I managed to trace a few more dragons back to their original owners. Ophrys (#72554) was bred with Amaranth (#37617), Amaranth is Stalkerkun #9496's progen. Stalkerkun's icon is a Snapper with the ID #444305 and she happens to be in Danroo's lair. Stalkerkun is locked just like Danroo and AnimeTheia.
Rose (#272224), Rufioh (#113992), Spades (#458875), Grimdarce (#458876), Kanaya (#458877), Ithmuse (#45594), Lucia (#55747) all come from windMorrower #3519 who happens to be locked just like the other accounts. Spades was bred with Arienne (#12323) who happens to be windMorrower's progen. The fodder mirrors in windMorrower's lair are the offspring of Lucia and Grimdarce. Rose was bred with Aranea (#6683989). I'm a little shocked Danroo didn't take the Luminous Halo that windMorrower's avatar dragon still has or the Obsidian/Eldritch/Peridot G1 Fae
Heulyn (#73920), Battlecry (#416623), Mayonaka (#651934) and Thor (#9253) all come from AnimeTheia as well. Thor was bred with AnimeTheia's progen mirror and the other mentioned dragons are their offspring.
I'm assuming all of these accounts were hacked. It's hilarious how Danroo put Thor in their CS sig considering he can be traced back to the original owner very easily and that they didn't even bother changing Stalkerkun's avatar after taking the Snapper. If you are hacking accounts at least put some effort into hiding your traces lmao, this is just hilarious and sad at the same time. So many oldies were locked because of this goofball.
I got bored and since i've got nothing better to do I traced even more dragons back to their original owner. Danroo added CamelDejaVu #5808 as a friend but that account isn't on their friend list anymore. I checked the avatar dragon of that account and of course that Snapper, who's named Aomame (#131941), is on Danroo's account. The dragon she was most recently bred with is named Tengo (#25853) and he is also on Danroo's account. CamelDejaVu's activity says they hatched two Nocturne females on December 4 and by using dragon search I managed to find Desertwing (#106674275) and Mia (#106674276), both are female Earth Nocturnes who got exalted into Plague and both of their parents, Kiryu (#4233189) and Agatsuma (#12221769) are on Danroo's account. I also managed to find the two male Guardians the account hatched on November 20 and the two female Skydancers hatched on the same day. The Guardians are Mirach (#106423263) and Marylou (#106423262), their parents are Bolin (#4972806) and Polqua (#4972806), both are on Danroo's account. Hibiya (#106423256) and Njada (#106423257) are the Skydancers, the parents are Numata (#4082809) and Rokuchome (#1539739). Based on the offspring lists, Oil (#4352180), Aviana (#4301555) Pandel (#4383461), Korax (#4395566), Nyissas (#4260406), Maddy (#4145049), Tenjinbashi (#1587208) and Kyary (#1598966) all came from the same account too. Tenjinbashi and Kyary have 2 kids whose IDs are between the Guardians and the Skydancers, I guess I missed them when I was going through CamelDejaVu's activity and I don't feel like rechecking rn. That account is locked just like the rest btw.
Hacking isn't that easy, unless the dude is hacking email accounts as well. More likely he started coldcalling cross site to try to buy stuff. If I quit FR years ago and got offered cash for my account and wasn't terribly attached, I'd do it.
'Hacking' isn't really required. Multiple companies including some email providers have had database leaks and directly connected to petsims: Neopets
A major tactic for RMT is to look specifically at the Neopets database and either:
1. Try the password from the DB with the email from the DB. If this works, they'll send password/account requests to various websites.
2. Recreating known emails (from the DBs) that are now deleted (yahoo, outlook, etc used delete after enough inactivity) and sending password/account requests.
A lot of people use the same username and/or password over multiple websites especially petsims. Why it's important to use different passwords between accounts at the very least.
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
![[community profile]](https://www.dreamwidth.org/img/silk/identity/community.png){kind=small}
Re: Danroo (formerly Kutnkill) #35427
(Anonymous) 2025-12-05 05:36 am (UTC)(link)Rose (#272224), Rufioh (#113992), Spades (#458875), Grimdarce (#458876), Kanaya (#458877), Ithmuse (#45594), Lucia (#55747) all come from windMorrower #3519 who happens to be locked just like the other accounts. Spades was bred with Arienne (#12323) who happens to be windMorrower's progen. The fodder mirrors in windMorrower's lair are the offspring of Lucia and Grimdarce. Rose was bred with Aranea (#6683989). I'm a little shocked Danroo didn't take the Luminous Halo that windMorrower's avatar dragon still has or the Obsidian/Eldritch/Peridot G1 Fae
Heulyn (#73920), Battlecry (#416623), Mayonaka (#651934) and Thor (#9253) all come from AnimeTheia as well. Thor was bred with AnimeTheia's progen mirror and the other mentioned dragons are their offspring.
I'm assuming all of these accounts were hacked. It's hilarious how Danroo put Thor in their CS sig considering he can be traced back to the original owner very easily and that they didn't even bother changing Stalkerkun's avatar after taking the Snapper. If you are hacking accounts at least put some effort into hiding your traces lmao, this is just hilarious and sad at the same time. So many oldies were locked because of this goofball.
Re: Danroo (formerly Kutnkill) #35427
(Anonymous) 2025-12-05 07:24 am (UTC)(link)Based on the offspring lists, Oil (#4352180), Aviana (#4301555) Pandel (#4383461), Korax (#4395566), Nyissas (#4260406), Maddy (#4145049), Tenjinbashi (#1587208) and Kyary (#1598966) all came from the same account too. Tenjinbashi and Kyary have 2 kids whose IDs are between the Guardians and the Skydancers, I guess I missed them when I was going through CamelDejaVu's activity and I don't feel like rechecking rn. That account is locked just like the rest btw.
Re: Danroo (formerly Kutnkill) #35427
(Anonymous) 2025-12-06 01:05 am (UTC)(link)Re: Danroo (formerly Kutnkill) #35427
(Anonymous) 2025-12-05 03:34 pm (UTC)(link)Re: Danroo (formerly Kutnkill) #35427
(Anonymous) 2025-12-05 05:43 pm (UTC)(link)A major tactic for RMT is to look specifically at the Neopets database and either:
1. Try the password from the DB with the email from the DB. If this works, they'll send password/account requests to various websites.
2. Recreating known emails (from the DBs) that are now deleted (yahoo, outlook, etc used delete after enough inactivity) and sending password/account requests.
A lot of people use the same username and/or password over multiple websites especially petsims. Why it's important to use different passwords between accounts at the very least.