Investigation
How accounts, aliases, and data points link together
Email → Account Connections
Usernames, platforms and real names tied to each email address
[email protected]
| Linked Usernames | EpicPlayz, epicplayz1, CosminGamer42, GooseBrother |
|---|---|
| Platforms | Wattpad, Trello, GitHub, Manacube, Minehut, MyHeritage, OpenSea |
| Real Name Found | Epic Playz / Alex C. |
[email protected]
| Linked Usernames | ilyCosmin, CSMN, CosminWho, codingweird |
|---|---|
| Platforms | GitHub, OGUsers, Doxbin, CutOut.pro, Adobe, Zoho, EpicNPC, PlayerUp, Epal.gg |
| Real Name Found | Cosmin CW |
Username Evolution Analysis
How the primary identity and its variants changed over time
| Period | Primary | Variants | Theme | |
|---|---|---|---|---|
| 2018-2019 | CosminPlayz | CosminPlays, EpicPlayz, CosminGamer42 | Gaming identity | |
| 2019-2020 | CosminDoesStuff | AlexDoesStuff | Content creator identity | |
| 2021 | Goose | GooseHax, JustGoose, Agent Goose, GooseBrother, GooseHasYourBitch | Goose era - edgy/aggressive | |
| 2022 | csmn.lol | cosmin.cc, c$mn | Domain-based identity | |
| 2023+ | csynholic | wirebandit, dynamic | Current identity |
IP Address Analysis
Geolocation, ISP and connection details from breach and forum data
| Primary Location | Timișoara, Timiș County, Romania (old — he has since immigrated to Spain) |
|---|---|
| Secondary Location | Reșița, Caraș-Severin County, Romania (old) |
| ISP | DIGI ROMANIA S.A. |
| Connection Type | Residential broadband |
| VPN Usage | Detected on OGUsers (185.120.147.29) |
IP Timeline
| Date | IP Address | Location | |
|---|---|---|---|
| 2019-01-24 | 86.124.142.164 | Timișoara | |
| 2019-05-20 | 79.118.12.209 | Reșița | |
| 2022-05-03 | 86.124.137.212 | Timișoara | |
| 2024-02-02 | 79.114.103.134 | Romania |
Breach Timeline
Known data breaches and the information exposed in each
| Date | Breach | Data Exposed | |
|---|---|---|---|
| 2019-01-24 | Gamster | Username, UUID, IP | |
| 2019-04-07 | Wattpad | Email, username, country, gender | |
| 2019 | Trello | Email, username, full name | |
| 2022-05-03 | OGUsers | Email, username, IPs, registration data | |
| 2024-02-02 | CutOut.pro | Email, name, IP | |
| 2025 | Doxbin | Email, username, UID |
Account Linking Evidence
Direct connections between accounts and the methods used to establish them
| From | To | Method | |
|---|---|---|---|
| [email protected] | GitHub: GooseBrother | Email lookup | |
| [email protected] | GitHub: ilyCosmin | Minerva API | |
| Reddit: CosminPlayz | Discord: CosminDoesStuff#2344 | Self-disclosed | |
| Steam: cosminplayz | Reddit: CosminPlayz | Self-disclosed | |
| ilyCosmin | doxbin.lol | GitHub Pages hosting |
Evidence Chains
Claims and the supporting evidence behind each conclusion
Full name is Cosmin Alexandru / Alex C. CONFIRMED
Birthday is November 17 (Scorpio) CONFIRMED
Located in Romania CONFIRMED
Core Identity
Full Name: "Cosmin Alexandru" proof verified
The subject's full name has been confirmed through multiple sources:
- Microsoft account: first_name: Cosmin, last_name: Alexandru, location: Country: RO (created Nov 22, 2021)
- Dropbox ([email protected]): name: Alex C.
- Reddit post (Oct 2019): "Hello, my name is Alex" + "I'm Romanian"
- Paysafecard request (Apr 2020): "Optional Name: Alex C."
- Wattpad leak: fullName: "Epic Playz", country RO
- Google account: name: Cosmin
- Cutout.Pro breach: name: "Cosmin CW"
Conclusion: Full name is Cosmin Alexandru. "Alex" is a nickname derived from "Alexandru" (his surname). He introduces himself as "Alex" casually.
Sources: Microsoft account data, Dropbox, Reddit posts, Database breaches
Birthday: November 17 proof verified
Birthday confirmed through Reddit comments:
- Nov 16, 2019 (r/toastme): "Happy birthday cutie! Its my birthday too today!" (posted day before)
- Nov 16, 2019 (r/teenagers): "It's my birthday aswell!" (anticipating next day)
- Nov 17, 2019 (r/toastme): "Happy birthday! Lel, its also my birthday today. Scorpio gang"
Zodiac sign: Scorpio (Oct 23 - Nov 21), confirmed by user.
Note: The Fotostrana accounts show birthday "01/01/1993" but this is clearly fake data (also shows "London" as location, contradicting all other Romania evidence).
Source: Reddit comments, November 2019
Additional Emails Found proof verified
Beyond the two primary emails, additional emails were mentioned on Reddit:
- [email protected] - mentioned in r/paysafecard (Apr 2020) with "Optional Name: Alex C."
- [email protected] - mentioned in r/itswooooshwith4os (May 2020)
Source: Reddit posts
ADHD Self-Report link inferred
In response to a video about someone with Tourette's, the user stated:
"I have adhd too"
Posted in r/youngpeopleyoutube on February 9, 2020.
Source: Reddit comment
Anxiety Mention link inferred
In r/skinwalkers discussing paranormal experiences:
"Don't worry that much, it may just have been an illusion, severe anxiety has done that to me before. I used to suspect my mirror reflection of moving a bit different than I do and stuff like this."
This suggests personal experience with anxiety-related perception issues.
Source: Reddit comment, March 2020
Location: Romania proof verified
Multiple data points confirm Romania as the location:
- Wattpad account registered with country code RO
- All 4 non-VPN IPs resolve to DIGI ROMANIA S.A
- Gamster breach shows IPs geolocating to Timișoara and Reșița (both in western Romania)
- GitHub profile (csynholic) shows timezone UTC +02:00 (Romania's timezone)
- Google Maps review in Moneasa, Romania (from email report data)
Sources: Wattpad breach, Gamster breach, GitHub profile, Google Maps
Reddit Account Evidence
Reddit Account: u/CosminPlayz proof verified
Activity period: November 2018 – April 2025 (6+ years)
2,738 comments across 227 posts, primarily in r/PUBGMobile, r/itswooooshwith4os, r/IdentityV, r/GiftofGames
Name Confirmation: "Alex" proof verified
In a r/GiftofGames request (October 15, 2019), the user explicitly states:
"Hello, my name is Alex, I don't have a credit card and don't think I will be able to get one, I come from a poor family and also dollars are worth a lot in my country so even 5 dollars is a lot here."
The post ends with: "Sorry for bad English, I'm Romanian."
This confirms:
- First name: Alex (likely short for Alexandru, common Romanian name)
- Nationality: Romanian (explicit statement)
- Economic background: Poor family, no credit card access
Source: r/GiftofGames post requesting PUBG, Oct 15, 2019
Steam Profile Linked in Reddit proof verified
Multiple Reddit posts and comments include the Steam profile link:
- Oct 15, 2019: "My Steam is https://steamcommunity.com/id/cosminplayz/"
- Oct 17, 2019: "My Steam profile is here: https://steamcommunity.com/id/CosminPlayz/"
- Nov 1, 2019: "My steam: https://steamcommunity.com/id/CosminPlayz"
This directly links the Reddit account to Steam ID 76561198928434600 (which uses the custom URL "cosminplayz").
Source: Multiple r/GiftofGames posts
Discord Tags Shared on Reddit proof verified
Two Discord tags were shared in Reddit posts/comments:
- July 19, 2019 (r/dankmemer): "My discord is CosminDoesStuff#2344"
- May 28, 2020 (r/itswooooshwith4os): "Add evil goose#9980 on discord"
Both tags match known Discord accounts in the OSINT data. The "evil goose" tag corresponds to the Steam "Agent Goose" era (Jun 2021).
Source: Reddit posts
Financial Situation Evidence link inferred
Multiple Reddit posts reveal financial difficulties:
- Oct 2019: "I come from a poor family... even 5 dollars is a lot here"
- Jul 2020: "My parents don't even know how the Internet works... I'm gonna try my hardest to get the debt removed. I'm going to sell my steam account if nothing works"
- Apr 2020: Trading Roblox items, mentioning owning four-letter usernames
This is consistent with the account marketplace activity on OGUsers, EpicNPC, and PlayerUp.
Source: r/GiftofGames, r/Assistance, r/itswooooshwith4os
Gaming Interests Timeline link inferred
Reddit activity shows gaming progression:
- 2018-2019: Heavy PUBG Mobile player (248 comments in r/PUBGMobile)
- 2019: Identity V player (122 comments)
- 2019: Dead by Daylight mentioned as only paid game owned
- 2020: Roblox trading activity
- 2021+: CS:GO/CS2 (evidenced by Steam VAC ban, HvH forum posts)
Source: Reddit comment history analysis
Steam Account Network
Main Steam Account steam direct
SteamID: 76561198928434600 (vanity: csynholic)
Current name: "cosmin" | Level: 60 | Games: 292
Bio: "Everything that lives is designed to end."
Website in profile: https://cosmin.baby
This account has used the following custom URLs over time, proving ownership of those aliases:
- cosminplayz, cosminxo, alexdoesstuff
- heyiamagentgoose, heyiamgoose, heycsmn
- cashcsmn, csynholic
Source: SteamID.uk history, Steam profile
Steam Account Links Proven steam verified
The Steam account csynholic2 (76561199124762991) directly links to the main account:
"main - https://steamcommunity.com/id/csynholic/"
This is displayed in the alias/bio section of the csynholic2 profile, explicitly confirming the same owner.
Additionally, csynholic2's friends list shows "cosmin" (the main account) as a friend at level 60.
Source: Steam profile csynholic2
CosminHvH Account steam direct
SteamID: 76561199277354838 (vanity: CosminHvH)
Persona: cosmin.cc | Status: 1 game ban (1634 days ago)
This account is the sole administrator of the Steam group "cosmin.cc" (founded May 14, 2022).
Friends list includes:
- id/cosmindotcc → cosmin.cc#4787
- id/cosmincc → cosmin.cc#4787
All three accounts use variations of "cosmin.cc" proving the same owner.
Source: Steam profiles, Steam group ccosmin
cosmincc Account steam inferred
SteamID: 76561199191347743 (vanity: cosmincc)
Persona: cosmin.cc#4787 | Status: 1 VAC ban (1577 days ago)
Alias block shows: "down me @ cosmin.cc" repeated multiple times.
The Discord tag format cosmin.cc#4787 matches known Discord tags from the OSINT data.
Source: Steam profile
GitHub Profile Connections
csynholic GitHub link direct
Display name: "Cosmin." | Website: https://cosmin.gg
Profile README contains badges linking to:
- Discord: discord.com/users/1551954147958456382
- Telegram: t.me/cosmin
Pinned repos include heistindustries/.github → connects to domain heist.lol
Timezone status shows UTC +02:00 → Romania
Source: https://github.com/csynholic
JLebron9 GitHub link inferred
Only repository: csyn.me (CSS)
This directly connects to the domain csyn.me in the projects list, and the "csyn" alias pattern.
Source: https://github.com/JLebron9
ilyCosmin GitHub link inferred
Display name: "CSMN ilyCosmin" | Bio: "I may be slow to respond."
Repos include Ethone-Selfbot (Discord self-bot) with 7 stars, 10 forks.
The "CSMN" in the display name matches the csmn alias pattern (csmn.lol, c$mn, etc.)
Source: https://github.com/ilycosmin
Hugging Face: csynholic link direct
Display name: "sigma" | Website: https://csyn.me
Linked GitHub: https://github.com/csynholic
Directly confirms the csynholic username across platforms.
Source: https://huggingface.co/csynholic
Linktree Evidence
csmnwho Linktree proof verified
Display name: "csmn.lol" | Handle: @csmnwho
Joined: August 2022
This Linktree page contains direct links to:
- Discord: discordapp.com/users/1036741898032914492
- Steam: steamcommunity.com/id/HeyCSMN (matches known custom URL)
- V3rmillion: v3rmillion.net/member.php?action=profile&uid=2861107
- NameMC: namemc.com/profile/qDecay
The Discord ID 1036741898032914492 matches the known Discord account "ccrf" (created Oct 31, 2022).
The Steam custom URL "HeyCSMN" matches the pattern of other known URLs (heycsmn, cashcsmn).
Source: https://linktr.ee/csmnwho
Domain Ownership Proof
Domain Connections proof verified
The following domains are proven to belong to the same person through cross-references:
| Domain | Proof | |
|---|---|---|
| cosmin.gg | Listed in GitHub csynholic profile, Medal.tv bio | |
| cosmin.baby | Listed in main Steam profile (76561198928434600) | |
| csyn.me | GitHub repo by JLebron9, Hugging Face profile link | |
| csmn.lol | Steam persona name (Aug-Dec 2022), Linktree display name | |
| cosmin.cc | Steam persona "Goose (cosmin.cc)" May 2022, Discord tags | |
| heist.lol | GitHub pinned repo "heistindustries/.github" |
Email Account Connections
Primary Email: [email protected] link verified
Found in the following breaches, proving account ownership:
- Wattpad: username "EpicPlayz", fullName "Epic Playz", country RO (Apr 2019)
- Trello: username "epicplayz1", fullName "Epic Playz"
- OpenSea, ManaCube, Minehut, MyHeritage
The "EpicPlayz" / "epicplayz1" username connects to:
- Reddit: u/EpicPlayz1
- Steam custom URL history: "epicplayz" used previously
- Trello: trello.com/u/epicplayz1
Sources: Multiple database breaches
Secondary Email: [email protected] link verified
Found in the following breaches:
- OGUsers: username "CosminWho", registered May 2022, reg IP 86.124.137.212 (DIGI Romania)
- Cutout.Pro: name "Cosmin CW", IP 79.114.103.134 (DIGI Romania), Feb 2024
- E-Pal: ID 245902, order Sep 2020
- Doxbin: username "CSMN", UID 273344
The "CosminWho" username on OGUsers matches the Linktree handle "csmnwho".
Sources: Multiple database breaches
Discord Account Timeline
Discord Account Evolution inferred
Known Discord tags show the naming pattern:
- CosminDoesStuff#2344
- cosmin.cc#4787 ← matches Steam persona
- evil goose#9980 ← matches Steam "Agent Goose" era
- c$sm#9999, c$mn#7777 ← matches Steam "c$mn" persona
The Linktree directly links Discord ID 1036741898032914492, which corresponds to the "ccrf" account (created Jul 26, 2022).
Database Leak Connections
Gamster Minecraft Breach proof verified
Username: CosminGamer42 (matches known alias)
IPs logged:
- 86.124.142.164 → Timișoara, Romania (Jan 2019, multiple sessions)
- 79.118.12.209 → Reșița, Romania (May 2019, multiple sessions)
Minecraft UUID: dbe2f607-746e-3188-8689-496d51582b71
This breach connects the "CosminGamer42" alias to the Romanian IPs and provides the earliest dated activity (Jan 2019).
Source: GAMSTER_ORG_3M_MINECRAFT_2019
MyHeritage Breach proof verified
Credential: [email protected]:CosminGamer42
This proves "CosminGamer42" was used as a password, connecting it to the primary email and confirming it as a personal identifier.
Source: MyHeritage breach
Location Evidence Summary
Geographic Data Points proof verified
| Source | Location | Date | |
|---|---|---|---|
| Gamster IP 86.124.142.164 | Timișoara, Timiș County | Jan 2019 | |
| Gamster IP 79.118.12.209 | Reșița, Caraș-Severin County | May 2019 | |
| Google Maps review | Moneasa, Romania | Apr 2022 | |
| Wattpad account | Country: RO (Romania) | Apr 2019 | |
| GitHub timezone | UTC +02:00 (Romania) | Current |
All locations are in western Romania (Timișoara, Reșița, and Moneasa are within ~150km of each other).
Devices Used
Known Devices link inferred
Devices mentioned in Reddit comments:
- Phone (2018): Xiaomi Redmi 4A - "i can't play PUBG Mobile anymore on my redmi 4a"
- Tablet: "PUBG used to work really great on my tablet"
- Phone (2019): Huawei Mate 20 Pro - "would give away my Mate 20 Pro and keep my Gaming PC"
- Phone (2019): Huawei P30 Pro - "Had an Huawei P30 Pro"
- Gaming PC: Intel i7-7700K + GTX 1060 3GB + 8GB RAM - mentioned in RDR2 troubleshooting
- Phone (2020): Samsung Note 10+ - "I'm still over here with my note 10+"
PC specs indicate a mid-range gaming setup, consistent with statements about having a "gaming pc" but being unable to afford games.
Source: Reddit comments across r/PUBGMobile, r/phones, r/RDR2, r/GiftofGames
Discord Servers Owned/Moderated
Discord Server Invites link verified
Discord servers promoted on Reddit:
- discord.gg/NxcFUta - r/itswooooshwith4os official server (Jul 2020, heavily promoted)
- discord.gg/mZKS55G - personal server (May 2020)
- discord.gg/38kka5x - "My server is open" (Jun 2020)
Also gave away Nitro gift: discord.gift/Djr9kCT9dFCJGZfu
Source: Reddit posts in r/itswooooshwith4os
Account Hacking Incident (July 2020) proof verified
In July 2020, the user reported being hacked, losing access to multiple accounts:
"A dude hacked my account, destroyed the sub, stole my PayPal, stole my reputation... I got hacked by this guy, lost my mail, paypal and discord."
Consequences mentioned:
- Lost control of r/itswooooshwith4os subreddit temporarily
- PayPal balance went negative
- Lost Discord account with 2 months of gifted Nitro
- Lost email access (Google recovery requested)
- Considered selling Steam account to recover losses
This explains why multiple Discord account IDs exist - new accounts created after compromises.
Source: Reddit posts, July 27-28, 2020
Account Alias Evolution
Steam URL/Persona Timeline
| Period | Custom URL | Persona Name | |
|---|---|---|---|
| 2019 | cosminplayz | Unknown (earliest) | |
| Jun 2021 | — | 𝐆𝐨𝐨𝐬𝐞, GooseHasYourBitch, Agent Goose | |
| Nov-Dec 2021 | heyiamagentgoose, heyiamgoose | GooseHax, JustGoose | banditcamp.com | |
| Apr-May 2022 | heycsmn, cashcsmn | JustGoose, Goose (cosmin.cc) | |
| Aug-Dec 2022 | csynholic | csmn.lol | |
| Jan 2023 | — | c$mn | |
| Oct 2023 | — | cosminhellokittyprince | |
| 2024-2026 | csynholic | cosmin |
The evolution shows phases: Cosmin era (2019) → Goose era (2021) → CSMN/Csyn era (2022+)
Cross-Platform Username Patterns
The same username patterns appear across platforms:
| Pattern | Platforms Found | |
|---|---|---|
| cosminplayz / CosminPlayz | Reddit, Steam, Duolingo, Scratch, NameMC | |
| epicplayz / epicplayz1 | Reddit, Wattpad, Trello, Steam | |
| alexdoesstuff | Steam, Chess.com | |
| csynholic | Steam, GitHub, YouTube, Pinterest, Snapchat, Soundcloud, Last.fm, Twitch, Medal.tv, HuggingFace | |
| Goose variants | Steam (multiple), Dropbox (cosminplayz14), Discord (evil goose, Goosebrother), GitHub (goosebrother) | |
| codingweird | Email, Medium, EpicNPC, PlayerUp | |
| wirebandit | Discord, BeamMonsters | |
| SaltyChipz | Smule, Steam | |
| GooseJuice | Warner Bros Games | |
| CosminGamer42 | Gamster, ManaCube (Minecraft), MyHeritage (as password) |
Discord Behavior (November 2026)
Group Chat Analysis proof concerning
Discord DM export titled "cosmin & the acquaintances" (channel 1566646197374951566) from November 2, 2026 shows:
- User o_vxvxvx (ID: 1388862290622812270), going by "c" - identified as Cosmin creating the group and adding users
- References to "cosmin" by other participants confirming identity (e.g. "Wsp cosmin", "cosminplayz sclavule", "cosmin wha u addin me to bro")
- Group described by Cosmin as "nazi gc" when asked why people were added
- Repeated jokes about "pedophiles", "minors", "grooming", and "cp" (which Cosmin clarified as "slang for cheese pizza")
- Discussion involving minors: "She's 14", "Im a minor", "any minors for me tho"
- Cosmin posted "# INTRODUCING OUR FIRST FEMBOY:" followed by "# AGE: 16." - explicitly introducing a minor in sexualized context
- Cosmin wrote "# GROOMABLE." about someone
- Cosmin wrote "he's the pedophile of honor" when adding someone back
- Another user wrote about Cosmin: "dude alwyas on some groomin gshit"
- Romanian language used confirming nationality ("sclavule", "te violez", "nu", "Iti bag pulan cur cosmine")
Other participants reacted with skull emojis treating these as "edgy" jokes, but patterns show repeated concerning behavior around minors.
Source: Discord DM export "Direct Messages - cosmin & the acquaintances [1566646197374951566].html"
Discord Account Linked
The Discord user o_vxvxvx (ID: 1388862290622812270) is confirmed to be Cosmin based on:
- Group chat named after "cosmin"
- Multiple users addressing this person as "cosmin" directly
- Person responds to questions about "cosmin" with first-person answers
- Uses Romanian language, consistent with all other evidence
- Pattern matches known alias style (abbreviated/stylized names like "csynholic", "csmn.lol")
This links to the database breach entry: Discord ID 1388862290622812270 (csmn, @o_vxvxvx)
Mental Health (Self-Reported)
ADHD proof verified
Self-reported in Reddit comment:
"I have adhd too"
Source: Reddit comment
Depression proof verified
From Reddit comments discussing pet death:
"I believe that they should too. I had severe depression after he died and massive breakdowns as I said in the other comment. Maybe reincarnation for animals is real."
- Dog died (mentioned having epilepsy before death)
- "My dog sadly died. I really miss him. Its been a few months..."
- "I had severe depression after he died and massive breakdowns"
- "I know how you feel and now I got a cat that acts exactly like a dog"
- References to "dead pets" in harassment context
Source: Reddit comments, r/dogs discussions, June 2019
Subreddits Created/Moderated
Subreddits Founded
| Subreddit | Date Created | Status | |
|---|---|---|---|
| r/itswooooshwith4os | Dec 2018 | Active (10k+ members) | |
| r/FoundTheCapslockUser | Jan 2019 | Active | |
| r/CosminPlayz | May 2019 | Personal subreddit | |
| r/skynuggets | Mar 2019 | Inactive | |
| r/ihaveyoutube | May 2019 | Inactive | |
| r/nerdsriseup | Sep 2019 | Inactive | |
| r/cakedaybros | Oct 2019 | Inactive |
r/itswooooshwith4os was the most successful, reaching 10k+ subscribers before being compromised during the July 2020 hack incident.
Family Structure
Known Family References inferred
- Brother: "My brother made a game and wanted to post this ad for it but I stopped him." (April 2019, r/shittymobilegameads)
- Dog: Died of natural causes (epilepsy), had massive emotional impact
- Cat: Got after dog died, "acts exactly like a dog and knows all the places my dog liked"
Source: Reddit posts
Account Trading/Selling Activity
Trading/Selling History
Evidence of account selling and trading:
- Dec 2019: Selling NordVPN accounts for $2 each (PayPal/Paysafecard/Bitcoin) on r/redditbay
- Apr 2020: "WT anything for a roblox 3 letter username" on r/TRADE
- Apr 2020: Mentioned selling Epic Games account with 60 games
- Apr 2020: Looking to buy Animal Crossing on G2A
- Jul 2020: Considered selling Steam account to recover losses after being hacked
- Mentioned using Paysafecard for transactions (no credit card access)
Reasoning: Unable to buy games due to lack of credit card, used Paysafecard from local stores.
Source: Reddit posts on r/redditbay, r/TRADE, r/g2a
Combined Timeline
Key events across all data sources, in chronological order of first appearance
| Date | Event | Type | |
|---|---|---|---|
| January 2019 | Gamster Minecraft account "CosminGamer42" active from Timișoara, Romania | leak | |
| April 2019 | Wattpad account "EpicPlayz" created with [email protected] (Romania) | leak | |
| May 2019 | Gamster login from Reșița, Romania; Minehut breach includes [email protected] | leak | |
| June 2018 | Earliest Discord account "Goosebrother" (456226577798135808) | discord | |
| 2020 | Multiple Discord accounts created: meowblehmeowbleh, itsmeortheps4, lovermoid | discord | |
| September 2020 | E-Pal order with [email protected] (ID 245902) | leak | |
| June 2021 | Steam persona "Agent Goose" (first seen on main account) | steam | |
| November 2021 | Steam persona "GooseHax" / "GooseHax | banditcamp.com" | steam | |
| April 2022 | Google Maps review in Moneasa, Romania | general | |
| May 2022 | Steam persona "Goose (cosmin.cc)" - domain ownership; Steam group "cosmin.cc" founded (May 14) | steam | |
| May 2022 | OGUsers account "CosminWho" registered with [email protected] | leak | |
| August 2022 | Linktree @csmnwho created with display name "csmn.lol" | general | |
| August-December 2022 | Steam persona "csmn.lol" active | steam | |
| October 2022 | Discord account "ccrf" (1036741898032914492) linked in Linktree | discord | |
| January 2023 | Steam persona "c$mn" | steam | |
| October 2023 | Steam persona "cosminhellokittyprince" | steam | |
| February 2024 | Cutout.Pro breach: "Cosmin CW" with [email protected], IP from Romania | leak | |
| 2024-2026 | Steam persona reverts to "cosmin" / "cosmin²" | steam | |
| 2025-2026 | Multiple new Discord accounts: o_vxvxvx, moidfinalboss, cosmincosmincosminsahur, ducksbean, phenomenalblackwoman | discord |
This analysis page connects the data from the OSINT report. All links are derived from publicly accessible profiles and leaked databases. Generated November 2026.