Topic: Anyone think saulzaents is a bought/hacked account? Looking for sleuths. (Read 359 times)

Thanks all of you for helping me on this one, I do appreciate it. 

Going to lock the thread now.

The account has now been banned as of this morning. Good spot TP and good work getting him banned.

I'm somewhat relieved the original user is no longer browsing the forum whilst in the middle of an operation, but no doubt he has found new and interesting ways to neglect his patients.

Have you noticed there is a feedback on his profile left by termo$ on 13th May 2017.

See?  This is why I asked for help.  I reported his last post with a link to that thread.  If he had a permabanned account, any account he controls now should also be banned as far as I know.  We'll see what happens.

Edit:
Actually I didn't notice that, but the reference link only leads to the BitcoinHeroes profile page anyway.  Good eye, though.  That probably would have saved us a lot of time had I noticed it before making this thread.  In any case, let us hope that the saulzaents account gets banned as well.  It wouldn't hurt for someone else to report this to the mods, though my guess is that this thread will be read by at least one of them with a ban-hammering mindset.

I think it would be reasonable to have him either sign a message or send an email. If he can, it doesn't clear him by any means, but if he refuses then it's an easy tag.

Having said all that, he has previously been banned for plagiarism: https://bitcointalksearch.org/topic/why-my-account-was-blocked-1879076. He should be banned again for ban evasion then, surely?

Ask for a signed message and go from there. 90% chance the address was "lost" or smth.

OMG, yeah I remember that!  He claimed he was a doctor in this post:


....and I remember your criticism of him and the operating theater.  I'll have to go back and read that thread again, as I just took a quick glance at the link you provided.  Hmm.  What do you guys think should be done here?  That feeling that the account was hacked or sold is getting stronger.

I had a run in with user almost a year ago, you can see it here: https://bitcointalksearch.org/topic/m.30681856.

I remember it well because he took a picture of the operating theater he was working in, with an anaesthetised patient on the table, to prove he was a doctor. The writing on the anaesthetic machine in those photos is Turkish - which is in keeping with his previous posting history of broken English. The combination of a 6 month gap, changed password and email, significantly improved English skills, and immediate enrollment in a signature campaign suggests this is a bought account.

I suppose we could bring him to the thread and I could quiz him on his anesthetic knowledge?

Edit:

https://bitcointalksearch.org/topic/how-to-lose-weight-3024557. Now just have to hope he sees it.

Yup, I did notice that when checking his trust.  And as far as being compromised, it's not exactly an old account but it's ranked up enough such that it would be worth buying and right now saulzaents is trying to get into a sig campaign, so there's that.  

Wouldn't mind hearing from saulzaents him/herself on this matter.  I don't know if a signed message would help, since someone can obviously buy the private key to a staked address along with the account.  Didn't check to see if he'd staked an address or not, and my brain is about to shut off for the evening.

Heh heh.  That would be a 'gotcha' if not for the fact that you can write whatever location you want in that field.  The thing is, he now writes English like a typical American or Canadian, i.e., fluently.  His previous posts were clipped and looked just like standard sig spam crap.

Yes account has been hand overed. His starting post on Turkey language with mobile number;
But his current location update is : N. America. As per Google translate he want to sell btc on his topic. It would be better if he can make a call from his given mobile number. Otherwise should ask sign message from his address:1CMXfE95KF8CwpVdWeCbhib2X3HhQy7AUg or make small transaction to any specific address.

The same way that the quality can completely degrade after an account gets compromised, it can also greatly improve. It really comes down to the person that acquired/compromised the account. I agree with you in this case (unusual, but definitely compromised).

---

Bonus points: Old merit trader that I've tagged.

This is a weird one for me.  Usually when I figure out that an account has been bought or hacked, there are two main factors:  

1)  A large gap in posting.
2)  A change in posting quality, usually from decent/excellent English to piss-poor bounty hunter shitposting fare.  

I was taking a look at saulzaents' account, and there's a gap but not huge.  It's from July 30th 2018 to Jan 7th, 2019, with a single post in one of the local boards breaking that gap on Oct. 23rd 2018:

What is strange is that saulzaents went from posting like a typical bounty hunter:


...to making posts in excellent English, appropriate punctuation and everything, like this post:

I would also mention that saulzaents has recently changed his password and e-mail.  This might be my inherent bitcointalk paranoia kicking in, but I've got a weird feeling that this account has been hacked or sold.  I'm looking for opinions on this, and maybe for a little volunteer help to get some more evidence (if any exists).  If I was certain this was a bought/hacked account, I'd tag it right away, but I'm not certain at all.  

Input would be appreciated, and don't be afraid to tell me this is all in my head.

This is a self-moderated thread in order to weed out the garbage posters and trolls, but I won't delete posts simply for disagreeing with me.  I just want advice and to stay on-topic.  Thanks.