GO TO DOXBIN.COM FOR THE FULL PASTE: ╔══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╗
║ █████╗ ██████╗ ██████╗ ║
║ ██╔══██╗██╔════╝ ██╔════╝ ║
║ ███████║██║ ███╗██║ ███╗ ║
║ ██╔══██║██║ ██║██║ ██║ ║
║ ██║ ██║╚██████╔╝╚██████╔╝ ║ terra nova tired declareing cyber guess whos winning
║ ╚═╝ ╚═╝ ╚═════╝ ╚═════╝ ║
║ BY: STREEX, Halo, swappedfunds (ACC OWNER) ║
║ Terra nova members, Yall think u have opsec? LOOL ║
╚═══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════
[ PRIMARY TARGET ]
IP Address: 181.174.254.3
Location: Brazil (BR)
Platform: 1win.com (Gambling/Betting)
Total Accounts Linked: 8
[ CONNECTION MAP ]
+-----------------------+
| 181.174.254.3 |
| (Target IP) |
+-----------+-----------+
|
+---------------------------+---------------------------+
| | |
v v v
+-----------------+ +-----------------+ +-----------------+
| dfatimabilibiu3 | | brunosilvavargas| | derique1988 |
| @gmail.com | | @gmail.com | | @gmail.com |
| Phone: 51999212589| | Phone: 51997911935| | Phone: 7744593696|
| DOB: 2005-07-31 | | DOB: 2005-12-24 | | DOB: 1990-01-01 |
| Name: KvcKNZ | | Name: 1win | | Name: Derique S.|
+-----------------+ +-----------------+ +-----------------+
| | |
v v v
+-----------------+ +-----------------+ +-----------------+
| viniciuskerschner| | jairbarcelos863 | | silvanycamargo42|
| @gmail.com | | @gmail.com | | @gmail.com |
| Phone: 51996162348| | Phone: 51998075600| | Phone: 5198219194|
| DOB: 2005-10-19 | | DOB: 2005-12-16 | | DOB: 2005-01-20 |
| Name: uwHuWY | | Name: 1win | | Name: 1win |
+-----------------+ +-----------------+ +-----------------+
| |
v v
+-----------------+ +-----------------+
| albarellojoao8 | | rosineiazampin |
| @gmail.com | | @gmail.com |
| Phone: 292339355| | Phone: 51980246954|
| DOB: 1990-01-01 | | DOB: 2005-10-04 |
| Name: Joao A. | | Name: CySDJZ |
+-----------------+ +-----------------+
[ PATTERNS & CONNECTIONS ]
CONNECTION TYPE: SAME IP
-----------------------------------------------------
All 8 email accounts are registered to the same IP address: 181.174.254.3.
This indicates a shared network origin (home, office, proxy, or VPN).
EMAIL PATTERNS
-----------------------------------------------------
Domain: 100% Gmail (8/8).
Username Types:
- Random Letters (KvcKNZ, uwHuWY, CySDJZ): 3 accounts
- Name + Numbers (jairbarcelos863, albarellojoao8): 2 accounts
- Full Name (Derique dos Santos da Silva, Joao Albarello): 2 accounts
- Mixed Characters (dfatimabilibiu3): 1 account
PHONE NUMBER PATTERNS
-----------------------------------------------------
Area Code 51 (Rio Grande do Sul - Brazil):
- 51999212589 (dfatimabilibiu3)
- 51997911935 (brunosilvavargas)
- 51996162348 (viniciuskerschner)
- 51998075600 (jairbarcelos863)
- 5198219194 (silvanycamargo42)
- 51980246954 (rosineiazampin)
Anomalies (Non-standard format):
- 7744593696 (derique1988) - Missing country/area code
- 292339355 (albarellojoao8) - Missing country/area code
AGE & DOB PATTERNS
-----------------------------------------------------
Group 1 - Born 2005 (Age 20 at breach):
- dfatimabilibiu3 (2005-07-31)
- brunosilvavargas (2005-12-24)
- viniciuskerschner (2005-10-19)
- jairbarcelos863 (2005-12-16)
- silvanycamargo42 (2005-01-20)
- rosineiazampin (2005-10-04)
Total: 6 accounts
Group 2 - Born 1990 (Age 36 at breach):
- derique1988 (1990-01-01)
- albarellojoao8 (1990-01-01)
Note: Both have identical DOB (1990-01-01) - likely placeholder data
Total: 2 accounts
NAME PATTERNS
-----------------------------------------------------
Valid Full Names Found:
- Derique dos Santos da Silva (derique1988)
- Joao Albarello (albarellojoao8)
- Aline Francielle rodrigues (alinerfran22)
Placeholder/Generated Names:
- KvcKNZ, uwHuWY, CySDJZ, 1win (multiple accounts)
TIMELINE
-----------------------------------------------------
Earliest Breach: 2023-02-03 (silvanycamargo42)
Latest Breach: 2024-01-07 (brunosilvavargas)
Breach Dates:
- 2023-02-03: silvanycamargo42
- 2023-05-10: derique1988
- 2023-06-27: albarellojoao8
- 2023-08-15: dfatimabilibiu3
- 2023-10-18: rosineiazampin
- 2023-10-19: viniciuskerschner
- 2023-12-30: jairbarcelos863
- 2024-01-07: brunosilvavargas
[ ADDITIONAL DATA FOUND ]
PLATFORMS DETECTED
-----------------------------------------------------
1. 1win.com (8 breaches)
2. spotify.com (detected in previous data)
3. office365.com (detected in previous data)
OTHER IPS ASSOCIATED
-----------------------------------------------------
138.0.64.156 - Previously analyzed, also linked to 1win.com breaches
- Connected emails: erickbaze171, vanessa678monteirodeoliveira, patricia.freitas45, etc.
- Note: This IP is different from 181.174.254.3, suggesting multiple source networks