Daemoncrow

DAEMONMAILER V3.2 ✉️Inboxing to Office365 ,Outlook and .Net Domains General Payload For spammers 🔥 Add Custom Catelogues products / services Advanced Payload For Spreaders 🔥 For Malware Spreading Payload Can be customised with built in URL Obfuscator [DM for Customised Version} @Daemoncrow

Our website daemoncrow.st has been down for the past 9 days due to a technical issue and we are still working on fixing it while this is going on we have lowered all product pricing by 40 percent so you can keep things running without spending as much you can just message us directly for anything you need and we will sort it out for you thanks for sticking with us during this time @Daemoncrow

DAEMONMAILER SUITE Create > Send > Check > ✉️ Account Checker Tool Bulk Mode Anti Block - Ultra Fast

Supports - Office365 Outlook Hotmail Live Msn

Demo / Purchase : @Daemoncrow

DAEMONMAILER 25 Workers in Action

32 Cores 64 GiB & 8 Cores 16 GiB

DAEMON MAILER V3.1 OFFICE INBOXER 🎯Specific For Microsoft Office 365 and Outlook HOW IT SENDS Built on actual authenticated browser instances — not SMTP, not API ✉️Every email is composed and Sent the same way a human would do it manually, through a live logged-in Microsoft session. ✅From the spam detection server's perspective, it came from a real user on a real device. That's the baseline. PARALLEL ARCHITECTURE ▶️Multiple accounts send simultaneously, each in its own isolated browser context. ▶️No shared cookies. ▶️No overlapping sessions. ▶️No cross-contamination between workers. ▶️Each sender operates independently — its own proxy, its own session state, its own timing. ANTI-DETECTION LAYER ▶️Every worker is fingerprint-isolated at the browser level. ▶️Canvas and WebGL fingerprints are unique per instance ▶️User-Agent is tied to the assigned proxy region ▶️Send timing is randomized — no mechanical patterns ▶️Human-like interaction simulation inside the compose window ▶️Accounts don't behave like a fleet — they behave like individuals FOUR TOOLS ⏩Mailer — Bulk sending through Office 365 and Outlook with live per-account monitoring, bounce detection, and template management. ⏩Checker — Validates Outlook and Office 365 credentials in bulk. Flags locked, MFA-triggered, and dead accounts before they waste slots. ⏩Creator — Generates fresh accounts at scale with fully automated captcha solving. Zero manual steps. ⏩Cleaner — Strips duplicates, blacklisted entries, and dead credentials from lists before any campaign runs. ✉️ BOUNCELOOKER Tracks every NDR bounce event in real time — error codes, affected accounts, dead recipients. Campaigns get cleaner over time because the data is right there, live, not buried in a log file. PIPELINE Create → Check → Clean → Send → Monitor → Analyze One dashboard. Fully automated. Built to scale For Price & Test & Demo CONTACT: @daemoncrow

DAEMONCROW.ST is our new place. After the last update, we ran into a serious issue and the database was completely wiped. We attempted recovery, but the data could not be restored. We are working on a new patched version with better stability and stronger protection to make sure this doesn’t happen again. We recommend waiting for the upcoming update — it will restore full functionality and perform much better. 📌If you prefer not to wait, you can share your address and we will process your refund. 📌At the same time, we are rolling out a new and improved version after a major system upgrade. The upcoming release will include: Better performance and speed Stronger data handling and reliability Improved overall stability This version is being rebuilt with a more advanced architecture to provide a smoother and more secure experience. Stay tuned — this will be a significant upgrade over the previous version. Thank you for your patience and continued support we truly appreciate it. Daemoncrow 😊

✉️ Daemon Mailer Suite — Full Stack INBOX Spammer Update V1.1 DELIVERY STACK

Inboxing Domins - B2B,Office, .net Domains

👥 Shadow Payload Delivery: Converts text into undetectable deep-layer images that glide invisibly past advanced spam filters and security bots. ✨Footprint Shifting: Cycles through different email bodies and injects random strings on every single send. Kills content-matching filters instantly. ✨AI Sentinel Evasion: Bypasses machine-learning text analyzers by forcing the system to see purely human, visual-based data it can't decipher. ✨Dynamic Subject Forging: Generates completely unique, randomized subject lines on the fly to permanently avoid bulk-delivery honeypots. ✨ Domain Ghosting: Wraps your links in high-trust paths, letting your URLs drop straight to the inbox without triggering reputation scanners. 🟢GHOST INFRASTRUCTURE ✨Invisible Startup: Erases all traces of bot activity before the email provider even loads the page. ✨Hardware Masking: Disguises every account as a unique, highly realistic computer model to completely avoid anti-abuse suspicion. ✨IP Lockdown: Completely hides your real internal network address so your different accounts can never be linked together. ✨Human Typing: Bypasses typing detectors by using real computer keyboard shortcuts to actually paste messages instead of using robot scripts. ✨Lifelike Movement: Clicks, moves, and navigates with natural, randomized human timing to trick behavioral trackers. ✨Browser Spoofer: Perfectly fakes browser extensions and plugins so the disguise holds up under deep Microsoft inspection. ✨Tracker Bypassing: Invisibly scrambles tracking algorithms to fool security systems without setting off alarms. For Price & Demo CONTACT: @daemoncrow Secure Domain : Daemoncrow.cc

✉️ Daemon Mailer Suite — Full Stack INBOX Spammer Update V1.1 DELIVERY STACK 👥 Shadow Payload Delivery: Converts text into undetectable deep-layer images that glide invisibly past advanced spam filters and security bots. ✨Footprint Shifting: Cycles through different email bodies and injects random strings on every single send. Kills content-matching filters instantly. ✨AI Sentinel Evasion: Bypasses machine-learning text analyzers by forcing the system to see purely human, visual-based data it can't decipher. ✨Dynamic Subject Forging: Generates completely unique, randomized subject lines on the fly to permanently avoid bulk-delivery honeypots. ✨ Domain Ghosting: Wraps your links in high-trust paths, letting your URLs drop straight to the inbox without triggering reputation scanners. 🟢GHOST INFRASTRUCTURE ✨Invisible Startup: Erases all traces of bot activity before the email provider even loads the page. ✨Hardware Masking: Disguises every account as a unique, highly realistic computer model to completely avoid anti-abuse suspicion. ✨IP Lockdown: Completely hides your real internal network address so your different accounts can never be linked together. ✨Human Typing: Bypasses typing detectors by using real computer keyboard shortcuts to actually paste messages instead of using robot scripts. ✨Lifelike Movement: Clicks, moves, and navigates with natural, randomized human timing to trick behavioral trackers. ✨Browser Spoofer: Perfectly fakes browser extensions and plugins so the disguise holds up under deep Microsoft inspection. ✨Tracker Bypassing: Invisibly scrambles tracking algorithms to fool security systems without setting off alarms. CONTACT: @daemoncrow Secure Domain: Daemoncrow.cc

Daemon Mailer Suite — Full Stack Outlook Tool Tired of slow, unreliable mailers that die after 10 sends? This is the real deal. ⚡ What's included: 📩 Daemon Mailer — Parallel Outlook/Hotmail bulk sender with live monitor, account pool rotation, auto-blacklisting, and real-time send logs. Paste accounts & recipients, hit send — it handles the rest. 🆗 Account Checker — Batch validate Outlook logins in seconds. Instantly sorts your list into Good, Blocked, Limited, and Unknown. Copy results with one click. 🛡️ Account Validator — Direct HTTP PPAuth + OAuth validation. No browser, no selenium, pure speed. Built-in proxy support with automatic rotation on 429s, MFA detection, and smart retry logic. 💎 Why this beats everything else: → No browser automation — direct API calls, near-instant results → Parallel processing — validates 10+ accounts simultaneously → Proxy tunneling — auto-rotates on blocks, never gets stuck → WAF bypass — full browser header injection passes Microsoft's bot filters → MFA-aware — flags MFA accounts as valid instead of dropping them → Clean web UI — runs locally on your machine, zero setup 🖥️ Runs on Mac & Windows (Node.js) 📦 Lifetime license — yours to keep 🔒 100% local — no cloud, no logs, no spyware For Price & Demo CONTACT: @daemoncrow

🔥 Service Update After addressing the underlying issues and bringing the environment back to a stable state, we’ve begun restoring functionality across the platform. Most core services and checker operations are now active again, while a few remaining pieces are still being worked through as part of ongoing verification and cleanup. Xbox and Apple checkers are being held back until the last checks are finished and everything lines up as expected. Things will continue settling in stages from here. Thanks for bearing with us. 🔥 Обновление сервиса После устранения основных проблем и приведения среды в стабильное состояние мы начали постепенно возвращать функциональность платформы. Большая часть ключевых сервисов и чекер-операций уже снова работает, при этом некоторые элементы всё ещё проходят финальные проверки и донастройку. Xbox и Apple чекеры пока остаются на паузе — запустим их после завершения последних этапов проверки. Дальнейшее восстановление будет идти поэтапно. Спасибо за понимание и терпение.

Morning to all our subscribers Apologies for the slow replies. We ran into a serious server-side situation at the DaemonEngine had to step in immediately to keep the system stable and locked down Checker services will be back shortly Xbox and Apple checkers will only go live after full validation and integrity checks Thanks for staying patient and trusting the process Всем подписчикам доброе утро Извиняемся за долгие ответы. Словили жёсткую серверную проблему на уровне ядра — пришлось срочно вмешаться чтобы удержать систему стабильной и под замком. Никакой халтуры Чекеры скоро снова будут в строю Xbox и Apple чекеры запустим только после полной проверки и валидации — чисто стабильно Спасибо за терпение и доверие

DAEMONCROW Delivers A Focused Set Of Digital Tools Designed To Work Cleanly, Efficiently, And Without Noise. ⏩No Clutter, No Gimmicks — Just A Streamlined Platform Made For Consistent Results⏪ WHAT YOU GET ▪️Fast, Well-Optimized Tools ▪️Stable Performance ▪️Clean Interface ▪️Ongoing Updates CHECKERS 📱Apple Digital Codes 📱Xbox Digital Codes ACCESS ⚡️1 MONTH SUBSCRIPTION ⚡️Source Code ✨✨ESCROW ▪️XSS.PRO ▪️ADMIN DON CHANNEL Forum : XSS.IS TG Channel : Daemoncrow DM : Daemoncrow Private Contact : SIMPLEX

CONTENT OVERVIEW AND CHANNEL STATISTICS ⏩FREE DRAINERS : SOURCE CODE CRACKING CONFIGS : COLLECTION VPS METHOD : METHOD GAMBLING PLATFORMS : SOURCE CODE BOTNET : SOURCE CODE 46 RATS : COLLECTION CC DUMPS : DUMP 50 POWERFUL RATS : COLLECTION MULLWAD VPN LOGIN 1 YEAR : LOG DORKING AUTOMATION : DORK BTMOB : SALE BINANCE : SALE ⏩DAEMONHUB XBOX GIFT CARD CRACKER : SALE ITUNE CRACKER : SALE SOL DRAINER SOURCE CODE : SOURCE CODE DAEMONSPRAY : SOURCE CODE 2025 EXPLOIT COLLECTION : COLLECTION DAEMONHUB SALES STATS XBOX 1 MONTH SUBSCRIBERS : 63 XBOX SOURCE CODE BUYERS : 18 ITUNE SOURCE CODE BUYERS : 12 WEB :DAEMONCROW.CC CHECK : OVERVIEW WEB STATS - SUPPORTERS : 36 + 93 : 129 REGULAR USER : 12 SUPER USER : 24 Big Thanks To All Our Subscribers And Premium Users. Your Support Means A Lot — We Truly Appreciate Every One Of You. Respect For Riding With Us 🤝 Огромный Респект Всем Подписчикам И Премиум-Юзерам. Спасибо За Поддержку И Доверие — Вы Реально Мотивируете Нас Двигаться Дальше 🤝 Forum : XSS.IS TG Channel : Daemoncrow DM : Daemoncrow Private Contact : SIMPLEX Session ID :

05063b29826b7c9c6f5a516dbd45ebb5ee718324c1e6c9c7e1748dedea03945812

Большинство до сих пор копируют бизнес-идеи, которые работали 2–3 года назад. Gemini извлекает актуальную информацию из Google Поиска, YouTube, Трендов и Карт, чтобы вы могли создавать то, что люди активно ищут прямо сейчас. Используйте эти подсказки Gemini, чтобы создать подработку с доходом в 5 тысяч долларов в месяц: ⏩Анализатор спроса на навыки «Представь, что я хочу монетизировать свои навыки, не меняя жизнь целиком. У меня есть конкретный набор умений: [5–7 навыков], ограниченное время: [X часов в неделю] и чёткие интересы: [3–5 пунктов]. Используя реальные данные поискового спроса Google, найди 10 способов превратить это в деньги, отсортировав их по: ➡️реальному спросу, ➡️скорости первых денег, ➡️уровню конкуренции. Я не ищу идеальную карьеру. Я ищу самое короткое расстояние между навыком и оплатой». ⏩Проверка реального рыночного спроса. «Я рассматриваю запуск идеи: [идея]. Прежде чем тратить время и деньги, проверь её так, будто я рискую своими последними ресурсами. Используя данные Google, покажи: ➡️что люди реально ищут, ➡️кто уже зарабатывает на этом, ➡️за что рынок злится и жалуется, ➡️растёт ли спрос или это умирающая тема. Мне нужен не энтузиазм. Мне нужен холодный диагноз». ⏩SEO + преимущество перед конкурентами. «Я выхожу в нишу с идеей: [описание]. Представь, что мои конкуренты уже заняли лучшие позиции в Google, и у меня нет бюджета, чтобы просто “перекричать” их. Проанализируй: ➡️кто доминирует в поиске, ➡️за счёт каких ключевых слов, ➡️какие пробелы они игнорируют, ➡️и как я могу обойти их за счёт скорости, UX или ценности, а не громкости. Мне нужно не быть лучше. Мне нужно быть умнее». ⏩Предложение, которое конвертирует поисковый трафик «У меня есть идея: [описание]. Я хочу превратить поисковый трафик Google в деньги, а не просто в посещаемость. Создай воронку предложений: ➡️вход (29–99$), ➡️основное решение (299–999$), ➡️премиум или сервис. Для каждого уровня объясни: какую боль он закрывает и почему человек платит именно здесь, а не ищет дальше. Думай как человек, который ненавидит терять тёплый трафик». ⏩Потребительский аватар из поискового запроса. «Я продаю [продукт или услугу]. Создай портрет моего клиента не по демографии, а по тому, что он печатает в Google, когда остаётся один со своей проблемой. Покажи: ➡️его запросы на каждом этапе, ➡️страхи и сомнения за этими запросами, ➡️триггеры покупки, ➡️признаки, которые заставляют его доверять и платить. Мне нужен не “аватар”. Мне нужен реальный человек из строки поиска». ⏩Запуск за 30 дней через экосистему Google. «Моя цель — заработать первые 1000 долларов за 30 дней, не строя бренд и не покупая рекламу. Используй только экосистему Google: ➡️Поиск, ➡️YouTube, ➡️Docs / Sites, ➡️бесплатные каналы распространения. Создай простой пошаговый план, который может выполнить обычный человек без технического бэкграунда. Это не эксперимент. Это проверка, работает ли модель». ⏩Контент-стратегия на основе поискового спроса. «Я хочу создавать контент не ради охватов, а ради денег. Создай 30-дневную контент-стратегию, основанную на реальном поисковом спросе Google, включая: ➡️темы, которые люди ищут перед покупкой, ➡️видео и короткий контент с коммерческим намерением, ➡️простые CTA, которые превращают трафик в заявки. Каждый элемент должен отвечать на вопрос: “зачем это публиковать?”». ⏩Масштабирование через вечнозелёный трафик. «Я уже зарабатываю около 1000 долларов в месяц на этой модели. Теперь мне нужна система, а не постоянная гонка за контентом. Покажи: ➡️как закрепиться в поиске надолго, ➡️какой контент со временем усиливает эффект, ➡️как добавлять монетизацию без перезапуска, ➡️и как дойти до 5000 долларов в месяц без ежедневной публикации. Я строю механизм, а не марафон». Желаем успехов, профессионального роста и уверенного будущего. Удачи во всех начинаниях 🎅 Forum : XSS.IS TG Channel : Daemoncrow DM : Daemoncrow Private Contact : SIMPLEX Session ID :

05063b29826b7c9c6f5a516dbd45ebb5ee718324c1e6c9c7e1748dedea03945812

➕AT DAEMONCROW WE CARE OUR SUBSCRIBERS ➕В DAEMONCROW забота о подписчиках — наш приоритет 🌐 How to use Gemini for side hustles in 2026. Most people are still copying business ideas that worked 2-3 years ago. Gemini extracts real-time information from Google Search, YouTube, Trends, and Maps so you can create what people are actively searching for right now. Use these Gemini tips to create a side hustle that earns $5,000 per month: ⏩Skill Demand Analyzer "Imagine I want to monetize my skills without completely changing my life. I have a specific set of skills: [5-7 skills], limited time: [X hours per week], and clear interests: [3-5 points]. Using real Google search demand data, find 10 ways to turn this into money, sorted by: ➡️ real demand, ➡️ speed to first money, ➡️level of competition. I'm not looking for a perfect career. I'm looking for the shortest distance between skill and pay." ⏩Real Market Demand Check "I'm considering launching an idea: [idea]. Before spending time and money, check it as if I'm risking my last resources. Using Google data, show: ➡️what people are actually searching for, ➡️who's already making money from it, ➡️what the market is complaining about, ➡️and whether demand is growing or it's a dying topic. I don't need enthusiasm. I need a cold diagnosis." ⏩SEO + Competitive Advantage "I'm entering a niche with an idea: [description]. Imagine my competitors already occupy the top positions in Google, and I don't have the budget to just 'outshout' them. Analyze: ➡️who dominates the search, ➡️which keywords they're using, ➡️what gaps they're ignoring, ➡️and how I can outsmart them with speed, UX, or value, not just volume. I don't need to be better. I need to be smarter." ⏩A Proposal That Converts Search Traffic "I'm selling [product or service]. Create a proposal funnel not based on demographics, but on what people type into Google when they're alone with their problem. Show: ➡️their queries at each stage, ➡️the fears and doubts behind those queries, ➡️the triggers for buying, ➡️the signs that make them trust and pay. I don't need a 'persona'. I need a real person from the search string." ⏩Consumer Avatar from Search Queries "I'm selling [product or service]. Create a portrait of my client not based on demographics, but on what they type into Google when they're alone with their problem. Show: ➡️their queries at each stage, ➡️the fears and doubts behind those queries, ➡️the triggers for buying, ➡️the signs that make them trust and pay. I don't need a 'persona'. I need a real person from the search string." ⏩Launch in 30 Days Through the Google Ecosystem "My goal is to earn my first $1,000 in 30 days without building a brand or buying ads. Use only the Google ecosystem: ➡️Search, ➡️YouTube, ➡️Docs / Sites, ➡️free distribution channels. Create a simple step-by-step plan that an average person without a technical background can follow. This isn't an experiment. It's a test to see if the model works." ⏩Content Strategy Based on Search Demand "I want to create content not for reach, but for money. Create a 30-day content strategy based on real Google search demand, including: ➡️topics people search for before buying, ➡️videos and short content with commercial intent, ➡️simple CTAs that convert traffic into leads. Every element should answer the question: 'Why publish this?'" ⏩Scaling Through Evergreen Traffic "I'm already earning about $1,000 per month with this model. Now I need a system, not a constant race for content. Show: ➡️how to secure a long-term position in search, ➡️which content compounds over time, ➡️how to add monetization without relaunching, ➡️and how to reach $5,000 per month without daily publishing. I'm building a mechanism, not a marathon." Wishing success, growth, and a strong career ahead. Good luck in everything you do 🎅 ------ 🌐 Как использовать Gemini для подработоки в 2026 году.

DAEMONCROW INVITATION TO CHANNEL SUBSCRIBER The Daemoncrow is our latest project — a private and secure platform. Access is subscription-based and available by invitation only. SUBSCRIBERS GET COMPLETE ACCESS TO - DATABASES Full database collections · 2008–2025 Inspired by Breach Forums - EXPLOITS Exploit research and technical disclosures Fresh additions added regularly. - STEALERS Stealer-related content and log-focused releases Updated as new activity appears. - COMBO CRACKING Combo-related drops and cracking-focused material New content added on a rolling basis. - CARDING Carding-related content and market-style listings Continuously refreshed and monitored. Complimentary Access for 15 Days -- DAEMONLABS -- - Gift Card Checkers - Xbox - iTunes - Amazon - Private Stealers - HCK Tools ПРИГЛАШЕНИЕ В КАНАЛ DAEMONCROW ДЛЯ ПОДПИСЧИКОВ Daemoncrow — наш новый проект: закрытая и безопасная платформа. Доступ предоставляется по подписке и только по приглашению. ПОДПИСЧИКИ ПОЛУЧАЮТ ПОЛНЫЙ ДОСТУП К: - DATABASES Полные коллекции баз данных · 2008–2025 Вдохновлено Breach Forums - EXPLOITS Эксплойты, исследования и технические публикации Регулярно добавляется новый контент. - STEALERS Контент, связанный со стиллерами, и публикации логов Обновляется по мере появления новой активности. - COMBO CRACKING Комбо-дропы и материалы по крэкингу Контент добавляется на постоянной основе. - CARDING Контент, связанный с кардингом, и материалы в формате маркетплейса Постоянно обновляется и отслеживается. БЕСПЛАТНЫЙ ДОСТУП НА 15 ДНЕЙ — DAEMONLABS — - Чекеры подарочных карт - Xbox - iTunes - Amazon - Приватные стиллеры - HCK-инструменты TG Channel : Daemoncrow DM : Daemoncrow Private Contact : SIMPLEX Session ID :

05063b29826b7c9c6f5a516dbd45ebb5ee718324c1e6c9c7e1748dedea03945812

An anonymous channel contained a SQL dump of 289 MB, which was positioned as a database of the "hacked OCIB". Technical characteristics of the dump ❗️Size: 289 MB ⤵️ SQL rows: 557,691 📊 Database name: damytusite ⌨️ Type: WordPress MySQL dump 📊 Tables: 197 🔑 Prefixes: wp, wpLqk2Q2U MD5 74fe0e0a846048656c4e846fe7668692 SHA256: 3ed68cc8bc6859c62a3d02b4f2a3b6231878d68547e5cc6d5335723717fc6b3c 🔄 What leaked: Administrator credentials 🔑 Login: mtaratunin 🌐 Emails: info@damytu.com,info@koteru.kz, info@pard.kz 🔑 Password hashes: Old WordPress Portable Hash format ($<c+ywT<SNIP>5$ROY~n?:<6So%^uop; </pre> 🔑 AppThemes API Key: 3c71516f89<SNIP>fab9d21b19b 🔑 Cloudflare Turnstile: Site key: 0x4AAA<SNIP>0vyv Secret key: 0x4AAAAAAA<SNIP>PQ6NDwQ 🔑 Freemius SDK: public and secret keys of plugins (pk_..., sk_...) Scale of the leak: The database contains data from the company's main website and several client sites hosted on the same server: 📡 The company's main domain inova.kz - 98,463 mentions in the database 🛜 Client domains pard.kz - 30,611 mentions partner.com.kz - 1,252 mentions damytu.com - 637 mentions odines.kz - 414 mentions inova-v1.koteru.kz - 330 mentions leo.pard.kz - 261 mentions cloud.koteru.kz - 75 mentions dcsource.kz - 33 mentions www.inova.kz - 52 mentions bitrix24.inova.kz - 1 mention Internal paths to files on the server were detected:

/usr/share/nginx/damytu/wp-content/
/usr/share/nginx/directory/wp-content/
/usr/share/nginx/leo.pard.kz/wp-content/
/usr/share/nginx/odines.kz/wp-content/
/usr/share/nginx/partner.com.kz/wp-content/
/usr/share/nginx/pard.kz/wp-content/

All websites are hosted on the same server under nginx. User profiles: https://inova.kz/author/ Channels: https://inova.kz/channel/ Download path: /usr/share/nginx/pard.kz/wp-content/uploads/vwls GeoDirectory: Default location: Almaty, Kazakhstan Coordinates: 43.244780700408754, 76.85833454132081 Site URL: https://inova.kz Site Title: Inova Tech User Email: m.taratunin@inova.kz IP addresses: Internal: 192.168.0.134, 172.16.10.217 External commenters: 95.181.236.18, 95.181.236.16, 37.139.53.10 and others 📦 Plugins: Elementor, WPForms, GeoDirectory, VideoWhisper Live Streaming, WooCommerce and others

Conclusion: A database of the Inova Tech company website based on the CMS Wordpress was leaked, hosted on a shared infrastructure. Administrator credentials, secret keys, and the full structure of the server were compromised. It is likely that the attackers exploited vulnerabilities in the CMS Wordpress, plugins, and misconfigured paths to configuration files or backups, which, combined with open ports to the public network, led to the database compromise.

TG Channel : Daemoncrow DM : Daemoncrow Private Contact : SIMPLEX Session ID :

05063b29826b7c9c6f5a516dbd45ebb5ee718324c1e6c9c7e1748dedea03945812

An anonymous channel contained a SQL dump of 289 MB, which was positioned as a database of the "hacked OCIB". Technical characteristics of the dump ❗️Size: 289 MB ⤵️ SQL rows: 557,691 📊 Database name: damytusite ⌨️ Type: WordPress MySQL dump 📊 Tables: 197 🔑 Prefixes: wp, wpLqk2Q2U MD5 74fe0e0a846048656c4e846fe7668692 SHA256: 3ed68cc8bc6859c62a3d02b4f2a3b6231878d68547e5cc6d5335723717fc6b3c 🔄 What leaked: Administrator credentials 🔑 Login: mtaratunin 🌐 Emails: info@damytu.com, info@koteru.kz, info@pard.kz 🔑 Password hashes: Old WordPress Portable Hash format ($<c+ywT<SNIP>5$ROY~n?:<6So%^uop; </pre> 🔑 AppThemes API Key: 3c71516f89<SNIP>fab9d21b19b 🔑 Cloudflare Turnstile: Site key: 0x4AAA<SNIP>0vyv Secret key: 0x4AAAAAAA<SNIP>PQ6NDwQ 🔑 Freemius SDK: public and secret keys of plugins (pk_..., sk_...) Scale of the leak: The database contains data from the company's main website and several client sites hosted on the same server: 📡 The company's main domain inova.kz - 98,463 mentions in the database 🛜 Client domains pard.kz - 30,611 mentions partner.com.kz - 1,252 mentions damytu.com - 637 mentions odines.kz - 414 mentions inova-v1.koteru.kz - 330 mentions leo.pard.kz - 261 mentions cloud.koteru.kz - 75 mentions dcsource.kz - 33 mentions www.inova.kz - 52 mentions bitrix24.inova.kz - 1 mention Internal paths to files on the server were detected:

/usr/share/nginx/damytu/wp-content/
/usr/share/nginx/directory/wp-content/
/usr/share/nginx/leo.pard.kz/wp-content/
/usr/share/nginx/odines.kz/wp-content/
/usr/share/nginx/partner.com.kz/wp-content/
/usr/share/nginx/pard.kz/wp-content/

All websites are hosted on the same server under nginx. User profiles: https://inova.kz/author/ Channels: https://inova.kz/channel/ Download path: /usr/share/nginx/pard.kz/wp-content/uploads/vwls GeoDirectory: Default location: Almaty, Kazakhstan Coordinates: 43.244780700408754, 76.85833454132081 Site URL: https://inova.kz Site Title: Inova Tech User Email: m.taratunin@inova.kz IP addresses: Internal: 192.168.0.134, 172.16.10.217 External commenters: 95.181.236.18, 95.181.236.16, 37.139.53.10 and others 📦 Plugins: Elementor, WPForms, GeoDirectory, VideoWhisper Live Streaming, WooCommerce and others

Conclusion: A database of the Inova Tech company website based on the CMS Wordpress was leaked, hosted on a shared infrastructure. Administrator credentials, secret keys, and the full structure of the server were compromised. It is likely that the attackers exploited vulnerabilities in the CMS Wordpress, plugins, and misconfigured paths to configuration files or backups, which, combined with open ports to the public network, led to the database compromise.