LordX

LordX is an active Brazil-associated web-defacement persona and the most consistently visible operator attached to Terminal 404 in the current public record. Multiple 2025–2026 victim pages state that LordX compromised or “took control” of the site under Terminal 404 branding. The activity spans Brazilian academic, commercial and industrial properties and at least one Indian site, establishing an international but strongly Brazil-centered defacement footprint.

The persona's strongest technical behavior is external website defacement. Public artifacts preserve attacker-controlled text, images, political statements, football identity, insults and peer greetings. The evidence establishes unauthorized write/publication control but does not reliably expose how that control was obtained.

LordX has a particularly strong relationship with Lost32x and the wider 404 Crew Cyber Team ecosystem. Terminal 404 pages repeatedly greet Lost32x/404Crew, while DefacerID records joint Lost32x e LordX and Lost32x & LordX defacements under the 404 Crew team label. This is direct evidence of operational co-activity rather than simple social proximity.

Brazil association is supported by Portuguese-language content, repeated Brazilian victims, Corinthians football identity and the UFRJ political message. INFERENCE (confidence: medium-high): LordX is likely Brazilian or deeply embedded in Brazil's defacement community, although nationality and physical location are not independently verified.

The user-supplied aliases ROBLOX_666GUES and x32_zoc9 and X indicator @[redacted] are retained as collection pivots. No reliable open-source bridge recovered here independently proves those identifiers belong to LordX, so they should not be used as sole attribution evidence.