Author

Topic: Not sure what to make of this: two mnightwaffle loans from (fullypak/klf) (Read 384 times)

legendary
Activity: 3696
Merit: 2219
💲🏎️💨🚓
[quote author=coinlocket$ link=topic=5144204.msg51120602#msg51120602 date=1558257599]
[quote author=Timelord2067 link=topic=5144204.msg51117318#msg51117318 date=1558234359]
How are these related to fullypak?  IIRC these were tied to Kolder.
[/quote]
Don't know, only quoted the post, you should ask to the OP of the post.
[/quote]

I had a read of the original post and it looks like that was a theory.

[quote author=Timelord2067 link=topic=2544574.msg51121940#msg51121940 date=1558264760]
2 Accounts Connected:

ribal -2: -1 / +0 (an account seller {2}), fullypak -125: -7 / +3 (a hacked account),
[/quote]

Since my last post I have connected fullypak to another account seller ribal which I seem to have had confirmation of in an unexpected way:

[img width=400]https://talkimg.com/images/2023/05/17/blob9d182a6fba835509.jpeg[/img]

It seems ribal is also a hacked account having last posted {1} on the 26th of August 2014 in English and then coming back to life {2}on the 2nd of January 2018 in Turkish.

That kind of marker isn't easy to hide as it would mean deleting dozens if not hundreds of posts...



(Counting backwards from most recent post) [Latest Posts] [26/08/2014] [02/01/2018]

{1} Post 159 of 218
{2} Post 158 of 218
legendary
Activity: 2534
Merit: 1517
#1 VIP Crypto Casino

How are these related to fullypak?  IIRC these were tied to Kolder.

Don't know, only quoted the post, you should ask to the OP of the post.
legendary
Activity: 3696
Merit: 2219
💲🏎️💨🚓
Miscellaneous: 4 or 5 of them are in Fortunejack sig campaign. Seem closely related to these guys.

grim007
PhilipPrime
Daisy14
Goms
Gaugh
Dahhi
PhilPrime
Omegasun
xwILL
Bitcoin Market
Dinki


How are these related to fullypak?  IIRC these were tied to Kolder.
legendary
Activity: 2534
Merit: 1517
#1 VIP Crypto Casino
guitarplinker 12hvTp8tbwQJtVxEQ7VvZEj9Nq9cb12exA   https://archive.is/WPif5

guitarplinker was incorrectly identified IIRC as they had posted a wallet address in their Signature Campaign ??  Might have to look that one up.

You right, I've only copy pasted what Twichyseal wrote here https://bitcointalksearch.org/topic/m.16406044 without reading


12hvTp8tbwQJtVxEQ7VvZEj9Nq9cb12exA is Insertion Here https://bitcointalksearch.org/topic/m.12136051 Archivied http://archive.fo/WPif5
legendary
Activity: 3696
Merit: 2219
💲🏎️💨🚓
guitarplinker 12hvTp8tbwQJtVxEQ7VvZEj9Nq9cb12exA   https://archive.is/WPif5

guitarplinker was incorrectly identified IIRC as they had posted a wallet address in their Signature Campaign ??  Might have to look that one up.
legendary
Activity: 2534
Merit: 1517
#1 VIP Crypto Casino
Adding some more accusations on the past, all addresses has been archivied, editing the quote to make more readable


Let me help you with that:
Insertion's address is 12hvTp8tbwQJtVxEQ7VvZEj9Nq9cb12exA(GuitarPlinker's address) used here. https://bitcointalksearch.org/topic/m.12136051
 Edit: darlingdrla also uses this address: 1ErMGaLqkmoJCoCXE1Dbwjn1yGD3CPsdF9(futurebit640's) here https://bitcointalksearch.org/topic/m.12847260

Original post

https://bitcointalksearch.org/topic/m.16406358
legendary
Activity: 3696
Merit: 2219
💲🏎️💨🚓
I've had a look throught the post history of fullypak and it looks like the original owner's account was hacked some time between the 23rd of September 2017 and the 21st of December 2017.

This page is where the changeover occurred.

The most recent 550 posts are 99% in Turkish while the first 3,219 posts are in Articulate English and 99% of those posts are in the gambling section.  Posts 551 and 552 (most recent counting, not since registration) are thread starters and have had all information removed from their OP's.

Post 551 was last edited on the 9th of November 2017 while post 552 was last edited on the 9th of March 2018 while the thread was started on the 3rd of December 2017.

TwitchySeal's Red Paint TM was on the 29th of September 2017 while fullaypak-alt's "This account belongs to me" Red Paint TM was slapped on the 8th of December 2017.

It looks to me that one scammer with a chronic gambling habit was hacked by another scammer who has admitted selling over 600 UID's.

the original gambling scamming owner of fullypak (and there's no evidence of the original owner being Pakistani) changed their wallet address to 1g3QAd9PUmev7r45VUUrmv6CapfGCBmxn in early 2017 on the 23rd of Jan then the 23rd of Feb and finally 28th of March 2017.

That wallet address is part of Wallet [https://www.walletexplorer.com/wallet/1e34928383477ace/addresses] and the other wallet addresses are:

Code:
1g3QAd9PUmev7r45VUUrmv6CapfGCBmxn	0.         	11	488555
1Mf9hS2nPK3PkFeXQhYnLbE5Sk1xbt1PPL 0.         1 488555
1FTH6fNL1gV4JQz2NCwGuP4i9L7KuB8Jnb 0.         1 469055
1DtnQvhQdhfxLCk35x5k8e4uwhtYGCND26 0.         1 458103
1AsKEH5gyQmfE1MaqN4JEXxd4xu7sMdwBK 0.         1 453950

but none have been seen on BCT other than 1g3QAd9PUmev7r45VUUrmv6CapfGCBmxn.
legendary
Activity: 3696
Merit: 2219
💲🏎️💨🚓
[quote author=Avirunes link=topic=5144204.msg51089835#msg51089835 date=1558075596]
I guess fullypak is hacked now. The current user seems to be Turkish while the earlier was from I guess Pakistan (not sure tho). There was a thread about it as well .. I mean fullypak being hacked
[/quote]

True to a point.  @Twitchyseal makes the initial identification of the various alts on the 29th of September 2016 and it is not until the 8th of December 2017 that fullypak-alt makes a claim on the UID.  The accounts don't come to the attention of @Lauda until the 18th of February 2018 as scamming alts.




legendary
Activity: 3094
Merit: 1472
I guess fullypak is hacked now. The current user seems to be Turkish while the earlier was from I guess Pakistan (not sure tho). There was a thread about it as well .. I mean fullypak being hacked
legendary
Activity: 3696
Merit: 2219
💲🏎️💨🚓
mnightwaffle starts a loan thread on the 21 July 2016, 08:03:58 and secures a BTC 0.1965 loan from fullypak that was funded here with repayment to be made to wallet address 1Cqd4L45LMVL2BmizDUzmPiNit6nhCQmdY. On the 30 July 2016, 17:38:17 mnightwaffle states that he has repaid ($110) 0.1377 sent to 1Cqd4L45LMVL2BmizDUzmPiNit6nhCQmdY via this TX. s/he then posts

Quote
Amount due: 0.078 (approx $51)

The OP was edited on the 04 August 2016, 080:54:17

Quote
Edit
Repaid 8/3/2016
THX

When?

There are no TX for 0.078 from any wallet address to 1Cqd4L45LMVL2BmizDUzmPiNit6nhCQmdY before or after the 4th of August 2016.

However, at the same time mnightwaffle is locking the tread fullypak sends mnightwaffle BTC 0.062 in this TX which is about a third of the amount mnightwaffle had repaid a few days earlier... BTC 0.062 at the time was worth $33.26

The TX 7d8208e3ea946945875d46a5570a445ff744d796c927bd223b4377f0b10b0b6d appears in this thread 03 August 2016, 08:07:00 where mnightwaffle is asking to buy $124 (min $25) - fullypak facilitates a sale the same day.  Neither thread mentions the outstanding BTC 0.078 owing on the loan.



fullypak is identified as a scammer in the known alts thread having multiple alts who are claiming in the same signature campaigns.  One of these alts is klf who engages in a mock exchange with fullypak in a bitgold to bitcoin thread.

In this bitgold to bitcoin thread fullypak claims klf is his best customer with this TX as proof of transaction sending BTC 0.6 to klf's wallet address 1C3dHBqsciQvvsa2c6BUvW9H3U23fy83tT. klf's post is post number four.  Posts two and three are by roadbits who uses wallet address 1BeWdcxCQ2em1HcN4gPvAjCqmmYz5omsfp in this signature campaign post.

Wallet [27d639b5fa] contains the following wallet addresses:

Code:
1Cqd4L45LMVL2BmizDUzmPiNit6nhCQmdY	0.00000598 	15	435367  <--- fullypak
1C3dHBqsciQvvsa2c6BUvW9H3U23fy83tT 0.         48 496710  <--- klf
18ySABh1vMk5jFunSaYFvz2dkMCLHPFBwa 0.         43 406107
12hvTp8tbwQJtVxEQ7VvZEj9Nq9cb12exA 0.         24 377244
1LeG1NN72dVahGBL6jaG8YPxRNGBwQAk3X 0.         19 406244
1BeWdcxCQ2em1HcN4gPvAjCqmmYz5omsfp 0.         13 421108  <--- roadbits
1ErMGaLqkmoJCoCXE1Dbwjn1yGD3CPsdF9 0.         7 421108
13w9MkFTPQZX4NHmA319Ho2i4xVnTwgkzc 0.         2 387844
16AcDsWDGxsZJvBQzDw1jCVyURgKAJ9QYJ 0.         1 406102

  • fullypak uses wallet address 1Cqd4L45LMVL2BmizDUzmPiNit6nhCQmdY
  • klf uses wallet address 1C3dHBqsciQvvsa2c6BUvW9H3U23fy83tT
  • roadbits uses wallet address 1BeWdcxCQ2em1HcN4gPvAjCqmmYz5omsfp

all three talk to each-other in the bitgold to bitcoin thread that fullypak started with claims they have done trades with each-other.  Obviously they can't have as they are alts.



In the first part of this post I show a loan between mnightwaffle and fullypak that was never repaid in full with a follow-up sale from fullypak to mnightwaffle just days later.

on the 20 August 2016, 12:57:48 mnightwaffle starts a new loan thread this time asking for a $50-$200 btc loan @ 10% - 2 weeks @DarkStar_ asks for a signed message, however curiously that post no longer exists... Twenty minutes later klf comes to the rescue and 69 seconds later mnightwaffle accepts klf's loan offer sending BTC 0.35 to mnightwaffle with the repayment address being 1C3dHBqsciQvvsa2c6BUvW9H3U23fy83tT which is the same wallet address from the fake bitgold to bitcoin transaction between fullypak and klf.

mnightwaffle in post six claims the "2nd Loan fulfilled by zazarb"

However...

The very same day mnightwaffle sends BTC 0.336777 TO zazarb via this TX

The two transactions firstly from klf and secondly to zazarb are on this page of mnightwaffle's transactions via wallet address 1MPGDzR91uMdGanKvZVK4vHjHXGeKJNZo8 - the loan from zazarb was begun on the ninth of August 2016 and paid back on the 17th with the funds from klf.  mnightwaffle then repays klf

Effectively, mnightwaffle first sells bitcoin to zazarb then takes out a loan from zazarb then takes out a second loan to repay zazarb all in the space of one month.



Let's go back to that first loan from fullypak - fourteen hours after receiving the loan from fullypak mnightwaffle sells to zazarb bitcoin which can be seen on this page of mnightwaffle's transactions TX

On the one hand you have the known scammer fullypak/klf/roadbits fabricating transactions with each-other to boost their trades in their thread, on the other hand mnightwaffle appears to be taking out loan after loan simply to pay off the previous loans with one loan being purported to have been paid, but in actual fact wasn't. klf makes no mention of the 0.078 owed to their alt fullypak nore are there any transactions in mnightwaffle's transaction list that come close to that amount in that time-frame.



So, what am I looking at?
Jump to: