Jump to content
Sign in to follow this  
Flash

ThomasShelby /NEVEOUS (TBLX) clan scam case investigation

Recommended Posts

[EN] It is confirmed that @ThomasFuckingShelby  and his team are scammers and hackers (specifically Shelby & NEVEOUS). At 1:45 AM (Server Time), they've logged into WarriorJR account (if you put account sharing aside, which he did, TBLx team still knew the password and accessed the account) as WarriorJR is an ex- clan member. Based on the screenshoot you can see HWID & IP of ThomasShelby's computer that accessed WarriorJR's account.

unknown.png

Here you can see this same IP loggining into his own characters associated with account ID's and char names:
sitevin88 - ThomasFuckingShelby / Pavlushshenka
asyjjmm - screamofhell,tacir,psicopata
asyjm01 - mindlessrookie

unknown.png

Furthermore, they made 2 accounts (tantana001 & tantana002) - trying to "mimick" account ID of the owner "tantana007", and moved the items like this. 

2021, 2, 19, 1, 52, 24, WarriorJR, 54KUZEN54, 16, 77970828023248066, 330110151, 1, 1, 1, 0, 0, 1
2021, 2, 19, 1, 52, 24, WarriorJR, 54KUZEN54, 15, 77970828023248066, 330110151, 1, 1, 1, 0, 0, 1
2021, 2, 19, 1, 52, 23, WarriorJR, 54KUZEN54, 16, 77970828091096902, 149131227, 1, 12535, 1, 0, 0, 1

Example of log where you steal 2x old ROC & HB +7 at 1:52 AM server time. You then PM Cy3brinsane on facebook at 3 AM server time and try to sell him HB+7 for $100 via bank transfer

Basically items were traded from warriorJR to 54KUZEN54, to KARASULU54, from KARASULU54 to PATOPAZAR, which traces back to ThomasShelby and finally to a side character GOODFELLAS (the irony).
Adittionally, the HWID track linked to GOODFELLAS char also back-traces to NEVEOUS.

Here is a proof of ThomasShelby offering the stolen items via facebook to CY3BRINSANE.
PS: Fiery ROC was upgraded out of WarriorJR's stolen old ROC's.
021, 2, 19, 2, 19, 8, PatoPazar, UPGRADE2, 1, 77970845234550307, 330110151, 0, 0, 0, 0, 0, 1
2021, 2, 19, 2, 19, 8, PatoPazar, UPGRADE2, 1, 77970827752251262, 330110151, 0, 0, 0, 0, 0, 1
2021, 2, 19, 2, 19, 8, PatoPazar, UPGRADE2, 1, 77970828023248066, 330110151, 0, 0, 0, 0, 0, 1

image.png

 

There better be a good explanation behind this @ThomasFuckingShelby. Unfortunately the items were sold to real players so there is nothing I can do for WarriorJR's case. I invite everyone to charge back ThomasShelby if you've been buying stolen items from him from 1 AM server time to 9 AM server time (probably under-sold to make a quick $ flip). I advise you to be compassionate and return the items to WarriorJR.

Share this post


Link to post
Share on other sites

ThomasFuckingShelby ve ekibinin hırsız ve hacker oldukları doğrulandı. Server saatine göre saat 1:45’te eski clan üyeleri olan WarriorJR’ın hesabına giriş yaptılar. ( Hesap paylaşımını bir kenara bırakırsak ki bu paylaşım yapıldı, TBL ekibi şifresini biliyordu ve hesabına erişti.) Ekran görüntüsüne göre WarriorJR’ın hesabına girenin ThomasShelby’nin bilgisayarının HWID ve IP’sini görebilirsiniz.

unknown.png
Burada aynı IP’den girilen hesap ID’leri ve karakter adlarıyla ilişkili kendi karakterlerine giriş yaptığını görebilirsiniz. sitevin88 - ThomasFuckingShelby / Pavlushshenka asyjjmm - screamofhell,tacir,psicopata asyjm01 - mindlessrookie

 

unknown.png

Ayrıca, "tantana007" sahibinin hesap kimliğini "taklit etmeye" çalışan 2 hesap (tantana001 & tantana002) oluşturdular ve öğeleri bu şekilde taşıdılar. 
2021, 2, 19, 1, 52, 24, WarriorJR, 54KUZEN54, 16, 77970828023248066, 330110151, 1, 1, 1, 0, 0, 1 2021, 2, 19, 1, 52, 24, WarriorJR, 54KUZEN54, 15, 77970828023248066, 330110151, 1, 1, 1, 0, 0, 1 2021, 2, 19, 1, 52, 23, WarriorJR, 54KUZEN54, 16, 77970828091096902, 149131227, 1, 12535, 1, 0, 0, 1 
Örneğin server saatiyle 1:52’de 2x old roc ve hb+7 yi çaldınız. Sonrasında server saatiyle saat 3’te Cyb3r1ns4n3’e facebooktan mesaj attınız ve hb+7’yi 100 dolara banka havalesiyle satmaya çalıştınız. 
Basit olarak item WarriorJR’dan 54KUZEN54’e, 54KUZEN54’ten KARASULU54’ei KARASULU54’ten PATOPAZAR’a ondan ThomasShelby’e ve sonunda yan karakter GOODFELLAS’a geçti. (İroni)
Bunlara ek olarak GOODFELLAS’ın HWID’sine baktığımızda da NEVEOUS’un izi çıktı.

Işte bu da ThomasShelby’nin çaldığı itemı CYB3R1NS4N3’e facebooktan satmaya çalıştığının ispatı. 
NOT: Fiery roc warriorjr’nin çalınan rocları ile upgrade edilmiştir. 021, 2, 19, 2, 19, 8, PatoPazar, UPGRADE2, 1, 77970845234550307, 330110151, 0, 0, 0, 0, 0, 1 2021, 2, 19, 2, 19, 8, PatoPazar, UPGRADE2, 1, 77970827752251262, 330110151, 0, 0, 0, 0, 0, 1 2021, 2, 19, 2, 19, 8, PatoPazar, UPGRADE2, 1, 77970828023248066, 330110151, 0, 0, 0, 0, 0, 1

image.png

 

image.png

Bunun arkasında iyi bir açıklama olsa iyi olur@ThomasFuckingShelby. Malesef itemlar gerçek oyunculara satıldı, bu yüzden WarriorJR davası için yapabileceğim hiçbir şey yok.Herkesi ThomasShelby’den aldığı itemlara ilişkin chargeback yapmaya davet ediyorum ( server saatine göre saat 1 ile saat 9 arası )(muhtemelen çabuk nakite çevirmek için ederinin altınada satılmıştır.) Durumun böyle olmadığına dair kanıtlar içeren uygun bir iddianız yoksa, ekibiniz gelecekteki tüm sunucularımızdan kalıcı olarak banlanacaktır! Henüz gerçek para ÖDEMEDİYSENİZ, şefkatli olmanızı ve eşyaları WarriorJR'ye iade etmenizi tavsiye ederim.

 

 

Share this post


Link to post
Share on other sites

New evidence: The account in question has been sold by TBLx team, at this point, it's pretty obvious they've made a full scam out of this. Their time at KO-MYKO project is over. It's however still unsolved why so many users had access to the account (excluding tblx team) and who the actual owner of the account is.

image.png

image.png

 

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.
Sign in to follow this  

KO-MyKO Phoenix

By accessing or using KO-MYKO.COM (the "Site") and affiliated services (the "Services") that belongs to KO-MyKO, you (the "User") agree to comply with the terms and conditions governing the User's use of any areas of the Site and affiliated services as set forth below.

Quick server information

Require assistance?

If you have any sort of issues please send us a message on forum/facebook page or PM GM in-game

Login or PUS issues?

If you have issues logging into the game please CLICK HERE for informational guide.

If you have issues with using Power Up Store please CLICK HERE for informational guide.

×