FA2C14ED72E4F2E2D5A04D1B0095169B3C326259F346D9C58ECE D201E3BDF58C2848D1BC564AE52A37416EC76BC8B106740FE34

Thanks

The original user seems to be the operator of ABCPool: https://bitcointalksearch.org/topic/1423gh-abcpool-pps-proxy-pool-for-high-steady-mining-rewards-33586

And the new one is just your average Filipino shitposter who's managed to get himself a trusted Legendary account by the looks of it.

Topic: Legendary account 'MintCondition' with green trust has very likely been hacked (Read 967 times)