1 00:00:00,041 --> 00:00:02,877 Hello and welcome to Darknet Demystified. 2 00:00:03,128 --> 00:00:04,379 My name is Sam Bent. 3 00:00:04,379 --> 00:00:08,425 I'm a former Darknet vendor market admin and now I'm 4 00:00:08,425 --> 00:00:12,012 a content creator author, hacker and paralegal. 5 00:00:12,637 --> 00:00:15,265 On this show, I delve into topics related to the Darknet. 6 00:00:15,348 --> 00:00:19,394 So if you're interested in evaluating your security, for example, 7 00:00:19,394 --> 00:00:23,231 by looking at cases in which the individuals went against 8 00:00:23,231 --> 00:00:25,942 the federal governments of the world, then you're in the right place. 9 00:00:25,984 --> 00:00:30,238 By looking at Darknet vendors and how they ran their business 10 00:00:30,363 --> 00:00:33,616 along with their mistakes, we can see how to operate 11 00:00:33,616 --> 00:00:38,705 inside of a highly hostile environment with adversaries who have black 12 00:00:38,705 --> 00:00:42,667 or unlimited budgets to catch arrest or disrupt 13 00:00:42,667 --> 00:00:46,796 you in terms of operational security and informational security, 14 00:00:47,589 --> 00:00:50,467 which kind of makes any other adversary a joke. 15 00:00:52,510 --> 00:00:55,305 Today's episode concerns a Darknet vendor 16 00:00:55,430 --> 00:00:58,808 who has not been sentenced, which is new for this podcast, 17 00:00:59,559 --> 00:01:02,979 is about to be, though, on May 30th of 2023. 18 00:01:03,646 --> 00:01:05,774 Unlike most vendors, this man 19 00:01:06,274 --> 00:01:09,319 faces the possibility of a life sentence. 20 00:01:10,361 --> 00:01:12,906 His name is Henry Koffie. 21 00:01:12,906 --> 00:01:16,284 He's 37 years old and he's from Darby, Pennsylvania. 22 00:01:17,202 --> 00:01:21,623 He was found guilty on two counts of distribution of a controlled substance, 23 00:01:21,915 --> 00:01:23,625 resulting in death 24 00:01:23,625 --> 00:01:28,088 one count of distribution of a controlled substance, resulting in serious bodily 25 00:01:28,088 --> 00:01:32,383 injury, and five counts of distribution of a controlled substance. 26 00:01:33,843 --> 00:01:36,221 In this case, the mistake 27 00:01:36,221 --> 00:01:39,224 that this vendor made was preventable, and 28 00:01:40,475 --> 00:01:42,519 a lot of them were just foolish. 29 00:01:42,519 --> 00:01:46,064 And there were a lot of them. 30 00:01:46,064 --> 00:01:49,192 An affidavit supporting the criminal complaint 31 00:01:49,192 --> 00:01:53,571 that was filed in Pennsylvania by Special Agent Eric Yingling 32 00:01:55,073 --> 00:01:55,782 can make this up. 33 00:01:55,782 --> 00:01:57,575 Life is definitely stranger than fiction. 34 00:01:57,575 --> 00:01:59,744 Sometimes. 35 00:01:59,744 --> 00:02:05,041 Agent Yingling works for the FBI and is currently assigned to the complex 36 00:02:05,041 --> 00:02:08,753 financial crimes and Health care squad, which includes 37 00:02:09,003 --> 00:02:13,216 an opioid task force in the Pittsburgh division of the FBI. 38 00:02:13,758 --> 00:02:16,719 In his affidavit, he states that he's been there 39 00:02:16,719 --> 00:02:19,305 since December of 2014, 40 00:02:19,931 --> 00:02:22,267 and he also states that 41 00:02:22,267 --> 00:02:26,771 he thinks that Koffie spelt K-o-f-f-i-e 42 00:02:27,605 --> 00:02:29,691 is a vendor on Alphabay 43 00:02:29,899 --> 00:02:32,026 who goes by the name of Narcoboss. 44 00:02:33,069 --> 00:02:38,741 He talks about how this vendor on Alphabay has on his product page products 45 00:02:38,741 --> 00:02:43,037 such as China wide synthetic heroin, fentanyl mix, 46 00:02:44,247 --> 00:02:47,333 and that's quite a total at the price of $40 gram. 47 00:02:48,001 --> 00:02:52,422 He said that when he had viewed the profile in June of 2017, 48 00:02:52,797 --> 00:02:56,467 the profile had indicated that they had conducted 49 00:02:57,719 --> 00:02:59,012 well over 50 00:02:59,012 --> 00:03:03,099 six and a half thousand transactions. 51 00:03:03,850 --> 00:03:07,812 These transaction amounts would be something that would come back to bite him 52 00:03:07,812 --> 00:03:12,609 in the ass later on, although they detail a number of undercover buys. 53 00:03:12,734 --> 00:03:16,571 I swear these guys get off on this really weird terminology. 54 00:03:17,280 --> 00:03:20,366 At the end of the day, like every person in the darknet is anonymous. 55 00:03:20,992 --> 00:03:24,120 So like, when they meet these purchases, they are too. 56 00:03:24,579 --> 00:03:27,999 I love how they still like to say that, you know, they're undercover. 57 00:03:27,999 --> 00:03:32,295 They're like, if you're, you know, anonymous, you don't need to cover. 58 00:03:32,378 --> 00:03:35,048 All you need is a, you know, your screen name. 59 00:03:35,048 --> 00:03:39,677 It's just it's funny that, like, you know, they they perpetuate this thing. 60 00:03:39,844 --> 00:03:40,553 And so it's like, 61 00:03:40,553 --> 00:03:44,098 you know, some elitist kind of thing like, oh, we were we made it undercover. 62 00:03:44,098 --> 00:03:46,935 Like, everyone's undercover anyways. 63 00:03:47,518 --> 00:03:53,816 The opening up of one of the purchases of the packages that they made from 64 00:03:53,816 --> 00:03:58,446 Koffie, basically they open up this mail parcel and inside this mail parcel 65 00:03:58,488 --> 00:04:02,992 there's an envelope in like a white legal envelope, regular kind of envelope. 66 00:04:03,243 --> 00:04:05,662 You'd stick your your mail in. 67 00:04:05,662 --> 00:04:09,249 And inside of there was a like a zipper bag, 68 00:04:09,249 --> 00:04:14,045 like a Ziploc bag which had ten grams of white powder in it. And 69 00:04:15,255 --> 00:04:18,383 if they're actually telling the truth about this, in my opinion, 70 00:04:18,383 --> 00:04:22,679 that right there in and of itself is a massive, massive fail. 71 00:04:22,720 --> 00:04:26,182 So, you know, first off, there should have been like at least three 72 00:04:26,182 --> 00:04:31,813 different layers, like distinct, separate layers of heat 73 00:04:31,813 --> 00:04:37,151 sealed Mylar bags or vacuum bags, as some people like to call them. 74 00:04:38,361 --> 00:04:41,739 I know that when I shipped, I would use anywhere from 2 to 3 layers. 75 00:04:42,240 --> 00:04:46,911 On top of that, I would use what's called a visual decoy, which is just like a bag 76 00:04:46,911 --> 00:04:51,165 that is a vacuum seal or heat sealed bag, but you can't see through it. 77 00:04:51,165 --> 00:04:53,042 And I would, you know, slap this label on. 78 00:04:53,042 --> 00:04:55,003 It's said organic dried fruit. 79 00:04:55,003 --> 00:04:58,298 So someone grabbed it, didn't feel weird, didn't look weird 80 00:04:58,840 --> 00:05:01,926 and seemed kind of normal. 81 00:05:01,926 --> 00:05:05,263 But to have like absolutely no vacuum sealing whatsoever 82 00:05:05,263 --> 00:05:08,433 is definitely a wicked bad hit, in my opinion. 83 00:05:09,684 --> 00:05:11,644 And like the 84 00:05:11,644 --> 00:05:15,189 funny part of the affidavit to me anyways, I'm just misreading. 85 00:05:15,189 --> 00:05:18,735 There was a section where it said that you're inside the plastic bag. 86 00:05:18,735 --> 00:05:21,195 They found ten grams of white powder. 87 00:05:21,946 --> 00:05:25,658 So I read that I'm like, oh, ten grams, you know, And I kept reading. 88 00:05:25,950 --> 00:05:29,871 And then I got further into the affidavit and they said that, you know, 89 00:05:29,871 --> 00:05:33,916 they had sent the the, you know, the suspicious white powder 90 00:05:33,916 --> 00:05:37,545 to the United States Postal Inspectors service forensic laboratory 91 00:05:37,837 --> 00:05:44,260 for chemical analysis and that it was 11 grams of fentanyl. 92 00:05:44,385 --> 00:05:47,096 I'm like, wait a minute, didn't you guys just weigh it and said it was 93 00:05:48,181 --> 00:05:49,057 ten grams? 94 00:05:49,057 --> 00:05:52,185 Like, do did it did it grow? 95 00:05:52,602 --> 00:05:53,478 The cook. 96 00:05:53,478 --> 00:05:56,272 I didn't know what I was missing. 97 00:05:56,272 --> 00:05:57,482 So this is interesting. 98 00:05:57,482 --> 00:06:00,109 In the affidavit, you know how they got that wrong. 99 00:06:00,109 --> 00:06:02,111 You know, unless I'm wrong. 100 00:06:02,111 --> 00:06:05,323 And in addition to this, they said that due 101 00:06:05,907 --> 00:06:09,994 to the number of undercover purchases which is going to just now with 102 00:06:10,203 --> 00:06:14,707 now that they saw, it's going to drive me nuts every time I go through 103 00:06:14,707 --> 00:06:19,462 and I read another one of these affidavits is they said that, you know, 104 00:06:19,504 --> 00:06:22,548 because of the amount of purchases that, you 105 00:06:22,548 --> 00:06:25,760 know, Koffie basically had 106 00:06:26,719 --> 00:06:27,762 and, you know, the fact 107 00:06:27,762 --> 00:06:30,223 that he hadn't really driven anywhere 108 00:06:30,848 --> 00:06:34,435 to do them, that they could tell that he was shipping 109 00:06:34,435 --> 00:06:38,439 them from in and around the Philadelphia, Pennsylvania area, 110 00:06:38,439 --> 00:06:41,776 which I mean, this is definitely a red flag, like 111 00:06:43,236 --> 00:06:45,905 not necessarily like where he was shipping from, 112 00:06:45,905 --> 00:06:50,159 but the fact that he was constantly shipping from the same place 113 00:06:50,159 --> 00:06:53,329 as like like like it's a major, major issue. 114 00:06:53,621 --> 00:06:56,707 If you're shipping packages every day, like, that's cool. 115 00:06:56,707 --> 00:06:58,334 You're you know, that's what it is. 116 00:06:58,334 --> 00:07:00,670 That's the job is but 117 00:07:01,087 --> 00:07:04,549 you need to be not shipping from the same places 118 00:07:04,549 --> 00:07:08,177 like if you have to weigh in ship once every three days 119 00:07:08,469 --> 00:07:11,305 or, you know, once every two days because you know, you 120 00:07:11,347 --> 00:07:14,725 you need to add some driving time then like that's what you need to do. 121 00:07:14,725 --> 00:07:17,937 You know, rent a rent an apartment like 122 00:07:18,521 --> 00:07:21,190 an apartment building, rent a a hotel, whatever. 123 00:07:21,190 --> 00:07:25,069 Like that's what you need to do in order to do that, in order to ensure that 124 00:07:25,069 --> 00:07:28,823 you have the distance between yourself and where it's getting shipped from. 125 00:07:29,866 --> 00:07:30,700 And you shouldn't be coming 126 00:07:30,700 --> 00:07:33,494 back to that post office for a few months. 127 00:07:38,833 --> 00:07:42,962 When the Feds reviewed Koffie's Coinbase account, 128 00:07:43,004 --> 00:07:45,965 it showed that it had transacted a total of 129 00:07:46,090 --> 00:07:48,342 like 341 Bitcoin 130 00:07:49,635 --> 00:07:52,346 and all the transactions were relayed out. 131 00:07:52,388 --> 00:07:54,640 Obviously all that information they had. 132 00:07:55,057 --> 00:07:57,977 And again, more than willing to hand over to the feds. 133 00:07:58,561 --> 00:08:00,897 Like, it's just it's absolutely insane. 134 00:08:01,481 --> 00:08:04,609 The the fact that 135 00:08:04,609 --> 00:08:07,570 there's so little forethought into OPSEC, 136 00:08:07,570 --> 00:08:10,573 the people more than willingly hand 137 00:08:10,573 --> 00:08:13,534 over all this info to them. 138 00:08:14,660 --> 00:08:18,206 So information security, basically making sure that 139 00:08:19,415 --> 00:08:22,919 specific pieces of information that you have 140 00:08:22,919 --> 00:08:26,464 are secure, which is pretty self-explanatory. 141 00:08:26,881 --> 00:08:30,343 Now that I said it, operational security has more to do with preventing 142 00:08:30,343 --> 00:08:33,554 any competition adversaries 143 00:08:35,056 --> 00:08:39,310 that you may have from being able to gather any information 144 00:08:40,811 --> 00:08:44,524 and operating in a way using Coinbase, 145 00:08:45,107 --> 00:08:48,110 using accounts that were in his name, providing his real name, 146 00:08:48,110 --> 00:08:52,198 providing his real phone number, all allowed law enforcement to easily show 147 00:08:52,198 --> 00:08:55,660 that he was involved in this activity. 148 00:08:56,619 --> 00:09:00,540 And it was it was all that time of the day. 149 00:09:00,540 --> 00:09:01,040 They could look in. 150 00:09:01,040 --> 00:09:01,415 They could see 151 00:09:01,415 --> 00:09:05,002 like look at how many transactions have happened, in which money he's gotten. 152 00:09:05,253 --> 00:09:07,964 And even if they didn't know how many transactions he had had, 153 00:09:08,172 --> 00:09:12,134 they could base it off of that because all of those financial records are saved. 154 00:09:12,760 --> 00:09:17,515 So had he used something that was non-KYC, It would have been a lot more difficult 155 00:09:18,099 --> 00:09:21,727 for them to pin all that kind of stuff on him and make those connections. 156 00:09:22,520 --> 00:09:25,523 Obviously, him also finding a different supplier would 157 00:09:25,523 --> 00:09:28,693 have definitely helped. 158 00:09:29,735 --> 00:09:31,946 If one was to argue the point of karma, 159 00:09:31,988 --> 00:09:36,909 I think that they would point out the drugs that that he sold. 160 00:09:38,077 --> 00:09:42,164 There are literal task forces that are dedicated 161 00:09:42,790 --> 00:09:46,002 just to individuals like this who sell opioids. 162 00:09:46,877 --> 00:09:49,213 So selling opioids 163 00:09:49,213 --> 00:09:52,008 put a massive target on your back is darknet vendor. 164 00:09:52,842 --> 00:09:54,969 And what's interesting is 165 00:09:54,969 --> 00:09:58,347 the more task forces that they create, the government, 166 00:09:58,347 --> 00:10:02,059 I mean, that they assign to these kind of specific drugs and all that stuff. 167 00:10:03,102 --> 00:10:05,104 And the more these particular drug traffickers 168 00:10:05,104 --> 00:10:08,107 are hunted, the more lucrative the drug becomes. 169 00:10:08,482 --> 00:10:11,277 In other words, the more the US government tries to ban 170 00:10:12,236 --> 00:10:17,283 and prosecute people for using the drug, the more the drug gets used. 171 00:10:17,533 --> 00:10:19,410 And this kind of backwards logic 172 00:10:19,410 --> 00:10:23,456 is something that is common with the United States government, 173 00:10:23,456 --> 00:10:27,543 and it's prohibition on various drugs and stance on drugs. 174 00:10:29,003 --> 00:10:31,422 And I'm absolutely a fan of the United States doing 175 00:10:31,964 --> 00:10:36,886 kind of the same thing that the state of Oregon has done in legalizing all drugs. 176 00:10:37,470 --> 00:10:40,389 And I digress, back to the main event. 177 00:10:41,015 --> 00:10:44,393 So death or rather close to it, 178 00:10:45,186 --> 00:10:48,814 the side effect of selling hard drugs like fentanyl is that people 179 00:10:48,814 --> 00:10:53,986 sometimes die from them and sometimes they overdose from them and they live. 180 00:10:54,487 --> 00:10:59,200 But one thing that some people fail to understand is that on occasion 181 00:10:59,909 --> 00:11:02,411 HSI will pick up 182 00:11:02,745 --> 00:11:06,874 some of these nonfederal overdoses or fatal overdoses when they happen. 183 00:11:07,708 --> 00:11:10,878 A big part of this has to do with 184 00:11:11,712 --> 00:11:14,340 who they happen to, and where they happen. 185 00:11:14,340 --> 00:11:17,718 Like, you're not you know, you're very not going to see the Department 186 00:11:17,718 --> 00:11:20,763 of Homeland Security come in and do a massive investigation when 187 00:11:21,263 --> 00:11:24,350 but crackhead ODS in the projects 188 00:11:24,975 --> 00:11:27,061 because they were doing family they just don't care. 189 00:11:28,145 --> 00:11:29,814 Now that said 190 00:11:29,980 --> 00:11:32,149 occasionally they do care for example is like one 191 00:11:32,149 --> 00:11:34,235 such near nonfatal overdose 192 00:11:35,236 --> 00:11:38,739 took place in Portland, Oregon, in May of 2016, 193 00:11:39,073 --> 00:11:41,867 and it happened at the Portland State University. 194 00:11:42,368 --> 00:11:46,664 And law enforcement there had like recovered a USPS parcel 195 00:11:46,664 --> 00:11:51,419 that was shipped by Darknet market kingpin in Portland 196 00:11:51,419 --> 00:11:57,133 and that overdose they cared about because it's in an affluent place 197 00:11:57,883 --> 00:12:02,179 but I'm not laughing it isn't funny it's just like it sure is asinine. 198 00:12:03,305 --> 00:12:05,349 But before I continue on 199 00:12:05,349 --> 00:12:08,477 with this, like the one of the golden rules, right? 200 00:12:08,477 --> 00:12:11,522 is to never handwrite anything if you're a darknet vendor, 201 00:12:13,023 --> 00:12:15,901 along with putting like your prints everywhere 202 00:12:15,901 --> 00:12:20,489 and reading something is equivalent to like leaving a saliva or a fingerprint. 203 00:12:21,907 --> 00:12:25,119 It's something that can be identified and attributed to you. 204 00:12:25,369 --> 00:12:28,539 It's literally like you 205 00:12:28,873 --> 00:12:31,125 signing the box, like your signature. 206 00:12:31,834 --> 00:12:35,254 It's extremely stupid to do. 207 00:12:35,963 --> 00:12:40,342 Furthermore, you shouldn't use like your household inkjet printer 208 00:12:40,342 --> 00:12:42,636 because many printers have what's called micro printing, 209 00:12:43,387 --> 00:12:46,807 though Google it and some of the time your IP addresses 210 00:12:47,308 --> 00:12:50,227 printed inside of that really in really, really small letters, you can't see it. 211 00:12:51,353 --> 00:12:53,731 Instead, you want to be 212 00:12:53,731 --> 00:12:57,485 buy a thermal printer which uses no ink and doesn't do micro printing. 213 00:12:58,569 --> 00:13:01,113 So in 2016, 214 00:13:01,405 --> 00:13:05,117 Koffie violated this golden rule and it gets so much worse. 215 00:13:05,117 --> 00:13:06,076 It gets so much worse. 216 00:13:06,076 --> 00:13:09,246 Like, so he sent a package using a handwritten return address. 217 00:13:09,538 --> 00:13:14,376 And this alone is a massive, massive information security violation 218 00:13:14,376 --> 00:13:18,172 and a stupid operational security screw up. 219 00:13:18,172 --> 00:13:20,674 Just there's complete laziness. 220 00:13:21,592 --> 00:13:25,596 And like in this case, you know, controlling your information, 221 00:13:25,596 --> 00:13:29,683 like you're not denying information to your enemies, 222 00:13:29,683 --> 00:13:33,395 which is literally the definition of operational security. Do. 223 00:13:33,395 --> 00:13:37,191 And you're granting them the ability to collect valuable information about you. 224 00:13:38,317 --> 00:13:40,236 And you knew 225 00:13:40,236 --> 00:13:42,822 writing is just another link that they can use 226 00:13:43,489 --> 00:13:48,035 for the chain that they're going to use to shackle you to a conviction. 227 00:13:49,453 --> 00:13:50,621 So this is 228 00:13:50,621 --> 00:13:54,124 a review of the handwritten shipping label, identified 229 00:13:54,124 --> 00:13:58,838 a return address of 210 Walnut Street, 230 00:13:59,463 --> 00:14:02,466 Floor 2, Darby, Pennsylvania. 231 00:14:03,843 --> 00:14:06,178 Who cares? Right. 232 00:14:06,178 --> 00:14:08,764 What do we know about this address anyways? 233 00:14:08,764 --> 00:14:11,350 Well, we know that Koffie at the time 234 00:14:11,350 --> 00:14:15,938 was receiving half kilos of fentanyl at 216 235 00:14:16,397 --> 00:14:19,608 Walnut Street, second floor, Darby, Pennsylvania, 236 00:14:20,860 --> 00:14:25,322 and is and elected to ship with a return address of 210 237 00:14:25,781 --> 00:14:30,286 Walnut Street, second floor, Darby, Pennsylvania. 238 00:14:30,286 --> 00:14:34,498 I mean, I really have to ask why not just write dude, why not write 216 239 00:14:34,540 --> 00:14:37,042 Walnut Street, you just give them your real address like 240 00:14:38,335 --> 00:14:40,546 like, I mean, why, why raid to tend. 241 00:14:40,546 --> 00:14:43,424 I mean, when I read 316 242 00:14:43,424 --> 00:14:47,303 you make the number six addresses away but the same floor and like 243 00:14:48,387 --> 00:14:50,139 when I read this, it just really blew me away. 244 00:14:50,139 --> 00:14:53,934 The FBI agent who made the affidavit said in it that he believes that 245 00:14:54,310 --> 00:14:57,313 the slight change from 200 to 216 246 00:14:58,230 --> 00:15:03,569 in the return address is done in an effort to for Koffie 247 00:15:03,569 --> 00:15:07,656 to avoid and conceal his illegal activities, which 248 00:15:09,366 --> 00:15:11,827 absolutely brilliant deduction. 249 00:15:13,287 --> 00:15:14,246 I didn't think it was. 250 00:15:14,246 --> 00:15:16,040 I thought he just entered the wrong address. 251 00:15:16,040 --> 00:15:19,585 I mean, and you could tell that at the end of the day, 252 00:15:19,835 --> 00:15:24,840 we're dealing with an individual who obviously has an IQ north of 140. 253 00:15:24,840 --> 00:15:30,596 And I'm actually being sarcastic about both the Darknet vendor aggression, 254 00:15:30,596 --> 00:15:32,681 as well as the FBI agent who wrote the affidavit. 255 00:15:32,973 --> 00:15:37,561 Even though the FBI agent is not a handwriting expert, 256 00:15:37,561 --> 00:15:41,315 which he even says in his own affidavit 257 00:15:42,399 --> 00:15:44,526 he didn't have a problem commenting 258 00:15:44,526 --> 00:15:48,197 on the fact that the handwriting on Koffie's passport 259 00:15:48,447 --> 00:15:52,034 to that of the package, that it appeared to have a striking resemblance. 260 00:15:52,076 --> 00:15:55,120 And that was the last thing 261 00:15:55,120 --> 00:15:58,207 that the FBI agent said in his affidavit. 262 00:15:58,791 --> 00:16:03,253 Now, all of that said, I have to say that I was really impressed with Koffie's 263 00:16:03,253 --> 00:16:08,008 legal work that he submitted for himself, for Guy who now 264 00:16:08,133 --> 00:16:11,136 presumably didn't know what he should send 265 00:16:11,845 --> 00:16:15,224 and didn't know that he shouldn't write a handwritten return address 266 00:16:15,224 --> 00:16:19,853 and it didn't really have any kind of basic operational security 267 00:16:19,853 --> 00:16:23,983 or plan or, you know, didn't think about logistics at all. 268 00:16:23,983 --> 00:16:28,404 Like he definitely seems to have picked up on being able to write a pretty clean 269 00:16:29,405 --> 00:16:31,156 motion, pretty coherent. 270 00:16:31,156 --> 00:16:35,744 Anyways, this was listed as document 13, and in this case, number 271 00:16:35,953 --> 00:16:39,164 two and 7000204 CCB 272 00:16:39,540 --> 00:16:42,292 If anyone cares and wants to look it up, but 273 00:16:43,210 --> 00:16:47,214 like I'm not going through that in any detail because it basically just 274 00:16:47,798 --> 00:16:50,884 it's a, it's a motion with him contesting some of the evidence 275 00:16:51,176 --> 00:16:54,054 that they had pointed out and trying to point out 276 00:16:54,054 --> 00:16:56,640 that the feds, they screwed up and in a couple of different ways. 277 00:16:56,640 --> 00:17:00,644 But it's mostly like in terms of like jurisdiction and stuff like that. 278 00:17:01,103 --> 00:17:05,024 And the main goal of this podcast is to evaluate law enforcement 279 00:17:05,399 --> 00:17:10,696 to see how specific Darknet vendors ended up getting caught. 280 00:17:10,821 --> 00:17:14,950 And we do this to explore the world of operational security, 281 00:17:15,117 --> 00:17:16,201 information security. 282 00:17:16,201 --> 00:17:19,955 Like you said before, it's a comparison that we can use to measure 283 00:17:19,955 --> 00:17:26,503 our own security, if we like, as private citizens and law abiding citizens. 284 00:17:26,503 --> 00:17:30,758 I personally feel that this evaluation is one of the best we can have because 285 00:17:31,300 --> 00:17:32,885 like you said at the beginning of this podcast, 286 00:17:32,885 --> 00:17:36,847 the end of the day, the people who are after Darknet vendors 287 00:17:36,847 --> 00:17:40,768 in many cases have those unlimited budgets that I mentioned, and 288 00:17:41,435 --> 00:17:45,105 they have not just one or two federal governments behind them, 289 00:17:45,105 --> 00:17:49,401 but they also have national and international task forces 290 00:17:49,401 --> 00:17:53,572 that are literally dedicated to hunting these people. 291 00:17:53,572 --> 00:17:59,495 And as I mentioned earlier, there are even specific task forces for specific drugs. 292 00:17:59,495 --> 00:18:03,040 So like when you're trying to evaluate your own security and it's like 293 00:18:03,874 --> 00:18:07,836 this guy might send me malware, I mean, like it's kind of a joke in comparison. 294 00:18:07,836 --> 00:18:11,632 So I think it's a really good comparison to make the level of 295 00:18:11,632 --> 00:18:12,925 security that they're at 296 00:18:14,051 --> 00:18:17,346 Now. What we've covered so far 297 00:18:17,346 --> 00:18:20,682 is like strictly his criminal case in Pennsylvania. 298 00:18:20,891 --> 00:18:21,725 Okay. 299 00:18:22,059 --> 00:18:25,354 He has a whole other case in Oregon 300 00:18:26,855 --> 00:18:29,983 and yet another law enforcement officer. 301 00:18:29,983 --> 00:18:31,735 His testimony 302 00:18:32,069 --> 00:18:34,863 we hear about like even more serious, 303 00:18:35,864 --> 00:18:40,119 horrible OPSEC moves and fatal cases. 304 00:18:41,578 --> 00:18:43,997 So I would argue that that case is more severe. 305 00:18:43,997 --> 00:18:48,585 In this case, it's from a special agent with Homeland 306 00:18:48,585 --> 00:18:53,132 Security investigations named Guy Geno. 307 00:18:53,132 --> 00:18:58,804 Agent Geno has been working for nearby Homeland Security since 2003, and he's 308 00:18:58,804 --> 00:19:04,017 currently working with the high intensity drug trafficking area, a.k.a. 309 00:19:04,059 --> 00:19:08,564 HIDTA Interdiction Task Force. 310 00:19:09,606 --> 00:19:11,275 We're hit locator. 311 00:19:11,275 --> 00:19:14,528 The Portland Police Bureau has drug and device division in Portland, 312 00:19:14,528 --> 00:19:18,282 Oregon, on 313 00:19:18,282 --> 00:19:20,784 May six, 2017. 314 00:19:21,368 --> 00:19:22,202 1006. 315 00:19:22,202 --> 00:19:25,873 At night, Portland police were dispatched to three 3 to 5 316 00:19:26,373 --> 00:19:30,043 Southeastern 29th AV in Portland, Oregon. 317 00:19:30,127 --> 00:19:33,964 An individual identified only by the name C.W. 318 00:19:34,298 --> 00:19:36,550 and died from an overdose. 319 00:19:36,550 --> 00:19:40,971 Officer Pagan and Officer Watts was Sergeant Bates 320 00:19:41,305 --> 00:19:43,432 responded to investigate the overdose. 321 00:19:44,099 --> 00:19:46,476 Watson Bates Both collected evidence while. 322 00:19:46,476 --> 00:19:47,519 Officer Pagan 323 00:19:48,645 --> 00:19:50,981 Again, Pagan whatever. 324 00:19:51,023 --> 00:19:52,316 I don't know how to pronounce his name. 325 00:19:52,316 --> 00:19:54,484 Interviewed C.W.’s roommate. 326 00:19:54,484 --> 00:19:56,612 His roommate was Trevor Nichols. 327 00:19:56,612 --> 00:19:59,907 Sosa, who wasted absolutely no time 328 00:19:59,907 --> 00:20:03,285 in searching out his dead friend, saying that C.W. 329 00:20:03,285 --> 00:20:06,455 had been using fentanyl since approximately the New year. 330 00:20:06,830 --> 00:20:09,208 Sosa also told 331 00:20:09,208 --> 00:20:12,127 Officer Pagan that C.W. 332 00:20:12,127 --> 00:20:15,130 liked to mix alcohol, Xanax and fentanyl, 333 00:20:15,130 --> 00:20:18,091 he also told Officer Pagan that C.W. 334 00:20:18,425 --> 00:20:21,011 was getting the fentanyl and Xanax 335 00:20:21,428 --> 00:20:24,640 from the dark site; Alphabay. 336 00:20:24,640 --> 00:20:28,602 And he also told the officer that he had C.W. 337 00:20:28,602 --> 00:20:32,564 had torn off the tag on his mattress, which was a federal crime. 338 00:20:32,564 --> 00:20:34,900 No, I'm kidding. I'm like, come on, man. 339 00:20:34,983 --> 00:20:38,737 I mean, your buddy just died and like, your first moves are going to be the 340 00:20:38,862 --> 00:20:41,740 tell the cops everything about how f**ked up 341 00:20:41,740 --> 00:20:44,368 this guy is when his body's in the next room? 342 00:20:44,701 --> 00:20:46,411 It's just I hate rats. 343 00:20:46,411 --> 00:20:49,623 Anyways, so we this is just like, are you kidding me? 344 00:20:50,374 --> 00:20:51,875 It's so much crazier, though. 345 00:20:51,875 --> 00:20:53,669 Like, it's absolutely. 346 00:20:53,669 --> 00:20:57,923 Is it the next person to get interrogated was Sean Bloodworth. 347 00:20:58,548 --> 00:21:02,886 Bloodworth quickly told Officer Pagan that he and C.W. 348 00:21:03,136 --> 00:21:06,223 both were ordering fentanyl over Alphabay. 349 00:21:06,265 --> 00:21:07,641 from a vendor. 350 00:21:07,641 --> 00:21:12,938 We use the name Narcoboss, effectively snitching on himself and his dead friend. 351 00:21:13,939 --> 00:21:15,274 But he didn't stop there. 352 00:21:15,274 --> 00:21:18,485 He went on to detail to these two uniformed cops. 353 00:21:18,819 --> 00:21:22,656 But it's only these are Fed showing up his uniform cops. 354 00:21:22,656 --> 00:21:27,995 The Narcoboss advertises the fentanyl as pure China. 355 00:21:27,995 --> 00:21:28,745 White 356 00:21:29,830 --> 00:21:33,417 I mean, he actually advertises his mixed, as we quoted earlier, 357 00:21:33,417 --> 00:21:37,212 but which it was a matter of you already telling on people, why not lied to? 358 00:21:37,296 --> 00:21:40,257 Bloodworth told the cops that he and CW 359 00:21:41,216 --> 00:21:43,260 would split the cost of a gram, 360 00:21:43,260 --> 00:21:45,846 but that CW had started 361 00:21:45,846 --> 00:21:49,057 to order other drugs using his name. 362 00:21:49,516 --> 00:21:52,394 He said that CW like to mix the drugs with alcohol. 363 00:21:52,769 --> 00:21:56,481 When they asked Bloodworth which drugs CW had overdosed on, 364 00:21:57,691 --> 00:21:59,943 he informed them Fentanyl. 365 00:22:00,777 --> 00:22:03,030 He also said that CW had ordered a gram 366 00:22:03,030 --> 00:22:07,242 of fentanyl from Narcoboss for $40 that arrived on May 367 00:22:07,242 --> 00:22:10,579 4th, 2017, at 1:06 p.m.. 368 00:22:10,579 --> 00:22:12,247 No, I'm kidding about the 1 to 6 p.m.. 369 00:22:12,247 --> 00:22:13,957 This is this is absolutely nuts. 370 00:22:15,250 --> 00:22:16,960 But they hadn't finished it. 371 00:22:16,960 --> 00:22:21,214 And that CW most likely overdosed on their fentanyl. 372 00:22:21,214 --> 00:22:23,884 And later the Oregon State Medical examiner 373 00:22:24,092 --> 00:22:28,180 informed HSI that CW had died of Fentanyl. 374 00:22:28,263 --> 00:22:29,139 So like, 375 00:22:29,473 --> 00:22:33,852 I guess that kind of invalidates the whole point of Bloodsworth 376 00:22:33,852 --> 00:22:37,272 saying anything or his roommate for that matter, like these dudes 377 00:22:37,272 --> 00:22:41,276 snitching their asses off like, you know, at the end of the day, the man's dead. 378 00:22:41,276 --> 00:22:43,570 Like, why air is dirty laundry out there. 379 00:22:44,529 --> 00:22:45,238 It just. 380 00:22:45,238 --> 00:22:46,365 Just shut up. 381 00:22:46,365 --> 00:22:47,824 Yeah, I mean, I know that. 382 00:22:47,824 --> 00:22:50,327 Oh, you're doing the same thing by having this podcast. 383 00:22:50,327 --> 00:22:50,994 Well, I'm trying. 384 00:22:50,994 --> 00:22:55,207 I'm airing out the snitches, and the state's going to do their own 385 00:22:55,207 --> 00:22:56,291 autopsy anyway. 386 00:22:56,291 --> 00:22:58,335 Like to find the cause of death 387 00:22:59,461 --> 00:23:02,464 by telling yourself, like, I really don't get these people. 388 00:23:02,464 --> 00:23:05,467 Bloodworth went on to detail the amount 389 00:23:05,592 --> 00:23:08,470 of shipping time it took to get the drugs, 390 00:23:08,470 --> 00:23:13,475 as well as the fact of the envelopes were eight and a half by 11. 391 00:23:13,475 --> 00:23:16,728 And he told the uniform officer that typically inside 392 00:23:16,728 --> 00:23:19,481 the large envelope was a plain white letter envelope 393 00:23:19,773 --> 00:23:22,317 that contain the fentanyl and the white powder form. 394 00:23:22,609 --> 00:23:28,407 He said the Narcoboss’s Fentanyl was always sent from a Pennsylvania address. 395 00:23:28,407 --> 00:23:32,661 And he also said that he'd been ordering from him since the beginning of the year. 396 00:23:33,245 --> 00:23:37,165 And at the end of the day, it seems like Bloodworth and CW, 397 00:23:37,165 --> 00:23:40,293 his roommate, were absolutely like super eager 398 00:23:40,293 --> 00:23:44,464 to talk to law enforcement. 399 00:23:44,464 --> 00:23:50,470 Shortly after that, an investigation by HSI in Grand Forks, North Dakota, 400 00:23:50,512 --> 00:23:56,643 by Special Agent Jeremy Grube was underway due to another fatal overdose of Ms.. 401 00:23:56,643 --> 00:23:59,688 Wilson's boyfriend, who had overdosed 402 00:23:59,688 --> 00:24:03,650 and was taken to Altru Hospital. 403 00:24:03,650 --> 00:24:07,863 Feds had went to interview Holian after having Wilson, 404 00:24:07,904 --> 00:24:13,076 whose boyfriend had just overdosed, arrested on state charges. 405 00:24:13,076 --> 00:24:17,747 So he shot himself and said that he was responsible for purchasing fentanyl 406 00:24:18,165 --> 00:24:22,669 from Narcoboss, who was a Darknet vendor on Alphabay. 407 00:24:22,669 --> 00:24:24,880 Agents then searched his bedroom, 408 00:24:24,880 --> 00:24:28,300 most likely because the idot gave them consent to do so, 409 00:24:28,550 --> 00:24:31,511 and they discovered narcotics and paraphernalia 410 00:24:31,511 --> 00:24:34,890 and they'd found all this because he had cooperated with them, 411 00:24:36,475 --> 00:24:37,559 Because he cooperated with them. 412 00:24:37,559 --> 00:24:38,894 They let him go. No, I am kidding. 413 00:24:38,894 --> 00:24:42,397 They didn't let him go. 414 00:24:42,397 --> 00:24:43,106 Yeah, okay. 415 00:24:43,106 --> 00:24:47,652 The more I literally snitched on himself and gave the feds permission 416 00:24:47,652 --> 00:24:49,905 to search his house and they found all his stuff 417 00:24:49,905 --> 00:24:52,115 and they they charged and arrested him, 418 00:24:52,741 --> 00:24:55,118 gave him stay drug charges 419 00:24:55,118 --> 00:24:57,162 that he had just answered the door and said that, 420 00:24:57,579 --> 00:25:01,875 you know, he had nothing to say and that he didn't want to talk to them 421 00:25:02,417 --> 00:25:05,629 and that if they were going to arrest him, then they could do that. 422 00:25:06,254 --> 00:25:10,842 Otherwise, he was closing the door and he would be he would be free right now 423 00:25:11,843 --> 00:25:15,972 from doing heroin. 424 00:25:15,972 --> 00:25:18,308 But hope. But my point is he would have his freedom. 425 00:25:18,892 --> 00:25:21,853 Like never talk to the police, never talk to the feds. 426 00:25:22,103 --> 00:25:26,983 If they're talking to you, then that means they don't have enough to arrest you. 427 00:25:27,859 --> 00:25:31,446 They are only talking to you to see if you will give them enough 428 00:25:31,780 --> 00:25:33,907 for them to be able to arrest you. 429 00:25:34,533 --> 00:25:36,660 Remember these people are not your friends. 430 00:25:36,660 --> 00:25:40,413 Anything you say can and will be held against you. 431 00:25:40,705 --> 00:25:43,124 And here's where it gets really funny. Okay. So 432 00:25:44,376 --> 00:25:46,461 they had Holieen or Holien, 433 00:25:47,671 --> 00:25:50,257 who was snitched on by Wilson. 434 00:25:50,340 --> 00:25:53,593 Right now, both of these people were arrested and given state 435 00:25:53,593 --> 00:25:56,304 drug cases, even though they cooperated with authorities. 436 00:25:56,846 --> 00:26:00,183 Holien took it to a whole nother level, though, 437 00:26:00,517 --> 00:26:03,436 he said, Snitched a guy named Jeremy Schwartzberg 438 00:26:04,479 --> 00:26:07,774 claiming that Sortberg gave him some fentanyl 439 00:26:07,774 --> 00:26:11,027 in the early morning of April 26, 2017. 440 00:26:11,361 --> 00:26:13,947 He also said that his friend Sortberg 441 00:26:16,366 --> 00:26:19,244 would want him for a friend, presumably add more fentanyl 442 00:26:19,494 --> 00:26:24,833 and other narcotics agents were overjoyed that the Salem Witch on know 443 00:26:24,916 --> 00:26:27,877 was able to continue and 444 00:26:27,877 --> 00:26:30,547 due to people's continued cooperation and 445 00:26:31,715 --> 00:26:34,634 the more people would be arrested and go to prison instead of 446 00:26:34,926 --> 00:26:37,387 going to rehab or getting help with their addiction. 447 00:26:37,679 --> 00:26:40,890 And they conducted a brief operation 448 00:26:41,266 --> 00:26:44,853 with Holien's consent to set up his friend Sortberg. 449 00:26:45,228 --> 00:26:50,025 Sortberg arrived at the meeting location and was detained by the investigators. 450 00:26:51,234 --> 00:26:53,695 They discovered that he was in possession of narcotics 451 00:26:53,737 --> 00:26:57,115 shocker and narcotics paraphernalia. 452 00:26:57,616 --> 00:27:01,661 When he was interrogated, he admitted to providing Holien 453 00:27:01,953 --> 00:27:07,083 with fentanyl in the early morning hours of April 26, 2017. 454 00:27:07,334 --> 00:27:13,381 He also stated that he received the fentanyl from name redacted. 455 00:27:13,381 --> 00:27:16,301 Yeah, they didn't list it so I’m gonna put it his name. 456 00:27:16,343 --> 00:27:18,511 Every time we talk about this particular individual, 457 00:27:18,511 --> 00:27:21,931 that's how I want to phrase it, of Grand Forks, North Carolina. 458 00:27:22,182 --> 00:27:25,101 Sortenberg Believe that name redacted 459 00:27:25,268 --> 00:27:27,562 and Holien were together 460 00:27:28,813 --> 00:27:32,734 to get to obtain grams of fentanyl from the Darknet vendor. 461 00:27:32,734 --> 00:27:35,195 Now Sortenberg snitching on himself, 462 00:27:36,071 --> 00:27:39,741 he drove agents past name redacted residence 463 00:27:40,617 --> 00:27:43,828 located at 18 2017 Street 464 00:27:44,120 --> 00:27:48,792 South Grand Forks, North Dakota. 465 00:27:48,792 --> 00:27:49,584 Yeah. 466 00:27:49,584 --> 00:27:55,006 For his extensive cooperation, he was later arrested on drug charges. 467 00:27:55,632 --> 00:28:01,012 So now it's time to go and press the residence at name Redacted residence 468 00:28:01,012 --> 00:28:05,767 located at 18 2017 South Street, Grand Forks, North Dakota. 469 00:28:06,101 --> 00:28:08,978 And I love how the feds in this case redacted 470 00:28:08,978 --> 00:28:12,232 the name of the individual, but not the house that he was living. 471 00:28:12,232 --> 00:28:14,359 Like it would probably take 10 minutes 472 00:28:14,359 --> 00:28:17,862 to look up the historical records and see who actually lived there. 473 00:28:18,321 --> 00:28:23,076 Anyways, as soon as the feds arrived, their name redacted is dad 474 00:28:24,119 --> 00:28:26,621 that only invited the feds into his house. 475 00:28:27,038 --> 00:28:31,084 But also condemned his son, saying that his son was strung out 476 00:28:31,084 --> 00:28:36,464 at the moment in his bedroom and escorted the agents to his bedroom 477 00:28:36,464 --> 00:28:41,261 where they discovered name redacted, disoriented and visibly under 478 00:28:41,261 --> 00:28:46,349 the influence of an unknown substance, along with being partially unresponsive 479 00:28:46,725 --> 00:28:49,394 at the time, they contacted EMS 480 00:28:49,811 --> 00:28:52,939 and had him brought to the hospital name redacted. 481 00:28:52,939 --> 00:28:57,110 His parents consented to a search of his room after a while, 482 00:28:57,110 --> 00:29:00,405 the feds had went back to the girlfriend 483 00:29:00,822 --> 00:29:03,575 who had her boyfriend die. 484 00:29:03,575 --> 00:29:07,078 And this was Miss Wilson that we had mentioned initially. 485 00:29:07,078 --> 00:29:11,916 And she again confirmed that Blake Holien provided her with the fentanyl, 486 00:29:11,916 --> 00:29:16,296 which was later used by her boyfriend, and he fortunately died 487 00:29:17,255 --> 00:29:20,467 during the investigation of Darknet Market kingpin 488 00:29:20,842 --> 00:29:25,638 HSI agents were able to retrieve a package in which fentanyl was actually received 489 00:29:25,638 --> 00:29:29,601 by a customer, just like the other package that we discussed. 490 00:29:29,642 --> 00:29:32,353 This package also had a handwritten label. 491 00:29:32,771 --> 00:29:35,857 Unlike the other package, this baggage return address 492 00:29:36,065 --> 00:29:38,318 was 210 Walnut Street. 493 00:29:39,152 --> 00:29:42,614 Now, depending on how good your memory is, you may remember that 494 00:29:42,614 --> 00:29:46,534 this address is Koffie's actual 495 00:29:46,534 --> 00:29:50,079 home address. Yeah, 496 00:29:51,247 --> 00:29:51,790 he used 497 00:29:51,790 --> 00:29:55,585 his real address as a return address for a drug package, 498 00:29:55,585 --> 00:29:59,589 as if it wasn't bad enough that he had a handwritten label. 499 00:29:59,589 --> 00:30:03,134 He basically handed over his own address and doing this. 500 00:30:03,510 --> 00:30:08,723 And another thing that we had mentioned before, that I'd connected him 501 00:30:08,723 --> 00:30:13,603 between both the Darknet market Kingpin account on Alphabay 502 00:30:13,812 --> 00:30:19,067 that was banned in the Narcoboss account was there, there expired. 503 00:30:19,067 --> 00:30:21,152 GnuPG key. 504 00:30:21,694 --> 00:30:24,197 That key was version 2.1. .21. 505 00:30:24,697 --> 00:30:27,116 Their version of the key key 506 00:30:27,200 --> 00:30:31,329 like came out in 2012 and had a ton of updates since then. 507 00:30:31,329 --> 00:30:36,543 According to Alphabay reviews, Darknet market kingpin had been banned 508 00:30:36,543 --> 00:30:40,421 from the site because he was advertising the wrong product. 509 00:30:40,797 --> 00:30:44,259 He had been advertising that he was selling that. 510 00:30:44,342 --> 00:30:46,344 What are you selling was China White Fent. 511 00:30:46,386 --> 00:30:50,598 mixed with heroin when in reality there was no heroin in his product. 512 00:30:50,640 --> 00:30:55,520 So now we've covered a bunch of ways that this know guys screwed up really bad. 513 00:30:57,188 --> 00:30:58,523 And here's another one. 514 00:30:58,523 --> 00:31:02,610 So when he had packaged these packages, he didn't use 515 00:31:02,610 --> 00:31:05,905 gloves, which. 516 00:31:06,447 --> 00:31:07,323 But come on, man. 517 00:31:07,323 --> 00:31:11,244 I mean, this is like like I mean criminals in the nineties knew to wear gloves. 518 00:31:11,452 --> 00:31:13,037 I mean I mean like, 519 00:31:13,037 --> 00:31:16,249 like when I used to do this I used to package my products, you know, 520 00:31:16,374 --> 00:31:20,920 in a frigging clean room that I sterilized on a regular basis. 521 00:31:20,920 --> 00:31:24,966 I used a mixture of bleach and water or alcohol. 522 00:31:25,717 --> 00:31:30,221 And this ensured that any skin cells which are DNA 523 00:31:30,221 --> 00:31:34,183 basically were cleaned out of the room or killed or sanitized, like Koffie 524 00:31:34,183 --> 00:31:37,937 did None of this and in fact was ever too easy to even wear gloves. 525 00:31:37,937 --> 00:31:41,983 And his fingerprints were all over, both inside and out. 526 00:31:42,400 --> 00:31:44,110 The packages that contain fentanyl. 527 00:31:44,110 --> 00:31:47,614 And, you know, the funny thing about this case was that 528 00:31:48,281 --> 00:31:50,658 m switching up vendor names mattered. 529 00:31:50,658 --> 00:31:54,662 Like had he went through the simple effort of also 530 00:31:54,662 --> 00:31:59,584 changing the picture of his vendor name and like generating a new PGP 531 00:31:59,667 --> 00:32:04,088 he may have helped to evade or dilute the connection between the two accounts 532 00:32:04,088 --> 00:32:06,591 like and disconnection between these two accounts, 533 00:32:06,591 --> 00:32:11,054 accounting for additional indictments and prosecutions and 534 00:32:12,221 --> 00:32:13,097 no doubt will 535 00:32:13,097 --> 00:32:16,267 add a consider or will amount of time onto his actual sentence. 536 00:32:16,267 --> 00:32:20,021 Like this connection between these two accounts, namely between the Darknet 537 00:32:20,021 --> 00:32:26,319 market kingpin and Narcoboss was shown obvious that even customers knew about it. 538 00:32:26,361 --> 00:32:30,239 I think in one of his reviews, just agents remarked that 539 00:32:30,531 --> 00:32:33,242 customers had said, despite his name changing 540 00:32:34,994 --> 00:32:37,080 the product was still amazing, 541 00:32:37,080 --> 00:32:41,584 that there were even conversations on the Alphabay forums that also confirmed. 542 00:32:41,584 --> 00:32:45,088 That's like as if that's bad enough. 543 00:32:45,129 --> 00:32:49,592 HSI also looked at his social media and we talked about this earlier. 544 00:32:49,592 --> 00:32:52,762 But in addition to 545 00:32:52,762 --> 00:32:57,016 being able to confirm the times that he said himself on vacation 546 00:32:57,016 --> 00:33:00,979 with him actually taking vacation and then discussing it on social media, 547 00:33:01,813 --> 00:33:05,900 a review of his Facebook page, for example, which was titled The Money 548 00:33:05,900 --> 00:33:09,153 Bags 215, and with which 549 00:33:09,153 --> 00:33:11,864 he used his real name to create the account. 550 00:33:12,198 --> 00:33:15,201 Showed a ton of photos of him holding stacks of money, 551 00:33:15,451 --> 00:33:16,744 and we're not talking about like 552 00:33:17,870 --> 00:33:19,038 one or two accounts here. 553 00:33:19,038 --> 00:33:20,456 We're talking about several. 554 00:33:20,456 --> 00:33:24,168 And the more they looked, the more they found like. 555 00:33:24,168 --> 00:33:28,506 And further investigation revealed that Koffie had used 556 00:33:28,506 --> 00:33:31,551 the alias Countstackula’. 557 00:33:31,551 --> 00:33:34,762 Kinda cute, I guess if you're a 12 year old 558 00:33:34,762 --> 00:33:38,349 and you're coming up with a Twitter handle, your first Twitter handle 559 00:33:39,684 --> 00:33:44,856 in a post that he made on February of 2017, which included 560 00:33:44,856 --> 00:33:49,652 an Instagram photo in the post, it said, No clubbing for me tonight. 561 00:33:49,652 --> 00:33:52,530 Work, work, work, work, work. 562 00:33:52,530 --> 00:33:55,116 Okay. Well, there are nothing really bad about that. 563 00:33:55,241 --> 00:33:56,534 I mean. Right. 564 00:33:56,534 --> 00:33:57,744 So here's the thing. 565 00:33:57,744 --> 00:34:00,663 The Instagram photo that was 566 00:34:01,039 --> 00:34:03,249 linked was of two computers, 567 00:34:04,208 --> 00:34:06,419 one black and one silver MacBook. 568 00:34:07,420 --> 00:34:10,298 Still like, look, here's your closer 569 00:34:10,298 --> 00:34:12,341 examination of the Apple's MacBook 570 00:34:13,342 --> 00:34:15,636 shown on the screen. 571 00:34:15,636 --> 00:34:20,141 The icon of the Onion router and the browser like, actually opened. 572 00:34:20,141 --> 00:34:23,644 I'm like, do literally made a push on multiple social media sites 573 00:34:23,895 --> 00:34:27,315 on the clearnet with his face, stacks of money 574 00:34:27,523 --> 00:34:31,903 and computers with the frigging browser open like just this. 575 00:34:31,903 --> 00:34:33,404 Like many of the other cases, 576 00:34:33,404 --> 00:34:36,991 like the super disappointing operational security man, like, 577 00:34:37,241 --> 00:34:42,371 like in addition to his Twitter accounts, the public facing postings, 578 00:34:42,747 --> 00:34:46,375 the feds were able to find posts that Twitter's 579 00:34:46,375 --> 00:34:50,338 geo location stated that Koffie was in Miami Beach. 580 00:34:50,338 --> 00:34:55,468 This picture was him, like, sitting on a jet ski with the comment countstackula. 581 00:34:55,468 --> 00:34:57,220 You're in Miami. 582 00:34:58,679 --> 00:34:59,680 The next day, he posted 583 00:34:59,680 --> 00:35:04,393 another picture holding 25 stacks of light blue banded U.S. 584 00:35:04,393 --> 00:35:07,855 currency inside what appeared to be a nightclub. 585 00:35:08,147 --> 00:35:11,192 With the picture he posted last night in Miami. 586 00:35:11,317 --> 00:35:15,488 So we did the usual. 587 00:35:15,488 --> 00:35:16,030 Yeah. 588 00:35:16,030 --> 00:35:19,325 So two pictures of himself on the plane 589 00:35:19,325 --> 00:35:23,287 and stated that he was returning because the hood missed him. 590 00:35:23,287 --> 00:35:29,127 He had ensured to make sure that the geo and setting was still turned on. 591 00:35:29,127 --> 00:35:33,089 And so the hood knew that he was coming back very soon and that, 592 00:35:33,339 --> 00:35:40,138 you know, he was at Miami International airport. 593 00:35:40,138 --> 00:35:44,392 This idiocy lasted through multiple different vacations that he took, 594 00:35:44,559 --> 00:35:49,397 including one to Phoenix and it continued to go on vacation status 595 00:35:49,397 --> 00:35:52,483 and on the darkness and then tell everybody on the clear net 596 00:35:52,483 --> 00:35:55,653 on social media sites that he was going on vacation. 597 00:35:55,653 --> 00:35:59,073 And post idiotic pictures like that with idiotic comments. 598 00:35:59,073 --> 00:36:03,369 And in addition to all this evidence, the undercover buys 599 00:36:03,703 --> 00:36:07,540 a a team that we had 600 00:36:07,540 --> 00:36:10,835 we had talked about earlier, and I'm sure you're all well aware of 601 00:36:13,504 --> 00:36:14,922 revealed some more information. 602 00:36:14,922 --> 00:36:18,342 The postage company where he had ordered his shipping labels from 603 00:36:19,093 --> 00:36:22,763 after he had actually started using shipping labels. 604 00:36:22,763 --> 00:36:26,976 Apparently he got tired of in writing them and given no evidence 605 00:36:28,394 --> 00:36:30,730 that company said that he had sent out 606 00:36:30,771 --> 00:36:35,443 as part of a batch order a parcel with 99 other parcels. 607 00:36:35,776 --> 00:36:38,696 And the online postage company said that the account 608 00:36:39,155 --> 00:36:41,699 used to purchase the postage 609 00:36:41,699 --> 00:36:45,161 had the labels sent to the email account. 610 00:36:46,537 --> 00:36:47,705 If this 611 00:36:48,289 --> 00:37:00,509 get this: “gettheyayo8@safe-mail.net” 612 00:37:01,093 --> 00:37:03,512 Now here's my here's my email address. 613 00:37:03,512 --> 00:37:05,139 I-sell-drugs@gmail.com. 614 00:37:05,139 --> 00:37:07,225 Fact I guess Narcoboss@safe-mail.net was 615 00:37:08,226 --> 00:37:10,394 already taken. 616 00:37:11,854 --> 00:37:14,523 Oh, man, online security investigations in Portland 617 00:37:14,523 --> 00:37:18,486 requested additional information on the other postage 618 00:37:18,486 --> 00:37:22,490 labels that were actually purchased from the online postage company 619 00:37:23,282 --> 00:37:26,494 what they got blew them away. 620 00:37:26,494 --> 00:37:28,537 What they ended up finding out was their 621 00:37:31,165 --> 00:37:31,958 there were 622 00:37:31,958 --> 00:37:35,044 actually 5706 623 00:37:35,044 --> 00:37:37,922 labels that were purchased by “gettheyayo8” 624 00:37:38,881 --> 00:37:41,634 between September six, 2016 625 00:37:41,968 --> 00:37:45,221 and June 24th, 626 00:37:48,182 --> 00:37:49,934 So here's the real kicker. 627 00:37:49,934 --> 00:37:54,313 Out of those 5706 labels, they were able to confirm 628 00:37:54,313 --> 00:37:59,068 that these packages had been ones that were sent to the fatal overdose 629 00:37:59,068 --> 00:38:02,822 of CW, the fatal overdose of LM 630 00:38:03,531 --> 00:38:07,034 the parcels that were delivered to the Raholien 631 00:38:07,034 --> 00:38:10,288 only in the parcels that were purchased by the United States Postal 632 00:38:10,288 --> 00:38:12,665 Inspection Service and the FBI, 633 00:38:13,582 --> 00:38:18,254 all the parcels that they got that they suspected of having fentanyl in them, 634 00:38:18,254 --> 00:38:22,842 purchased from Narcoboss by the Portland Police Bureau, USPS 635 00:38:22,842 --> 00:38:26,554 and Oregon and Idaho IDTA 636 00:38:27,138 --> 00:38:30,558 also in addition to that, they were also able to connect 637 00:38:30,558 --> 00:38:33,853 the mail parcels that were addressed and delivered to the Holien. 638 00:38:33,853 --> 00:38:36,897 And Walter's in Grand Forks, North Dakota. 639 00:38:37,273 --> 00:38:40,276 So one last thing, like get the. 640 00:38:40,276 --> 00:38:43,654 Yeah, we had made all these purchases with Bitcoin. 641 00:38:43,696 --> 00:38:45,323 The crazy thing is that 642 00:38:46,574 --> 00:38:47,408 this case, 643 00:38:47,408 --> 00:38:48,492 because everything 644 00:38:48,492 --> 00:38:52,371 was thoroughly documented in terms of him ordering his shipping labels 645 00:38:52,663 --> 00:38:56,876 when he ordered them, how he ordered them, the Department of Homeland Security 646 00:38:56,876 --> 00:39:00,129 special agents, like they were able to come up 647 00:39:00,129 --> 00:39:04,467 with a timeline for his drug sales in addition, because they knew 648 00:39:04,467 --> 00:39:07,720 the exact amount of packages that he actually shipped. 649 00:39:08,137 --> 00:39:12,016 They were also able to estimate the amount of drugs that he sold. 650 00:39:13,100 --> 00:39:15,144 Nine times out of ten. 651 00:39:15,144 --> 00:39:17,313 This is an overexaggerated number. 652 00:39:17,355 --> 00:39:20,858 So you always want to make sure that the feds never have the ability 653 00:39:20,858 --> 00:39:24,695 to actually tell how many packages you shipped or when you started. 654 00:39:25,029 --> 00:39:28,908 This was one of those main reasons why I didn't, like go this route, 655 00:39:29,241 --> 00:39:33,245 and I like to have my cousin actually shipped the packages 656 00:39:33,245 --> 00:39:36,791 in person at the United States Postal office. 657 00:39:37,124 --> 00:39:40,419 And one thing that was really crazy in this case, 658 00:39:41,712 --> 00:39:42,129 which 659 00:39:42,129 --> 00:39:45,257 kind of mimicked my case, was the fact that the United States 660 00:39:45,257 --> 00:39:49,303 really held out on disclosing discovery to the defendant, 661 00:39:49,303 --> 00:39:52,723 like reading throughout his docket sheet and your docket. 662 00:39:52,723 --> 00:39:56,310 She is basically like your list of what happened when in your case, 663 00:39:57,395 --> 00:40:00,981 he had made multiple requests or his lawyer had made multiple requests 664 00:40:01,607 --> 00:40:06,487 multiple times to get the full discovery, get over it. 665 00:40:06,487 --> 00:40:08,823 So the discovery basically is 666 00:40:10,116 --> 00:40:12,618 all the evidence that the government has against you. 667 00:40:12,993 --> 00:40:16,288 They're mandated by law to share this with you in 668 00:40:16,539 --> 00:40:20,376 like the amount of docket entries in this case definitely showed that. 669 00:40:20,376 --> 00:40:22,211 But he fought the good fight throughout the case. 670 00:40:22,211 --> 00:40:27,466 He battled the hell out of the United States attorneys that he'd been assigned. 671 00:40:27,466 --> 00:40:31,595 And in the end, like ended up burning through some, like, 672 00:40:31,595 --> 00:40:35,433 I don't know, five or ten United States attorneys like that. 673 00:40:35,433 --> 00:40:38,227 Just they they switched the case from one to another to another to another. 674 00:40:38,519 --> 00:40:41,772 And on June on July 5th, 2017, 675 00:40:42,440 --> 00:40:45,192 the feds executed a search warrant and arrested 676 00:40:46,444 --> 00:40:47,403 Koffie at 677 00:40:47,403 --> 00:40:49,655 his Darby, Pennsylvania, residence. 678 00:40:50,531 --> 00:40:54,368 They arrested him and explained that they arrested him 679 00:40:54,368 --> 00:40:58,747 because of his federal warrant out of the District of Oregon 680 00:40:58,747 --> 00:41:03,878 and claimed that they gave him his Miranda warning rights. 681 00:41:03,878 --> 00:41:06,547 And like in this report, the feds said that, like, 682 00:41:06,714 --> 00:41:10,217 he waived his right and he agreed to answer the investigators questions 683 00:41:10,509 --> 00:41:13,596 that they had, which always is a great way to screw yourself 684 00:41:14,513 --> 00:41:17,141 and even signed an ICE form titled 685 00:41:17,141 --> 00:41:22,646 70 3-025 and declined the officer's 686 00:41:22,897 --> 00:41:25,357 offer to record the interview. 687 00:41:26,650 --> 00:41:30,613 His public defender tried to argue that Koffie did not fully understand his rights 688 00:41:30,613 --> 00:41:35,117 and therefore would not knowingly, intelligently and voluntarily waived them. 689 00:41:35,618 --> 00:41:39,371 And his lawyer claimed that he was in shock because of the raid 690 00:41:39,371 --> 00:41:43,209 and the arrest and am I opinion this was a definitely 691 00:41:43,209 --> 00:41:47,171 a noble effort on his lawyer's part, but ultimately failed. 692 00:41:47,171 --> 00:41:48,214 At the end of the day. 693 00:41:48,214 --> 00:41:53,552 The jury came back on March 3rd of 2023 and found him guilty of distributing 694 00:41:53,552 --> 00:41:58,182 a controlled substance analog which involved serious bodily injury. 695 00:41:58,307 --> 00:42:03,395 They found him guilty of distributing a controlled substance which ended in death. 696 00:42:04,188 --> 00:42:07,983 Then court 4, you know, is the same as the last count, 697 00:42:08,317 --> 00:42:11,028 which was ended in death. 698 00:42:11,028 --> 00:42:15,449 And they also found him guilty of on counts 5 to 9 699 00:42:15,950 --> 00:42:18,577 for distribution of a controlled substance, 700 00:42:18,577 --> 00:42:21,163 all of which, again, he was found guilty of. 701 00:42:21,163 --> 00:42:22,498 But in addition to this, 702 00:42:22,498 --> 00:42:26,293 he's under a federal indictment in two other jurisdictions, 703 00:42:26,544 --> 00:42:31,423 like a federal grand jury in the eastern district of Pennsylvania, returned 704 00:42:31,423 --> 00:42:35,261 a two count indictment, charging him with distributing controlled substance 705 00:42:35,553 --> 00:42:39,974 and distributing a controlled substance within a thousand feet of a playground. 706 00:42:40,641 --> 00:42:42,935 Both of these cases are pending. 707 00:42:42,935 --> 00:42:47,856 I suspect when he actually gets sentenced, as he's already been found guilty 708 00:42:47,856 --> 00:42:52,653 for this one particular case, that they just sense is going to be crazy. 709 00:42:53,070 --> 00:42:55,823 I don't see him getting anything under ten years. 710 00:42:55,823 --> 00:42:59,493 I think I would be absolutely amazed and shocked if he did. 711 00:43:00,077 --> 00:43:02,079 So what are your thoughts on the case? 712 00:43:02,079 --> 00:43:06,250 Why like, do you think that these sentences they were just for this? 713 00:43:06,584 --> 00:43:09,336 Do you think that he should be looking at a life sentence? 714 00:43:09,336 --> 00:43:11,839 Do you think he should be looking at a death sentence? 715 00:43:11,880 --> 00:43:15,926 Like, what do you think about the OPSEC of the defendants in this case? 716 00:43:16,510 --> 00:43:20,973 Stop by the YouTube channel doing Fed time and let me know in the comments. 717 00:43:21,849 --> 00:43:26,604 And until next time, stay safe, secure and free.