═══════════════════════════════════════════════════════════════ Vxmpingz compiled 2026-10-07 · Netherlands residency ═══════════════════════════════════════════════════════════════ PRIMARY SUBJECT ─────────────────────────────────────────────────────────────── Name: Mustafa Tork Role: Youngest son — primary target of all stealer dumps DOB: 2010-11-12 (12 November 2010) Age (as of today): 15 years old Ethnicity: Turkish / Levantine Arab (likely Syrian / Lebanese / Palestinian / Jordanian) Languages: Arabic (native), French (household), English, some German, Persian (keyboard installed) Current residence: Netherlands, South Holland Rotterdam / The Hague / Delft / Naaldwijk corridor (WorldStream AS49981 peering) Address signature: House #58, street abbreviated "sh" (Arabic شارع — "street") Prior residence: Turkey (through mid-2024) Two TR Turk Telekom /24s: 88.238.193.0/24 and 88.230.71.0/24 HOUSEHOLD ROSTER ─────────────────────────────────────────────────────────────── Father: Tork Loay b. 1994 (Teba1994 root) Mother: Manal (samarmanal1991 password marker) Daughter: Samar (ssammarr574@gmail) Daughter: Haneen (hhaneen7880@gmail) Youngest son: Mustafa Tork b. 2010-11-12 (SUBJECT) handles: vxmpingz, mosis (Windows), final (Windows), Roblox UID 36083555 Grandma/aunt: "Tata" (tata4530@yahoo.com) Possible: Husam b. 1982 (clegc-gckey.gc.ca — Canadian diaspora relative) Possible: Siru/Sirin/Sireen (possible older sister / cousin from Tebsiru38rf) NOTE: Pc is used by entire family XDD NETWORK FINGERPRINT ─────────────────────────────────────────────────────────────── Real NL residential: 175.110.113.119 (AS49981 WorldStream) Shared VPN exit: 190.2.149.224 (AS49981 WorldStream) Historical TR #1: 88.238.193.48 (Turk Telekom, 2024) Historical TR #2: 88.230.71.41 (Turk Telekom, 2026) EMAIL ADDRESSES — MUSTAFA ─────────────────────────────────────────────────────────────── loaytork013@gmail.com primary Gmail (father's name) loay31eh@gmail.com alt Gmail 58shloaytork@gmail.com alt (address-prefix) 58loaytork@gmail.com alt (address-prefix) loaytork58sh@gmail.com PSN login torkloay779@gmail.com Discord primary (reversed father's name) EMAIL ADDRESSES — OTHER FAMILY ─────────────────────────────────────────────────────────────── hhaneen7880@gmail.com Haneen (sister) ssammarr574@gmail.com Samar / Sammar (sister) yuyuaaaa32@gmail.com sibling (pet-name "yuyu") tata4530@yahoo.com grandmother/aunt "Tata" BURNER EMAILS (Mustafa's farm, Teba1994 reuse) ─────────────────────────────────────────────────────────────── fbnhfd2311@outlook.com lskdjdfklj32@outlook.com sdgw4t1145@outlook.com gsdjjhdfs81e@outlook.com HANDLES & USERNAMES — MUSTAFA ─────────────────────────────────────────────────────────────── vxmpingz Roblox + TikTok (main) mosis Windows local on HAAISE box final Windows local on Device C tork Zoom login jdahjjhdj UnknownCheats.me forum loaytork58sh PSN username torkloay779 Discord ROBLOX ALT FARM (all Mustafa's accounts) ─────────────────────────────────────────────────────────────── roblox_user_36083555 Na1zi_LOL3 32XSkeeZ FQUKYOU2 dontmindmeloll6 Alosh255 CuteBaconGamer_0 SlendersCnpEmoTrash WeDoNotGiveAFu IdnotGiveAfu IdnotsupportLGBTQ ATotalNoobLOLL Imnotdeadlol ahegjaoGirls 4sebee4 Pas_encoreBruh WillYouAjreUgly xxxtentcationlover justforfunigfnaf22 PJJJOJJJRJJJ_NHUB Beluga-2 totallyproatshooting MWWMMWMWMWWWMMMWWWWM MWWMMWMWMWWWMMMWWWMW iWillCjumMyMom 8999999999999999999I PASSWORD INVENTORY — MUSTAFA (b. 2010) ─────────────────────────────────────────────────────────────── Core "Teba" family (inherited from father's root): Teba1994 father's DOB — legacy primary Teba199465 father's DOB + house #65 teba1994 lowercase variant Teba1994_ appended underscore Teba1004 typo variant Teba2050 future-tag variant Teba12112010 Mustafa's own DOB full Teba2010 short DOB-year Teba201065 DOB + house #65 Teba1993 Pas_encoreBruh alt Teba1996 WillYouAjreUgly alt Teba2020 Zoom Tebsiru38rf Discord current (rotated Apr 2026) tebsiru38rf lowercase variant Non-Teba specials: n3tev4ng web.roblox.com specific iLoveYouRoblox ATotalNoobLOLL alt SAYYOUAREMYBAKA iWillCjumMyMom alt jabuse124 Discord DM channel gagagagagagagq Roblox throwaway nrjru4u4u4u474 Roblox throwaway Recovery/alt (reveal family names): samarmanal1991 sister Samar + mother Manal compound samarmanal199165 with house #65 suffix mustafaa2020 his OWN name + sig year INFECTED DEVICES — ALL MUSTAFA'S ─────────────────────────────────────────────────────────────── Device A — "HAAISE" Local user: mosis MachineID: 746f0ba1-483e-4b81-b47e-1b22fb68e9c1 HWID: F51EE8959DAA4DE47776-c81ca9c1-908c OS: Windows 11 Home OS install: 2025-09-13 11:41:38 CPU: AMD Ryzen 7 7735HS GPU: Radeon + NVIDIA (laptop dual-GPU) RAM: 16 GB (15610 MB) Resolution: 1920x1080 Timezone: UTC+1 (CET) Keyboard layouts: German, English, Persian Chassis: ASUS ROG laptop (ArmouryCrate + ROGLiveService + AuraWallpaperService) Browser primary: Opera GX 124.0.5705.89 AV: Windows Defender only Latest infection: 2025-12-10 (Vidar) Infection vector: C:\Users\mosis\Downloads\...\ Bootstrapper.exe (cracked Roblox exploit executor) Device B HWID: DCB15A848DCBF62006A5-E8F5F0B2-013A Browsers drained: Brave, Chrome, Edge, Opera GX Chat clients: Discord (token exfil), Telegram tdata (full session clone) Launchers: Lunar, TLauncher, Feather, silentclient, Riot Client, Steam, Epic Games Streaming: OBS Studio Latest infection: 2026-06-14 Passwords.txt size: 40.2 KB (~400 creds) Device C — "final" Windows user: final Chrome profiles: 7 (Default + 4, 5, 7, 8, 10) Browsers: Chrome + Brave Roblox cookie: user_36083555 session captured Passwords.txt size: 79.1 KB (~700-800 creds — heaviest) Latest infection: 2026-08-21 Hijackable active: Riot (3 cookies), Epic (2), Steam (3) CONFIRMED LEAKED SERVICES ─────────────────────────────────────────────────────────────── PSN loaytork58sh@gmail.com / Teba1994 Discord torkloay779@gmail.com / Tebsiru38rf (current) / Teba1994 (legacy) Roblox 23+ alts, Teba1994 family passwords TikTok vxmpingz Instagram vxmpingz (expected) UnknownCheats jdahjjhdj / Teba1994 Zoom tork / Teba2020 Apple ID (likely — Teba1994 pattern on idmsa.apple.com) Dropbox tata4530@yahoo.com / Teba1994 (grandmother) Discord DMs channels 1263778185225703494, 1127178703709945856, 1046132008545427507, 1110972023359930439, 1263431033349476403 INFECTION CADENCE ─────────────────────────────────────────────────────────────── Reinfection every 2-4 weeks across 2026 Source: cracked Roblox executors (Bootstrapper.exe variants), cracked Minecraft clients (Lunar/TLauncher/Feather/ silentclient) Stealer families: Lumma, Vidar, RedLine/StealC Combo-list circulation: Vixzz Cloud, ALIEN TxT, FOOX CLOUD, Mansory, Ксавье Сеть (RU) CROSS-REFERENCE NOTES ─────────────────────────────────────────────────────────────── "loaytork" root → Mustafa signs up with father Tork Loay's name across every account (standard Arab son-of-father paperwork pattern) "58sh" prefix → #58 Street X, Dutch address artifact "65" suffix → recurring across family passwords (likely prior TR address or secondary house number) "Pas_encoreBruh" → Mustafa's French Roblox alt — household is francophone "husam1982" on → possible Canadian diaspora relative Canadian GCKey using same family password root "Tebsiru38rf" → "Teb" + "siru" + "38rf" Siru/Sirine/Sireen — possible crush / older sister / cousin name Persian keyboard → unexplained; family may study Farsi Shopify / Amazon → Mustafa has active accounts (at 15)