Case: @oryventis

// case summary

Gold business account with multiple affiliates sharing drainers. May or may not be hacked.

// known accounts

• x @oryventis · ID 2078125463483072512 · Deleted or Suspended
• x @TonyDapro · ID 1029390812 · Active
  // handle history

  2026-08-29	├─	@TonyDapro● current
  2026-08-29	├─	@BlokyzOriginal
  2026-08-29	├─	@MoonwellFNDNSN
  2026-08-28	└─	@tonydapro

• x @borlsedapyyc · ID 841947457265229824 · Deleted or Suspended
• x @eleviqascanner · ID 2085108379673071616 · Active
• x @tweetfrommelloh · ID 1481559972785836034 · Active
  // handle history

  2026-09-14	├─	@tweetfrommelloh● current
  2026-08-29	├─	@BooredApeYCFNDN
  2026-08-28	└─	@tweetfrommelloh

• x @jamesmaofficial · ID 1031200553538220032 · Deleted or Suspended
• x @AbelMestre · ID 16343991 · Active
  // handle history

  2026-09-02	├─	@AbelMestre● current
  2026-09-01	└─	@pwnsecoqsystems

• x @elias_israel · ID 42653358 · Active
• x @tototatatu · ID 224726066 · Active

// indicators & evidence links

• domain https://tokenproofxbayc.com/claim/ ↗ · registrar: Web Commerce Communications Limited dba WebNic.cc · registered 2026-08-26

// evidence: screenshots

Tweet: https://x.com/jamesmaofficial/status/2094885397474222464?s=46

Tweet: https://x.com/tototatatu/status/2094964872660373975?s=46

Affiliation proof

Tweet: https://x.com/eleviqascanner/status/2092496113014014081?s=46

Tweet: https://x.com/tonydapro/status/2093130154025341093?s=46

Tweet: https://x.com/borlsedapyyc/status/2093082577095602549?s=46