Connected evidence · updated 21 July 2026

One campaign, connected across people and platforms

Former collaborators and competing services supplied accusations, aliases multiplied their apparent support, and platform decisions kept the material visible after repeated reports and formal notices. The preserved records connect those stages.

Connection summary

The account, code, payment, ownership, message and publication records connect the people behind the campaign to the aliases, competing services, review accounts, platform decisions and business damage that followed.

From Connecting record To Why the connection matters
Mathew Trojanowski Alias register, TeamViewer reply, matching Reddit promotions, account history and Trustpilot notifications Kamikaze / Kamy / Brief_Ordinary1438 / Kyle / Killfeed review / Anthony Mathew used the linked identities and review accounts to present repeated versions of the same attack as independent voices and customers.
Mason Stockton Whitelist.gg purchase email, Links profile, Havasu review, Pups messages and AltDetector transfer Links / Havasu / Pups / Whitelist.gg / DayZ++ / AltDetector The reviewer was a competing-service operator who promoted alternatives, approached Legion users and transferred the successor account-index service to Kamikaze.
Purple Hats / Bypass attack Feather screenshots, “with love – The Collective” server mirror and Mathew’s server ownership capture The Collective / Mathew’s operation The same branding and server identity joins the DDoS brag, mirror, Discord disruption and customer-facing interference into one operational chain.
Walker / Cooper publications Meta report records and matching text in Google results, snippets and generated answers Meta → Google Meta’s refusal preserved the source; Google converted it into neutral-looking search and AI output, multiplying reach and credibility.
Trustpilot review accounts 608 report/email records, 168 case/thread references and 87 keep-online or reinstatement decisions Rating damage → forced profile → false warning → deletion refusal Trustpilot did not merely host the attack. It repeatedly republished it, authored its own false warning, attempted commercial extortion through threatened business harm, and kept Ray Smith online because the intentionally ambiguous review did not need to name Legion. It ignored the repeated GDPR and local-law deletion demand after notice.
Platform notice record Meta, Reddit, Discord, Google and Trustpilot report histories plus regulator acknowledgements Continuing publication and business loss Every service had direct notice. Their refusals, routing loops, restorations, search synthesis and punishment of the target kept the same campaign operating.

Accounts and identities

Aliases and account histories allowed the same accusations to appear as separate voices while obscuring commercial relationships.

Distinct identities

Anthony Gordon Brodie is Soul. Anthony Buchanan and Edward Anthony Griggs Jr are separate people. Jack Jackelope is Joel Walker's alias, while Project Jackalope is the related server and service brand. The connections below use the recorded usernames, platform IDs, purchase records and publication histories for each person and account.

Account and publication trail

Mathew Trojanowski across Kamikaze, Kamy, Skynet and the review accounts

Mathew TrojanowskiKamikaze / Kami / Kamy / SkynetBrief_Ordinary1438 / KyleKillfeed review / Anthony presentation

Mathew Trojanowski used Kamikaze / Kami / Kamy, Skynet, Brief_Ordinary1438, Kyle, “Killfeed review” and Anthony across the campaign. The TeamViewer review on the “Killfeed review” profile received an official reply addressed to Mathew. Brief_Ordinary1438 published the same Anon PVP promotional copy preserved under Trojanowski's name. The July Anthony, “Killfeed review” and Kyle notices repeated the same complaint language in the same release sequence.

Those presentations were not independent customers. They were linked accounts and identities used to repeat the same accusations, inflate their apparent support and create multiple adverse review and notification records against Legion.

Alias authority and matching publication trail

Brief_Ordinary1438 and Anon PVP

Mathew / Kamikaze historyBrief_Ordinary1438Anon PVP promotion

Brief_Ordinary1438 is Mathew Trojanowski's Reddit account. It promoted Anon PVP using the same promotional wording published under Mathew C Trojanowski's name, tying the Reddit publication directly to his competing-service activity.

Documented conduct

Obviously_Mario's staged setup

Working beta token“Bah Bah Black Sheep”empty-server role changes

Discord account @im_obviously_mario, user ID 443911027764232212, configured the killfeed successfully during beta, waited about a day, then replaced the working token with BahBahBlackSheep while Brodie was watching the console. After the bot was removed, the account invited it back to a newly made server containing only two people and the Legion and Multi Tool bots. Its explanation changed from naming the token for “my kid” to saying the server was for “my mom and I.” It did not present itself as a child. The same Discord ID is preserved in earlier Aggro PvP activity, contradicting the attempt to present the interaction as detached from Soul's community history.

Staged complaint sequence

Mathew Trojanowski used Discord ID 443911027764232212 to complete a working beta setup, deliberately replace the valid token, repeatedly alter the bot and roles in a nearly empty server, and later retell the staged failure across platforms. The Discord account is separate from Brief_Ordinary1438, his Reddit account used to promote Anon PVP.

Documented account link

Anthony Buchanan, OzzieHousos and UntoldTruthy

Anthony Buchanan is not Anthony Gordon Brodie. Buchanan used OzzieHousos and UntoldTruthy. The UntoldTruthy account appeared inside the AltDetector discussion, and the later untoldtruth4 Discord profile used the display name “Anthony Broadie Is Pedo” while publishing the accusation against Brodie. Buchanan's competitor review followed immediately afterwards. The later DayZBoosterZ.com purchase trail separately identifies t.showler in Ronald Lund's transaction and keeps each identity distinct.

Documented relationship

Joel Walker, Jack Jackelope and Adam Cooper

Joel WalkerMake DayZ Great Again KillfeedAdam Cooper post context

Jack Jackelope is Joel Walker's alias. Walker operates Make DayZ Great Again Killfeed, and Project Jackalope is the related brand. Adam Cooper had never been a Legion customer when he published his attack inside Walker's group. Cooper's non-customer post amplified Walker's campaign through Walker's own publication channel.

Publication connection

Cooper had never subscribed and posted inside Walker's group in the surrounding campaign context. Cooper’s non-customer post functioned as third-party amplification inside Walker’s own group and publication chain.

Identity and ownership trail

Mason Stockton across Links, Havasu, Pups, Whitelist.gg and AltDetector

Mason StocktonHavasu / Links / LinksypooPupsWhitelist.ggAltDetector transfer

The DayZ++ profile shows Links / Linksypoo saying “I run whitelist.gg” while holding the DayZ++ Partner role. A Whitelist.gg purchase notification then ties the Havasu account to masonstockton@outlook.com. The Havasu Trustpilot review promoted DayZ++, Laws and Hulks while attacking Legion and was published while Stockton operated the competing Whitelist.gg service. Later records describe AltDetector as the successor to Whitelist.gg and show Links announcing that Kamikaze would take over AltDetector.

Commercial and working relationships

The central accounts were not commercially detached observers. They worked together around DayZBoosterZ, Skynet, DayZ++ and other competing killfeed services.

Documented shared history

The DayZBoosterZ collaboration cluster

Mathew Trojanowski+ Edward Griggs+ Mason Stockton+ Anthony Buchanan+ Ronald Lund DayZBoosterZ

The record places Trojanowski, Griggs, Stockton, Buchanan and Lund as staff, partners or collaborators around DayZBoosterZ at one point. Griggs also acted as Skynet staff; Buchanan operated in the DayZBoosterZ competitor chain.

Coordinated working history

The records establish shared access, staff roles and commercial collaboration. Individual publications and attacks are linked separately by their own dated evidence.

Documented commercial link

Mason Stockton: Whitelist.gg, Pups, DayZ++ and customer steering

Stockton operated Whitelist.gg while holding a DayZ++ Partner role. His Havasu review attacked Legion and expressly promoted DayZ++ and other alternatives. The Pups account was then used to approach Legion supporters or customers and steer them toward DayZ++. The same identity chain reaches the later AltDetector transfer to Kamikaze.

Documented competitor publication

Joel Walker: group administrator, competing killfeed operator and reviewer

Joel Walker / Jack JackelopeMake DayZ Great Again groupMDZGA KillfeedLegion attacks and one-star reviews

Walker used the Facebook group he administered to attack Legion while promoting Make DayZ Great Again Killfeed, his competing product. In April 2026 he published a one-star Trustpilot review against Legion and used his group to post or bump one-star reviews against Legion, DayZ++, DayZ Multi Tool and Jinie's bot. Trustpilot later confirmed that Walker's review had gone offline through either Walker's deletion or removal in another investigation. The attack was published from a direct competitor using his own group to damage rival services.

From association to operational interference

The June and July records connect the DDoS brags, copied server, The Collective branding, Discord intrusion, mass-reporting, customer-facing client failures and the account created with Brodie's child's name to the same attack operation.

Supported attribution

Purple Hats / Bypass → Feather's screenshots → The Collective → Mathew

Purple Hats / Bypass bragFeather shows screenshotsmirror: “with love - The Collective”Mathew's current server

After Feather showed messages bragging about DDoS activity against Brodie's website and game server, the displayed attack material included a mirror of Brodie's DayZ server carrying the description “with love - The Collective.” Separate captures identify The Collective as Mathew Trojanowski's current server. The same June sequence records partner-name spam, entry into Legion's Discord, disruptive content, mass-report encouragement and a customer reporting client problems.

Connected operation

The Collective branding, copied server, timing and server ownership tie the attack activity to Mathew Trojanowski's operation. The Bypass display name remains separate, but its DDoS brag and attack material sit inside the same Collective-linked disruption chain.

Direct service record and source-stated attribution

R BRODIE ban → planerylan_s join → Robert Brooks / KidKreeperBuddy profile trail

The 16 July composite directly shows Legion's ban add result for player R BRODIE, service ID 15770527. In the same preserved conversation, Brodie records that account planerylan_s joined after the ban, that its profile displayed the name Robert Brooks, that associated profiles used names including KidKreeperBuddy, and that the shared-server route ran through PVP Island and Anarchy++.

The service ID, the immediate appearance of planerylan_s after the R BRODIE ban, the displayed Robert Brooks and KidKreeperBuddy profile names, and the shared-server route through PVP Island, Anarchy++, Purple Hats and The Collective connect the child-name account chain to Mathew Trojanowski's operation.

Attribution limit: the 3 August captures independently corroborate the gamertag, visible Robert Brooks profile presentation and Legion activity. They do not, by themselves, identify who controlled the Xbox account. The ownership attribution remains an inference/source-stated claim based on the wider association chain rather than a fact established by the gamertag alone.

The platform publication chain

The original posts became search results, AI answers, restored reviews and platform-authored warnings. Repeated notices did not stop that distribution.

Documented distribution

Facebook source → Meta rejection → Google result and AI

Walker / Cooper postsMeta rejects reportsGoogle snippet / AI

Meta's rapid report rejections left accusations in public groups used by server owners. Google then quoted or summarised the same material in results, mismatched snippets, AI Mode and AI Overview. The current Google scorecard records 220 counted handling entries, 71 evidence rows, 71 ticket references, 77 reported or reviewed URL entries and 19 unique ticket/request IDs. Brodie repeatedly supplied the source posts, identity evidence, business records, notices and proof that earlier responses had not fixed the results.

Google ticket/request IDs: 0-4685000039839, 0-7685000040341, 0-9681000041045, 1-3859000040385, 1-6651000040596, 2-7896000040770, 2-9213000040525, 4-4314000040578, 4-6120000040834, 5-3327000041185, 5-8357000041583, 6-6692000040714, 6-7168000040663, 7-1475000041317, 7-4274000039113, 7-6851000041029, 8-0020000041441, 8-8385000040209 and 9-5176000040649.

Thirty-one documented tickets

Discord was notified, IP-banned Stockton, then lost the visible report history

The January data export preserves 30 Discord ticket IDs; the later complaint 66248829 raises the documented total to 31. Ticket 30339510, opened on 23 November 2022, reported Mason Stockton's address posting, alternate accounts and an IP-pulling server. Discord thanked Brodie, opened an investigation and encouraged more user IDs, message links, server IDs and screenshots. Discord IP-banned Stockton, but the original report was later scrubbed from Brodie's account and survived only in the data export. Later punishments were applied to the reporting account while the hostile conduct continued.

Discord tickets: 17624761, 18064826, 20701184, 30339510, 30414871, 39629296, 39648357, 39683754, 42296956, 42297180, 42297244, 47695614, 56784327, 58942905, 61451054, 61451498, 61451749, 61465755, 61691061, 61770202, 61771050, 61771054, 61942766, 61943102, 61943467, 61973127, 61977122, 62150638, 62421836 and 62422711. The June coordinated client and mass-report complaint is ticket 66248829.

Documented moderation cycle

Mathew-linked review presentations → restorations → rating damage → Trustpilot warning

Mathew Trojanowski used Kamy, Kyle, Killfeed review and Anthony alongside publications under his own name. The TeamViewer reply on the “Killfeed review” profile addresses the reviewer as Mathew, while the July Anthony, “Killfeed review” and Kyle notices repeat closely matched wording in the same release sequence. Consumer and Hooded_saw were published in the same timing and subject cluster, but remain separate unidentified accounts.

Trustpilot repeatedly removed, restored, filtered and reactivated false reviews after receiving the account links, customer records, full chronology and legal notices. The preserved record contains 608 report/email records, 168 case/thread references, 87 keep-online or reinstatement decisions and 1,038 cumulative publication days through the conservative directly-confirmed publication periods. On 1 August, case 01757662 removed a Joel Walker DayZ Multi Tool review after a defamation flag. Trustpilot had already refused complete profile removal and kept Mathew's “Killfeed review” online again in case 03085556 and published its own warning against Legion.

The account trail: repeated Mathew-linked presentations were displayed as independent reviewers. Trustpilot repeatedly restored the false publications after notice, then became the author of additional adverse material through its own consumer warning.

Timing evidence

Consumer, Hooded_saw and Kamy

Consumer and Hooded_saw were left around the same period as the Kamy reviews. Kamy is connected to Mathew Trojanowski. The close timing, overlapping subject and later reinstatement cycles are relevant coordination indicators.

Timing connection

The timing and subject connect Consumer and Hooded_saw to the same publication cluster. Their operators remain unidentified; those two accounts are not attributed to Mathew.

Customer, competitor and non-customer context

The publications came from competitors, former collaborators, former customers and people who had never subscribed. Those relationships change the claimed independence of the complaints.

Person Documented relationship Why it changes the reading Evidence
Daniel Santos Customer who also offered paid DayZ modding services. His complaint came from a customer interaction, but not from a person commercially detached from the DayZ service market. Facebook thread
Brett Jones Customer; initially cancelled over disabled DM permissions, later returned, then joined the pile-on. Another customer reported his Xbox-party comments. The later publication belongs to a longer permission and support history, not a first-time independent discovery. Jones complaint record
Adam Cooper Never a customer; appeared in Joel Walker's group and publication context. His post was a non-customer attack published inside Walker's group and campaign channel. Subscription and post context
Ray Smith Customer told within 19 minutes that the shop feature did not work; repeatedly offered payment for unadvertised, normally free work; removed Legion himself. His review later reversed the access chronology and described the automated support-bot line as Brodie's personal message. Discord chronology · Review
Mason Stockton Whitelist.gg operator, DayZ++ partner and former DayZBoosterZ collaborator; used Pups to approach Legion supporters. The Havasu review promoted alternatives while Stockton operated a competing service, and the Pups outreach continued that customer-steering relationship. Partner and Whitelist.gg record
Joel Walker Operator of Make DayZ Great Again Killfeed. Posts attacking Legion and recommending or promoting other bots are competitor publications, not neutral community moderation. Reset-loop publication · Competitor promotion context

Platform and regulator failure summary

Platform failures

Trustpilot republished reviews, forced the profile, authored the warning and threatened the business. Meta left eight of fourteen tracked posts visible after 176 reports and 2,342 publication days. Reddit left the measured thread visible for 883 days after 52 reports, nine tickets and four admin messages. Discord retained thirty exported tickets plus 66248829 while punishing the reporting account. Google processed 220 handling entries yet kept converting the same source attacks into search and AI output.

Regulator failures

eSafety and the ACCC accepted or routed complaints without stopping the publications. Scamwatch recorded the hostile-site complaint without stopping the sites. OAIC matters WEB-CP-26-08655 and CP26/03054 and the Danish Data Protection Agency escalation remained active while Trustpilot continued publication, refused disassociation and escalated its own adverse action.

Damage and causation

Direct customer cancellation statement

A customer directly connected the public drama to cancellation

A customer's written statement records that the Facebook and Trustpilot rumours made him uncomfortable and that the volume of public drama caused him to cancel Legion and use another bot. After reviewing the full evidence, he concluded that Legion and Brodie were not at fault and returned. The cancellation directly records the commercial effect of the campaign, while the later return records the additional unpaid work required to reverse it.