╔══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╗
║                                      █████╗  ██████╗  ██████╗                                                                            ║
║                                     ██╔══██╗██╔════╝ ██╔════╝                                                                            ║
║                                     ███████║██║  ███╗██║  ███╗                                                                           ║
║                                     ██╔══██║██║   ██║██║   ██║                                                                           ║
║                                     ██║  ██║╚██████╔╝╚██████╔╝                                                                           ║   terra nova tired declareing cyber guess whos winning
║                                     ╚═╝  ╚═╝ ╚═════╝  ╚═════╝                                                                            ║
║                                   BY: STREEX, Halo, swappedfunds (ACC OWNER)                                                             ║
║                                   Terra nova members, Yall think u have opsec? LOOL                                                      ║
╚═══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════


[ PRIMARY TARGET ]
IP Address: 181.174.254.3
Location: Brazil (BR)
Platform: 1win.com (Gambling/Betting)
Total Accounts Linked: 8


[ CONNECTION MAP ]

                             +-----------------------+
                             |    181.174.254.3      |
                             |      (Target IP)      |
                             +-----------+-----------+
                                         |
             +---------------------------+---------------------------+
             |                           |                           |
             v                           v                           v
   +-----------------+         +-----------------+         +-----------------+
   | dfatimabilibiu3 |         | brunosilvavargas|         | derique1988     |
   | @gmail.com      |         | @gmail.com      |         | @gmail.com      |
   | Phone: 51999212589|        | Phone: 51997911935|        | Phone: 7744593696|
   | DOB: 2005-07-31 |         | DOB: 2005-12-24 |         | DOB: 1990-01-01 |
   | Name: KvcKNZ    |         | Name: 1win      |         | Name: Derique S.|
   +-----------------+         +-----------------+         +-----------------+
             |                           |                           |
             v                           v                           v
   +-----------------+         +-----------------+         +-----------------+
   | viniciuskerschner|         | jairbarcelos863 |         | silvanycamargo42|
   | @gmail.com      |         | @gmail.com      |         | @gmail.com      |
   | Phone: 51996162348|        | Phone: 51998075600|        | Phone: 5198219194|
   | DOB: 2005-10-19 |         | DOB: 2005-12-16 |         | DOB: 2005-01-20 |
   | Name: uwHuWY    |         | Name: 1win      |         | Name: 1win      |
   +-----------------+         +-----------------+         +-----------------+
             |                           |
             v                           v
   +-----------------+         +-----------------+
   | albarellojoao8  |         | rosineiazampin  |
   | @gmail.com      |         | @gmail.com      |
   | Phone: 292339355|         | Phone: 51980246954|
   | DOB: 1990-01-01 |         | DOB: 2005-10-04 |
   | Name: Joao A.   |         | Name: CySDJZ    |
   +-----------------+         +-----------------+


[ PATTERNS & CONNECTIONS ]

CONNECTION TYPE: SAME IP
-----------------------------------------------------
All 8 email accounts are registered to the same IP address: 181.174.254.3.
This indicates a shared network origin (home, office, proxy, or VPN).


EMAIL PATTERNS
-----------------------------------------------------
Domain: 100% Gmail (8/8).
Username Types:
  - Random Letters (KvcKNZ, uwHuWY, CySDJZ): 3 accounts
  - Name + Numbers (jairbarcelos863, albarellojoao8): 2 accounts
  - Full Name (Derique dos Santos da Silva, Joao Albarello): 2 accounts
  - Mixed Characters (dfatimabilibiu3): 1 account


PHONE NUMBER PATTERNS
-----------------------------------------------------
Area Code 51 (Rio Grande do Sul - Brazil):
  - 51999212589 (dfatimabilibiu3)
  - 51997911935 (brunosilvavargas)
  - 51996162348 (viniciuskerschner)
  - 51998075600 (jairbarcelos863)
  - 5198219194 (silvanycamargo42)
  - 51980246954 (rosineiazampin)

Anomalies (Non-standard format):
  - 7744593696 (derique1988) - Missing country/area code
  - 292339355 (albarellojoao8) - Missing country/area code


AGE & DOB PATTERNS
-----------------------------------------------------
Group 1 - Born 2005 (Age 20 at breach):
  - dfatimabilibiu3 (2005-07-31)
  - brunosilvavargas (2005-12-24)
  - viniciuskerschner (2005-10-19)
  - jairbarcelos863 (2005-12-16)
  - silvanycamargo42 (2005-01-20)
  - rosineiazampin (2005-10-04)
  Total: 6 accounts

Group 2 - Born 1990 (Age 36 at breach):
  - derique1988 (1990-01-01)
  - albarellojoao8 (1990-01-01)
  Note: Both have identical DOB (1990-01-01) - likely placeholder data
  Total: 2 accounts


NAME PATTERNS
-----------------------------------------------------
Valid Full Names Found:
  - Derique dos Santos da Silva (derique1988)
  - Joao Albarello (albarellojoao8)
  - Aline Francielle rodrigues (alinerfran22)

Placeholder/Generated Names:
  - KvcKNZ, uwHuWY, CySDJZ, 1win (multiple accounts)


TIMELINE
-----------------------------------------------------
Earliest Breach: 2023-02-03 (silvanycamargo42)
Latest Breach:  2024-01-07 (brunosilvavargas)

Breach Dates:
  - 2023-02-03: silvanycamargo42
  - 2023-05-10: derique1988
  - 2023-06-27: albarellojoao8
  - 2023-08-15: dfatimabilibiu3
  - 2023-10-18: rosineiazampin
  - 2023-10-19: viniciuskerschner
  - 2023-12-30: jairbarcelos863
  - 2024-01-07: brunosilvavargas


[ ADDITIONAL DATA FOUND ]

PLATFORMS DETECTED
-----------------------------------------------------
1. 1win.com (8 breaches)
2. spotify.com (detected in previous data)
3. office365.com (detected in previous data)


OTHER IPS ASSOCIATED
-----------------------------------------------------
138.0.64.156 - Previously analyzed, also linked to 1win.com breaches
  - Connected emails: erickbaze171, vanessa678monteirodeoliveira, patricia.freitas45, etc.
  - Note: This IP is different from 181.174.254.3, suggesting multiple source networks