Topic: Not sure what to make of this: two mnightwaffle loans from (fullypak/klf) (Read 386 times)

[quote author=coinlocket$ link=topic=5144204.msg51120602#msg51120602 date=1558257599]
[quote author=Timelord2067 link=topic=5144204.msg51117318#msg51117318 date=1558234359]
How are these related to fullypak?  IIRC these were tied to Kolder.
[/quote]
Don't know, only quoted the post, you should ask to the OP of the post.
[/quote]

I had a read of the original post and it looks like that was a theory.

[quote author=Timelord2067 link=topic=2544574.msg51121940#msg51121940 date=1558264760]
2 Accounts Connected:

ribal -2: -1 / +0 (an account seller ^{2}), fullypak -125: -7 / +3 (a hacked account),
[/quote]

Since my last post I have connected fullypak to another account seller ribal which I seem to have had confirmation of in an unexpected way:

[img width=400]https://talkimg.com/images/2023/05/17/blob9d182a6fba835509.jpeg[/img]

It seems ribal is also a hacked account having last posted ^{1} on the 26th of August 2014 in English and then coming back to life ^{2}on the 2nd of January 2018 in Turkish.

That kind of marker isn't easy to hide as it would mean deleting dozens if not hundreds of posts...

---

(Counting backwards from most recent post) [Latest Posts] [26/08/2014] [02/01/2018]

^{1} Post 159 of 218
^{2} Post 158 of 218

Don't know, only quoted the post, you should ask to the OP of the post.

How are these related to fullypak?  IIRC these were tied to Kolder.

You right, I've only copy pasted what Twichyseal wrote here https://bitcointalksearch.org/topic/m.16406044 without reading


12hvTp8tbwQJtVxEQ7VvZEj9Nq9cb12exA is Insertion Here https://bitcointalksearch.org/topic/m.12136051 Archivied http://archive.fo/WPif5

guitarplinker was incorrectly identified IIRC as they had posted a wallet address in their Signature Campaign ??  Might have to look that one up.

Adding some more accusations on the past, all addresses has been archivied, editing the quote to make more readable



Original post

https://bitcointalksearch.org/topic/m.16406358

I've had a look throught the post history of fullypak and it looks like the original owner's account was hacked some time between the 23rd of September 2017 and the 21st of December 2017.

This page is where the changeover occurred.

The most recent 550 posts are 99% in Turkish while the first 3,219 posts are in Articulate English and 99% of those posts are in the gambling section.  Posts 551 and 552 (most recent counting, not since registration) are thread starters and have had all information removed from their OP's.

Post 551 was last edited on the 9th of November 2017 while post 552 was last edited on the 9th of March 2018 while the thread was started on the 3rd of December 2017.

TwitchySeal's Red Paint TM was on the 29th of September 2017 while fullaypak-alt's "This account belongs to me" Red Paint TM was slapped on the 8th of December 2017.

It looks to me that one scammer with a chronic gambling habit was hacked by another scammer who has admitted selling over 600 UID's.

the original gambling scamming owner of fullypak (and there's no evidence of the original owner being Pakistani) changed their wallet address to 1g3QAd9PUmev7r45VUUrmv6CapfGCBmxn in early 2017 on the 23rd of Jan then the 23rd of Feb and finally 28th of March 2017.

That wallet address is part of Wallet [https://www.walletexplorer.com/wallet/1e34928383477ace/addresses] and the other wallet addresses are:


but none have been seen on BCT other than 1g3QAd9PUmev7r45VUUrmv6CapfGCBmxn.

[quote author=Avirunes link=topic=5144204.msg51089835#msg51089835 date=1558075596]
I guess fullypak is hacked now. The current user seems to be Turkish while the earlier was from I guess Pakistan (not sure tho). There was a thread about it as well .. I mean fullypak being hacked
[/quote]

True to a point.  @Twitchyseal makes the initial identification of the various alts on the 29th of September 2016 and it is not until the 8th of December 2017 that fullypak-alt makes a claim on the UID.  The accounts don't come to the attention of @Lauda until the 18th of February 2018 as scamming alts.

I guess fullypak is hacked now. The current user seems to be Turkish while the earlier was from I guess Pakistan (not sure tho). There was a thread about it as well .. I mean fullypak being hacked

mnightwaffle starts a loan thread on the 21 July 2016, 08:03:58 and secures a BTC 0.1965 loan from fullypak that was funded here with repayment to be made to wallet address 1Cqd4L45LMVL2BmizDUzmPiNit6nhCQmdY. On the 30 July 2016, 17:38:17 mnightwaffle states that he has repaid ($110) 0.1377 sent to 1Cqd4L45LMVL2BmizDUzmPiNit6nhCQmdY via this TX. s/he then posts


The OP was edited on the 04 August 2016, 080:54:17


When?

There are no TX for 0.078 from any wallet address to 1Cqd4L45LMVL2BmizDUzmPiNit6nhCQmdY before or after the 4th of August 2016.

However, at the same time mnightwaffle is locking the tread fullypak sends mnightwaffle BTC 0.062 in this TX which is about a third of the amount mnightwaffle had repaid a few days earlier... BTC 0.062 at the time was worth $33.26

The TX 7d8208e3ea946945875d46a5570a445ff744d796c927bd223b4377f0b10b0b6d appears in this thread 03 August 2016, 08:07:00 where mnightwaffle is asking to buy $124 (min $25) - fullypak facilitates a sale the same day.  Neither thread mentions the outstanding BTC 0.078 owing on the loan.

---

fullypak is identified as a scammer in the known alts thread having multiple alts who are claiming in the same signature campaigns.  One of these alts is klf who engages in a mock exchange with fullypak in a bitgold to bitcoin thread.

In this bitgold to bitcoin thread fullypak claims klf is his best customer with this TX as proof of transaction sending BTC 0.6 to klf's wallet address 1C3dHBqsciQvvsa2c6BUvW9H3U23fy83tT. klf's post is post number four.  Posts two and three are by roadbits who uses wallet address 1BeWdcxCQ2em1HcN4gPvAjCqmmYz5omsfp in this signature campaign post.

Wallet [27d639b5fa] contains the following wallet addresses:

• fullypak uses wallet address 1Cqd4L45LMVL2BmizDUzmPiNit6nhCQmdY
• klf uses wallet address 1C3dHBqsciQvvsa2c6BUvW9H3U23fy83tT
• roadbits uses wallet address 1BeWdcxCQ2em1HcN4gPvAjCqmmYz5omsfp

all three talk to each-other in the bitgold to bitcoin thread that fullypak started with claims they have done trades with each-other.  Obviously they can't have as they are alts.

---

In the first part of this post I show a loan between mnightwaffle and fullypak that was never repaid in full with a follow-up sale from fullypak to mnightwaffle just days later.

on the 20 August 2016, 12:57:48 mnightwaffle starts a new loan thread this time asking for a $50-$200 btc loan @ 10% - 2 weeks @DarkStar_ asks for a signed message, however curiously that post no longer exists... Twenty minutes later klf comes to the rescue and 69 seconds later mnightwaffle accepts klf's loan offer sending BTC 0.35 to mnightwaffle with the repayment address being 1C3dHBqsciQvvsa2c6BUvW9H3U23fy83tT which is the same wallet address from the fake bitgold to bitcoin transaction between fullypak and klf.

mnightwaffle in post six claims the "2nd Loan fulfilled by zazarb"

However...

The very same day mnightwaffle sends BTC 0.336777 TO zazarb via this TX

The two transactions firstly from klf and secondly to zazarb are on this page of mnightwaffle's transactions via wallet address 1MPGDzR91uMdGanKvZVK4vHjHXGeKJNZo8 - the loan from zazarb was begun on the ninth of August 2016 and paid back on the 17th with the funds from klf.  mnightwaffle then repays klf

Effectively, mnightwaffle first sells bitcoin to zazarb then takes out a loan from zazarb then takes out a second loan to repay zazarb all in the space of one month.

---

Let's go back to that first loan from fullypak - fourteen hours after receiving the loan from fullypak mnightwaffle sells to zazarb bitcoin which can be seen on this page of mnightwaffle's transactions TX

On the one hand you have the known scammer fullypak/klf/roadbits fabricating transactions with each-other to boost their trades in their thread, on the other hand mnightwaffle appears to be taking out loan after loan simply to pay off the previous loans with one loan being purported to have been paid, but in actual fact wasn't. klf makes no mention of the 0.078 owed to their alt fullypak nore are there any transactions in mnightwaffle's transaction list that come close to that amount in that time-frame.

---

So, what am I looking at?