stellar-expert / public-directory

Curated list of well-known Stellar accounts and blocked domains
MIT License
10 stars 8 forks source link

Add [Coopbusiness] #malicious GBQYTZ…TUPM25 #608

Closed stellar-expert-deploy closed 9 months ago

stellar-expert-deploy commented 10 months ago

Address: GBQYTZQHIHEP4GAACBCDM4X7OGMHULRUMX5B7L5WANGVXISDWJTUPM25
Tags: malicious
Title: Coopbusiness
Requested by @karthikchandrashekar1

I am a blockchain investigator for a financial institution. This wallet address has been identified by a top blockchain screening company as a wallet belonging to CoopBusiness company which is a Ponzi Scheme led by David T. Rosen. Multiple open sources articles point this company is built on affiliate cooperation and payments. The business itself has multiple wallet addresses on different blockchains, however the stellar one seems to be the one with the biggest flow of funds rounding almost 23 mln USD.

CryptoHobbyist commented 10 months ago

Hello @KarthikChandrashekar1,

Please contact me on telegram and give me some more details. The account appears to be a hitbtc.com bridging account with the Stellar Blockchain. You should also be contacting their fraud department.

Looking Towards The Future With You, Rob https://t.me/TheCryptoHobbyist

CryptoHobbyist commented 10 months ago

Hello @KarthikChandrashekar1,

With that said there have been other identified scams that have used hitbt.com for their laundering.

https://stellar.expert/explorer/public/account/GBF7BJNAQF2MHLRQQJBZYFYFUACJQP2CPZTFKEYLNPCQROHA6FO4YMFH would be just one example of a wallet that seems to have been created to attempt to launder funds.

Looking Towards The Future With You Rob

KarthikChandrashekar1 commented 10 months ago

Hello Rob,

Thank you for your response. I believe elliptic is one of your exclusive partner. Kindly, screen the wallet in Elliptic lens for more details regarding this specific wallet.

Best regards Karthik

On Fri, 17 Nov 2023 at 14:37, CryptoHobbyist @.***> wrote:

Hello @KarthikChandrashekar1 https://github.com/KarthikChandrashekar1,

With that said there have been other identified scams that have used hitbt.com for their laundering.

https://stellar.expert/explorer/public/account/GBF7BJNAQF2MHLRQQJBZYFYFUACJQP2CPZTFKEYLNPCQROHA6FO4YMFH would be just one example of a wallet that seems to have been created to attempt to launder funds.

Looking Towards The Future With You Rob

— Reply to this email directly, view it on GitHub https://github.com/stellar-expert/public-directory/issues/608#issuecomment-1816447288, or unsubscribe https://github.com/notifications/unsubscribe-auth/BD5YEN7E5W6QQ67GNQV4BKLYE5SBFAVCNFSM6AAAAAA7JKPOIWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQMJWGQ2DOMRYHA . You are receiving this because you were mentioned.Message ID: @.***>

CryptoHobbyist commented 10 months ago

Hello @KarthikChandrashekar1,

I am not sure what you are asking about "Elliptic"? Is that someones account on github, or on some other service.

This a personal list I have been working on over the last 2 years. The tab labled "SCAM off chain accounts" might be helpful for tracing laundering that is passing through the Stellar blockchain. https://docs.google.com/spreadsheets/d/1JCkWZ3X1h6kJKM6ZCZThDshK_whhNiTyGTV8R24Anho/edit?usp=sharing

Stellar.expert has many great tools to use that helps follow transactions. The "Service" tab and "Payment Locator" option is easy to use, and you can use the memo search to help find connected accounts off loading to various bridged exchanges.

Looking Towards The Future With You, Rob

KarthikChandrashekar1 commented 10 months ago

Thanks, I'll check it out.

On Fri, 17 Nov 2023 at 15:07, CryptoHobbyist @.***> wrote:

Hello @KarthikChandrashekar1 https://github.com/KarthikChandrashekar1,

I am not sure what you are asking about "Elliptic"? Is that someones account on github, or on some other service.

This a personal list I have been working on over the last 2 years. The tab labled "SCAM off chain accounts" might be helpful for tracing laundering that is passing through the Stellar blockchain. https://docs.google.com/spreadsheets/d/1JCkWZ3X1h6kJKM6ZCZThDshK_whhNiTyGTV8R24Anho/edit?usp=sharing

Stellar.expert has many great tools to use that helps follow transactions. The "Service" tab and "Payment Locator" option is easy to use, and you can use the memo search to help find connected accounts off loading to various bridged exchanges.

Looking Towards The Future With You, Rob

— Reply to this email directly, view it on GitHub https://github.com/stellar-expert/public-directory/issues/608#issuecomment-1816494753, or unsubscribe https://github.com/notifications/unsubscribe-auth/BD5YEN6XDEUHZTU24NI6HPLYE5VTLAVCNFSM6AAAAAA7JKPOIWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQMJWGQ4TINZVGM . You are receiving this because you were mentioned.Message ID: @.***>

orbitlens commented 9 months ago

@KarthikChandrashekar1 Elliptic utilizes our Directory API to track malicious accounts. We do not use their service to avoid circular references and rely mostly on the community feedback.

I'm almost certain that the account GBQYTZQHIHEP4GAACBCDM4X7OGMHULRUMX5B7L5WANGVXISDWJTUPM25 is a HitBTC hot wallet. So if your suspect sent some money there, it means that HitBTC simply has been used for money laundering.

KarthikChandrashekar1 commented 9 months ago

Thanks for the tip Rob. Appreciate your help.

Happy Friday and Have a great weekend!

Thanks Karthik

On Fri, 17 Nov 2023 at 16:56, OrbitLens @.***> wrote:

@KarthikChandrashekar1 https://github.com/KarthikChandrashekar1 Elliptic utilizes our Directory API to track malicious accounts. We do not use their service to avoid circular references and rely mostly on the community feedback.

I'm almost certain that the account GBQYTZQHIHEP4GAACBCDM4X7OGMHULRUMX5B7L5WANGVXISDWJTUPM25 is a HitBTC hot wallet. So if your suspect sent some there, it means that HitBTC simply has been used for money laundering.

— Reply to this email directly, view it on GitHub https://github.com/stellar-expert/public-directory/issues/608#issuecomment-1816679228, or unsubscribe https://github.com/notifications/unsubscribe-auth/BD5YEN4VZOXWCGWR3ZLDOADYE6CMDAVCNFSM6AAAAAA7JKPOIWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQMJWGY3TSMRSHA . You are receiving this because you were mentioned.Message ID: @.***>

CryptoHobbyist commented 9 months ago

Hello @KarthikChandrashekar1

Sorry for the delay. but I hope you have started following up with HitBTC. This is the starting place if you have not already started. https://hitbtc.com/legal-information

Rob

CryptoHobbyist commented 9 months ago

Hello @Wdmoore01,

Please feel free to reopen this issue with any new information you may have.

Rob