RMT Framing

[Sugardaddyt]

Yeah didn't you used to partially run the Octo Disc that encouraged posting other pservers info on a forum you were super active on?

what forum? show me

This is old news... the discord was smart enough to delete promoting other servers and I also heard you got fired or some shit LMAO

[Kestrel]

I started this investigation as a normal account takeover investigation and restored the deleted characters. My initial case rested on an IP overlap on the primary account HIMITORI and the same IP used during the takeover and deletions. Looking specifically at the IP's history, what I had thought was a history of the IP being used 5 times historically, was in fact re-connects rather than historical log ins.

From what I can still say, HIMITORI's account was taken over by an unknown VPN IP. Their gold was funneled from the taken over account to a second, newly created TOMPEARL account. This second TOMPEARL account then stole the Himitori character name from the deleted HIMITORI account (initially read as a way to reserve their name during this).

This second TOMPEARL account traded the gold to the MMOPROVIDER3 account that was then used for the RMT framing of Blacky.

In light of the IP confusion, and the only remaining evidence being that HIMITORI voluntarily renamed their character to what happened to be a virtually identical name to one of the account usernames that was used to drain their account, we have reversed the ban and given 200 octotokens to HIMTORI as compensation.

From my perspective HIMITORI likely had their account taken over by someone who knew them well enough to basically predict what name they would use.

[Sugardaddyt]

meow

[Sugardaddyt]

I started this investigation as a normal account takeover investigation and restored the deleted characters. My initial case rested on an IP overlap on the primary account HIMITORI and the same IP used during the takeover and deletions. Looking specifically at the IP's history, what I had thought was a history of the IP being used 5 times historically, was in fact re-connects rather than historical log ins.

From what I can still say, HIMITORI's account was taken over by an unknown VPN IP. Their gold was funneled from the taken over account to a second, newly created TOMPEARL account. This second TOMPEARL account then stole the Himitori character name from the deleted HIMITORI account (initially read as a way to reserve their name during this).

This second TOMPEARL account traded the gold to the MMOPROVIDER3 account that was then used for the RMT framing of Blacky.

In light of the IP confusion, and the only remaining evidence being that HIMITORI voluntarily renamed their character to what happened to be a virtually identical name to one of the account usernames that was used to drain their account, we have reversed the ban and given 200 octotokens to HIMTORI as compensation.

From my perspective HIMITORI likely had their account taken over by someone who knew them well enough to basically predict what name they would use.

TOM PEARL NAME IS AN INSIDE JOKE. PLEASE CHECK OUT WHO THE FUCK DID THIS AND RESTORE GEAR. THIS IS NOT OVER.... WASTING TIME AND RESOURCES FOR WHAT? GET THE CULPRIT AND GET HIMITORIS NAME BACK NOW PLEASE.

[Himitori909]

I started this investigation as a normal account takeover investigation and restored the deleted characters. My initial case rested on an IP overlap on the primary account HIMITORI and the same IP used during the takeover and deletions. Looking specifically at the IP's history, what I had thought was a history of the IP being used 5 times historically, was in fact re-connects rather than historical log ins.

From what I can still say, HIMITORI's account was taken over by an unknown VPN IP. Their gold was funneled from the taken over account to a second, newly created TOMPEARL account. This second TOMPEARL account then stole the Himitori character name from the deleted HIMITORI account (initially read as a way to reserve their name during this).

This second TOMPEARL account traded the gold to the MMOPROVIDER3 account that was then used for the RMT framing of Blacky.

In light of the IP confusion, and the only remaining evidence being that HIMITORI voluntarily renamed their character to what happened to be a virtually identical name to one of the account usernames that was used to drain their account, we have reversed the ban and given 200 octotokens to HIMTORI as compensation.

From my perspective HIMITORI likely had their account taken over by someone who knew them well enough to basically predict what name they would use.

can i please get my equipment and gold back. and my name Himitori on my warrior

[Lender]

So "Whoops we falsely accused you publicly and perma banned you, here's 20 bucks?"

[Icantkite]

I started this investigation as a normal account takeover investigation and restored the deleted characters. My initial case rested on an IP overlap on the primary account HIMITORI and the same IP used during the takeover and deletions. Looking specifically at the IP's history, what I had thought was a history of the IP being used 5 times historically, was in fact re-connects rather than historical log ins.

From what I can still say, HIMITORI's account was taken over by an unknown VPN IP. Their gold was funneled from the taken over account to a second, newly created TOMPEARL account. This second TOMPEARL account then stole the Himitori character name from the deleted HIMITORI account (initially read as a way to reserve their name during this).

This second TOMPEARL account traded the gold to the MMOPROVIDER3 account that was then used for the RMT framing of Blacky.

In light of the IP confusion, and the only remaining evidence being that HIMITORI voluntarily renamed their character to what happened to be a virtually identical name to one of the account usernames that was used to drain their account, we have reversed the ban and given 200 octotokens to HIMTORI as compensation.

From my perspective HIMITORI likely had their account taken over by someone who knew them well enough to basically predict what name they would use.

makes u think now its lyric and his edaters

[Sugardaddyt]

Yeah didn't you used to partially run the Octo Disc that encouraged posting other pservers info on a forum you were super active on?

I’ve only ever colluded with the gms and manipulated the markets apparently, never been a discord gm. I shitpost too much. Just like your mother

also crypty learn how to use forums brother. MUCH LOVE - L.Dingle.

[Kestrel]

can i please get my equipment and gold back. and my name Himitori on my warrior

Yeah we are working on the full restore right now, expect mail with all of the gear/gold that was deleted/sold

[Kestrel]

So "Whoops we falsely accused you publicly and perma banned you, here's 20 bucks?"

Yeah pretty much (well more of a temp ban given it was lifted)

That and stop sharing accounts, there was a lot of account sharing going on and was likely how the account was compromised. Oh and we are revisiting the Warden discussion. We have had Warden disabled up to now due to security concerns but are now re-considering that decision as hardware fingerprints feel like they are becoming more and more necessary. If you have opinions be prepared to give them once we provide a place for that (or throw them here I guess)