╔══════════════════════════════════════════════════════════════════════════════════════════════════════════════╗ ║ dox profile - @logo_gfx14 / muku._. ║ ║ doxxed by: yesimlarpin on tg ║ ║ minecraft fake java mod scammer ║ ╚══════════════════════════════════════════════════════════════════════════════════════════════════════════════╝ __ __ ________ __ __ _______ ________ __ _______ ______ __ __ ______ ______ | \ / \| \| \ | \| \ | \| \ | \ / \ | \ | \| \ / \ | $$ / $$| $$$$$$$$| $$\ | $$| $$$$$$$\| $$$$$$$$| $$ | $$$$$$$\| $$$$$$\| $$\ | $$ \$$$$$$| $$$$$$\ | $$/ $$ | $$__ | $$$\| $$| $$__| $$| $$__ | $$ | $$__/ $$| $$__| $$| $$$\| $$ | $$ | $$ \$$ | $$ $$ | $$ \ | $$$$\ $$| $$ $$| $$ \ | $$ | $$ $$| $$ $$| $$$$\ $$ | $$ | $$ | $$$$$\ | $$$$$ | $$\$$ $$| $$$$$$$\| $$$$$ | $$ | $$$$$$$ | $$$$$$$$| $$\$$ $$ | $$ | $$ __ | $$ \$$\ | $$_____ | $$ \$$$$| $$ | $$| $$_____ | $$_____ | $$ | $$ | $$| $$ \$$$$ _| $$_ | $$__/ \ | $$ \$$\| $$ \| $$ \$$$| $$ | $$| $$ \| $$ \| $$ | $$ | $$| $$ \$$$| $$ \ \$$ $$ \$$ \$$ \$$$$$$$$ \$$ \$$ \$$ \$$ \$$$$$$$$ \$$$$$$$$ \$$ \$$ \$$ \$$ \$$ \$$$$$$ \$$$$$$ -------------------------------------------------------------------------------------------------------------- basic info -------------------------------------------------------------------------------------------------------------- doxxed by: yesimlarpin on telegram reason: minecraft fake java mod scammer. distributes infostealer as a cracked paid client. called me a retard and tried to leak me but got a mullvad ip alias stack: @logo_gfx14, muku._., muxtar1233, reze, ylvswb, emkaop, user real name: muxtar nagiyev linked aliases: girisim girisimz, iman ismaylzade, elcan sahmammadov, rasim discord id: 1051219205866930337 - deanoned discord username: muku._. / muxtar1233 / reze discord global name: reze discord created: 2022-12-10 19:29:49 utc discord badges: hypesquad balance (irrelevant) discord flag: scams_and_fraud - burned discord automated detection: no discord decision ground: incompatible_content discord user category: scams_and_fraud discord timestamp: 2025-06-18 00:00:00 discord avatar: https://cdn.discordapp.com/avatars/1051219205866930337/aad65788fcc1c988b3930067a0f780d1.png?size=1024 discord banner: https://cdn.discordapp.com/banners/1051219205866930337/4bbbb36f1e615f79a5220d8cb928e186.png?size=1024 tied email (primary - leaked): muxtarnagiyev3@gmail.com tied emails (secondary): feridxudiyev711@gmail.com, abasovmaga81@gmail.com, cenabzahidbeyli@gmail.com, girisimzgirisim@gmail.com, umidabbasov77@gmil.com, abdullayev9119122@mail.ru, sahmmmdovelcan@gmail.com, rb2377551@gmail.com, doideu@1win.xyz tied ip addresses: - 5.44.38.45 - resolved to bakcell mobile - azerbaijan - 5.134.53.165 - resolved to superonlayn - azerbaijan - 5.197.251.147 - resolved to ag telekom mmc - azerbaijan ip geolocation data: - latitude: 40.3771° n - longitude: 49.8875° e - continent: asia - country: azerbaijan (az) - region: baku city (ba) - city: baku - timezone: asia/baku (utc+4) - currency: azn (azerbaijani manat) - isp (primary): bakcell - baksell ltd llc - as: as197830 bakcell llc - bakcell-as - mobile network: true - proxy: false - hosting: false isp (secondary): superonlayn - superonlayn ltd - as39232 uninet llc isp (tertiary): ag telekom mmc - as57293 geolocated: baku, azerbaijan - exact coordinates: 40.3771° n, 49.8875° e map link: https://maps.google.com/?q=40.3771,49.8875 tied phone numbers (all valid - all mobile - all azerbaijan): - +994556310064 - bakcell mobile - tied to cenabzahidbeyli@gmail.com - +994706104545 - nar mobile - tied to feridxudiyev711@gmail.com - +994552904964 - bakcell mobile - tied to abasovmaga81@gmail.com - +994504986132 - azercell mobile - tied to umidabbasov77@gmil.com - +994559119122 - bakcell mobile - tied to abdullayev9119122@mail.ru phone number details: - country code: +994 - country: azerbaijan (az) - type: mobile - timezone: asia/baku - all numbers validated and resolved truecaller pivots: - https://truecaller.com/search/az/%2B994556310064 - https://truecaller.com/search/az/%2B994706104545 - https://truecaller.com/search/az/%2B994552904964 - https://truecaller.com/search/az/%2B994504986132 - https://truecaller.com/search/az/%2B994559119122 email domain intelligence: - primary domain: gmail.com (most emails) - alternate domain: mail.ru (abdullayev9119122@mail.ru) - typo domain: gmil.com (umidabbasov77@gmil.com) - custom domain: 1win.xyz (doideu@1win.xyz) - valid syntax: true for all emails - domain ip (feridxudiyev711@gmail.com): 192.178.25.197 - domain reverse dns: tzamsa-ah-in-f5.1e100.net - domain ip (cenabzahidbeyli@gmail.com): 172.217.17.197 - domain reverse dns: sof02s22-in-f197.1e100.net -------------------------------------------------------------------------------------------------------------- address -------------------------------------------------------------------------------------------------------------- geolocated: baku, baku city, azerbaijan coordinates: 40.3771° n, 49.8875° e map trace: https://maps.google.com/?q=40.3771,49.8875 timezone: asia/baku (utc+4) isp: bakcell (resolved), superonlayn, ag telekom mmc endpoint: mobile network. not a burner vm. not sandboxed. not isolated. not airgapped. this is his real device. host discovery artifacts (5.44.38.45/24): - 200+ live hosts detected on port 80 - latency range: 31ms to 130ms - entire subnet fingerprinted and active host discovery artifacts (5.197.251.147/24): - 150+ live hosts detected on port 80 - 11 filtered or down hosts - complete trace route available -------------------------------------------------------------------------------------------------------------- family -------------------------------------------------------------------------------------------------------------- father: not found in available data mother: not found in available data linked names from correlation (possible family or dead accounts): - girisim girisimz - age: 36 - dob: 1990-01-01 (likely placeholder) - ylvswb - age: 19 - dob: 2006-07-31 - iman ismaylzade - age: 36 - dob: 1990-01-01 (likely placeholder) - elcan sahmammadov - age: 36 - dob: 1990-01-01 (possible brother / father) - rasim - age: 19 - dob: 2006-10-15 note: the 1990-01-01 entries are almost certainly dummy data. the 2006 births indicate age 19. this lines up with the kid's actual age range. -------------------------------------------------------------------------------------------------------------- tied numbers -------------------------------------------------------------------------------------------------------------- +994556310064: - carrier: bakcell - type: mobile - linked to: cenabzahidbeyli@gmail.com - valid: yes +994706104545: - carrier: nar mobile - type: mobile - linked to: feridxudiyev711@gmail.com - valid: yes +994552904964: - carrier: bakcell - type: mobile - linked to: abasovmaga81@gmail.com - valid: yes +994504986132: - carrier: azercell - type: mobile - linked to: umidabbasov77@gmil.com - valid: yes +994559119122: - carrier: bakcell - type: mobile - linked to: abdullayev9119122@mail.ru - valid: yes every single number traces back to azerbaijan. no burner. no clean burner. no throwaway. no sockpuppet. these are his real numbers. -------------------------------------------------------------------------------------------------------------- password hashes (sha256) -------------------------------------------------------------------------------------------------------------- list of password hashes extracted from breaches. all are sha256. hashcat mode 1400. rockyou.txt will crack these i cba doin it 0aacfe7b93c7db1f611361435506fc1ca8a4485217797f5232b5a6599797155c 0d0d5d4788b949c7a0e71f276b237524d71e0dae8f7d9972f5c366fc0225b70f 295be7b299dcfd3524b9d7963532ced433bf9f042dd794b7daa6d79b5e8fba7f 471ebe726c481a8bb77ebcbd7bb8025f4251aa89f0a1d055e9b5c6f95201d8ce 23f05f8e0e6bca1f7db94e68341f88d6596f666edf737eb07093a4d29e1ba855 2c9e90b7285c7e2cd6b1e105ac5b2a6d0bfcfd5c37f14e7fcbf2293c0acbe8fc 69a6ccf5422a28731c8d7f504b6623bca04e9939549c48edaa07637188040d7b 8acb4f6f8daedb4ed02fe1babcb71713ca5b4b8bfd342e8577bc5676d547f0c0 93d53e5f3e5d35f5eace4e3104ffbf461bd1599c5429426bb38d381e2120b60a -------------------------------------------------------------------------------------------------------------- breach timeline (leak opsec) -------------------------------------------------------------------------------------------------------------- 2022-01-27: first slip - email leaked 2022-02-15: second slip 2023-01-03: third slip 2023-05-23: fourth slip 2023-07-15: fifth slip 2024-05-29: discord token grab - major l 2024-08-11: another slip 2024-08-13: another slip 2024-10-23: another slip 2024-10-29: another slip 2025-05-08: medal.tv - muxtar1233 - user id: 398279321 2025-06-18: discord.com - flagged scams_and_fraud 2026-05-07: restorecord.com - ips 5.134.53.165 and 5.197.251.147 2026-05-07: fivem.net - license leak 2026-05-12: unknown breach - last seen - 5 days ago summary: this kid has been leaking opsec for 4 years straight. breach after breach. no fresh install. no nuked box. no encrypted drive. no encrypted container. he just keeps reusing the same alias stack. -------------------------------------------------------------------------------------------------------------- linked accounts (sockpuppet correlation) -------------------------------------------------------------------------------------------------------------- username tracker pivot on "muxtar1233" resolved to the following active accounts: - tiktok: @muxtar1233 - kaggle: muxtar1233 - xbox: muxtar1233 (via xbox gamertag search) - okcupid: muxtar1233 (down bad) - medium: @muxtar1233 - reddit: u/muxtar1233 - twitter/x: @muxtar1233 - root-me: muxtar1233 - apple discussions: muxtar1233 - slideshare: muxtar1233 these are not burners. these are not throwaways. this is his main alias stack. compartment leak across 10+ platforms. gaming and platform ids (all tied to the same endpoint): - discord id: 1051219205866930337 - xbox live: 2535453077584342 - live id: 844426452334073 - fivem license 1: 62f5b9438d2e48a3f4d83e29e6c6c8b900faf5c3 - fivem license 2: 1cf288ca2aa9877a8ddf674581ebe534fd672911 - medal.tv user id: 398279321 - roblox: 1099800186 - steam: 76561199514701689 - spotify: 31hjsv6nrh3iippwn72kpj6arccy email intelligence on muxtarnagiyev3@gmail.com showed associated domains: spotify.com, office365.com, amazon.com. more pivots available. email tracker on umidabbasov77@gmil.com resolved to deezer and chess accounts. HARRAS HIS BITCH ASS NIGGER ASS AT .gg/mclients ╔══════════════════════════════════════════════════════════════════════════════════════════════════════════════╗ ║ doxxed by yesimlarpin on telegram. SKID ALERT ║ ║ ║ ║ ║ ╚══════════════════════════════════════════════════════════════════════════════════════════════════════════════╝