Username McUserface ( ͠° ͟ʖ ͡°)

28 reviews, 61% of them positive; 100 WHUF vouched for them by 1 person.61% positive · 28 reviews· 100 WHUF vouched· Influence factor 14, above 3% of accounts

The record

From 25 activities · Apr 2026

A prolific contributor known for sharp analysis of scams, rugs, and protocol mechanics, with deep expertise in crypto, cybersecurity, and privacy narratives. Consistently calls out low-effort reviews and bad actors in the community, though critics dispute whether their negative reviews are always thoroughly investigated or sometimes driven by personal disputes rather than objective analysis.

What people say

Received · 28 Given · 241

“The man behind the "haveibeenpwnd" data breach service”Troy is a Microsoft Regional Director and MVP who travels the world speaking at events and training technology professionals. But most people know him as the guy who created haveibeenpwnd. I just reviewed their twitter page: https://app.ethos.network/activity/review/708796/have-you-been-pwned I've personally talked with Troy a couple times on telegram. He's an amazing and down to earth person, even shared some of my privacy related tweets in the past :) I also like the articles on his webpage, the public shaming article is ultra accurate lol https://www.troyhunt.com/the-effectiveness-of-publicly-shaming-bad-security/ haveibeenpwnd is a service I've been subscribed to for like a decade or so. Every single time I get a notification about being included in a breach, I immediately rotate over to new emails before the phishing spam starts. Troy saved me from getting phished probably a hundred times if not more. Definitely a trusted person!

on Troy Hunt · 1280· 4mo ago12

“Scam VC outreach”Scam profile, reaching out and pretending to be a VC firm (@shadeventure) that "was looking into your project". LOL It's the type of ancient crypto scam where they try to phish you via fake meeting links. Other users posted the about it as well: https://x.com/Aayush_gupta_ji/status/2025261104574910602

on Lee Min-Ji · 1189· 8mo ago · negative12

“automated and unfitting cold outreach DMs”One of the Unfungible people who sent me automated cold outreach DMs in the past. Related review: https://app.ethos.network/activity/review/701689/not-a-fan-of-leon-unfungible-and-the-cold-d-ms-sent-by-his-team-members

on merheb (streamer arc) · 1394· 6mo ago · negative14

“ugh!”Suspicious (botted) profile doing cold outreach and trying to get you to sign up with your full name to use their product. "Saw what you’re building, looks solid." *blah blah blah, use our product* (I'm not building anything LOL) Their webpage says "AI-powered outreach that turns cold leads into warm conversations" which is especially hilarious when you look at their outreach attempt 😹 That alone would be imho worth of a negative review, but let's look closer. 8k followers, 0 mutuals. Their most engaged tweets: Oct 21, 2023: 4.3M Views / 569 likes https://x.com/_WEB3M_/status/1715776572790047001 They sent the same tweet twice. The one sent a minute earlier: 3.2M Views / 497 likes https://x.com/_WEB3M_/status/1715776376932835476 Their recent tweets can't even break a 100 views. This points to previously botted engagement and followers. A quick account follower/engagement analysis request via grok seems to confirm it: "The followers appear to be heavily botted or inactive/low-quality." "A long promotional thread posted on May 1, 2026 got extremely low engagement: Most individual posts: 1–3 likes, 0–1 reposts, and views in the 4–81 range (majority under 20). Even the opening post only reached ~81 views. This level of engagement is abnormally low and is a classic red flag for botted, bought, or dead followers." Their webpage seems to have ToS/privacy policy in place, which is pretty uncommon for scam webpages. Their ToS also mentions that Web3m INC is registered in Delaware, and a Delaware company lookup does seem to confirm that there is a company registered with that name. (It also says "THIS IS NOT A STATEMENT OF GOOD STANDING" in big, bold, bright, red uppercase text 😹) Whatever they're pitching prompts you to sign up with you full name, email, password. Not very web3. And it does feel like they're trying to gather data and reused credentials via mass spamming awful and unfitting cold outreach messages. While I can't say for sure that this is a scam just based on my gut feeling alone, I can definitely say it's very sketchy and "scam likely" does indeed instantly come to mind. Either way, there are definitely more than enough red flags to advise caution.

on Web3M · 1201· 6mo ago · negative14

“deliberately added a seed generation vulnerability to their own wallet”You probably heard about the Cold Card seed generation "bug" that got many bitcoiners rekt a short while ago. >A firmware bug from March 2021 weakened seed randomness on some Coldcard wallets, cutting key strength from 128 bits to as little as 40 — brute-forceable without physical access. >Starting July 30, 2026, attackers drained roughly 1,816 BTC (~$116 million) from over 5,200 addresses across four waves. Fun fact: the "bug" or rather a deliberate "feature" was added by the Coinkite CTO and Co-Founder (DocHex) larping as a different user... The proof is in this thread: https://x.com/oomahq/status/2085717166884618584 Also saved via Ethos Agent and pinned to the DocHex profile: https://app.ethos.network/activity/review/714110/

on COLDCARD · 1211· 2mo ago · negative11

“Biased (incentivized) reviews, platform abuse, retaliatory negatives”The account came back after a 7 month break to drop the incentivized positive review for CoinMemes. See here: https://i.imgur.com/x4rJquh.jpeg https://i.imgur.com/J2CODEN.jpeg The CoinMemes incentive: https://i.imgur.com/Eq1BQt3.png The reputation inflation scheme has only one purpose. Inflate score to seem more reputable -> funnel more people to the private group -> run up a liquidity extraction event in the private group. Related reviews: https://app.ethos.network/activity/review/708705/ https://app.ethos.network/activity/review/708712/ The account also left a retaliatory negative review after ZET called out their behavior: https://app.ethos.network/activity/review/708786/

on Olla · 1282· 4mo ago · negative11

“could have asked grok myself instead of reading your slop reviews”Whenever I see this guys review I always think that I could have just asked Grok myself 😹 See here for a side by side comparison: https://i.imgur.com/8LhCrhw.png xanon doesn't even bother to paste the slop with proper formatting, so you just get a hard to read word salad with line breaks after every single time "@username" appears 💀 Stop the slop!

on xanon · 1321· 4mo ago · negative13

“good bot”Makes staying up to date with current crypto stuff a bit easier. All you need is inversebrah and clioagent and you're basically covered 😹

on clioagent.eth · 1373· 3d ago10

“sketchy / scammy behaviour”Robacha stole thousands of dollars worth of collab assets. Then claimed "FUD and racism" when they got called out 🙄 Assets sent here: https://robinscan.io/tx/0xefe6f2962c790245192d5dd8a6540463ef7842b482711fb037acc4760d9d0796 Instead of being added to the gacha so they can be redeemed by users, those collab assets were dumped instead. As you can see here: https://opensea.io/Chefffff/activity?collectionSlugs=cashcatss&activityTypes=sale https://imgur.com/a/d6L3l1f https://x.com/lettuceisms/status/2087611132206870721 https://x.com/lettuceisms/status/2087611149378277407 They are also using the remaining stolen assets as engagement bait: https://x.com/lettuceisms/status/2088015030038011981 Also claiming to be "Opensea Verified" - when they aren't: https://x.com/robachadotfun/status/2087210554851250527 In general there are many red flags. Besides all the things described above, all assets and social images used by Robacha are AI generated and the account is located in India. This is a turbo-grift and should be avoided.

on Robacha · 909· 2mo ago · negative10

“legendary personality”John was such a legend. I often think of the "U.S. Foreign Policy for Dummies" video (as well as the various videos from the mixology series 😹) https://x.com/officialmcafee/status/1147491115949580291 https://x.com/officialmcafee/status/1050350811694460933 Pretty crazy that he was surviving on so much alcohol and unfiltered (!) cigarettes at 74 (!). He actually did have a supplement regime to combat the negative effects of his lifestyle, and in a different timeline he would most likely be seen as one of the pre-peptide OG healthhackers. https://x.com/officialmcafee/status/1265325435606519809 I miss his craziness and NFG attitude so much.

on John McAfee · 1444· 6mo ago10

“liquidity extraction, tld dilution, pivot out of web3”I already said a lot in the tweet I've saved via Ethos Agent. UD is buy once, own forever - no ongoing profits. Which means they have to release new TLDs to stay affloat. Which is how we got all those useless TLDs: coin, 888, crypto, x, wif, u, retardio, nft, wallet, polygon, pudgy, unstoppable, dao, blockchain, go, zil, bitcoin, austin, raiin, tball, dfz, pog, smobler, lfg, dream, mumu, propykeys, bald, wrkx, secret, ubu, witg, metropolis, chomp, ethermail, xmr, wifi, boomer, clay, stepn, tea, npc, quantum, emir, donut, onchain, caw, podcast, doga, tribe, bay, miku. bitscrunch, privacy, rad, ltc, her, xec, kryptic, kingdom, pastor, ministry, nibi, ask, south, calicoin, altimist, hegecoin, bobi, twin, pbdx, mery, bch, mycircle, derad, og, pendle, dejay, depin, xyo, swamp, pengu, hub, brave, hi, bitget, ath, bunni, collect, housecoin, tigershark, arculus, pundi, ohm, cgai, anyone, dsci, chip, pokt, learn, pilot, gotchi, lunar, digibyte, mooncat, zano, pack, imtoken, manga, anime, troll, web3, supernova, demos, carbon, presearch, ai4, goblin, undeads, marketer, spend, amped, mobix, aura, agent, openx, yellow, averge, cashme, enigma, digitalfuture, horizen, awake, super, xz1, agi, basenji, grow, robot, sonic Funnily enough, not even their earliest ones work as you would want them to. If you try looking up someone via etherscan, OS - or even unstoppable domains itself - you might notice that you can't find any user details. As was the case here: https://x.com/miyaspokeofthis/status/2034305562637390244 https://x.com/miyaspokeofthis/status/2034310575006626066 https://x.com/miyaspokeofthis/status/2034319628541800629 Their newest web3 TLD release was a week ago: https://x.com/unstoppableweb/status/2031408468822049003 "Announcing our newest TLD into the Fam - .xz1 to bring independent artists onchain." And a week later Matt dropped this announcement: https://x.com/mattgould/status/2033684862964519041 It took them a whole 7 days to go from "new web3 .xz1 TLD, give us your money" to "fuck web3, we outta here". Matt also tweeted about the pivot out of web3: "the general direction has been laid out for almost 2 years now and we continue to believe it's the right direction." Which means the TLDs they've been pumping out for the last ~2 years were nothing more but a cash grab before they pivot out of web3. I've been around UD since 2021 and it took less than 5 TLD releases to notice the direction they were heading. Some people took a while longer and noticed it around the time the UD discord was nuked as they wanted to be more corpo and didn't need the community feedback anymore. But it's 2026. UD has 140+ worthless web3 TLDs. And they don't care about web3 or their userbase anymore. So why should you?

on Unstoppable.ai · 1340· 7mo ago · negative10

“scam outreach in DMs / bot”Scam profile trying to phish people. They will try to lure you into meetings, it's the type of ancient crypto scam where they try to phish you via fake meeting links. The message they are sending out: "Hi, I’m currently looking for a co-founder to lead Web3 marketing and community management. I have a few ideas I’m planning to launch We can either split the profits or I can cover the marketing expenses upfront Would you be interested in discussing this further?" After that you will most likely get hit with a fake meeting URL This tweet has their email address, which is: hu.work.pham@gmail.com https://x.com/Huy1889533/status/2028464613193580996 Archived: https://archive.ph/IgTE4 Dots in gmail addresses don't matter, the dot placement doesn't change the email address. hu.work.pham = huworkpham But due to the dot placement, half of the email (hu.work) is recognized as a URL on twitter - which prevents people from using the twitter search to find tweets mentioning that email. This is a scammer tactic that prevents people from easily finding all the associated scam accounts pointing to the same email. And this tweet used to show their Github - but at this point the username was already changed: "This is my GitHub 0xcrypto102" https://x.com/Huy1889533/status/1927839142517289256

on Huy · 1185· 8mo ago · negative10

‹ Back132 of 241 · most upvoted firstMore ›