Skip to content

Welcome to my blog.

Below is the list of all my blog posts.

List of the essential applications that you need to have

Jan 29, 2023

These are my recommended must-have applications that you should try to use (at least). Sure, tastes differ, but these apps cover most of my needs. I prefer to use FOSS, and I strive to achieve this in every way possible.

Must have browser extensions

Apr 11, 2023

My must have browser extensions

Leverage Whatsapp like your own API!

Jun 21, 2024

I have collected different variations of toolkits to make communicating with Whatsapp easier without creating a business account.

Use at your own risk! I'm not responsible for any misuse of the information provided here.

Libraries

Rest-API

Outdated

Third-party API solutions

WABA (WahtsApp Buisness API)

Custom Telegram client API credentials

Jul 17, 2023

There are Telegram Custom Clients API credentials.

Disclaimer 1: I don't own any of them. These credentials are for educational purposes only and taken from open sources.

Disclaimer 2: You can't just copy and paste official client credentials into custom bundled client. Telegram server doesn't let you to have more than 1 account. If you want see this limitation in real world use Telegraher (outdated).

Reset the trial version of Transcribe! on Linux (and maybe MacOS)

Jul 23, 2023

For Windows, we have a number of keygen activators that allow we to use Transcribe! free of charge. For Linux, these keygens are not compatible, so we have to do something about that. Without many words, let's just give you a script that will reset the trial version of Transcribe!

rm ~/.yeqwqauh ~/.Transcribe!7

Yep, that is :) Deleting these files will reset Transcribe! settings, including trial information.

UI design - the bad and the good

Mar 17, 2025

Good

Form action button still active when user doesn't select all fields

Very cool design logic in Github.com repository creating page. I didn't select owner, and after clicking "Create repository" it's shows me warning under owner input "Please select an owner". Most services probably would just make button disabled, until inner form validation logic wouldn't pass requirements.

As alternative I would suggest to hide all other junk stuff below description, and after selection owner and repository name it would just pop up under

Pasted image 20250104180222.png

Bad

Burger on right side, but sidebar itself on the left side

Pasted image 20250314012936.png

Не разделять сущности по цвету/дизайну

Example 1 - Mobile application Active

Pasted image 20250104180947.png

Загаловок написан - Выберите номер. Так а какого фига задается PAPA, то есть считай мой добавленый номер по дизайну в одном ряду с действиями? Ну вот я назвал номер PAPA, а что если назову "- DELETE A NUMBER" или же добавлю десять "CANCEL"?. Круто? Круто!

Второй прикол здесь - когда нажимаешь на Log out он тебя выбрасывает сразу же без дополнительных предупреждении. Тип прикинь ты хотел нажать на Cancel но "привет тачпад" экран у тебя залип и ты случайно тыкнул Log out.

Example 2 - Bitrix

Тоже самое, сами смотрите: Pasted image 20250104181742.png Самое последнее это совсем другое окно, притом самого Битрикса, а верхние это уже пользовательские воронки. Я эту кнопку после гуглинга только смог найти, хотя вроде его местоположение правильное, но вот дизайн сам увы.

Message from sts.gov.kz

Mar 13, 2025 
Received: from postback9b.mail.yandex.net (postback9b.mail.yandex.net [2a02:6b8:c02:900:1:45:d181:da09])
by mail-notsolitesrv-production-main-91.iva.yp-c.yandex.net (notsolitesrv/Yandex) with LMTPS id ZubeIk0OtUKF-wn4wgy0f;
Wed, 12 Mar 2025 15:46:11 +0300
Received: from mail-nwsmtp-mxfront-production-main-44.sas.yp-c.yandex.net (mail-nwsmtp-mxfront-production-main-44.sas.yp-c.yandex.net [IPv6:2a02:6b8:c1b:3982:0:640:daf:0])
by postback9b.mail.yandex.net (Yandex) with ESMTPS id 4F937608F1;
Wed, 12 Mar 2025 15:46:11 +0300 (MSK)
Received: from sts.gov.kz (nkcib.sts.kz [91.214.43.35])
by mail-nwsmtp-mxfront-production-main-44.sas.yp-c.yandex.net (mxfront/Yandex) with ESMTPS id 9kqmjF0E8eA0-vShlcwCv;
Wed, 12 Mar 2025 15:46:10 +0300
To: undisclosed-recipients:;
X-Yandex-Fwd: 1
Authentication-Results: mail-nwsmtp-mxfront-production-main-44.sas.yp-c.yandex.net; spf=pass (mail-nwsmtp-mxfront-production-main-44.sas.yp-c.yandex.net: domain of sts.gov.kz designates 91.214.43.35 as permitted sender, rule=[a]) smtp.mail=test@sts.gov.kz
X-Yandex-Spam: 4
Received: from User ([45.64.112.98])
by sts.gov.kz with SMTP id 52CCjCeR003290-52CCjCeT003290;
Wed, 12 Mar 2025 17:45:13 +0500
Message-Id: <202503121245.52CCjCeR003290-52CCjCeT003290@sts.gov.kz>
Reply-To: <williamleonard653@gmail.com>
From: "WILLIAM LEONARD"<test@sts.gov.kz>
Subject: PACKAGE FOR DELIVERY
Date: Wed, 12 Mar 2025 20:45:27 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-FEAS-Client-IP: 45.64.112.98
X-FE-Last-Public-Client-IP: 45.64.112.98
X-FE-Policy-ID: 3:1:0:SYSTEM
Return-Path: test@sts.gov.kz
X-Yandex-Forward: c80f08b76eacb68a8991195777744d5a
X-Yandex-Forward: d3d158788ceea54c764cedea491a1863

MESSAGE FROM VICE CHAIRMAN HARRISBURG.
Harrisburg International Airport Pennsylvania
One Terminal Drive, Middle town,
PA 17057, Pennsylvania USA

                  Your Abandoned Package For Delivery

I have very vital information to give to you, but first I must have your trust before I review it to you because it may affect my job,so I need somebody that I can trust for me to be able to review the secret to you.

I am Mr.William Leonard, head of luggage/baggage storage facilities (Operations, Maintenance, Transportation) here at the Harrisburg International Airport, Pennsylvania USA. During my recent withheld package routine check at the Airport Storage Vault, I discovered an abandoned shipment from a Diplomat from London and when scanned it revealed an undisclosed sum of money in a Metal Trunk Box weighing approximately 110kg. The consignment was abandoned because the Contents of the consignment was not properly declared by the consignee as "MONEY" rather it was declared as personal effect to avoid interrogation and also the inability of the diplomat to pay for the United States Non Inspection Charges which is $4,700 USD. On my assumption the consignment is still left in our Storage House here at the Harrisburg International Airport Pennsylvania till date. The details of the consignment including your name, your email address and the official documents from the United Nations office
in Geneva are tagged on the Trunk

However, to enable me confirm if you are the actual recipient of this consignment as the assistant director of the Inspection Unit, I will advise you provide your current Phone Number and Full Address, to enable me cross check if it corresponds with the address on the official documents including the name of nearest Airport around your city. Please note that this consignment is supposed to have been returned to the United States Treasury Department as unclaimed delivery due to the delays in concluding the clearance processes so as a result of this, I will not be able to receive your details on my official email account. So in order to enable me to cross check your details, I will advise you to send the required details to my private email address for quick processing and response. Once I confirm you as the actual recipient of the trunk box, I can get everything concluded within 48 hours upon your acceptance and proceed to your address for delivery.

Lastly, be informed that the reason I have taken it upon myself to contact you personally about this abandoned consignment is because I want us to transact this business and share the money 70% for you and 30% for me since the consignment has not yet been returned to the United States Treasury Department after being abandoned by the diplomat so immediately the confirmation is made, I will go ahead and pay for the United States Non Inspection Fee of $4,700 dollars and arrange for the box to be delivered to your doorstep Or I can bring it by myself to avoid any more trouble but you have to assure me of my 30% share.

I wait to hear from you urgently if you are still alive and I will appreciate it if we can keep this deal confidential. Please get back to me via my private Email:( williamleonard46[@]aol[dot]com ) for further directives.

Thanks,

William Leonard.

VICE CHAIRMAN HARRISBURG,
(Operations,Maintenance,Transportation)
Harrisburg International Airport Pennsylvania
One Terminal Drive, Middle town.

Apparently, I have been on a dating site... lol

Mar 29, 2025 
Received: from postback18a.mail.yandex.net (postback18a.mail.yandex.net [2a02:6b8:c0e:500:1:45:d181:da18])
  by zgzkrblwmilsm4ww.vla.yp-c.yandex.net (notsolitesrv/Yandex) with LMTPS id Ko1iEKv9rzhI-wcqex5mF
Received: from mail-nwsmtp-mxfront-production-main-66.iva.yp-c.yandex.net (mail-nwsmtp-mxfront-production-main-66.iva.yp-c.yandex.net [IPv6:2a02:6b8:c0c:859e:0:640:dbee:0])
  by postback18a.mail.yandex.net (Yandex) with ESMTPS id 140D560B59
Received: from mail-relay.psycho.email (mail-relay.psycho.email [5.78.95.7])
  by mail-nwsmtp-mxfront-production-main-66.iva.yp-c.yandex.net (mxfront/Yandex) with ESMTPS id paWQCj0E4uQ0-MGUaPcdc;
  Tue, 25 Mar 2025 23:36:53 +0300
To: undisclosed-recipients:;
X-Yandex-Fwd: 1
Authentication-Results: mail-nwsmtp-mxfront-production-main-66.iva.yp-c.yandex.net; spf=pass (mail-nwsmtp-mxfront-production-main-66.iva.yp-c.yandex.net: domain of terrorist.services designates 5.78.95.7 as permitted sender, rule=[ip4:5.78.95.7]) smtp.mail=hexxa@terrorist.services; dkim=pass header.i=@terrorist.services
X-Yandex-Spam: 4
Received: from box.psycho.email (box.psycho.email [167.114.127.91])
  by mail-relay.psycho.email (Postfix) with ESMTPS id 679543053D;
  Tue, 25 Mar 2025 20:34:08 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=terrorist.services;
  s=mail; t=1742934817;
  bh=wDibchjsIpcKZPwBCKknUNePsozakTRTASULuzLMvyk=;
  h=Reply-To:From:Subject:Date:From;
  b=GZTQkhrvlUyQrAk+u/NQNqazDTdXt1Nmi7z50TBcNtGZxHovsfVmc+Fb423I8UvLg
   UIcc3mDOdS4scaMLopxnQdG0QpT0WSLJlm1iMv9cbcQ/IJjW4vf+5ABUT+zs/XIr+Z
   IitJDF+GltpO9B2SaRAW5yi/EuYSli/oHvT/Gyi6KHJX+sLAJjNcsjkHZffpxgA2ah
   2Q6YbLfwd5I97N2AHesdyBuqRZTogJqfRkjQXsv7YwrS2GsdkzsFuW0fY0hozJ+gkV
   CLL5WQ/U5t1NJB1lu9Ji9IsuHSvnSpMHl11Q77l+m1s9hYi3VJXHSVlFbZI0rORTlJ
   vu51oY006f91Q==
Received: from authenticated-user (box.psycho.email [167.114.127.91])
  (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
   key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256)
  (No client certificate requested)
  by box.psycho.email (Postfix) with ESMTPSA id 738BF823E2;
  Tue, 25 Mar 2025 15:33:37 -0500 (CDT)
Message-ID: <22cf862dd91d37396ac08f38bc794e2fe501@terrorist.services>
Reply-To: Jessica <hexxa@terrorist.services>
From: Jessica <hexxa@terrorist.services>
Subject: Hi there, remember who I am? 
Date: Tue, 25 Mar 2025 23:33:35 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="82f5bc17e3270d0350fab502864374e31fce"
Return-Path: hexxa@terrorist.services
X-Yandex-Forward: c80f08b76eacb68a8991195777744d5a

--82f5bc17e3270d0350fab502864374e31fce
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi! My name is Jessica, and I=E2=80=99m 36 years old. Some time ago, you =
left me your email address on a dating site, but I don=E2=80=99t remember=
 which one. Now, I finally have the opportunity to write to you. I hope t=
o hear from you soon. I=E2=80=99m looking for a kind and caring man to bu=
ild a serious and meaningful relationship with. I have never been married=
 and truly want something long-term. I would love to receive your reply a=
nd see your photos. Please reach out to me if you are sincerely intereste=
d in getting to know me better. Here is my email olwolterpgen1983@outlook=
.com

--82f5bc17e3270d0350fab502864374e31fce
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bottomMargin=3D5 bgColor=3D"#ffffff" leftMargin=3D5 topMargin=3D5 r=
ightMargin=3D5>
<div>Hi! My name is Jessica, and I=E2=80=99m 36 years old. Some time ago,=
 you left me your email address on a dating site, but I don=E2=80=99t rem=
ember which one. Now, I finally have the opportunity to write to you. I h=
ope to hear from you soon. I=E2=80=99m looking for a kind and caring man =
to build a serious and meaningful relationship with. I have never been ma=
rried and truly want something long-term. I would love to receive your re=
ply and see your photos. Please reach out to me if you are sincerely inte=
rested in getting to know me better. Here is my email olwolterpgen1983@ou=
tlook.com</div></body></html>

--82f5bc17e3270d0350fab502864374e31fce--

Как меня пытались развести, но что-то пошло не так...

Mar 29, 2025

Здравствуйте. Хочу поделится с вами информацией о скамере, кторый хотел украсть данные кредитной карты. Я как хобби занимаюсь разработкой ПО и увелкаюсь OSINT, и переодическии я выкладываю на площадке OLX объявления. Спустя пару дней как я выложил и купил VIP пакет для объявления мне написал один человек с предложением перейти в Telegram. Я не стал отвечать, т.к. сразу было ясно что он пытается меня развести, только спустия 3-5 дней я все таки решил ответить ему, и заодно попытатся задеононить его.

Продавал я аквариум, цена была около 100к тенге. Схема очень простая - тебя просят перейти в Телеграм, дальше тебе отправляют ссылку, где надо ввести данные своей карты, и все деньги уходят скамеру.

И так по порядку. Прикладываю скрины ниже:

Telegram: @whwvnsn - ID: 6308353080, Estimated registration date: October 2023.

Домен который мне он скинул чтобы я заполнил данные карты своей - KzOperations.online. IP: 194.58.112.174, Created on 2023-10-07, можно сказать создан почти вместе с Telegram аккаунтом. Поиск по WHOIS не дал каких либо зацепок по этом домену, но удалось найти очень схожии домен который был в работе пол года назад, но уже с дригм TLD - post-kz.kzoperations.shop. Система URL scan определила данный домен как фишенговый - https://urlscan.io/result/aac994ab-5183-4a61-9837-0ed6dbe6fbf9#summary. Работал за Cloudflare - 188.114.96.3, created 2023-02-02 - https://2ip.io/a/post-kz.kzoperations.shop/ . Немного поисках в интернете удалось найти WHOIS запись данного домена - https://service.loxotrona.net/check/post-kz.kzoperations.shop . Почти все данные мусорные, мы просто отметаем их, но обращаем внимание на почту - badboy8905@gmail.com . Пытаемся reverse lookup WHOIS по данной почте, и мы полчаем аж 276 результата (https://whoxy.com/email/163061384 и 77 результатов по этой же почте но в другом сервис (https://viewdns.info/reversewhois/?q=badboy8905%40gmail.com). На основе этих данных мы предпологаем что человек начал заниматся этим делом примерно с августа 2022 года.

Пытаемся пробить инфу через OSINT утилиты:

badboy8905@gmail.com: 1. Google Name: — GAIA ID: 108070244582627351651 👤 Plus Profile (https://web.archive.org/web/*/plus.google.com/108070244582627351651)

  1. COMB Email:Assword: badboy8905@email.com:sasha00 badboy8905@gmail.com:Ghost_99gg badboy8905@gmail.com:PaTrOnAs0000 badboy8905@gmail.com:sasha00 badboy8905@mail.ru:PaTrOnAs0000 badboy8905@mail.ru:sasha00 badboy8905@yandex.ru:sasha00 -> Account not found in Yandex Login

  2. OkRu Name part: Ghost A***, 23 old - ссылку на профиль не удалось откопать к сожалению Location: — Phone part: — Registered: 4 ноября 2018

📥 Аккаунты «lolz.guru» [2018]: ├ ID: 70489 ├ Ник: Ghost_99gg ├ Пол: male ├ Часовой пояс: Europe/Athens ├ Email: badboy8905@gmail.com ├ Дата регистрации: 2017-01-04 11:03:00 └ Последняя активность: 2017-01-04 11:03:14 RAW: (70489, 'Ghost_99gg', 'badboy8905@gmail.com', 'male', '', 2, 0, 'Europe/Athens', 1, 1, 2, '', 2, 2, 0, 10, 1483527780, 1483527794, 0, 5, 0, 0, 0, '', 'valid', 0, 0, 0, 0, 0, 0, '0.00', '0.00', '0.00', '', 1, '', 0, 0, NULL, 0, 0, '', 1, 1, 0)

🏤 Новая Почта Украина [2016-2022]: ├ Адрес: Ponornytsya , Kovpaka 27 ├ Город: Koropskyi ├ Страна: Ukraine ├ Телефон: +380636252658 ├ Email: badboy8905@gmail.com ├ ФИО: Alexsandr Chertopolokh ├ Адрес доставки: Depot №1: vul. Gagarina, 2 ├ Город доставки: Ponornytsia └ Страна доставки: Ukraine

├ Адрес: 27 Ковпака 27, Новая Почта 1 Понорница ├ Город: SMTPonornitsa ├ Страна: Ukraine ├ Телефон: +380636252658 ├ Email: badboy8905@gmail.com ├ ФИО: Чертополох Александр Юрьевич ├ Адрес доставки: Depot №1: vul. Gagarina, 2 ├ Город доставки: Ponornytsia └ Страна доставки: Ukraine

├ Адрес: 27 Ковпака 27, Новая Почта 1 Понорница ├ Город: SMTPonornitsa ├ Страна: Ukraine ├ Телефон: +380636252658 ├ Email: badboy8905@gmail.com ├ ФИО: Чертополох Александр Юрьевич ├ Адрес доставки: Відділення №1: вул. Гагаріна, 2 ├ Город доставки: смт. Понорниця, Чернігівська обл., Коропський р-н └ Страна доставки: Ukraine

Тааакс, теперь мы имеем адресс и номер телефона, уже отлично. Пытаемся найти информацию по телефону +380636252658:

Getcontact - Сашко

  1. Details Location: 🇺🇦 Ukraine Carrier: Life:)

  2. OkRu Name: OTPOK Cw, July 13 1997 (26 years old) - https://ok.ru/profile/567937246291 (https://web.archive.org/web/20231015060050/https://ok.ru/profile/567937246291) Location: Киев Email: badboy8905@gmail.com Registered: 4 февраля 2016

  3. IDInfo Name: Miss Love

Тут ничего интересного. Пытаемся сделать поиск в Yandex по ФИО и мы видим результат обмен криптовалюты - https://clickpay.cx/ru/order/2WY4WU1WZRO . Ковыряемся в исходниках страницы и мы получаем тот же саммую почту и из новых данных номер карты и еще один номер телефона:

5375 4114 1209 6997 - Карта Universalbank (Mastercard, Debit) -> получить хоть какие-то данные из номера карты имея только OSINT под рукой думаю сложно, либо я просто не настолько опытный

+380954543439 - Получаем данные по Getcontakt, результат - Чертополох Саша и на этом же номере Telegram: @alex004k.

Поиск по паролю PaTrOnAs0000 удалось выйти на его другие почты на других доменах: ├1.badboy8904@mail.ru ├2.badboy8905@gmail.com ├3.badboy8905@mail.ru └4.badboy8906@mail.ru

Также попытался сделать поиск по паролю sasha00, но получил уж слишком много номеров и почт (спасибо Глазу Бога), но остановился на парочку инетерсных номеров: +380935603722 - Саша Мой -> Telegram: @chertopolokh_69 -> тут гадалке не ходи +380965834883 - Саша -> Telegram: Name: C -> Сложно сказать его ли

badboy8906@mail.ru -> https://my.mail.ru/mail/badboy8906/ (https://web.archive.org/web/20231015055941/https://my.mail.ru/mail/badboy8906/) - Видим что человек (был) любитель игры contact wars, его профиль Odnoklassniki поддверждает это, как и возраст. Phone: +380966**, Name: саша иванов. Еще один номер который нам не известен. Еще на этой почте есть ICQ - https://icq.im/badboy8906@mail.ru , name: саша иванов

badboy8906@rambler.ru:4521688

badboy8905@mail.ru badboy8904@mail.ru

Сложно сказать его ли Twitter, возможно использовал как приманку для наживки adult контентом: https://twitter.com/badboy8906 (http://web.archive.org/web/20231015060816/https://twitter.com/badboy8906)

My experience of taking medications and some side effects and notes about Vortioxetine (Brintellix, Trintellix, Fonksera), Lamotrigine (Lamictal) and Olanzapine (Ferzapine)

Jan 13, 2025

...