Skip to content

Welcome to my blog.

Below is the list of all my blog posts.

List of the essential applications that you need to have

Jan 29, 2023

These are my recommended must-have applications that you should try to use (at least). Sure, tastes differ, but these apps cover most of my needs. I prefer to use FOSS, and I strive to achieve this in every way possible.

Must have browser extensions

Apr 11, 2023

My must have browser extensions

Leverage Whatsapp like your own API!

Jun 21, 2024

I have collected different variations of toolkits to make communicating with Whatsapp easier without creating a business account.

Use at your own risk! I'm not responsible for any misuse of the information provided here.

Libraries

Rest-API

Outdated

Third-party API solutions

  • WhatsApp API for bulk messages, groups, channels, statuses
  • Unofficial WhatsApp API for Developers | Free Trial WhatsApp API
  • WASenderApi – Developer-focused WhatsApp API platform with unlimited messaging, no per-message fees, and support for multiple sessions via a simple REST API. Features include sending text, images, videos, documents, contacts, locations, webhook support, and SDKs for Node.js, Python, and Laravel. Transparent pricing from $6/month and a 3-day free trial.
  • Unipile – Unified API platform integrating messaging, email, and calendar channels (LinkedIn, WhatsApp, Gmail, Telegram, Instagram, etc.) with 500+ endpoints. Especially strong in LinkedIn automation (profile, posts, InMail, invitations). Designed for businesses to streamline and automate multi-channel communications.
  • Green-API – WhatsApp API service with no physical phone required, offering free and paid tiers. Supports messaging, media up to 100MB, GPT chatbot integration, group management, and status broadcasting. Based in Kazakhstan, with Russian support, mobile app management, and libraries for 1C:Enterprise, Node.js, Python, and Java. Free developer plan available.
  • 1msg.io – WhatsApp Business API provider offering fast onboarding, scalable messaging, and automation tools for businesses and developers. Features include multi-channel support, campaign management, and integration with popular CRMs. Designed for quick setup and reliable delivery of WhatsApp messages.
  • 360dialog – Official Meta Solution Partner trusted by 50,000+ businesses, providing a robust WhatsApp API platform. Enables rapid onboarding (live in 30 minutes), scalable messaging infrastructure, campaign management, analytics (360Pilot), and seamless integration for platforms and brands. Handles 4+ billion messages with proven reliability. Source
  • Quickmessage Unofficial WhatsApp API – Indian provider offering an unofficial WhatsApp API for businesses. Features include sending/receiving messages, group messaging, media sharing, client management, chat history, notifications, automation (chatbots), analytics, and secure access. Designed for customer support, marketing, appointment reminders, and more. Source
  • One Site Up Unofficial WhatsApp APIs – Platform providing unofficial WhatsApp API access for sending messages, media, and buttons. Offers RESTful endpoints, code samples for multiple languages (JavaScript, Python, Java), and 24/7 support. Suitable for businesses needing flexible WhatsApp integration and automation. Source

Sus Third-party API solutions

WABA (WahtsApp Buisness API)

  • WhatsApp Business Management API
  • WhatsApp Business API | Twilio
  • Gupshup - Conversational tools for customer engagement
  • WhatsApp Business Platform
  • 360dialog - Performance marketing for WhatsApp
  • Center your workflow through Conversational AI

  • Wati | Business Messaging Made Simple on Your Favourite App!

  • UltraMsg – WhatsApp API gateway for medium and large businesses. Offers unlimited messaging, quick onboarding, REST API, and SDKs for multiple languages (PHP, Node, Python, Java, .NET, Go, etc.). Features include chatbots, notifications, automation, and 24/7 support. $39/month with free trial. Source

  • GreenWABA – WhatsApp API provider with developer, chatbot, and business plans. Features include unlimited messages, media support, group messaging, integrations (Zapier, Make, Slack), and SDKs for Node.js, Python, Go, Java, and 1C:Enterprise. Free developer tier available. Source
  • CallMeBot – Free and paid WhatsApp API for sending messages, notifications, and alerts. Simple HTTP API, no coding required for basic use. Suitable for IoT, home automation, and personal notifications. Source
  • Wassenger – WhatsApp API platform for developers and businesses. Features include multi-device support, real-time webhooks, message queueing, media, and group management. Offers automation, analytics, and integrations. Source
  • APISender – WhatsApp API for sending messages, media, and files. Provides RESTful endpoints, automation, and integration with CRMs and other platforms. Source
  • APIChat – WhatsApp API provider with RESTful endpoints, automation, and integration features. Offers code samples, webhooks, and multi-language support. Source
  • APIChat (EN) – English documentation and support for APIChat WhatsApp API. Source
  • WBizTool – WhatsApp API and automation platform for businesses. Features include bulk messaging, chatbots, campaign management, and analytics. Source
  • Wazzup24 – WhatsApp and Instagram messaging API for sales and support teams. Offers CRM integrations, automation, and analytics. Source
  • WhatsGate – Russian WhatsApp API provider for sending and receiving messages, media, and notifications. Offers automation and integration with business systems. Source
  • Umnico WhatsApp Integration – Multi-channel messaging platform with WhatsApp API integration. Features include CRM integration, automation, analytics, and support for multiple messengers. Source
  • Chat-API – API for messenger automation and integration. Offers messaging, media, group management, and webhooks. Note: Received a cease and desist from WhatsApp. See PDF. Source

Custom Telegram client API credentials

Jul 17, 2023

There are Telegram Custom Clients API credentials.

Disclaimer 1: I don't own any of them. These credentials are for educational purposes only and taken from open sources.

Disclaimer 2: You can't just copy and paste official client credentials into custom bundled client. Telegram server doesn't let you to have more than 1 account. If you want see this limitation in real world use Telegraher (outdated).

Reset the trial version of Transcribe! on Linux (and maybe MacOS)

Jul 23, 2023

For Windows, we have a number of keygen activators that allow we to use Transcribe! free of charge. For Linux, these keygens are not compatible, so we have to do something about that. Without many words, let's just give you a script that will reset the trial version of Transcribe!

rm ~/.yeqwqauh ~/.Transcribe!7

Yep, that is :) Deleting these files will reset Transcribe! settings, including trial information.

UI design - the bad and the good

Mar 17, 2025

Good

Form action button still active when user doesn't select all fields

Very cool design logic in Github.com repository creating page. I didn't select owner, and after clicking "Create repository" it's shows me warning under owner input "Please select an owner". Most services probably would just make button disabled, until inner form validation logic wouldn't pass requirements.

As alternative I would suggest to hide all other junk stuff below description, and after selection owner and repository name it would just pop up under

Pasted image 20250104180222.png

Bad

Burger on right side, but sidebar itself on the left side

Pasted image 20250314012936.png

Не разделять сущности по цвету/дизайну

Example 1 - Mobile application Active

Pasted image 20250104180947.png

Загаловок написан - Выберите номер. Так а какого фига задается PAPA, то есть считай мой добавленый номер по дизайну в одном ряду с действиями? Ну вот я назвал номер PAPA, а что если назову "- DELETE A NUMBER" или же добавлю десять "CANCEL"?. Круто? Круто!

Второй прикол здесь - когда нажимаешь на Log out он тебя выбрасывает сразу же без дополнительных предупреждении. Тип прикинь ты хотел нажать на Cancel но "привет тачпад" экран у тебя залип и ты случайно тыкнул Log out.

Example 2 - Bitrix

Тоже самое, сами смотрите: Pasted image 20250104181742.png Самое последнее это совсем другое окно, притом самого Битрикса, а верхние это уже пользовательские воронки. Я эту кнопку после гуглинга только смог найти, хотя вроде его местоположение правильное, но вот дизайн сам увы.

Message from sts.gov.kz

Mar 13, 2025 
Received: from postback9b.mail.yandex.net (postback9b.mail.yandex.net [2a02:6b8:c02:900:1:45:d181:da09])
by mail-notsolitesrv-production-main-91.iva.yp-c.yandex.net (notsolitesrv/Yandex) with LMTPS id ZubeIk0OtUKF-wn4wgy0f;
Wed, 12 Mar 2025 15:46:11 +0300
Received: from mail-nwsmtp-mxfront-production-main-44.sas.yp-c.yandex.net (mail-nwsmtp-mxfront-production-main-44.sas.yp-c.yandex.net [IPv6:2a02:6b8:c1b:3982:0:640:daf:0])
by postback9b.mail.yandex.net (Yandex) with ESMTPS id 4F937608F1;
Wed, 12 Mar 2025 15:46:11 +0300 (MSK)
Received: from sts.gov.kz (nkcib.sts.kz [91.214.43.35])
by mail-nwsmtp-mxfront-production-main-44.sas.yp-c.yandex.net (mxfront/Yandex) with ESMTPS id 9kqmjF0E8eA0-vShlcwCv;
Wed, 12 Mar 2025 15:46:10 +0300
To: undisclosed-recipients:;
X-Yandex-Fwd: 1
Authentication-Results: mail-nwsmtp-mxfront-production-main-44.sas.yp-c.yandex.net; spf=pass (mail-nwsmtp-mxfront-production-main-44.sas.yp-c.yandex.net: domain of sts.gov.kz designates 91.214.43.35 as permitted sender, rule=[a]) smtp.mail=test@sts.gov.kz
X-Yandex-Spam: 4
Received: from User ([45.64.112.98])
by sts.gov.kz with SMTP id 52CCjCeR003290-52CCjCeT003290;
Wed, 12 Mar 2025 17:45:13 +0500
Message-Id: <202503121245.52CCjCeR003290-52CCjCeT003290@sts.gov.kz>
Reply-To: <williamleonard653@gmail.com>
From: "WILLIAM LEONARD"<test@sts.gov.kz>
Subject: PACKAGE FOR DELIVERY
Date: Wed, 12 Mar 2025 20:45:27 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-FEAS-Client-IP: 45.64.112.98
X-FE-Last-Public-Client-IP: 45.64.112.98
X-FE-Policy-ID: 3:1:0:SYSTEM
Return-Path: test@sts.gov.kz
X-Yandex-Forward: c80f08b76eacb68a8991195777744d5a
X-Yandex-Forward: d3d158788ceea54c764cedea491a1863

MESSAGE FROM VICE CHAIRMAN HARRISBURG.
Harrisburg International Airport Pennsylvania
One Terminal Drive, Middle town,
PA 17057, Pennsylvania USA

                  Your Abandoned Package For Delivery

I have very vital information to give to you, but first I must have your trust before I review it to you because it may affect my job,so I need somebody that I can trust for me to be able to review the secret to you.

I am Mr.William Leonard, head of luggage/baggage storage facilities (Operations, Maintenance, Transportation) here at the Harrisburg International Airport, Pennsylvania USA. During my recent withheld package routine check at the Airport Storage Vault, I discovered an abandoned shipment from a Diplomat from London and when scanned it revealed an undisclosed sum of money in a Metal Trunk Box weighing approximately 110kg. The consignment was abandoned because the Contents of the consignment was not properly declared by the consignee as "MONEY" rather it was declared as personal effect to avoid interrogation and also the inability of the diplomat to pay for the United States Non Inspection Charges which is $4,700 USD. On my assumption the consignment is still left in our Storage House here at the Harrisburg International Airport Pennsylvania till date. The details of the consignment including your name, your email address and the official documents from the United Nations office
in Geneva are tagged on the Trunk

However, to enable me confirm if you are the actual recipient of this consignment as the assistant director of the Inspection Unit, I will advise you provide your current Phone Number and Full Address, to enable me cross check if it corresponds with the address on the official documents including the name of nearest Airport around your city. Please note that this consignment is supposed to have been returned to the United States Treasury Department as unclaimed delivery due to the delays in concluding the clearance processes so as a result of this, I will not be able to receive your details on my official email account. So in order to enable me to cross check your details, I will advise you to send the required details to my private email address for quick processing and response. Once I confirm you as the actual recipient of the trunk box, I can get everything concluded within 48 hours upon your acceptance and proceed to your address for delivery.

Lastly, be informed that the reason I have taken it upon myself to contact you personally about this abandoned consignment is because I want us to transact this business and share the money 70% for you and 30% for me since the consignment has not yet been returned to the United States Treasury Department after being abandoned by the diplomat so immediately the confirmation is made, I will go ahead and pay for the United States Non Inspection Fee of $4,700 dollars and arrange for the box to be delivered to your doorstep Or I can bring it by myself to avoid any more trouble but you have to assure me of my 30% share.

I wait to hear from you urgently if you are still alive and I will appreciate it if we can keep this deal confidential. Please get back to me via my private Email:( williamleonard46[@]aol[dot]com ) for further directives.

Thanks,

William Leonard.

VICE CHAIRMAN HARRISBURG,
(Operations,Maintenance,Transportation)
Harrisburg International Airport Pennsylvania
One Terminal Drive, Middle town.

Apparently, I have been on a dating site... lol

Mar 29, 2025 
Received: from postback18a.mail.yandex.net (postback18a.mail.yandex.net [2a02:6b8:c0e:500:1:45:d181:da18])
  by zgzkrblwmilsm4ww.vla.yp-c.yandex.net (notsolitesrv/Yandex) with LMTPS id Ko1iEKv9rzhI-wcqex5mF
Received: from mail-nwsmtp-mxfront-production-main-66.iva.yp-c.yandex.net (mail-nwsmtp-mxfront-production-main-66.iva.yp-c.yandex.net [IPv6:2a02:6b8:c0c:859e:0:640:dbee:0])
  by postback18a.mail.yandex.net (Yandex) with ESMTPS id 140D560B59
Received: from mail-relay.psycho.email (mail-relay.psycho.email [5.78.95.7])
  by mail-nwsmtp-mxfront-production-main-66.iva.yp-c.yandex.net (mxfront/Yandex) with ESMTPS id paWQCj0E4uQ0-MGUaPcdc;
  Tue, 25 Mar 2025 23:36:53 +0300
To: undisclosed-recipients:;
X-Yandex-Fwd: 1
Authentication-Results: mail-nwsmtp-mxfront-production-main-66.iva.yp-c.yandex.net; spf=pass (mail-nwsmtp-mxfront-production-main-66.iva.yp-c.yandex.net: domain of terrorist.services designates 5.78.95.7 as permitted sender, rule=[ip4:5.78.95.7]) smtp.mail=hexxa@terrorist.services; dkim=pass header.i=@terrorist.services
X-Yandex-Spam: 4
Received: from box.psycho.email (box.psycho.email [167.114.127.91])
  by mail-relay.psycho.email (Postfix) with ESMTPS id 679543053D;
  Tue, 25 Mar 2025 20:34:08 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=terrorist.services;
  s=mail; t=1742934817;
  bh=wDibchjsIpcKZPwBCKknUNePsozakTRTASULuzLMvyk=;
  h=Reply-To:From:Subject:Date:From;
  b=GZTQkhrvlUyQrAk+u/NQNqazDTdXt1Nmi7z50TBcNtGZxHovsfVmc+Fb423I8UvLg
   UIcc3mDOdS4scaMLopxnQdG0QpT0WSLJlm1iMv9cbcQ/IJjW4vf+5ABUT+zs/XIr+Z
   IitJDF+GltpO9B2SaRAW5yi/EuYSli/oHvT/Gyi6KHJX+sLAJjNcsjkHZffpxgA2ah
   2Q6YbLfwd5I97N2AHesdyBuqRZTogJqfRkjQXsv7YwrS2GsdkzsFuW0fY0hozJ+gkV
   CLL5WQ/U5t1NJB1lu9Ji9IsuHSvnSpMHl11Q77l+m1s9hYi3VJXHSVlFbZI0rORTlJ
   vu51oY006f91Q==
Received: from authenticated-user (box.psycho.email [167.114.127.91])
  (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
   key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256)
  (No client certificate requested)
  by box.psycho.email (Postfix) with ESMTPSA id 738BF823E2;
  Tue, 25 Mar 2025 15:33:37 -0500 (CDT)
Message-ID: <22cf862dd91d37396ac08f38bc794e2fe501@terrorist.services>
Reply-To: Jessica <hexxa@terrorist.services>
From: Jessica <hexxa@terrorist.services>
Subject: Hi there, remember who I am? 
Date: Tue, 25 Mar 2025 23:33:35 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="82f5bc17e3270d0350fab502864374e31fce"
Return-Path: hexxa@terrorist.services
X-Yandex-Forward: c80f08b76eacb68a8991195777744d5a

--82f5bc17e3270d0350fab502864374e31fce
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi! My name is Jessica, and I=E2=80=99m 36 years old. Some time ago, you =
left me your email address on a dating site, but I don=E2=80=99t remember=
 which one. Now, I finally have the opportunity to write to you. I hope t=
o hear from you soon. I=E2=80=99m looking for a kind and caring man to bu=
ild a serious and meaningful relationship with. I have never been married=
 and truly want something long-term. I would love to receive your reply a=
nd see your photos. Please reach out to me if you are sincerely intereste=
d in getting to know me better. Here is my email olwolterpgen1983@outlook=
.com

--82f5bc17e3270d0350fab502864374e31fce
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bottomMargin=3D5 bgColor=3D"#ffffff" leftMargin=3D5 topMargin=3D5 r=
ightMargin=3D5>
<div>Hi! My name is Jessica, and I=E2=80=99m 36 years old. Some time ago,=
 you left me your email address on a dating site, but I don=E2=80=99t rem=
ember which one. Now, I finally have the opportunity to write to you. I h=
ope to hear from you soon. I=E2=80=99m looking for a kind and caring man =
to build a serious and meaningful relationship with. I have never been ma=
rried and truly want something long-term. I would love to receive your re=
ply and see your photos. Please reach out to me if you are sincerely inte=
rested in getting to know me better. Here is my email olwolterpgen1983@ou=
tlook.com</div></body></html>

--82f5bc17e3270d0350fab502864374e31fce--

Как меня пытались развести, но что-то пошло не так...

Mar 29, 2025

Я живу в Казахстане, по профессии музыкант, как хобби занимаюсь разработкой ПО и увлекаюсь OSINT. Периодически выкладываю объявления на OLX — продавал аквариум, цена была около 100к тенге. Спустя пару дней после того как я разместил объявление и купил VIP-пакет — мне написал некий человек с просьбой перейти в Telegram. Я сразу понял, что это развод, и не отвечал 3–5 дней. Потом всё же решил ответить — и заодно попробовать его деанонимизировать.

Схема очень простая: тебя просят перейти в Телеграм, присылают ссылку, где надо ввести данные своей карты — и всё, деньги уходят скамеру.

Его Telegram: @whwvnsn — ID: 6308353080, предположительно зарегистрирован в октябре 2023 года.

Профиль мошенника в Telegram — @whwvnsn, ID: 6308353080

Он скинул мне домен для ввода данных карты — KzOperations.online. IP: 194.58.112.174, создан 2023-10-07 — почти одновременно с Telegram-аккаунтом. WHOIS по этому домену ничего полезного не дал, однако я нашёл очень похожий домен с другим TLD, который работал полгода назад — post-kz.kzoperations.shop. URLScan определил его как фишинговый: результат сканирования. Домен работал за Cloudflare — 188.114.96.3, создан 2023-02-02.

Фишинговая страница KzOperations.online — форма ввода данных карты

Покопавшись в интернете, я нашёл WHOIS-запись этого домена на service.loxotrona.net. Почти всё — мусор, но один элемент зацепил: почта badboy8905@gmail.com. Я сделал reverse-lookup WHOIS по ней и получил 276 результатов на whoxy.com и 77 на viewdns.info. Судя по датам, человек занимается этим примерно с августа 2022 года.

А вот как выглядела переписка в Telegram — мошенник действовал под именем «Динара»:

Переписка с мошенником — октябрь 10, начало разговора

Переписка — мошенник просит адрес и присылает ссылку на оплату

Переписка — отправка фишинговой ссылки и PDF от «Homebank»

Переписка — мошенник пытается убедить ввести данные карты повторно

Переписка — продолжение давления, попытки «помочь»

Переписка — финал, мошенник предлагает обновить ссылку

Что мне удалось найти по email: badboy8905@gmail.com

Google:

Утечки COMB — нашёл несколько пар логин/пароль:

badboy8905@email.com   : sasha00
badboy8905@gmail.com   : Ghost_99gg
badboy8905@gmail.com   : PaTrOnAs0000
badboy8905@gmail.com   : sasha00
badboy8905@mail.ru     : PaTrOnAs0000
badboy8905@mail.ru     : sasha00
badboy8905@yandex.ru   : sasha00  -> аккаунт не найден в Yandex

OK.ru: имя (частично) Ghost A***, 23 года, зарегистрирован 4 ноября 2018 года.

Через OSINT-утилиты я вытащил его аккаунт на lolz.guru из слитой базы 2018 года:

ID:                70489
Ник:               Ghost_99gg
Пол:               male
Часовой пояс:      Europe/Athens
Email:             badboy8905@gmail.com
Дата регистрации:  2017-01-04 11:03:00

А вот что нашлось в утечке базы Новой Почты Украины [2016–2022] — и это уже реально интересно:

ФИО:       Alexsandr Chertopolokh / Чертополох Александр Юрьевич
Адрес:     Ponornytsya, Kovpaka 27
Город:     Koropskyi / смт. Понорниця, Чернігівська обл., Коропський р-н
Страна:    Ukraine
Телефон:   +380636252658
Email:     badboy8905@gmail.com
Доставка:  Відділення №1, вул. Гагаріна, 2 — Понорниця

Теперь у меня есть имя, адрес и телефон. Двигаемся дальше.

Пробиваем телефон: +380636252658

  • GetContact: Сашко
  • Оператор: Life:) 🇺🇦 Украина

OK.ru: имя OTPOK Cw, 13 июля 1997 г.р. (26 лет на тот момент), профиль ok.ru/profile/567937246291 (архив), город — Киев, email badboy8905@gmail.com, зарегистрирован 4 февраля 2016.

Я загуглил его ФИО и вышел на страницу обмена криптовалюты: clickpay.cx/ru/order/2WY4WU1WZRO. В исходниках той страницы я нашёл ту же почту и ещё:

  • Карта: 5375 4114 1209 6997 — Universalbank (Mastercard, Debit)
  • Телефон: +380954543439 → GetContact: «Чертополох Саша», Telegram: @alex004k

Дополнительные зацепки

По паролю PaTrOnAs0000 из утечки я вычислил его смежные почтовые ящики:

badboy8904@mail.ru
badboy8905@gmail.com
badboy8905@mail.ru
badboy8906@mail.ru

По паролю sasha00 (через Глаз Бога) вылезло много номеров, но я зацепился за два интересных:

  • +380935603722 → GetContact: «Саша Мой» → Telegram: @chertopolokh_69 — тут уже без вариантов
  • +380965834883 → GetContact: «Саша» → Telegram: имя C — сложно сказать, его ли

Ящик badboy8906@mail.ru ведёт на my.mail.ru/mail/badboy8906 (архив) — судя по профилю, человек увлекался игрой Contact Wars. Имя: «саша иванов», телефон: +380966******. На той же почте ICQ: icq.im/badboy8906@mail.ru, имя тоже «саша иванов».

Ещё нашёлся Twitter-аккаунт @badboy8906 (архив) — похоже, использовался как приманка для определённой аудитории.

Ну и напоследок — этот же человек засветился на Pinkbike: Are High Pivots Only for Downhill Riding? — Pinkbike Weekly Show Ep. 16.

Итог

Мне удалось установить ФИО, адрес, страну проживания, несколько номеров телефона, email-адреса, аккаунты в соцсетях и мессенджерах. Всю собранную информацию я передал в киберполицию Украины. Надеюсь, что дело дойдёт до дела.

My experience of taking medications and some side effects and notes about Vortioxetine (Brintellix, Trintellix, Fonksera), Lamotrigine (Lamictal) and Olanzapine (Ferzapine)

Jan 13, 2025

...