[GoreTurbine]

Breach date: August 1, 2026, at 9:00 AM EDT

QI Mobile ISC (qi.iq) is an Iraqi mobile telecommunications and digital-services provider operating a customer-facing web portal and mobile application that handles account management, top-ups, billing, and payments.

970,949 Unique Customer Profiles | 970,949 Unique Phone Numbers | 11,168 Unique Account Numbers | 357,504 Unique IP Addresses, etc.

Internal IP: http://10.10.200.51
Connects on Port: 8088 -> http://10.10.200.51:8088
Qi MOBILE Telegram Bot Token: 5225657863:AAHtH-_giE-s4CtyMYeIzA-D4nlXl5O1BXM
CURL: curl "https://api.telegram.org/bot5225657863:AAHtH-_giE-s4CtyMYeIzA-D4nlXl5O1BXM/getMe"


I am not motivated by money or extortion. I am doing this solely for fun and to demonstrate how easily these systems can be compromised.


Per Profile:

- Phone Number - IP Addresses - Account Numbers - Last JWT - Session Cookies - Last JSESSIONID - Last JWT Seen - Last JSESSIONID Seen - Unique JWTs - Unique JSESSIONIDs - KYC Identity Verification Hits - Payment Hits - Balance Query Hits - CSRF Token Hits - Last Request - Session Events - REST Paths - API Endpoints - Operations - Devices - Exceptions - HTTP Status Codes - First Session - Last Session - First Seen - Last Seen - Applications - Languages - Test Request Flag - Records

Compressed: 154.2 MB
Uncompressed: 2.03 GB
Format one: JSON Lines QiMOBILE_PII_final.json
Format two: Pretty-printed JSON - QiMOBILE_PII_pretty.json

Free Download: https://anonfilesnew.com/s/-em7icPr0qB

[0x0000N]

the Download link has expired or not valid. Please generate a new one


the Download link has expired or not valid. Please generate a new one

[clanker1337]

Nice bro
Nice bro

[GoreTurbine]

New Link: https://anonfilesnew.com/s/_AU9YE2EJMK

[pwend_sys]

nice bro

Breach date: August 1, 2026, at 9:00 AM EDT

QI Mobile ISC (qi.iq) is an Iraqi mobile telecommunications and digital-services provider operating a customer-facing web portal and mobile application that handles account management, top-ups, billing, and payments.

970,949 Unique Customer Profiles | 970,949 Unique Phone Numbers | 11,168 Unique Account Numbers | 357,504 Unique IP Addresses, etc.

Internal IP: http://10.10.200.51
Connects on Port: 8088 -> http://10.10.200.51:8088
Qi MOBILE Telegram Bot Token: 5225657863:AAHtH-_giE-s4CtyMYeIzA-D4nlXl5O1BXM
CURL: curl "https://api.telegram.org/bot5225657863:AAHtH-_giE-s4CtyMYeIzA-D4nlXl5O1BXM/getMe"


I am not motivated by money or extortion. I am doing this solely for fun and to demonstrate how easily these systems can be compromised.


Per Profile:

- Phone Number - IP Addresses - Account Numbers - Last JWT - Session Cookies - Last JSESSIONID - Last JWT Seen - Last JSESSIONID Seen - Unique JWTs - Unique JSESSIONIDs - KYC Identity Verification Hits - Payment Hits - Balance Query Hits - CSRF Token Hits - Last Request - Session Events - REST Paths - API Endpoints - Operations - Devices - Exceptions - HTTP Status Codes - First Session - Last Session - First Seen - Last Seen - Applications - Languages - Test Request Flag - Records

Compressed: 154.2 MB
Uncompressed: 2.03 GB
Format one: JSON Lines QiMOBILE_PII_final.json
Format two: Pretty-printed JSON - QiMOBILE_PII_pretty.json

Free Download: https://anonfilesnew.com/s/-em7icPr0qB

[kaiwa868686]

Wow  this is great job!!! but what public domain you were able to exploit because you did not mention it in your post.