If you keep following the outputs and the transaction ID's you will found out that this came from the 1,5 MIL output from the first link. PS.: He sends it over around 25-30 adressess so you will need to spend 2-3 minutes following it...
Anyone else finds it weird? I find pretty weird he trying to hide it...
The supply is 26-27 MIL... 4,5 MIL with only one guy would be around 15-20% of the supply...