Preuves
What we can show, and where to check it
Start with the first few. Each one says where to look, so you can check it yourself.
Start here
The report says the games shown to buyers were faked
The report alleges the subject's games were faked, and cites a log from an infected machine as the basis. The subject's side disputes this, says the log was fake, and says the games are real.
Where to check: Document (4), p.74-79
A game list pulled from the service's API showed no games in August 2026
The report says a game list taken from Exoliner's own API on 7 August 2026 showed no games. It also says a former buyer, who had said the service had three games, would no longer say so. The documents do not include a response to this claim.
Where to check: Responding document, games section (7 August 2026)
The report questions the service's statement on NSFW scripts
The report says the service's position that it never allowed NSFW scripts does not match what it allowed, and questions how well its script review worked.
Where to check: Document (4), p.144-151
The report states the service had a data breach in mid-2025
The report states the subject had a data breach in mid-2025 that exposed user emails, usernames, IP addresses and Discord IDs. It also states that a reseller breach leaked the email addresses of customers who bought through that reseller. No leaked record is reproduced here.
Where to check: Responding document, "Data Breach" section; Document (4), p.181
Conduct of the service's owner
The report sets out allegations about the owner's conduct toward users who were minors at the time, with the messages and accounts it relies on reproduced in full. These have been reported to the platforms involved and referred to the authorities. We are not summarising them here.
Where to check: p.201-215
Conduct of the owner: a DDoS service and attacks on sites
The report sets out allegations about the owner's involvement with a DDoS service and with attacks on other sites, with the messages and screenshots it relies on. We are not summarising them here.
Where to check: Document (4), p.9, p.46-62, p.169
Conduct of the owner: a remote access tool
The report sets out allegations about the owner's involvement with a remote access tool used against users, with the material it relies on. We are not summarising them here.
Where to check: Document (4), p.68, p.76, p.142
Screenshots
DownTown bot attack log, 26 December 2024, showing an attack sent by the owner's account. 
DownTown bot logs, 15 January 2025, showing attacks sent by the owner's account, including one against an Exoliner API address. 
Discord messages from the owner's account, 4 February 2025, mentioning a botnet and access to one. 
Discord messages from the owner's account, 7 February 2025, referring to taking sites down with the DownTown bot. 
Discord messages, 14 February 2025, between the owner and a second participant, discussing a DDoS against a site and a botnet being seized by authorities. 
Discord search for 'ddos' filtered to the owner's account, 27 February 2025, showing a link to a video titled as a botnet and C2 tool. 
Discord messages from the owner, 27 February 2025, describing a botnet video posted in the server in return for an offer from the botnet operator. 
DownTown bot attack logs, 1 October 2025, each sent by the owner's account against luna.remium.wtf. The report identifies remium as a competing serverside, so this is an attack on a competitor. 
The owner's own Discord announcement, 23 June 2025, warning users that the Aureus email was not sent by Aureus. Cropped to the warning text.
Videos
Un acheteur montre ce que le service faisait tourner, partie un
Un client payant du service en question passe en revue les jeux qu'il faisait tourner. Le rapport expose le récit de ce même client, qui dit avoir été ajouté à un chat de groupe et poussé auparavant à faire fuiter nos jeux.
Le même acheteur montre la conversation, partie deux
Le même client montre les messages de ce chat de groupe. Selon son récit, l'affirmation selon laquelle nos clients seraient venus se plaindre auprès d'eux était inventée, et le groupe avait été constitué pour lui soutirer du contenu.