Diamond Club

Every account ranked by economic activity. Click any column to sort. Click an account to investigate.

Churn Analysis

Accounts that stopped logging in, with what they left behind. Reference is the latest event in the corpus — not wall-clock — so the threshold stays meaningful when logs are stale. Click an account to drill in.

Check Trail

Every bank check tracked from creation through trades to cashing.

Lingering Checks

Checks that were written but never cashed — stored value still parked in the economy (a bag, a box, a bank). "Held by" is the last account known to have received the check; checks moved inside a traded bag leave no per-check log, so an uncashed check that never rode a trade window still shows under its creator.

Trades

Vendor Sales

Per-item player-vendor purchases. Each line links buyer → seller → item UID → price. Different from trade logs — no confirmation window, just a direct purchase from someone's vendor.

Gold Flow

Gold Inflation

How much gold players generate from the world over time, and who earns it vs receives it from others.

Earned (self-generated) vs Received (from others)

High received with low self-banked is the wealth-recipient / RMT-buyer shape.

Account Relationships

Directional: who gave what to whom across all trades and checks.

Risk Patterns

Forensic signals grouped by family. First row: economic/behavioral patterns from trade and event logs. Second row: account-security signals — failed logins, connection rejections, hardware mismatches, PIN failures.

IP Investigation

All activity across every account that used this IP address.

Account Clusters

Groups of related accounts — two independent evidence bases. IP clusters use frequency-weighted co-residency (promiscuous NAT/VPN IPs excluded). Hardware clusters share a single hw_uuid from the login database — the strongest alt-farm signal.

Staff Activity

All admin actions: jails, mutes, staff commands, player pages.

Sellers

Accounts moving real value right now: checks written and cashed by others, overpriced/wash vendor "sales", fast check pass-throughs (couriers), one-sided deliveries. Ranked by value moved inside the window.

Gold Drops

Player-to-player gold moved by dropping a pile on the ground for another account to pick up — the one transfer channel checks and trades can't show. A handoff is a ground drop and a different account's pickup of the same pile, same spot, within minutes.

Name Changes

Character renames: old name → new name, by account. A player/account action.

Pages

Player .page submissions (GM help requests) with the GM reply, handler, and in-world position. Filter by text, GM, account, or date range. Click an account to drill into the player view.

Kufur Reports

Player-filed .ihbar (swearing) reports with the captured chat transcript around the incident moment. Each row is one incident; expand to read the snippets and see who said what.

World Log

Non-economy events. Player and NPC deaths plus asset lifecycle outside of trades: house demolitions, strongbox destructions, keys pulled, ships scuttled, dungeon chests.

Errors

Engine ERROR / WARNING / CRITICAL lines, clustered into issues by message fingerprint (UIDs, coords and numbers collapsed). Spot what's frequent, what just appeared, and what's trending up — then drill in for the daily history and time-of-day pattern.

Honeypot

Server-side cheat-detector trips. Each event is a client action (DoubleClick, PickUp, Target, ...) whose seed didn't match — the client interacted with a bait item (honeypot) the server never showed it. Severity-100 cheat-client signal.

Client Telemetry

Encrypted machine-fingerprint snapshots posted by the client 5 minutes into a session. Includes a screenshot, full driver/process/NIC inventory, and the on-disk path of the running client. Newest 20 per account are retained; older ones are evicted on insert. Click any row to expand the full report.

Live Status

Currently-online players, grouped by IP. Counts come straight from the engine's own arc_online_acc table — every connect/disconnect is a row, latest row per (account, character) where online=1 is the deterministic CCU. Multi-box IPs (most accounts on one IP) bubble to the top. Enriched with country, guild, house flag, last activity from logs, and 24h honeypot / anti-cheat hit counts.

Raw Stream Audit

Server-side grep of one log file using a category regex, cross-referenced against events.sqlite. Lines marked "missed" matched the regex but were parsed as OTHER — that's the silent-drop signal. "partial" means parsed as a generic type when a more specific one exists. "not_indexed" means the file isn't in events.sqlite yet.

Driver Analysis

Detected keyboard/mouse filter drivers per account. Categorized by type and severity — virtualization and cheat-tool drivers are flagged as alerts.

DB Viewer

Read-only browser for the SQLite enrichment sidecar. Use Search to locate any UID across all tables; Browse for paginated table inspection; Query to run SELECT statements directly.

Log Viewer

Files

Gold Accounting

Legitimate-gold accounting per account. Recon totals each account's DB-known gold-in (quest rewards + merchant sell revenue). The other tabs drill into each source leaderboard, plus Storage Wealth — hoarder-scale inventories.

Player Dossier

Ground-truth per-account snapshot from the world save: exact net worth, characters, hardware, houses, pets, vendors, and full inventory.

Net Worth

Exact account net worth from the world save — carried gold + vendor holdings + bank checks. Where the server's money actually sits.

Machines

Hardware (hwuuid) clusters — accounts sharing a physical machine, online or offline. Multibox / farm finder.

Item Search

Find any individual item across the whole world — by itemdef, hue, name/crafter, or amount. Each result links to the owner's dossier.

Containers

Where everything lives. World content by location type, and locate any item UID to see its full container path + contents.

Land Registry

All owned houses/multis with owner account, co-owner count, coordinates, and placement date. Land barons float to the top.

Vendor Market

All player vendors with held gold, stock count, and owner. The legit-looking sales channel RMT hides behind.

Client Integrity

Server-wide client/map/dll integrity hashes from the save globals.

Guilds

All 57 guild stones with their 1,960 members. Shows master / co-owner roles — social cluster signal.

Houses

All 672 houses with owner character, account, coordinates, and type.

Tamed Animals

Rare-mount tames from the roster (unicorns, shires, silver steeds, kirins, and the rest). High-value mounts — who tamed which, when, and where. Click an account to investigate.

Verified Disguises

Character names that exist on 2+ distinct accounts in arc_stat_players — ground-truth disguise detection from DB (vs. statistical inference from logs).

Live Log Stream

tail-f style real-time view of every event being parsed from the SphereServer logs. Visual only — no alerts, no chimes. Use the type filter to narrow to specific signal types.

System

Live resource use, ingest throughput, and worker activity. The freshness pill in the top bar links here. Snapshots refresh every 5 seconds.

Item Spawner

Search the SphereServer item catalog (arc_allitems). Click a row to copy .add <defname> to your clipboard, then paste in-game to spawn or reference.

Arena

Live monitoring of arena PvP. Log stream + DB system-of-record unified across 7 tabs.

Glossary

Forensic and SphereServer domain terms used across the app. Hover the dotted terms anywhere in the UI for a quick definition; read the full entries here.