GO TO DOXBIN.COM FOR THE FULL PASTE: CREAMY / ey1x Reason: Ratting innocent people, extorting and scamming One of the owners of "Desire Team" that has control over 219 infected devices. He deserves to be here. Im doing this for every victim that he hurt or was planning to hurt. If you know more about desire team or creamy contact me directly or comment under this post. Make this world a better place. Stay safe NoGodComplex out ================================================================== 1. SUBJECT ------------------------------------------------------------------ Name: Melvin Ahlfors Birth year: early 2011 / late 2010 City: Malmo, Sweden Sex: Male Languages: Swedish (native), English 2. FAMILY (probable, not able to confirm during to lack of information about his family) ------------------------------------------------------------------ Malin Sofia Ahlfors — most likely mother Personnummer: 19911014-XXXX DOB: 1991-10-14 (34 years old) Address: Per Wickenbergsgatan 1 lgh 1304 217 54 Malmo (Slottsstaden / Ribersborg district) Floor/door: 3rd floor, door 4 from the left Apartment: 2 rooms, 68 m2, building from 1933, rental Moved in: 2024-09-11 (earlier address unknown) Vehicle: Peugeot 208, 2016 Marital: not married Business: none Phone: not registered in Ratsit Parish: Malmo S:t Petri Coordinates: 55.601408, 12.982244 Note: Ratsit states "Malin bor ensam" — no one 18+ registered at address. Melvin <18 = below public registry threshold, may live with her or with father. 3. DISCORD ------------------------------------------------------------------ User ID: 1198712374996242432 Username: ey1x Display name: Creamy Created: 2024-01-21 19:35:01 UTC Avatar hash: 33eaf5ee78ceee624ab568ff898d5e67 Avatar URL: https://cdn.discordapp.com/avatars/1198712374996242432/33eaf5ee78ceee624ab568ff898d5e67.png Badges/flags: none 4. EMAILS ------------------------------------------------------------------ Primary (real): melvinahlfors@gmail.com Gaming alts: 22gamingstuffv2@gmail.com lootie387@gmail.com Junk / temp: ff0337881@gmail.com 3r58387r378@gmail.com qn@q62.gp 6usi@4b4.xu 5. ROBLOX ACCOUNTS (chronological) ------------------------------------------------------------------ DrakenMelvin User ID: 954789935 Created: 2019-02-03 (age ~8) Friends: 10 (includes Melvin_se) Groups: none Bio: empty DrakenMelvin11 User ID: 1161635053 Created: 2019-07-14 (age ~8) Friends: ~70 Groups: none Bio: empty "11" = birth year 2011 Melvin_se (current main) User ID: 3056142359 Created: 2021-11-12 (age ~10) Friends: ~150 Following: 10 Bio: "aaa" Roblox stats: Arsenal Level 22, 8250 xp (as of April 2024) 6. ROBLOX GROUPS (Melvin_se) — notable ------------------------------------------------------------------ Swedish (IRL signal): Pro_grupp 63 OWNER (rank 255) id 13531098 LAVYS VANNER 33 Member id 13926355 Kamraterna 18k Member (Fansen) id 4836805 Drakenmelvin11_Group 6 Admin (rank 254) id 10328770 Cheat / exploit surface: Scriptbloxian Studios 30M "Legend" HD Admin 3.4M "Epic User" Easy.gg, Quataun, itstheoss, Y_ED Owner rank in FE!N Studio (mass group with auto-owner) 7. IRL CIRCLE (confirmed) ------------------------------------------------------------------ Casper Larsson (nickname "Lacke") Roblox: casper2011larsson (id 951977215) Created: 2019-02-01 (2 days before DrakenMelvin) Age: birth year 2011 (independently confirms Melvin's age) Link: has Melvin_se + DrakenMelvin11 in friends Hitta: no entry (too young, <16) Jonatan Bejer (?) Roblox: jonatand0505 (display "Bejer") (id 94525067) DOB: ~May 5 Surname: Bejer (rare in SE, to check in Hitta) Mutual friends of Melvin_se and Casper (clique — class/crew): 2686571184 3002814808 2316561678 1476468860 8. INFRASTRUCTURE ------------------------------------------------------------------ IP (2024-04): 94.255.128.172 Bredband2 AB residential, Malmo, Sweden No VPN in capture Infected machines (stealer log 2024-04-24): Victim 1 HWID: F3D023BE0DD9243083857 OS: Windows 10 Pro Screenshot: 2024-04-02 14:55 Emails: 22gamingstuffv2, ff0337881, melvinahlfors Steam: installed 2024-04-01 THE FINALS: installed 2024-04-01 Python: 3.12.2 installed 2024-04-02 NVIDIA: driver 457.51 Victim 2 HWID (SMBIOS UUID): 6844F240-B318-11EE-8D7C-806E6F6E6963 OS: Windows 10 Pro x64 Emails: 3r58387r378, 6usi@4b4.xu, lootie387 Stealer captures overall: 2024-04-24 first (OathNet) 2024-05-26 second 2025-03-13 third 2025-03-18 fourth 2025-03-21 fifth 2026-06-01 sixth 2026-06-11 seventh 2026-06-28 most recent (still active) 9. PASSWORD PATTERNS ------------------------------------------------------------------ Segments Melvin recombines across passwords: first name: melvin / MelVin / MELVIN / melvinah initials: AH (Ahlfors + ?) first game: mta / MTA (Multi Theft Auto) birth year: 2011 second num: 8088 decoration: KING PIN patterns: 0230000 / 0880000 Observed target platforms from breach set: accounts.google.com (Gmail) login.live.com (Microsoft) discord.com spotify.com epicgames.com create.kahoot.it (school platform) panzoid.com grammarly.com accounts-emea.f-secure.com x.p2p.cam 10. COMMERCIAL ACTIVITY ------------------------------------------------------------------ Bigcartel storefront: gamingstuffv2.bigcartel.com (currently 404, account removed / banned, no Wayback capture) Linked email: 22gamingstuffv2@gmail.com Payout method: unknown (Bigcartel = PayPal/Stripe) PayPal cookies: 14 on Victim 1 (active session 2024-04-24) 11. BEHAVIORAL PROFILE ------------------------------------------------------------------ Primary games: Roblox (Arsenal, exploits), Fortnite, The Finals, CS (skins), Minecraft Cheat sites visited / installed: Fluxus, Nezur, Delta Executor, Arceus X, Kiwi Exploits, Skycheats, Cheatermad, Wurst, Meteor, Horion, Galaxy Swapper V2, Lunar Client, OMG Exploits, 1cheats, Cheat.ink Trading: Skinport, CSGOEmpire, Buff.game Earning: Freecash, Salad (crypto farming) Infection vector: likely cracked Roblox executor downloaded via linkvertise/mediafire ~2024-04-02