🦊 Furry David Frederick Hoffman / UnrealSkybox / leto / unicodefag

Would help a lot to have a far more focused OP. For example: making it more clear he samefags a popufur; the only reference to Leto being a stolen alias is "almost exclusively images from "LetoDoesArt" ", in the first OP, which even then can be interpreted as "LetoDoesArt is his art handle". Also, his (supposed) facedox should definitely be unspoilered, and the wall of furry dildos posted to 4chan should be spoilered.

And if this is primarily for documenting the guy, probably best to keep his known information separate from his general internet happenings. For most lolcows, you don't need to do that. For an OPSEC enthusiast who's spamming CSAM over the internet, who clearly does not have (full) self-control or good decision-making (like keeping the "Lemur" guy with him), you really need to do that.

Any information we find can also be forwarded to the feds, or whomever. Even if nobody finds anything, best to keep this guy expecting someone will.
 
Última edición:
The actual Leto drew something perfect for just this occasion.

1762313081362.png
Agreed on an OP rewrite being needed, especially now that there's more people looking into him. I'm surprised there isn't a thread on LetoDoesArt and his clique of pedobaiters (and actual pedos), but this guy has nothing to do with them.
 
The actual Leto drew something perfect for just this occasion.
No.

Agreed on an OP rewrite being needed, especially now that there's more people looking into him. I'm surprised there isn't a thread on LetoDoesArt and his clique of pedobaiters (and actual pedos), but this guy has nothing to do with them.
Thanks; and yeah, the real Leto seems to be lolcow material as well. Probably the only thing that's missing is him oversharing on public social media.
 
Never heard of this guy, though it sounds familiar to an aspect of what I'd been looking into.

This Leto guy looks like a strong case of not being able to form an identity, yet desprately wanting to; and refusing to give up his fixation on it. He wants to be "seen" in the way of an "identity". His extreme actions and provocations are trying to create that identity, forcing other people to see his person (lit. acted character). This is also why he's a furry by the way, just another forced identity.

I don't know, it sounds weird, it just reminded me of it a lot.

Probably the best thing to do against this guy is to withdraw outrage and identitarian fixation, both are what he's looking for. He'll either sperg out and make a mistake that results in legal pressure or resource loss, and or just lose interest and look elsewhere.

Alternatively, again if what I'm seeing is correct, he could just release that identities are not real, and that you don't need one.

Again, this is experimental, you wouldn't find this elsewhere; regular explainations don't seem to work. He's too sloppy for this to be a matter of purpose.

Also he definitely reads this, by the way.
He's just a textbook BPD Psychopath. Being a pedo, hurting animals, acting out for attention, it's all the same every time.
 
Not to be pedantic but there's already extensions that enable embedding data to images. Lemur keeps insisting on trying to have another endemic of people using these extensions to mask his own planned activity of doing so. Except no one embeds anything at all beyond baby monkey torture into Pepes to spite people with the extension, just like in the past it was BBC.
How would this be possible with compression requirements? I have no doubt that the text file section of image containers like PNG and JPEG could have a whole different image written to it, but to upload it you'd have to compress it and sites only want very heavily compressed files. A soon as anyone not part of using the deception technique found the image, they would open it in GIMP, completely ignoring the embedded image, and reexport the public image with higher compression so it's easier to upload. If a small pepe is double the size, then it's too obvious that there is another file embedded in it. Sites discourage the practice by having image size limits forcing uploaders to use smaller files. If it really became a problem sites could reprocess the images uploaded and delete the text file section to prevent the practice all together. Even if the content of the text file section was encrypted, it wouldn't matter to people not in on it because they would want to delete the text file section to create a smaller file.

These kinds of secret treasure hunt things only work if you are hosting the images because you would not mind the lager file size because you would be in on it. I don't see how this would get traction on imageboards. They would just add an image filter to block uploads of suspicious images using this technique.
 
I haven't checked in for a while as the constant back and forth with the little retard was starting to annoy me, so I took a break, but I am glad you guys haven't let this go and are digging even further, I see the thread title has been updated with his name which pleases me, as he hates that being mentioned. It will trigger a meltdown in almost any thread, I swear he has a bot that watches for instances of it being posted or something.

Every little bit of info you dig up and post here on David helps, as long as it's accurate. Echoing what others have said, it's true this spastic has become far more than just an imageboard nuisance to the operator of an international paedophile and animal abuse ring. He needs to be stopped and thanks to the kiwis, he's that bit closer to being Big Bubba's jailhouse concubine.

Remember kids, if they're a nonce, a rapist or they hurt animals, it's never snitching.
 
Any information we find can also be forwarded to the feds, or whomever.

This'll be an addendum to my last post about the Leto's financials, knowing full-well that he'll probably see this and stop transacting on at least one of the addresses that I'm going to list here. Still, I'm just one person, and the address that I was given looks like a temporary throwaway, but it's the closest that I've gotten to actually getting him fedded, so that's a positive.

there is a BTC address associated with Leto's funding methods

I'm going to credit my friend Kar for getting me this info, without him I'd still be bumbling around on the BTC address list trying to find out who this guy even is, but this was actually a really big help.

LetoAcctConfirmed (copy).png

I decided that while Leto'll probably see what I'm posting, I'm going to buy myself some time by posting to a less popular board (this one, compared to "the gay pedo at the gates") in hopes that there'll be a delay in him in responding to it. Also, if I'm going to make updates to my quest of helping to jail Leto personally, it might as well be in his own thread. So without further ado, the latest ETH address that was forwarded to me is as follows:

0x74d1cdAB3D434C610beFa65C3bB30F602846939e

So I immediately checked to see if the address I was given is even an active address on Checkcryptoaddress.

114612.png

Turns out it is, and as a bonus it's been flagged for suspicious activity. Hm, 55 of those reports were from the Binance network. Interesting, so that means I could potentially find a transaction that's linked to a KYC exchange.

115145.png

So like last time, I checked Chainabuse.


Which yielded an interesting result:

113806.png

Unlike the BTC address that I posted yesterday (182GYiNweSTh6W3x2DUf91At496XPcC8v4), the reports made on this address were actually being followed up on by law enforcement. Okay... fine. If I can't see the kinds of transactions that Leto's engaging in beyond generic phishing scams, then I'll go somewhere else. So, I checked Ethplorer.


I narrowed the result down from the establishment of new addresses to the actual transfers, of which I have 34 transactions listed, with only two "zeroed" transfers. So naturally, I followed the former of the two address sets. From what I can tell, the latest activity on the wallet was from back in June. But, Leto does transact with exchange wallets, which is exactly what I was looking for since the beginning.

122742.png

There are seven transactions with three addresses linked to an exchange. Those addresses will be listed below from most to least recent activity with Leto's wallet... And these are not wallets trading in small amounts that we're talking about.

0x46340b20830761efd32832A74d7169B29FEB9758 (Crypto.com) x4
0xA9D1e08C7793af67e9d92fe308d5697FB81d3E43 (Coinbase) x2
0x1C727a55eA3c11B0ab7D3a361Fe0F3C47cE6de5d (Uphold) x1

I looked into how I could report this to the exchanges themselves, but most exchanges won't do an internal investigation since "business is business" and will only comply with law enforcement under duress, which is shitty. So if we want any of these platforms to get Leto debanked, we'll have to get law enforcement in on it first. If anyone has any kind of automated tools that would make the process of organizing his transaction history and doing crypto forensics easier, hit me up.
 
@Incongruous

There's something about your screenshots that seems...off. I can't quite put my finger on it, but I have to ask "Did you edit these?"
Everything apart from Kar's credit is original, I removed some stuff from the chat as to not leak his full username or anything personally identifiable. All the financial screenshots are original, and yes, there is a discrepancy between the original and the archive.ph version of the Ethsplorer website, I'm not sure what caused that, but my screenshot is from the original webpage. The Chainabuse screenshot was taken with my cursor hovered over the blank box so that the law enforcement notification would show up in it as well, in case you saw the discrepancy there.
 
Everything apart from Kar's credit is original, I removed some stuff from the chat as to not leak his full username or anything personally identifiable. All the financial screenshots are original, and yes, there is a discrepancy between the original and the archive.ph version of the Ethsplorer website, I'm not sure what caused that, but my screenshot is from the original webpage. The Chainabuse screenshot was taken with my cursor hovered over the blank box so that the law enforcement notification would show up in it as well, in case you saw the discrepancy there.
Look im going to be honest I don't buy anything from your post and that's due that dogshit fake of a whatsapp screenshot. The effort it takes to make this shit of a fake "convo" makes me highly suspect you're not posting in good faith, sorry.
 
Última edición:
So this is the guy that makes 4chan shittier than it is usually. The reason why I can't save funny images on the site anymore for fear someone embedded them with nasty shit. I knew that one game with 5 people that played it total was astroturfed by pedophiles on /v/.
I hope null gets to payout that 5 grand and gets a front row seat to his public flogging by Donald Trump while enjoying a cigar.
 
Look im going to be honest I don't buy anything from you post and that's due that dogshit fake of a whatsapp screenshot. The effort it takes to make this shit of a fake "convo" makes me highly suspect you're not posting in good faith, sorry.
I don't know if he's off his meds, a pretentious LARPing faggot, or some other combination of bad actor, but he is the same user that posted shit that was blatantly illegal over in the Self Sufficiency board and admitted to an enumerable number of felonies in a single post

Like he was encouraging people to find a map of EPA superfund sites to obtain anthrax samples, and other Pound Me In The Ass Prison felonies.

When I first saw it, it very much reminded me of the post from Hoffmann himself that he false flag'd to try and get the site shut down. I would be cautious of this user going forward. For reference, I don’t think they have anything to do with David Hoffmann but they are just some weird unrelated attention whore who’s wandered into the thread


Oh, and the screenshot is entirely fake too btw. https://yesviz.com/iphones.php

If you screenshot something on your phone, it's going to have the physical dimensions . The size of the screenshot attached are viewport dimensions. This is a very quick and 90% accurate way of figuring out if a screenshot is bullshit or not.
1762618644525.png

The image is 375x576. The width is 375 pixels, which corresponds to viewport dimensions often found in fake chat generators or device emulators.
 
Última edición:
A deep dive into the "official" crypto accounts tied to Leto, his friends and/or his associates.

Disclaimer: It's baseless to recreate where I got the idea for this from. I get that emulating a chat makes it look like I'm sticker farming the board instead of posting in good faith. Noted. I won't pull my punches. Thanks to K. and J. for helping me. Everything in this post is supported by publicly available information, and made in good faith (whether that's believable or not) to this board. Every screenshot taken is both original and unedited in any way, unless otherwise stated.

Basically, I decided to see if I could track Leto's wallets to an exchange. I started with 4chan.gay, which redirects to owo.vg. Their homepage can be seen here:


101059.png

Hovering over the awoo.cf logo, it shows this is their homepage.

101726.png

Maybe I'm retarded, but i just typed it into the browser and hit "enter." The archive.ph version of this page (that's a month old) still shows the owo.vg homepage, but it currently redirects to a site that looks like this.

https://archive.ph/wip/wSd3p (New archive)

102432.png

I'm going to make the rash assumption that Leto is the owner of both, since his contact info is on awoo.cf, and owo.vg is clearly listed as a backup of the original site. meaning there's also a high chance of Leto being funded by the crypto addresses that were listed on the homepage of owo.vg as well. (Yes, I know lemur is the developer, hence why it's nothing more than an assumption.)

103721.png

Note: I went into the HTML and redacted the session ID with box-drawing characters before taking a screenshot, but the screenshot itself is unedited.

Going back to the original homepage, there are seven addresses that (seem to be) owned by Leto.

Note: @UndeadWasp already archived this, I'm just reinventing the wheel.

I checked cointracker.io for the balances (USD) of all of them, which are:
Coin/TokenAmountValue (USD)Wallet Address
BTC0.00009813 BTC$10.00bc1qtm4rep7kyp2p28hlkfktpnd0j7uew47vnt2mev
LTC0 LTC$0.00ltc1q9xlaysse0mpfwf025esd69kt9zu3md22gh23du
ETH0.00000152 ETH$0.00520x6abA18D203520c8F90ca63eE7426a7bC345D98e6
SOLN/AN/AE5ekoiauCR8yiNp451dmuPzhUxo84P5x3m9WJBK5kxZe
XRP2.729159 XRP$6.19r3jYXNdMk2Vz5hXhKCKE9re8uz93JQFG1r
DOGE0 DOGE$0.00DSBq5jRWkiwmEh1G7zBwmQDgRkvRr61fmb
XMRN/AN/A85CTwq5wGjWZw5GgzgwZPrHyZxpLXMK5oZSSSk5j4x9w1bpqzisaWAUZ...

I checked Chainabuse for all of them except XMR, and nobody filed a single report for any of them.

104631.png

So then I checked Ethplorer (for the ETH address), just like I did the last time.


105448.png

Note: The screenshot is taken with the "only nonzero transactions" box checked, and thus it will be different from the archive.ph version.

Of the three exchanges that the wallet has contact with, only FixedFloat monitors transactions for suspicious activity, and can freeze/seize assets at their discretion based on criminal activity identified by information from business partners, public sources, victim complaints, among others. It's right on their TOS.


111019.png

I also found an email address on their support page to report said criminals (help@fixedfloat.com). I emailed them once before posting this, and I encourage all of you to do the same (after reading the entire thing), despite him being able to make another address at the drop of a hat. The point in reporting him is so that there is a paper trail of evidence that the FBI can pick up, which helps him be prosecuted. The feds can look at a string of evidence (exchange complaints) that demonstrate Leto's antisocial and illegal behaviors, including his propensity to try and cover them up.

I rinsed and repeated the process with LTC:


The last transaction made on this wallet dumps his remaining funds into a new wallet on October 20th. This is likely a move into a coin washing service because after spending all morning looking through the transaction history from that wallet onwards without exchange tags (I hate LTCspace), it's going to be pretty much impossible to track without some automated tool that's able to scrape exchange addresses from the site and compare them against Leto's transaction history.

So, I rinsed and repeated the process with BTC:


This is where it gets interesting. We can see that every time Leto gets a donation, within a day or two he'll deposit it into a different wallet. for the first 3 transactions, that wallet was (bc1qtm4rep7kyp2p28hlkfktpnd0j7uew47vnt2mev) and for the most recent one, it was (bc1q90l83l6626rl2rcqanvh4wumr74vnqnmhe3f89). The latter of the two is almost guaranteed to be a coin washing service. Currently, the most recent donation into his account occurred yesterday, and at the time of writing he hasn't moved any of it to a different wallet yet.

115607.png

I spent some time looking into the former of the two wallets that I mentioned in the paragraph above because to me it looks like he didn't care enough about the heat from the feds to launder his donations up until October 17th, and barring any unforseen circumstances on the blockchain, his financial activities up until that point are pretty much set in stone, which'll make them easier to look into. As far as I know, he doesn't seem to have traded with any exchange-linked wallets like he did using ETH, but then again, I'm just one person, and there are some things that I've probably overlooked. At least I found a potential weak point in his financial opsec between 2025-05-18 and 2025-10-17.

So, I rinsed and repeated the process with SOL:


Leto has 184 balance changes over the course of 10 months. Starting from the oldest transactions, there is immediately a transfer of currency from FixedFloat, which we now know has a function to report cybercriminals. So again, there's an opportunity to get a paper trail started on his financial activities so that the FBI has an easier time prosecuting this guy.

122231.png

What I find hilarious about this stream of transactions is the sheer number of transfers to sites like stake.com and flip.gg. It's like Leto looked at BossmanJack and thought "yeah... I want to model my life after this guy" which is some crazy work if you ask me.

123536.png

There are also transfers between different tokens on the SOL network, which aren't too noteworthy since most of the services he uses don't leave a paper trail anyways. I was stuck with these transactions until April 12th. That's when I hit the goldmine.

124236.png


Well, well, well. It's a transaction with Coinbase. Their KYC process is one of the first things you see when signing up for a new account. Hell, the verification involves providing personal information, uploading an ID, and even taking a live selfie. So it's all but guaranteed that Leto's identity is confirmed on the platform if he did business on it. And if his identity is confirmed, then we can report him for using their services as a CSAM host + distributor. This is literally the only time that he uses the service, but then again, he only has to use it once to fuck his opsec, which he did as soon as he signed up.


I don't think that we should settle with just letting the platform know about it, since they could very well just wipe his account and any evidence of his identity along with it. We should be reporting it to the feds so they can get a subopena for his information off the exchange first. Then when his identity is confirmed, the wallet and subsequent ties to his website can be confirmed as well, which is probably going to be the silver bullet in getting him arrested.

With that, I continued rinsing and repeating the process with XRP:


What's the first thing I see when pulling Leto's account up?

130904.png

XRP account activated by FixedFloat. Welp, you know what to do already, so I won't spend unnecessary time on it. His latest transaction was on September 21st.

131211.png

Going through his transaction list, there are numerous FixedFloat transactions, but also transactions that go to BitPay, a platform of which a one-time KYC check has been mandatory for all users since 2020-12-09. So that's the second platform that we now know of that has IRL records of both Leto's payment history and identity.


So, I rinsed and repeated the process with DOGE:


His most recent transaction was on October 3rd, with a not insignificant amount of DOGE. There are 13 transactions in total, with 10 incoming and 3 outgoing. The average amount per transaction is around $25 with outliers being on 2024-11-07 for $157.17 (USD). As far as I can see, there are no exchange transactions on this wallet, despite it being the most active outside the BTC wallet I previously listed.

So, I rinsed and repeated the process with XMR:


133938.png

Thanks to XMR being the most secure of the seven networks previously listed, I was only able to get two associated public keys, and that's it. But despite that, I still managed to get enough information on his other networks that he'll have a hard time evading prison at this rate.

...

That's everything I have for now. I was also on the lookout for the other BTC/ETH addresses that I personally listed prior to this post and on "the gay pedo at the gates" thread, since their connection to the addresses I just listed would certainly be helpful, but after looking at this for hours and hours on end, everything kind-of just blends together. I didn't find anything. Besides, even without them, we already have enough to be able to get this guy put in prison anyways, all because he fucked up at a few steps in the process, using KYC exchanges alongside platforms that actually care whether or not they're in compliance with US securities' laws. So that's always a bonus. If anything looks sus, I included links and archives to absolutely everything I included in this post, so that you can check it out for yourself and do your own research into it.

Cheers.​
 
Disclaimer: It's baseless to recreate where I got the idea for this from. I get that emulating a chat makes it look like I'm sticker farming the board instead of posting in good faith. Noted.
Oh, so now you “emulated” the chat? This is in direct contrast to your claim initially that you:
removed some stuff from the chat as to not leak his full username or anything personally identifiable. All the financial screenshots are original
Which one is it? Why should anyone trust the information (which is 85% nonsense) you provide?
 
Which one is it? Why should anyone trust the information (which is 85% nonsense) you provide?
This. We can't ignore the fact that it's possible sleeper account leading us to a wild goose chase. Especially from a new account and one that limits their profile. I'd prefer the information from this guy come from a veteran of the site that we can for sure tell isn't Leto or his friends.
 
Why should anyone trust the information (which is 85% nonsense) you provide?
You shouldn't. It's why I provided so many references to publicly available information in my last post. Truth speaks for itself, whether or not the person speaking it is untrustworthy. If I want to credit people without disclosing the other communities I frequent, there are only so many ways I can go about doing that. So, I edited, emulated, recreated, (insert verb), that place without giving anything up in the process. I know it's a bad look, but there's not much I can do about it now. Everything else proves to be perfectly fine. It checks out. If you don't think I'm being honest about the rest of it, go look at the blockchain ledgers yourself. You'll be able to see the numbers clearly regardless of what I have to say about it.
 
Atrás
Top Abajo