Hi. I'll start my story by opening a large farm of 30 accounts, 18 of which were already banned, and I first explored them for BAN evasion and merit abuse, but later on I began to find more and more matches and the number of accounts increased to 48.
I'll start with
Boss95rnd,because it is on this account that most of the addresses that other users will have are published.
Originally, the farm looked like this:
Boss95rnd -
10/3/2018 4:21:43 PM password reset via secret questiondadisde -
11/24/2018 9:39:51 PM Changed to Archived status Autoban userVanderbleek -
12/8/2018 1:12:35 AM Changed to Archived status Autoban useraalavandan -
1/8/2019 4:54:58 AM Changed to Archived status Autoban userDominickA86 -
2/19/2019 8:52:03 PM Changed to Archived status Autoban userajdar.muxin.79 -
7/16/2019 10:11:30 PM Changed to Archived status Autoban user Correlll -
7/16/2019 10:14:11 PM Changed to Archived status Autoban userclipto -
7/16/2019 10:06:14 PM Changed to Archived status Autoban usercupruri -
7/16/2019 10:14:11 PM Changed to Archived status Autoban usercrzybilly -
7/16/2019 10:11:30 PM Changed to Archived status Autoban userdipeco -
7/16/2019 10:08:52 PM Changed to Archived status Autoban userder_troll -
7/16/2019 10:14:11 PM Changed to Archived status Autoban userigor.vanyutin.83-
7/16/2019 10:08:52 PM Changed to Archived status Autoban userinstaller -
7/16/2019 10:11:30 PM Changed to Archived status Autoban userpufenduy -
7/16/2019 10:06:14 PM Changed to Archived status Autoban usersiorapokk -
7/16/2019 10:08:52 PM Changed to Archived status Autoban userchriseasan -
7/23/2019 8:19:46 PM Changed to Archived status Autoban userTarion -
8/24/2019 9:11:19 PM Changed to Archived status Autoban user#Darrencudora cribusen cichaescut coaprotetconfreslampdcomomalPatrix_1r_delossaVickyphredvanya.pronin.1983zabir.brutov
Boss95rnd banned himself on October 3, 2018 by trying to change password through a secret question
https://bpip.org/profile.aspx?p=Boss95rnd10/3/2018 4:21:43 PM password reset via secret question
Then he created a theme in Meta, where he explained the situation and there was used his first alt
dadisde ,which will also be used in the bounty.
Hello dear BTT Admins,
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account Boss95rnd has been hacked/lost. Please reset the email to
ccrreeppss2@list.ru. The current date is 03.10.2018.
-----BEGIN SIGNATURE-----
0xb1AC9db0d6a1eC291F427ad03fc3B632E1E93a56
-----END BITCOIN SIGNED MESSAGE-----
dadisde belongs to a group of users who have many similarities and features, for example, they all have the rank
Copper Member and were registered in a short period of time.
siorapokk -
Copper Member - Date Registered: September 26, 2018, 01:54:30 AM -
9/28/2018 4:41:53 PM password changedchriseasan -
Copper Member - Date Registered: September 26, 2018, 02:31:51 AM -
9/28/2018 4:27:42 PM password changeddadisde -
Copper Member - Date Registered: September 26, 2018, 02:44:42 AM -
9/28/2018 4:31:44 PM password changedcichaescut -
Copper Member - Date Registered: September 26, 2018, 04:05:40 PM -
11/1/2018 4:24:05 PM password changedcoaprotet -
Copper Member - Date Registered: September 26, 2018, 04:36:26 PM -
10/25/2018 11:55:05 AM password changedcupruri -
Copper Member - Date Registered: September 26, 2018, 05:02:56 PM -
10/26/2018 2:08:18 PM password changedconfreslamp -
Copper Member - Date Registered: September 26, 2018, 05:34:21 PM -
11/1/2018 6:20:45 PM password changeddcomomal -
Copper Member - Date Registered: September 28, 2018, 06:35:45 PM -
11/1/2018 4:46:38 PM password changeddipeco -
Copper Member - Date Registered: September 28, 2018, 06:38:22 PM -
10/26/2018 12:55:53 PM password changedcudora -
Copper Member - Date Registered: September 28, 2018, 09:45:01 PM -
10/25/2018 11:51:54 AM password changedcribusen -
Copper Member - Date Registered: September 28, 2018, 10:38:13 PM -
11/1/2018 6:22:16 PM password changedAll these accounts have changed their passwords from September 28 to November 1, most likely the accounts were hacked or bought.
Recently I spoke with a accounts seller, he provided me with information about a part of this list, but they were all in the rank
newbie. He also noted that some of them had already been sold.
This group of accounts may also have been bought or hacked, some have nearby registration dates and almost all have changed their passwords.
Vickyphred -
Jr. Member - Date Registered: June 20, 2018, 03:51:30 PM -
5/26/2019 12:28:59 PM woke upvanya.pronin.1983 -
Member - Date Registered: August 26, 2018, 08:06:17 PM -
10/1/2018 6:27:46 PM password changedzabir.brutov -
Jr. Member - Date Registered: August 26, 2018, 08:20:55 PM -
10/5/2018 3:33:57 PM password changedajdar.muxin.79 -
Jr. Member - Date Registered: August 26, 2018, 08:33:59 PM -
10/5/2018 3:38:38 PM password changedigor.vanyutin.83 -
Member - Date Registered: August 27, 2018, 12:18:59 PM -
10/6/2018 8:09:46 AM password changedCorrelll -
Member - Date Registered: October 18, 2017, 10:27:27 AM -
10/5/2018 9:31:24 AM password changedr_delossa -
Member - Date Registered: October 18, 2017, 10:31:14 AM -
10/4/2018 3:13:41 PM password changedPatrix_1 -
Member - Date Registered: October 18, 2017, 11:28:27 AM -
10/7/2018 3:32:10 PM password changedpufenduy -
Member - Date Registered: October 19, 2017, 05:48:43 PM -
10/5/2018 12:05:29 PM password changed
The next group of accounts has an old registration. Also bought or hacked and all accounts have password changed.
DominickA86 -
Member - Date Registered: May 11, 2011, 09:45:51 AM -
9/30/2018 12:43:26 PM password changedaalavandan -
Member - Date Registered: May 14, 2011, 11:31:27 AM -
9/30/2018 12:52:06 PM password changedTarion -
Member - Date Registered: May 11, 2011, 11:48:05 AM -
10/1/2018 1:10:38 PM password changedVanderbleek -
Sr. Member - Date Registered: October 20, 2011, 09:36:04 PM -
10/3/2018 11:40:36 AM password changedder_troll -
Sr. Member - Date Registered: November 25, 2012, 08:25:20 PM -
10/18/2018 9:08:23 AM password changed#Darren -
Sr. Member - Date Registered: March 31, 2013, 06:01:10 AM -
10/30/2018 10:41:42 PM password changedinstaller -
Full Member - Date Registered: January 24, 2014, 08:33:05 PM -
3/30/2019 1:08:56 AM password changedclipto -
Member - Date Registered: March 19, 2014, 05:29:40 PM -
9/26/2018 7:33:02 PM password changedcrzybilly -
Sr. Member - Date Registered: March 22, 2015, 11:00:44 AM -
9/26/2018 7:29:12 PM password changed
Proof of the relationship between accounts:Boss95rndEth: 0xb1AC9db0d6a1eC291F427ad03fc3B632E1E93a56
Facebook: nikita.monastirskiy
Instagram: _faktastika_
Telegram: @nik95rnd
dadisdeInstagram: _faktastika_
Twitter: nik95rnd
Facebook: nikita.monastirskiy
Vanderbleekhttps://bitcointalk.org/index.php?topic=5036112.msg46461275#msg46461275 (closed topic)
Telegram: cryptofanforever
cryptofanforever - will be found on other accounts. As the farm grew, new addresses were constantly added.
Proof:
Bitcointalk: cudora
Telegram: @cryptofanforever
Bitcointalk: cudora
Telegram: @nik95rnd
aalavandanTwitter: @nik95rnd
Facebook: nikita.monastirskiy
DominickA86https://bitcointalk.org/index.php?topic=4990965.msg46366066#msg46366066 (closed topic)
Telegram: @nik95rnd
ajdar.muxin.79Eth: 0x20151c34d01d6785493f3416b3f82812a3dbb46f
Medium: @nik95rnd
Eth: 0x20151c34d01d6785493f3416b3f82812a3dbb46f - This wallet will also meet in other accounts with old addresses.
Proof:
clipto
CorrelllTelegram: @cryptofanforever
Telegram: @nik95rnd
cliptoTelegram: @nik95rnd
ETH: 0x20151c34d01d6785493f3416b3f82812a3dbb46f
cupruriTelegram: @cryptofanforever
ETH: 0xA71cb9eE868821153Aa254fd08c8e185feA87584
Telegram: @nik95rnd
crzybillyTelegram: @nik95rnd
dipecohttps://bitcointalk.org/index.php?topic=5117960.msg50059700#msg50059700 (closed topic)
Telegram: @nik95rnd
der_trollhttps://bitcointalk.org/index.php?topic=5135250.msg51319699#msg51319699 (closed topic)
Telegram: @nik95rnd
igor.vanyutin.83Telegram: @nik95rnd
installerhttps://bitcointalk.org/index.php?topic=5151587.msg51537004#msg51537004 (closed topic)
Telegram: @nik95rnd
pufenduytelegram: @nik95rnd
siorapokkTelegram: @nik95rnd
chriseasanTelegram: @nik95rnd
Tarionhttps://bitcointalk.org/index.php?topic=5163998.msg52088414#msg52088414 (closed topic)
Facebook: nikita.monastirskiy
Instagram: _faktastika_
#DarrenTelegram: @nik95rnd
cudoraTelegram: @nik95rnd
cribusenETH: 0xA71cb9eE868821153Aa254fd08c8e185feA87584
0xA71cb9eE868821153Aa254fd08c8e185feA87584 - This wallet will also meet in other accounts with old addresses.
Proof:
cupruri
cichaescut - This account has no addresses in the posts and no direct evidence of any relation to this farm.
From circumstantial proofs: Account from account seller's list, password changed, language change in one period with other
Copper Member accounts, similar registration date
coaprotethttps://bitcointalk.org/index.php?topic=4862998.msg47493095#msg47493095 (closed topic)
Instagram: _faktastika_
confreslampTelegram: @nik95rnd
dcomomalTelegram: @nik95rnd
Patrix_1ETH: 0xb1ac9db0d6a1ec291f427ad03fc3b632e1e93a56
Telegram: @nik95rnd
ETH: 0x20151c34D01D6785493F3416b3f82812a3dbB46F
r_delossaETH: 0x20151c34D01D6785493F3416b3f82812a3dbB46F
https://bitcointalk.org/index.php?topic=5125221.msg50376850#msg50376850 (closed topic)
Telegram: @nik95rnd
vanya.pronin.1983Telegram: @nik95rnd
zabir.brutovTelegram: @nik95rnd
VickyphredIn addition to
@nik95rnd,account
Vickyphred also has new nicknames:
Telegram: @nik95rnd
Twitter: ukeme0
Steemit: @unfredo
Telegram: @unfredo
Twitter: brightphreda
https://bitcointalk.org/index.php?topic=5170862.msg52547158#msg52547158 (closed topic)
Reddit: unfredo
There are 3 accounts with these addresses:
Unfredo -
6/7/2018 7:07:32 PM password reset via email -
5/16/2019 2:23:39 PM Changed to Archived status Autoban userPhonexy -
6/9/2019 8:28:55 PM password changedBrandonkelv -
6/7/2019 5:01:42 PM password change
UnfredoTelegram: @unfredo
Reddit: Italyberg
Italyberg - this telegram nickname is also found at account
Ucheman ,which continues the chain of alts and connects one group of accounts with another.
Reddit: unfredo
Facebook: bright.phreda.3
PhonexyFacebook: bright.phreda.3
Reddit: unfredo
Telegram: @unfredo
Twitter: @ukeme0
ETH: 0x9F3285d33a66483De7AaabB99F81467A292C3018
0x9F3285d33a66483De7AaabB99F81467A292C3018 - this wallet also leads to the
Ucheman account.
BrandonkelvFacebook: bright.phreda.3
Twitter: brightphreda
Medium: @brightphreda
Reddit: unfredo
Ucheman -
5/18/2019 6:34:31 AM password changedFrom the growing clump of new nicknames and addresses we understand that
Ucheman is related to this farm. Changed password may indicate that the account has been purchased or hacked like others.
UchemanReddit: Italyberg
Eth: 0x9F3285d33a66483De7AaabB99F81467A292C3018