Post
Topic
Board Reputation
Merits 4 from 3 users
Big farm... or not? (48 alts connected)
by
Ratimov
on 11/10/2019, 06:41:16 UTC
⭐ Merited by witcher_sense (2) ,zasad@ (1) ,madnessteat (1)
Hi. I'll start my story by opening a large farm of 30 accounts, 18 of which were already banned, and I first explored them for BAN evasion and  merit abuse, but later on I began to find more and more matches and the number of accounts increased to 48.

I'll start with Boss95rnd,because it is on this account that most of the addresses that other users will have are published.
Originally, the farm looked like this:

Boss95rnd -          10/3/2018 4:21:43 PM   password reset via secret question
dadisde -            11/24/2018 9:39:51 PM   Changed to Archived status   Autoban user
Vanderbleek -       12/8/2018 1:12:35 AM   Changed to Archived status   Autoban user
aalavandan -          1/8/2019 4:54:58 AM   Changed to Archived status   Autoban user
DominickA86 -      2/19/2019 8:52:03 PM   Changed to Archived status   Autoban user
ajdar.muxin.79 - 7/16/2019 10:11:30 PM   Changed to Archived status   Autoban user 
Correlll -             7/16/2019 10:14:11 PM   Changed to Archived status   Autoban user
clipto -               7/16/2019 10:06:14 PM   Changed to Archived status   Autoban user
cupruri -             7/16/2019 10:14:11 PM   Changed to Archived status   Autoban user
crzybilly -           7/16/2019 10:11:30 PM   Changed to Archived status   Autoban user
dipeco -             7/16/2019 10:08:52 PM   Changed to Archived status   Autoban user
der_troll -           7/16/2019 10:14:11 PM   Changed to Archived status   Autoban user
igor.vanyutin.83-7/16/2019 10:08:52 PM   Changed to Archived status   Autoban user
installer -           7/16/2019 10:11:30 PM   Changed to Archived status   Autoban user
pufenduy -         7/16/2019 10:06:14 PM   Changed to Archived status   Autoban user
siorapokk -         7/16/2019 10:08:52 PM   Changed to Archived status   Autoban user
chriseasan -         7/23/2019 8:19:46 PM   Changed to Archived status   Autoban user
Tarion -               8/24/2019 9:11:19 PM   Changed to Archived status   Autoban user
#Darren
cudora                
cribusen
cichaescut         
coaprotet
confreslamp
dcomomal
Patrix_1
r_delossa
Vickyphred
vanya.pronin.1983
zabir.brutov

Boss95rnd banned himself on October 3, 2018 by trying to change password through a secret question
https://bpip.org/profile.aspx?p=Boss95rnd
Code:
10/3/2018 4:21:43 PM password reset via secret question
Then he created a theme in Meta, where he explained the situation and there was used his first alt dadisde ,which will also be used in the bounty.
Hello dear BTT Admins,
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account Boss95rnd has been hacked/lost. Please reset the email to ccrreeppss2@list.ru. The current date is 03.10.2018.
-----BEGIN SIGNATURE-----
0xb1AC9db0d6a1eC291F427ad03fc3B632E1E93a56
-----END BITCOIN SIGNED MESSAGE-----
dadisde belongs to a group of users who have many similarities and features, for example, they all have the rank Copper Member and were registered in a short period of time.

siorapokk -      Copper Member - Date Registered:   September 26, 2018, 01:54:30 AM - 9/28/2018 4:41:53 PM   password changed
chriseasan -    Copper Member -  Date Registered:   September 26, 2018, 02:31:51 AM - 9/28/2018 4:27:42 PM   password changed
dadisde -        Copper Member -  Date Registered:   September 26, 2018, 02:44:42 AM - 9/28/2018 4:31:44 PM   password changed
cichaescut -    Copper Member -  Date Registered:   September 26, 2018, 04:05:40 PM - 11/1/2018 4:24:05 PM   password changed
coaprotet -     Copper Member -  Date Registered:   September 26, 2018, 04:36:26 PM - 10/25/2018 11:55:05 AM   password changed
cupruri -        Copper Member -  Date Registered:   September 26, 2018, 05:02:56 PM - 10/26/2018 2:08:18 PM   password changed
confreslamp - Copper Member -  Date Registered:    September 26, 2018, 05:34:21 PM - 11/1/2018 6:20:45 PM   password changed
dcomomal -    Copper Member -  Date Registered:   September 28, 2018, 06:35:45 PM - 11/1/2018 4:46:38 PM   password changed
dipeco -         Copper Member -  Date Registered:   September 28, 2018, 06:38:22 PM - 10/26/2018 12:55:53 PM   password changed
cudora -        Copper Member -  Date Registered:   September 28, 2018, 09:45:01 PM - 10/25/2018 11:51:54 AM   password changed
cribusen -     Copper Member -   Date Registered:   September 28, 2018, 10:38:13 PM - 11/1/2018 6:22:16 PM   password changed

All these accounts have changed their passwords from September 28 to November 1, most likely the accounts were hacked or bought.
Recently I spoke with a accounts seller, he provided me with information about a part of this list, but they were all in the rank newbie. He also noted that some of them had already been sold.

Bceм пpивeт пpoдaм aккayнты JR.Member + пoчтa пo 300 pyблeй зa 1 aккayнт
нa aккayнтe 42 Activity
(Aккayнты мoи)
Taк жe пpoдaм oптoм
5 aккayнтoв пo цeнe 1300 pyблeй
10 aккayнтoв пo цeнe 2400 pyблeй
50 aккayнтoв 10000
100 aккayнтoв 18000 pyблeй
Пишитe в тeлeгy @Freshmindoff


cichaescut        
coaprotet         
cupruri             
confreslamp    
dcomomal     
cudora               
cribusen          

This group of accounts may also have been bought or hacked, some have nearby registration dates and almost all have changed their passwords.

Vickyphred -           Jr. Member -  Date Registered:      June 20, 2018, 03:51:30 PM -   5/26/2019 12:28:59 PM   woke up
vanya.pronin.1983 -Member -      Date Registered:  August 26, 2018, 08:06:17 PM - 10/1/2018 6:27:46 PM   password changed
zabir.brutov -          Jr. Member - Date Registered:   August 26, 2018, 08:20:55 PM - 10/5/2018 3:33:57 PM   password changed
ajdar.muxin.79 -     Jr. Member - Date Registered:   August 26, 2018, 08:33:59 PM - 10/5/2018 3:38:38 PM   password changed
igor.vanyutin.83 -    Member -     Date Registered:   August 27, 2018, 12:18:59 PM - 10/6/2018 8:09:46 AM   password changed
Correlll -                 Member -     Date Registered:   October 18, 2017, 10:27:27 AM - 10/5/2018 9:31:24 AM   password changed
r_delossa -              Member -    Date Registered:   October 18, 2017, 10:31:14 AM - 10/4/2018 3:13:41 PM   password changed
Patrix_1 -               Member -     Date Registered:   October 18, 2017, 11:28:27 AM - 10/7/2018 3:32:10 PM   password changed
pufenduy -              Member -     Date Registered:   October 19, 2017, 05:48:43 PM - 10/5/2018 12:05:29 PM   password changed

The next group of accounts has an old registration. Also bought or hacked and all accounts have password changed.

DominickA86 -   Member -          Date Registered:   May 11, 2011, 09:45:51 AM -             9/30/2018 12:43:26 PM   password changed
aalavandan -     Member -           Date Registered:   May 14, 2011, 11:31:27 AM -             9/30/2018 12:52:06 PM   password changed
Tarion -             Member -           Date Registered:   May 11, 2011, 11:48:05 AM -             10/1/2018 1:10:38 PM   password changed
Vanderbleek -   Sr. Member -      Date Registered:   October 20, 2011, 09:36:04 PM -        10/3/2018 11:40:36 AM   password changed
der_troll -        Sr. Member -       Date Registered:   November 25, 2012, 08:25:20 PM -     10/18/2018 9:08:23 AM   password changed
#Darren -        Sr. Member -       Date Registered:   March 31, 2013, 06:01:10 AM -           10/30/2018 10:41:42 PM   password changed
installer -         Full Member -      Date Registered:   January 24, 2014, 08:33:05 PM -        3/30/2019 1:08:56 AM   password changed
clipto -             Member -            Date Registered:   March 19, 2014, 05:29:40 PM -           9/26/2018 7:33:02 PM   password changed
crzybilly -         Sr. Member -      Date Registered:   March 22, 2015, 11:00:44 AM -           9/26/2018 7:29:12 PM   password changed

Proof of the relationship between accounts:

Boss95rnd
Eth: 0xb1AC9db0d6a1eC291F427ad03fc3B632E1E93a56
Facebook: nikita.monastirskiy
Instagram: _faktastika_
Telegram: @nik95rnd

dadisde
Instagram: _faktastika_
Twitter: nik95rnd
Facebook: nikita.monastirskiy

Vanderbleek
https://bitcointalk.org/index.php?topic=5036112.msg46461275#msg46461275 (closed topic)
Telegram: cryptofanforever
cryptofanforever - will be found on other accounts. As the farm grew, new addresses were constantly added.
Proof:
Bitcointalk: cudora
Telegram: @cryptofanforever
Bitcointalk: cudora
Telegram: @nik95rnd

aalavandan
Twitter: @nik95rnd
Facebook: nikita.monastirskiy

DominickA86
https://bitcointalk.org/index.php?topic=4990965.msg46366066#msg46366066 (closed topic)
Telegram: @nik95rnd

ajdar.muxin.79
Eth: 0x20151c34d01d6785493f3416b3f82812a3dbb46f
Medium: @nik95rnd
Eth: 0x20151c34d01d6785493f3416b3f82812a3dbb46f  - This wallet will also meet in other accounts with old addresses.
Proof:clipto

Correlll
Telegram: @cryptofanforever
Telegram: @nik95rnd

clipto
Telegram: @nik95rnd
ETH: 0x20151c34d01d6785493f3416b3f82812a3dbb46f

cupruri
Telegram: @cryptofanforever
ETH: 0xA71cb9eE868821153Aa254fd08c8e185feA87584
Telegram: @nik95rnd

crzybilly
Telegram: @nik95rnd

dipeco
https://bitcointalk.org/index.php?topic=5117960.msg50059700#msg50059700 (closed topic)
Telegram: @nik95rnd

der_troll
https://bitcointalk.org/index.php?topic=5135250.msg51319699#msg51319699 (closed topic)
Telegram: @nik95rnd

igor.vanyutin.83
Telegram: @nik95rnd

installer
https://bitcointalk.org/index.php?topic=5151587.msg51537004#msg51537004 (closed topic)
Telegram: @nik95rnd

pufenduy
telegram: @nik95rnd

siorapokk
Telegram: @nik95rnd

chriseasan
Telegram: @nik95rnd

Tarion
https://bitcointalk.org/index.php?topic=5163998.msg52088414#msg52088414 (closed topic)
Facebook: nikita.monastirskiy
Instagram: _faktastika_

#Darren
Telegram: @nik95rnd

cudora
Telegram: @nik95rnd

cribusen
ETH: 0xA71cb9eE868821153Aa254fd08c8e185feA87584
0xA71cb9eE868821153Aa254fd08c8e185feA87584 - This wallet will also meet in other accounts with old addresses.
Proof: cupruri

cichaescut - This account has no addresses in the posts and no direct evidence of any relation to this farm.
From circumstantial proofs: Account from account seller's list, password changed, language change in one period with other Copper Member accounts, similar registration date

coaprotet
https://bitcointalk.org/index.php?topic=4862998.msg47493095#msg47493095 (closed topic)
Instagram: _faktastika_

confreslamp
Telegram: @nik95rnd

dcomomal
Telegram: @nik95rnd

Patrix_1
ETH: 0xb1ac9db0d6a1ec291f427ad03fc3b632e1e93a56
Telegram: @nik95rnd
ETH: 0x20151c34D01D6785493F3416b3f82812a3dbB46F

r_delossa
ETH: 0x20151c34D01D6785493F3416b3f82812a3dbB46F
https://bitcointalk.org/index.php?topic=5125221.msg50376850#msg50376850 (closed topic)
Telegram: @nik95rnd

vanya.pronin.1983
Telegram: @nik95rnd

zabir.brutov
Telegram: @nik95rnd

Vickyphred
In addition to @nik95rnd,account  Vickyphred also has new nicknames:

Telegram: @nik95rnd
Twitter: ukeme0
Steemit: @unfredo
Telegram: @unfredo
Twitter: brightphreda
https://bitcointalk.org/index.php?topic=5170862.msg52547158#msg52547158 (closed topic)
Reddit: unfredo

There are 3 accounts with these addresses:
Unfredo -        6/7/2018 7:07:32 PM   password reset via email - 5/16/2019 2:23:39 PM   Changed to Archived status   Autoban user
Phonexy -       6/9/2019 8:28:55 PM   password changed
Brandonkelv - 6/7/2019 5:01:42 PM   password change

Unfredo
Telegram: @unfredo
Reddit: Italyberg
Italyberg - this telegram nickname is also found at account Ucheman ,which continues the chain of alts and connects one group of accounts with another.
Reddit: unfredo
Facebook: bright.phreda.3

Phonexy
Facebook: bright.phreda.3
Reddit: unfredo
Telegram: @unfredo
Twitter: @ukeme0
ETH: 0x9F3285d33a66483De7AaabB99F81467A292C3018
0x9F3285d33a66483De7AaabB99F81467A292C3018 - this wallet also leads to the Ucheman account.

Brandonkelv
Facebook: bright.phreda.3
Twitter: brightphreda
Medium: @brightphreda
Reddit: unfredo

Ucheman - 5/18/2019 6:34:31 AM   password changed
From the growing clump of new nicknames and addresses we understand that Ucheman is related to this farm. Changed password may indicate that the account has been purchased or hacked like others.
Ucheman
Reddit: Italyberg
Eth: 0x9F3285d33a66483De7AaabB99F81467A292C3018