Loading component...
ayameMegastar- Posts:21
- Topics:9
Hello All,
ECOS (ecos.am) is a Bitcoin mining infrastructure platform. The platform provides products and tools, such as Cloud Mining Contracts, ASIC Rental, Mining Farm and BTC wallet.
They currently provide these miners to 900,000+ customers worldwide, making it a significant competitor in the ASIC miner market.
Recently, we discovered an exposed .git/config file that allowed us to dump their repository, revealing hardcoded AWS credentials stored in plaintext.
After further examaniation, we discovered their kubernetes infrastructure, and wallet files which allowed us to drain approximately 25K USD.
This breach occurred on July 27 2025, and the data exfiltrated includes approximately 3.4TB of sensitive information.
The files include:
- API keys
- K8s & certs, wallet files (actively used as of currently), VPN files (actively used as of currently)
- Exported snapshots
- Buckets
- Cloudflare configurations dump
- Docker images
- Router dump
More...
Samples of files can be found below:
==> API KEYS <==
ACCESS_TOKEN_PREFIX
CLICKHOUSE_HOST
CLICKHOUSE_PORT
KAFKA_DISABLED
KAFKA_DOMAIN
KAFKA_WAIT_UNTIL
REDIS_HOST
REDIS_PASSWORD
REDIS_PORT
TELEGRAM_NOTIFICATION_TOKEN
TELEGRAM_PAYMENT_TOKEN
TELEGRAM_TMA_PAYMENT_BOT_TOKEN
TG_BOT_AUTH_ACCESS_TOKEN
CLOUDFLARE_TURNSTILE_SITE_KEY
CLOUDFLARE_TURNSTILE_SECRET_KEY
ADMIN_TRANSACTIONS_ASYNC_THRESHOLD
ADMIN_URL
AMERIA_API_URL
AMERIA_CALLBACK_URL
XDG_CONFIG_HOME
twilioNumber
WYRE_ACCOUNT_ID
TEST_ACCOUNT_IDS
TELEGRAM_BOT_URL
SIGNUP_VERIFICATION_EMAIL_CODE_RESEND
SIGNUP_VERIFICATION_PHONE_CODE_LIFETIME
SIGNUP_VERIFICATION_PHONE_CODE_RESEND
SIGNUP_VERIFICATION_PHONE_MAX_LENGTH
SIGNUP_PHONE_ATTEMPTS
SIGNUP_SKIP_TIMEOUT
SIGNUP_TOKEN_LIFETIME
SENTRY_LARAVEL_DSN
SENTRY_TRACES_SAMPLE_RATE
SESSION_DRIVER
SESSION_LIFETIME
PUSHER_APP_CLUSTER
PUSHER_APP_SECRET
QUEUE_CONNECTION
PUSHER_APP_ID
MERCURYO_WIDGET_URL
MIX_ADMIN_URL
MIX_API_V1_EXTERNAL_URL
MIX_API_V2_EXTERNAL_URL
MIX_BANK_CARD_SERVICE_PERCENT
MIX_CP_URL
MIX_DOMAIN_URL
MONTH_DURATION
MEMCACHED_HOST
MEMCACHED_PORT
BINANCE_OUTPUT
AMERIA_CALLBACK_PATH
AMO_COUNTRY_FIELD
AMO_COUNTRY_NAME_FIELD
AMO_EMAIL_FIELD
AMO_INTEGRATION_ID
AMO_NAME_FIELD
AMO_PHONE_FIELD
AMO_PIPLINE
AMO_REDIRECT_DOMAIN
AMO_REFERRER_FIELD
AMO_TRAFFIC_SOURCE_FIELD
AMO_USER_ID_FIELD
API_V1_EXTERNAL_URL
API_V2_EXTERNAL_URL
API_V2_INTERNAL_URL
APP_DEBUG
APP_ENV
APP_NAME
APP_URL
AWS_S3_ACCESS_KEY_ID
AWS_S3_BUCKET
AWS_S3_DEFAULT_REGION
BANK_CARD_SERVICE_PERCENT
AWS_S3_URL
BITCOIN_CORE_HOST
BITCOIN_CORE_PORT
BITCOIN_CORE_SCHEME
BITCOIN_CORE_USER
BLOG_URL
BROADCAST_DRIVER
CACHE_DRIVER
CARROT_URL
COIN_MARKET_CAP_API_KEY
COIN_PAYMENTS_CALLBACK_URL
COIN_PAYMENTS_IPN_SECRET
COIN_PAYMENTS_MERCHANT_ID
COUNTRIES_API_URL
CP_URL
CREATE_REFERRAL_LINK_TIME_LIMIT
DB_CONNECTION
DB_PORT
DEBUGBAR_ENABLED
DEVICE_INFO_PERIOD_IN_MINUTES
DOMAIN
EMAIL_FOR_VACANCIES
FEE_PER_UNIT
FIAT_MAX_SUM
FIAT_MIN_SUM
GA_3_ENDPOINT
GOOGLE_ANALYTICS_ID
HOURS_FOR_PURCHASE
LANDING_URL
LOGSTASH_HOST
LOGSTASH_PORT
LOGSTASH_PROTOCOL
LOG_CHANNEL
MAIL_FROM_ADDRESS
MAIL_MAILER
PUSHER_APP_KEY
HOSTING_INPUT_CONFIRMATIONS
MIN_TRANSACTION_CONFIRMATIONS
GA_ACQUIRING_MOD
GA_MEASUREMENT_PROTOCOL_API_SECRET
GA_MEASUREMENT_ID
DEPOSIT_TRANSACTION_CONFIRMATIONS
account_sid
auth_key
WYRE_BTC_WALLET
WYRE_BTC_WYRE_WALLET
WYRE_TOKEN
WYRE_APIKEY
SIGNUP_JWT_KEY
NOTIFICATION_FIREBASE_API_KEY
AMO_SECRET_KEY
AWS_S3_SECRET_ACCESS_KEY
BITCOIN_CORE_PASSWORD
BITCOIN_CORE_PASSPHRASE
CARROT_AUTH_KEY
COIN_PAYMENTS_PRIVATE_KEY
COIN_PAYMENTS_PUBLIC_KEY
APP_KEY
INTERNAL_BTC_ADDRESS
AMERIA_USERNAME
AMERIA_PASSWORD
SLACK_AUTH_KEY
TELEGRAM_TOKEN
CLICKHOUSE_PASSWORD
DB_USERNAME
DB_PASSWORD
MAIL_PASSWORD
RECAPTCHA_CODE
RECAPTCHA_SECRET
RECAPTCHA_SITE_KEY
MERCURYO_SIGN_KEY
MERCURYO_WIDGET_ID
ADMIN_IDS_FOR_ACTIVATE_PHONE_VERIFICATION
AFFISE_API_KEY
AFFISE_POSTBACK_URL
AFFISE_URL
AMERIA_CLIENT_ID
AMERIA_CLIENT_ID_MIR
AMERIA_PASSWORD_MIR
AMERIA_USERNAME_MIR
API_V1_INTERNAL_ADMIN_URL
API_V1_INTERNAL_URL
BINANCE_API_KEY
BINANCE_API_SECRET
BINANCE_API_URL
BITCOIN_CORE_CA
BTC_ACCESS_KEY
BTC_PUID
CALLBACK_MAIL_MAIN
CLICKHOUSE_DB
CLICKHOUSE_USER
CLICKHOUSE_HOST
CLICKHOUSE_PORT
CLOUD_REPORT_EMAIL
COINS_PAID_API_KEY
COINS_PAID_SECRET
COINS_PAID_URL
DB_HOST
DB_DATABASE
DEMO_MINING_TARIFF_ID
ERROR_CALLBACK
FIREBASE_ANDROID_APP_ID
FIREBASE_IOS_APP_ID
GA_4_ENDPOINT
GOOGLE_API_ANDROID_SECRET
GOOGLE_API_IOS_SECRET
GOOGLE_CLIENT_ID
GOOGLE_CLIENT_SECRET
GOOGLE_REDIRECT
GOOGLE_TAG_MANAGER_ENABLED
GOOGLE_TAG_MANAGER_ID
HOSTING_PER_UNIT
IDBANK_API_URL
IDBANK_CALLBACK_URL
IDBANK_FORM_URL
IDBANK_LOGIN
IDBANK_PASS
IP_API_URL
KAFKA_AMO_CRM_TOPIC
KAFKA_DAILY_BALANCES_TOPIC
KAFKA_NOTIFICATION_TOPIC
KAFKA_TOPIC
KAFKA_USER_REQUESTS_TOPIC
MAIL_ENCRYPTION
MAIL_FROM_NAME
MAIL_HOST
MAIL_PORT
MAIL_USERNAME
MERCURYO_API_URL
MERCURYO_SECRET
MIX_PUSHER_APP_CLUSTER
MIX_PUSHER_APP_KEY
PROMO_CACHE_LIFETIME
RECAPTCHA_DOMAIN
RECAPTCHA_V3_SECRET_KEY
RECAPTCHA_V3_SITE_KEY
SEND_GOOGLE_ANALYTICS
SIGNUP_VERIFICATION_EMAIL_CODE_LIFETIME
SKIP_CAPTCHA
SKIP_FROM_TESTING
SLACK_USERS
SUCCESS_CALLBACK
TELEGRAM_BOT_TOKEN
TELEGRAM_GROUP_HRP
TELEGRAM_WITHDRAW_NOTIFICATION_TOKEN
TO_MANY_ATTEMPTS
TO_MANY_ATTEMPTS_IP_EXCLUDE
TRANSAK_API_KEY
TRANSAK_API_SECRET
TRANSAK_API_URL
TRANSAK_URL
VIABTC_API_KEY
VIABTC_API_SECRET
VIABTC_API_URL
VONAGE_KEY
VONAGE_SECRET
VONAGE_SENDER_NAME
VONAGE_SMS_LIMIT_PER_HOUR
WYRE_API_PROD_URL
WYRE_WIDGET_PROD_URL
TEST_ENV
STRATUM_PROXY_API_URL
STRATUM_PROXY_MINER_API_URL
BTC_REVENUE_ACCOUNT
BTC_SEND_ACCOUNT
BTC_OUTPUT_ACCOUNT
BTC_WCOLD
BTC_WKEY
TON_WALLET
TON_WALLET_HASH
TON_API_URL
==> END <==
==> FILES <==
-rwxrwxrwx 1 1000 1000 3.4K Aug 28 2023 zabbix_client.p12*
-rwxrwxrwx 1 1000 1000 492G Jul 23 20:01 laravel_export.jsonl*
-rwxrwxrwx 1 1000 1000 249K Jul 25 12:55 euwest3-profile10.txt*
-rwxrwxrwx 1 1000 1000 725K Jul 25 12:56 eu-central-1-profile10.txt*
drwxrwxrwx 3 root root 27 Aug 1 03:58 elk_elasticsearch/
-rwxrwxrwx 1 1000 1000 163K Jul 21 13:05 ec2-instances-eu-central-1.yaml*
-rwxrwxrwx 1 1000 1000 2.1M Jul 29 08:17 vault.db*
-rwxrwxrwx 1 1000 1000 25M Jul 14 20:37 vpn.pcap*
-rwxrwxrwx 1 1000 1000 12M Jul 31 04:45 wallet.dat*
-rwxrwxrwx 1 1000 1000 333M Jul 31 05:39 wallet2.dat*
-rwxrwxrwx 1 1000 1000 94M Jul 31 05:23 wallet_backup.txt*
-rwxrwxrwx 1 1000 1000 9.0M Aug 2 00:38 snapshots.tsv*
-rwxrwxrwx 1 1000 1000 3.6K Jul 8 17:38 cert.pfx*
-rwxrwxrwx 1 1000 1000 1.4K Jul 16 02:04 certificate-9a.crt*
-rwxrwxrwx 1 1000 1000 1.4K Jul 12 10:01 certificate.txt*
-rwxrwxrwx 1 1000 1000 1.4K Jul 12 10:00 certificate_chain.txt*
-rwxrwxrwx 1 1000 1000 9.3K Feb 20 2025 credentials.txt*
-rwxrwxrwx 1 1000 1000 378 Jul 23 22:19 databases.config.json*
-rwxrwxrwx 1 1000 1000 441 Aug 4 01:58 CSR-no-reply\@ecos.am.txt*
-rwxrwxrwx 1 1000 1000 2.2G Jul 29 22:36 ecos_db.7z*
-rwxrwxrwx 1 1000 1000 269M Jul 28 01:13 kubes.7z*
-rwxrwxrwx 1 1000 1000 23 Jul 8 18:11 masterkey.txt*
-rwxrwxrwx 1 1000 1000 704 Jul 31 05:49 pkeygen.py*
-rwxrwxrwx 1 1000 1000 40 Jul 3 01:40 preshared-key.txt*
-rwxrwxrwx 1 1000 1000 1.8K Jul 6 11:03 priv.json*
-rwxrwxrwx 1 1000 1000 1.9K Jul 12 10:01 private_key.txt*
-rwxrwxrwx 1 1000 1000 1.6M Jul 6 11:03 pub.json*
-rwxrwxrwx 1 1000 1000 53M Jul 29 03:11 k8s.json*
-rwxrwxrwx 1 1000 1000 5.1K Mar 24 2024 client.ovpn*
-rwxrwxrwx 1 1000 1000 26G Jul 29 00:57 kubeexport.7z*
-rwxrwxrwx 1 1000 1000 1.1K Jul 25 14:03 unencrypted_rds_snapshots_1753477404.3240721.csv*
--------- EC2 Image Dump ------
ipsec-ecos.tar (5.67 GB)
kafka-ecos.tar (513.04 MB)
laravel-ecos.json.gz (90.87 GB)
tmp4.img (180.00 GB)
tmp5.tar (735.87 GB)
tmp9.img (20.00 GB)
clickhouse-ecos.tar (143.73 GB)
btc-node-dmz-01.tar (35.45 GB)
---------- SES Dump ----------
├── account-sending-enabled.json
├── active-receipt-rule-set.json
├── aj.gorelov_gmail.com
│ ├── dkim-attributes.json
│ ├── domain-configuration.json
│ ├── identity-policies-list.json
│ ├── mail-from-attributes.json
│ ├── notification-attributes.json
│ └── verification-attributes.json
├── all-identities.json
├── configuration-sets-list.json
├── custom-verification-email-templates.json
├── ecos.am
│ ├── dkim-attributes.json
│ ├── domain-configuration.json
│ ├── identity-policies-list.json
│ ├── mail-from-attributes.json
│ ├── notification-attributes.json
│ └── verification-attributes.json
├── email-templates-list.json
├── receipt-rule-sets-list.json
├── send-quota.json
└── send-statistics.json
----------- Kubernetes node dumps ----------
├── 0f3fd6a1
│ └── usr
│ └── lib64
│ ├── X11
│ ├── audit
│ ├── bind9-export
│ ├── conntrack-tools
│ ├── device-mapper
│ ├── elfutils
│ ├── fipscheck
│ ├── games
│ ├── gconv
│ ├── gettext
│ ├── gio
│ ├── gssproxy
│ ├── krb5
│ ├── libnfsidmap
│ ├── libuser
│ ├── lua
│ ├── man-db
│ ├── mysql
│ ├── nss
│ ├── openssl
│ ├── perl5
│ ├── pkcs11
│ ├── pkgconfig
│ ├── pm-utils
│ │ ├── module.d
│ │ ├── power.d
│ │ └── sleep.d
│ ├── python2.7
│ ├── python3.7
│ ├── rpm-plugins
│ ├── rsyslog
│ ├── sasl2
│ ├── security
│ ├── sse2
│ ├── tls
│ └── xtables
├── 127011c7
│ ├── root
│ └── usr
│ ├── bin
│ ├── lib
│ │ ├── binfmt.d
│ │ ├── debug
│ │ ├── dracut
│ │ ├── environment.d
│ │ ├── games
│ │ ├── kbd
│ │ ├── kdump
│ │ ├── kernel
│ │ ├── locale
│ │ ├── modprobe.d
│ │ ├── modules
│ │ ├── modules-load.d
│ │ ├── python3.6
│ │ ├── rpm
│ │ ├── sse2
│ │ ├── sysctl.d
│ │ ├── sysimage
│ │ ├── systemd
│ │ ├── sysusers.d
│ │ ├── tmpfiles.d
│ │ └── udev
│ ├── lib64
│ │ ├── X11
│ │ ├── audit
│ │ ├── bind9-export
│ │ ├── bpf
│ │ ├── engines-1.1
│ │ ├── fipscheck
│ │ ├── games
│ │ ├── gawk
│ │ ├── gconv
│ │ ├── gio
│ │ ├── girepository-1.0
│ │ ├── hmaccalc
│ │ ├── krb5
│ │ ├── libdnf
│ │ ├── pkcs11
│ │ ├── pm-utils
│ │ │ ├── module.d
│ │ │ ├── power.d
│ │ │ └── sleep.d
│ │ ├── python3.6
│ │ ├── rpm-plugins
│ │ ├── sasl2
│ │ ├── security
│ │ ├── sse2
│ │ └── tls
│ └── sbin
├── 45415ccd
│ └── usr
│ └── lib64
│ ├── X11
│ ├── audit
│ ├── bind9-export
│ ├── conntrack-tools
│ ├── device-mapper
│ ├── elfutils
│ ├── fipscheck
│ ├── games
│ ├── gconv
│ ├── gettext
│ ├── gio
│ ├── gssproxy
│ ├── krb5
│ ├── libnfsidmap
│ ├── libuser
│ ├── lua
│ ├── man-db
│ ├── mysql
│ ├── nss
│ ├── openssl
│ ├── perl5
│ ├── pkcs11
│ ├── pkgconfig
│ ├── pm-utils
│ │ ├── module.d
│ │ ├── power.d
│ │ └── sleep.d
│ ├── python2.7
│ ├── python3.7
│ ├── rpm-plugins
│ ├── rsyslog
│ ├── sasl2
│ ├── security
│ ├── sse2
│ ├── tls
│ └── xtables
├── 4eebf380
│ └── usr
│ └── lib64
│ ├── X11
│ ├── audit
│ ├── bind9-export
│ ├── conntrack-tools
│ ├── device-mapper
│ ├── elfutils
│ ├── fipscheck
│ ├── games
│ ├── gconv
│ ├── gettext
│ ├── gio
│ ├── gssproxy
│ ├── krb5
│ ├── libnfsidmap
│ ├── libuser
│ ├── lua
│ ├── man-db
│ ├── mysql
│ ├── nss
│ ├── openssl
│ ├── perl5
│ ├── pkcs11
│ ├── pkgconfig
│ ├── pm-utils
│ │ ├── module.d
│ │ ├── power.d
│ │ └── sleep.d
│ ├── python2.7
│ ├── python3.7
│ ├── rpm-plugins
│ ├── rsyslog
│ ├── sasl2
│ ├── security
│ ├── sse2
│ ├── tls
│ └── xtables
├── 6376e050
│ └── usr
│ ├── bin
│ ├── lib
│ │ ├── audit
│ │ ├── binfmt.d
│ │ ├── debug
│ │ ├── dracut
│ │ ├── environment.d
│ │ ├── fontconfig
│ │ ├── games
│ │ ├── gconv
│ │ ├── kdump
│ │ ├── kernel
│ │ ├── locale
│ │ ├── modprobe.d
│ │ ├── modules
│ │ ├── modules-load.d
│ │ ├── nss
│ │ ├── python3.6
│ │ ├── rpm
│ │ ├── sse2
│ │ ├── sysctl.d
│ │ ├── sysimage
│ │ ├── systemd
│ │ ├── sysusers.d
│ │ ├── tmpfiles.d
│ │ └── udev
│ ├── lib64
│ │ ├── X11
│ │ ├── audit
│ │ ├── bind9-export
│ │ ├── engines-1.1
│ │ ├── fipscheck
│ │ ├── games
│ │ ├── gawk
│ │ ├── gconv
│ │ ├── gio
│ │ ├── girepository-1.0
│ │ ├── hmaccalc
│ │ ├── krb5
│ │ ├── libdnf
│ │ ├── nss
│ │ ├── pkcs11
│ │ ├── pm-utils
│ │ │ ├── module.d
│ │ │ ├── power.d
│ │ │ └── sleep.d
│ │ ├── python3.6
│ │ ├── rpm-plugins
│ │ ├── sasl2
│ │ ├── security
│ │ ├── sse2
│ │ └── tls
│ └── sbin
├── 72211b39
│ └── usr
│ └── lib64
│ ├── X11
│ ├── audit
│ ├── bind9-export
│ ├── conntrack-tools
│ ├── device-mapper
│ ├── elfutils
│ ├── fipscheck
│ ├── games
│ ├── gconv
│ ├── gettext
│ ├── gio
│ ├── gssproxy
│ ├── krb5
│ ├── libnfsidmap
│ ├── libuser
│ ├── lua
│ ├── man-db
│ ├── mysql
│ ├── nss
│ ├── openssl
│ ├── perl5
│ ├── pkcs11
│ ├── pkgconfig
│ ├── pm-utils
│ │ ├── module.d
│ │ ├── power.d
│ │ └── sleep.d
│ ├── python2.7
│ ├── python3.7
│ ├── rpm-plugins
│ ├── rsyslog
│ ├── sasl2
│ ├── security
│ ├── sse2
│ ├── tls
│ └── xtables
├── 916f18d1
│ └── usr
│ └── lib64
│ ├── X11
│ ├── audit
│ ├── bind9-export
│ ├── conntrack-tools
│ ├── device-mapper
│ ├── elfutils
│ ├── fipscheck
│ ├── games
│ ├── gconv
│ ├── gettext
│ ├── gio
│ ├── gssproxy
│ ├── krb5
│ ├── libnfsidmap
│ ├── libuser
│ ├── lua
│ ├── man-db
│ ├── mysql
│ ├── nss
│ ├── openssl
│ ├── perl5
│ ├── pkcs11
│ ├── pkgconfig
│ ├── pm-utils
│ │ ├── module.d
│ │ ├── power.d
│ │ └── sleep.d
│ ├── python2.7
│ ├── python3.7
│ ├── rpm-plugins
│ ├── rsyslog
│ ├── sasl2
│ ├── security
│ ├── sse2
│ ├── tls
│ └── xtables
├── c5c5a3e1
│ └── usr
│ └── lib64
│ ├── X11
│ ├── audit
│ ├── bind9-export
│ ├── conntrack-tools
│ ├── device-mapper
│ ├── elfutils
│ ├── fipscheck
│ ├── games
│ ├── gconv
│ ├── gettext
│ ├── gio
│ ├── gssproxy
│ ├── krb5
│ ├── libnfsidmap
│ ├── libuser
│ ├── lua
│ ├── man-db
│ ├── mysql
│ ├── nss
│ ├── openssl
│ ├── perl5
│ ├── pkcs11
│ ├── pkgconfig
│ ├── pm-utils
│ │ ├── module.d
│ │ ├── power.d
│ │ └── sleep.d
│ ├── python2.7
│ ├── python3.7
│ ├── rpm-plugins
│ ├── rsyslog
│ ├── sasl2
│ ├── security
│ ├── sse2
│ ├── tls
│ └── xtables
├── ce4b2c6f
│ └── usr
│ └── lib64
│ ├── X11
│ ├── audit
│ ├── bind9-export
│ ├── conntrack-tools
│ ├── device-mapper
│ ├── elfutils
│ ├── fipscheck
│ ├── games
│ ├── gconv
│ ├── gettext
│ ├── gio
│ ├── gssproxy
│ ├── krb5
│ ├── libnfsidmap
│ ├── libuser
│ ├── lua
│ ├── man-db
│ ├── mysql
│ ├── nss
│ ├── openssl
│ ├── perl5
│ ├── pkcs11
│ ├── pkgconfig
│ ├── pm-utils
│ │ ├── module.d
│ │ ├── power.d
│ │ └── sleep.d
│ ├── python2.7
│ ├── python3.7
│ ├── rpm-plugins
│ ├── rsyslog
│ ├── sasl2
│ ├── security
│ ├── sse2
│ ├── tls
│ └── xtables
└── f674db4c
└── usr
└── lib64
├── X11
├── audit
├── bind9-export
├── conntrack-tools
├── device-mapper
├── elfutils
├── fipscheck
├── games
├── gconv
├── gettext
├── gio
├── gssproxy
├── krb5
├── libnfsidmap
├── libuser
├── lua
├── man-db
├── mysql
├── nss
├── openssl
├── perl5
├── pkcs11
├── pkgconfig
├── pm-utils
│ ├── module.d
│ ├── power.d
│ └── sleep.d
├── python2.7
├── python3.7
├── rpm-plugins
├── rsyslog
├── sasl2
├── security
├── sse2
├── tls
└── xtables
------- Elasticsearch --------
368K box/box/elk_elasticsearch/_data/nodes/0/_state
8.0K box/box/elk_elasticsearch/_data/nodes/0/indices/-pXFwY6HQ7qxftTt5vWZeQ/0/_state
4.0K box/box/elk_elasticsearch/_data/nodes/0/indices/-pXFwY6HQ7qxftTt5vWZeQ/0/index
8.0K box/box/elk_elasticsearch/_data/nodes/0/indices/-pXFwY6HQ7qxftTt5vWZeQ/0/translog
20K box/box/elk_elasticsearch/_data/nodes/0/indices/-pXFwY6HQ7qxftTt5vWZeQ/0
4.0K box/box/elk_elasticsearch/_data/nodes/0/indices/-pXFwY6HQ7qxftTt5vWZeQ/_state
24K box/box/elk_elasticsearch/_data/nodes/0/indices/-pXFwY6HQ7qxftTt5vWZeQ
8.0K box/box/elk_elasticsearch/_data/nodes/0/indices/NzHNVMOoThWHWeVDYNA9CQ/0/_state
184K box/box/elk_elasticsearch/_data/nodes/0/indices/NzHNVMOoThWHWeVDYNA9CQ/0/index
8.0K box/box/elk_elasticsearch/_data/nodes/0/indices/NzHNVMOoThWHWeVDYNA9CQ/0/translog
200K box/box/elk_elasticsearch/_data/nodes/0/indices/NzHNVMOoThWHWeVDYNA9CQ/0
4.0K box/box/elk_elasticsearch/_data/nodes/0/indices/NzHNVMOoThWHWeVDYNA9CQ/_state
204K box/box/elk_elasticsearch/_data/nodes/0/indices/NzHNVMOoThWHWeVDYNA9CQ
8.0K box/box/elk_elasticsearch/_data/nodes/0/indices/P5Q6QpDDTqWfQ8UL_jKRRg/0/_state
2.2M box/box/elk_elasticsearch/_data/nodes/0/indices/P5Q6QpDDTqWfQ8UL_jKRRg/0/index
8.0K box/box/elk_elasticsearch/_data/nodes/0/indices/P5Q6QpDDTqWfQ8UL_jKRRg/0/translog
2.3M box/box/elk_elasticsearch/_data/nodes/0/indices/P5Q6QpDDTqWfQ8UL_jKRRg/0
4.0K box/box/elk_elasticsearch/_data/nodes/0/indices/P5Q6QpDDTqWfQ8UL_jKRRg/_state
2.3M box/box/elk_elasticsearch/_data/nodes/0/indices/P5Q6QpDDTqWfQ8UL_jKRRg
8.0K box/box/elk_elasticsearch/_data/nodes/0/indices/R0yQaf-4S62-lc022riAEw/0/_state
4.0K box/box/elk_elasticsearch/_data/nodes/0/indices/R0yQaf-4S62-lc022riAEw/0/index
8.0K box/box/elk_elasticsearch/_data/nodes/0/indices/R0yQaf-4S62-lc022riAEw/0/translog
20K box/box/elk_elasticsearch/_data/nodes/0/indices/R0yQaf-4S62-lc022riAEw/0
4.0K box/box/elk_elasticsearch/_data/nodes/0/indices/R0yQaf-4S62-lc022riAEw/_state
24K box/box/elk_elasticsearch/_data/nodes/0/indices/R0yQaf-4S62-lc022riAEw
8.0K box/box/elk_elasticsearch/_data/nodes/0/indices/USTU3T3nTmKsb2nsvJNcZw/0/_state
2.5M box/box/elk_elasticsearch/_data/nodes/0/indices/USTU3T3nTmKsb2nsvJNcZw/0/index
8.0K box/box/elk_elasticsearch/_data/nodes/0/indices/USTU3T3nTmKsb2nsvJNcZw/0/translog
2.5M box/box/elk_elasticsearch/_data/nodes/0/indices/USTU3T3nTmKsb2nsvJNcZw/0
4.0K box/box/elk_elasticsearch/_data/nodes/0/indices/USTU3T3nTmKsb2nsvJNcZw/_state
2.5M box/box/elk_elasticsearch/_data/nodes/0/indices/USTU3T3nTmKsb2nsvJNcZw
8.0K box/box/elk_elasticsearch/_data/nodes/0/indices/Wl4TL4gtT1G2i7gnjFhllw/0/_state
16K box/box/elk_elasticsearch/_data/nodes/0/indices/Wl4TL4gtT1G2i7gnjFhllw/0/index
8.0K box/box/elk_elasticsearch/_data/nodes/0/indices/Wl4TL4gtT1G2i7gnjFhllw/0/translog
32K box/box/elk_elasticsearch/_data/nodes/0/indices/Wl4TL4gtT1G2i7gnjFhllw/0
4.0K box/box/elk_elasticsearch/_data/nodes/0/indices/Wl4TL4gtT1G2i7gnjFhllw/_state
36K box/box/elk_elasticsearch/_data/nodes/0/indices/Wl4TL4gtT1G2i7gnjFhllw
8.0K box/box/elk_elasticsearch/_data/nodes/0/indices/ag6sNN5LRmWLEN4LyVH9Sg/0/_state
204G box/box/elk_elasticsearch/_data/nodes/0/indices/ag6sNN5LRmWLEN4LyVH9Sg/0/index
204G box/box/elk_elasticsearch/_data/nodes/0/indices/ag6sNN5LRmWLEN4LyVH9Sg/0
204G box/box/elk_elasticsearch/_data/nodes/0/indices/ag6sNN5LRmWLEN4LyVH9Sg
204G box/box/elk_elasticsearch/_data/nodes/0/indices
4.0K box/box/elk_elasticsearch/_data/nodes/0/snapshot_cache
204G box/box/elk_elasticsearch/_data/nodes/0
204G box/box/elk_elasticsearch/_data/nodes
204G box/box/elk_elasticsearch/_data
204G box/box/elk_elasticsearch
==> END <==
==> BUCKETS TREE <==
-rw-r--r-- 1 root root 539909538 Sep 4 00:00 .ecos.json
==> END <==
For the entire tree directory: https://filebin.net/1elfvsnph526owyb
Database samples will only be provided upon request and with proof of funds, with a minimum requirement of $5,000.
Personal requests regarding the data can be made via Signal at the following handle: @ayame.01
BIN: $75,000
C/O:
XMR, BTC, ETH, USDT, SOL and TRX are accepted.
04.09.2025, 01:45- ayameMegastar
- Posts:21
- Topics:9
THIS PRODUCT HAS BEEN A SINGLE SALE PURCHASE. DO NOT ASK FOR A SECOND SALE.
07.09.2025, 14:28 - DDrakksteimUser
- Posts:1
- Topics:0
interested , are you on telegram or tox?
09.09.2025, 10:18