> ## Content Index > Fetch the complete content index at: https://darkwebinformer.com/llms.txt > Use this file to discover other available public pages before exploring further. # Massive Initial Access Sale: 10K Webshells, 5K WHMCS Access, and 50K+ Compromised Domains Allegedly Offered - URL: https://darkwebinformer.com/massive-initial-access-sale-10k-webshells-5k-whmcs-access-and-50k-compromised-domains-allegedly-offered/ - Published: 2026-01-13T17:09:54.000Z - Updated: 2026-01-13T17:09:54.000Z - Author: Dark Web Informer - Tags: Initial Access Dark Web Informer - Cyber Threat Intelligence # Massive Initial Access Sale: 10K Webshells, 5K WHMCS Access, and 50K+ Compromised Domains Allegedly Offered January 13, 2026 - 7:19:20 AM UTC Global Multiple Industries ### 🧩 Standalone API Access Now Available Access high-volume threat-intelligence data, automated ingestion endpoints, ransomware feeds, IOC data, and more – independently from the above standard subscriptions. [View API Access ](https://darkwebinformer.com/api-details/) ## Unlock Exclusive Cyber Threat Intelligence Powered by [DarkWebInformer.com](https://darkwebinformer.com/) Foundational access to breach intelligence. Track breaches, leaks, and threats in real time with high quality screenshots and concise expert summaries. 📚 **5,100+ Blog Posts (PRO/ELITE)** Continuously updated breach reports and threat summaries. 📢 **52,200+ Alerts (PRO/ELITE)** Daily breach, leak, and DDoS alerts. 📤 **Unredacted Threat Feed** Live tracking with JSON export. 🔍 **Leak and Breach Coverage** Direct access to claims and posts. 📡 **Snippets and Quick Facts** Concise summaries of DDoS, defacements, and breaches. 🌐 **500+ Onion and Clearnet Resources** Verified index of dark web sites and services. 📊 **Real Time Uptime Dashboard** Live status of 500+ sites. 🤖 **WhiteIntel.io API** Integrated checks inside breach posts. 🖼️ **High Resolution Images** Uncompressed, watermark free evidence. 🔑 **Keyword Notifications** Browser alerts for tracked terms. [💳 Subscribe Now](https://darkwebinformer.com/#/portal/signup) [🪙 Pay with Crypto](https://darkwebinformer.com/crypto-payments) ## Quick Facts Date and Time of Alert 2026-01-13 07:19:20 UTC Threat Actor timcookapple Victim Country Global (Multiple Countries) Industry Multiple Industries Victim Org. Multiple Organizations (50K+ Domains) Victim Site Multiple Domains Category Initial Access Severity Critical Network Clearweb ## Incident Overview A threat actor using the handle "timcookapple" is offering a massive collection of unauthorized access credentials for sale, including webshells, WHMCS hosting server access, and cPanel control panel access affecting over 50,000 domains globally. The seller claims these compromised domains have high traffic and good domain authority metrics, making them ideal for malicious activities such as casino landing pages or parasite SEO campaigns. - **Purpose:** Domain access with high traffic and good DA/PA/DR metrics for casino landing pages or parasite SEO - **Total Webshell Access:** 10,869 valid webshell accesses - **Minimum Webshell Order:** 2,000 shells x7$ (minimum purchase $14,000) - **Total WHMCS Access:** 5,936 valid WHMCS host server accesses - **WHMCS Domain Count:** Each host server contains approximately 50-400 domains - **WHMCS Pricing:** $1,000 per host (minimum order 1 host) - **Total cPanel Access:** 54,827 valid cPanel accesses - **Minimum cPanel Order:** 1,000 cPanel x20$ (minimum purchase $20,000) - **Total Affected Domains:** Over 50,000 domains across all access types - **Affected TLDs (Top-Level Domains):** .edu, .gov, .go, .gob, .ac, .com, .org, .net, .co - **Affected GEOs (Geographic Extensions):** .id, .br, .th, .mx, .ar, .bd, .pe, etc. - **Domain Selection:** Random allocation (buyer cannot choose specific domains) - **Quality Guarantee:** At least 50-60% of domains are guaranteed to be "good domains" - **Payment System:** Pay first, then receive access - **Accepted Payments:** BTC / USDT - **Contact Method:** Telegram @Nicholasaaronfoster - **Sample Domains Visible:** Multiple educational and government domains from various countries including Mexico, Australia, Myanmar, Peru, Argentina, Indonesia, Brazil, South Africa, and others ## Indicators of Compromise (IOCs) ### Telegram Handle https://t[.]me/Nicholasaaronfoster **Note:** This Telegram handle is the contact point for purchasing the unauthorized access credentials. ## Initial Access Sale URL For Subscribers Only If you are [a subscriber](https://darkwebinformer.com/tag/subscribers/), check the Threat Feed or Ransomware Feed in the subscribers area. ## Image Preview [ ![Mass webshell, WHMCS, and cPanel access sale by timcookapple affecting 50K+ domains including .edu and .gov TLDs](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/01/78962587962357982357896293876598723.png) ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/01/78962587962357982357896293876598723.png) ## Unlock Exclusive Cyber Threat Intelligence Powered by [DarkWebInformer.com](https://darkwebinformer.com/) Foundational access to breach intelligence. Track breaches, leaks, and threats in real time with high quality screenshots and concise expert summaries. 📚 **5,100+ Blog Posts (PRO/ELITE)** Continuously updated breach reports and threat summaries. 📢 **52,200+ Alerts (PRO/ELITE)** Daily breach, leak, and DDoS alerts. 📤 **Unredacted Threat Feed** Live tracking with JSON export. 🔍 **Leak and Breach Coverage** Direct access to claims and posts. 📡 **Snippets and Quick Facts** Concise summaries of DDoS, defacements, and breaches. 🌐 **500+ Onion and Clearnet Resources** Verified index of dark web sites and services. 📊 **Real Time Uptime Dashboard** Live status of 500+ sites. 🤖 **WhiteIntel.io API** Integrated checks inside breach posts. 🖼️ **High Resolution Images** Uncompressed, watermark free evidence. 🔑 **Keyword Notifications** Browser alerts for tracked terms. [💳 Subscribe Now](https://darkwebinformer.com/#/portal/signup) [🪙 Pay with Crypto](https://darkwebinformer.com/crypto-payments) Dark Web Informer © 2026 | Cyber Threat Intelligence [DarkWebInformer.com](https://darkwebinformer.com/)