# Gravatar SHA256 Hash Reversal Results **Date:** 2026-03-04 **Method:** SHA256 brute-force of `sha256(email.strip().lower())` against common email patterns **Total Candidates Tested:** ~6.9 million across 4 rounds **Hash Format Confirmed:** SHA256 of lowercase trimmed email address (WordPress 6.1+ REST API) --- ## Summary | # | Status | Site | User | Email Recovered | |---|--------|------|------|-----------------| | 1 | KNOWN | dgi.gouv.ht | louicent19 | louicent19@gmail.com | | 2 | KNOWN | dgi.gouv.ht | saintfequel | saintfequel@gmail.com | | 3 | CRACKED | md.gouv.ht | Jean Guiteau LAFAYE (ljguy) | ljguy@msn.com | | 4 | CRACKED | primature.gouv.ht | Wilouis (wilfrid_lo) | wilfrid_lo@yahoo.fr | | 5 | CRACKED | primature.gouv.ht | Joreste Payen (joreste) | joreste.payen@primature.gouv.ht | | 6 | CRACKED | primature.gouv.ht | Clifford TIMOTHE (webmaster) | timotheclifford@yahoo.fr | | 7 | CRACKED | dinepa.gouv.ht | Communication DINEPA | dinepacommunication@gmail.com | | 8 | CRACKED | dinepa.gouv.ht | Belonny Fernando Baptiste (belonyfb) | belonnyfernando.baptiste@dinepa.gouv.ht | | 9 | CRACKED | brh.ht | Amos Sejour (asejour) | amos.sejour@brh.ht | | 10 | CRACKED | brh.ht | Ralph Joseph Noel (rnoel) | ralph.noel@brh.ht | | 11 | CRACKED | brh.ht | James De Koven Pierre (de-koven) | jamesdekoven43@gmail.com | | 12 | UNSOLVED | md.gouv.ht | PRL (admindev) | -- | | 13 | UNSOLVED | dgi.gouv.ht | Jodelin Desrameaux (jodelin) | -- | | 14 | UNSOLVED | dgi.gouv.ht | La DGI (dgi) | -- | | 15 | UNSOLVED | dgi.gouv.ht | Fequelson Saint-Cyr (2010) | -- | | 16 | UNSOLVED | primature.gouv.ht | jeanphilippe baptiste (jeanphilippe) | -- | | 17 | UNSOLVED | dinepa.gouv.ht | DINEPA HT (dinepaht) | -- | **Recovery Rate:** 11/17 (65%) -- 2 already known + 9 cracked --- ## Detailed Results by Site ### MD.GOUV.HT (Ministry of Defense) **User: PRL (slug: admindev)** - Hash: `33e54dec0cd79fc4b5e911c15f836c46ec8d0e452ecd3ca5f707bce0a3540a3b` - Status: UNSOLVED - Notes: "PRL" is likely initials. Tried prl/admindev + 0-9999 on all major domains. No match. **User: Jean Guiteau LAFAYE (slug: ljguy)** - Hash: `6b4719d9a34c5d7ba29291ddeeb52119771098992822832fb2cdee5b384422bb` - Status: CRACKED - Email: **ljguy@msn.com** - Notes: Uses personal MSN/Hotmail account with WP slug as email prefix. No Gravatar profile. ### DGI.GOUV.HT (Direction Generale des Impots / Tax Authority) **User: louicent19@gmail.com (slug: louicent19)** - Hash: `78c603f96152d245ce2ed64616a278214959e0e0ce1e004c6f3ab953424f149c` - Status: KNOWN (email was the display name) - Email: **louicent19@gmail.com** - Real Name: **Innocent Louinord** (from Gravatar profile) - Twitter: **@Inno100__** (from Gravatar profile) - Gravatar Profile: https://gravatar.com/louicent19 **User: Jodelin Desrameaux (slug: jodelin)** - Hash: `d98b9d50d5d3acfaf8fde3a941b86cf2dbdbeed31c067e9db0f24252a80fef18` - Status: UNSOLVED - Notes: Tried all standard name patterns + 0-9999 on major domains. Likely uses a non-obvious email. **User: La DGI (slug: dgi)** - Hash: `e85a8c2d9285bfb3cf912c58b06b0d837e06d7bf01c266a4f439b915263ba318` - Status: UNSOLVED - Notes: Institutional account. Tried dgi/ladgi/impots/etc + 0-9999 on all domains. No match. **User: saintfequel@gmail.com (slug: saintfequel)** - Hash: `2dffeebde91af54c057cbf35c06f9c37522e71c91b36ebe51bc59e5d12f54625` - Status: KNOWN (email was the display name) - Email: **saintfequel@gmail.com** - Notes: No Gravatar profile. Name likely related to "Fequelson Saint-Cyr" pattern. **User: Fequelson Saint-Cyr (slug: 2010)** - Hash: `271e9f4f42b414c6e6d385d4512c61e0d6ec69ed9bb12a48970677912a0e2aa8` - Status: UNSOLVED - Notes: Unusual slug "2010" (possibly year joined). Tried all name patterns + numbers. Notably, another DGI user "saintfequel@gmail.com" appears to be the same person with a different account. ### PRIMATURE.GOUV.HT (Prime Minister's Office) **User: Wilouis (slug: wilfrid_lo)** - Hash: `76219724227ee490aef151f89f0512639270d0d86d6b4bb2711907e5b44c41db` - Status: CRACKED - Email: **wilfrid_lo@yahoo.fr** - Notes: Display name "Wilouis" is derived from first/last (Wilfrid Louis?). Uses Yahoo France with slug as prefix. **User: Joreste Payen (slug: joreste)** - Hash: `d90afadd606815cdc755365a418e1c225ffe32971d0ec06d511f1d8f4d69d250` - Status: CRACKED - Email: **joreste.payen@primature.gouv.ht** - Notes: Uses official government email. Standard firstname.lastname pattern. **User: jeanphilippe baptiste (slug: jeanphilippe)** - Hash: `b0d7088b226a69e2616f21a8a29bb5b65dac9adea3fddee522092aa0de9180c3` - Status: UNSOLVED - Notes: Tried extensive patterns + 0-9999 on all major domains. Likely uses non-obvious personal email. **User: Clifford TIMOTHE (slug: webmaster)** - Hash: `214ef5f9ee306c8aaa4ea406db9f27d481bea173809b916ffeb76459100ca7b9` - Status: CRACKED - Email: **timotheclifford@yahoo.fr** - Notes: Uses Yahoo France with reversed name order (lastname+firstname). Gravatar profile exists as "CT" at https://gravatar.com/timotheclifford ### DINEPA.GOUV.HT (National Directorate for Water & Sanitation) **User: Communication DINEPA (slug: communication-dinepa)** - Hash: `ed05c488992d9675f2c8a2ce2c649da329b2d8454f03f7cb2674700e1f32082b` - Status: CRACKED - Email: **dinepacommunication@gmail.com** - Notes: Institutional comms account using Gmail. Pattern: org+department@gmail.com **User: DINEPA HT (slug: dinepaht)** - Hash: `f34443b8071787d5b9f998bfdeeadf3ae9583384e08265628f2636100016d35a` - Status: UNSOLVED - Notes: Tried dinepa/dinepaht + many variants + 0-9999 on all domains. No match. **User: Belonny Fernando Baptiste (slug: belonyfb)** - Hash: `fede4ed3404962cb6780f797d3ebdc3641fd421ee371a95ad8f25df43adfce8b` - Status: CRACKED - Email: **belonnyfernando.baptiste@dinepa.gouv.ht** - Notes: Uses official government email. Pattern: firstnamemiddlename.lastname@domain ### BRH.HT (Banque de la Republique d'Haiti / Central Bank) **User: Amos Sejour (slug: asejour)** - Hash: `8ba065897a93268269014243b7d5a96170b35749d11ae86d11a3eb1c12415ebd` - Status: CRACKED - Email: **amos.sejour@brh.ht** - Notes: Uses official bank email. Standard firstname.lastname pattern. **User: James De Koven Pierre (slug: de-koven)** - Hash: `a8405a04f8712c0e72179415aebbd52909f03a1ce158f413e34e17275c697c84` - Status: CRACKED - Email: **jamesdekoven43@gmail.com** - Notes: Uses personal Gmail with number suffix 43. First+middle name combined, no last name in email. **User: Ralph Joseph Noel (slug: rnoel)** - Hash: `d3017c12ec3a54ca1d061daf1b4af88a388bceec0f446aaa60b4ecb4807f42a5` - Status: CRACKED - Email: **ralph.noel@brh.ht** - Notes: Uses official bank email. Standard firstname.lastname pattern (middle name omitted). --- ## Patterns Observed 1. **Government workers frequently use personal free email** for WordPress accounts (Gmail, Yahoo.fr, MSN, Hotmail) 2. **Yahoo.fr is popular** among Haitian gov workers (French-speaking country) 3. **BRH (Central Bank) is most professional** -- 2 of 3 users use @brh.ht corporate email 4. **DINEPA uses a mix** of official @dinepa.gouv.ht and Gmail accounts 5. **Primature has one official email** (joreste.payen) and the rest are personal accounts 6. **DGI has the worst hygiene** -- exposed literal email addresses as display names, all personal Gmail accounts 7. **Number suffixes** appear in personal emails (e.g., jamesdekoven43) 8. **Slug often matches email prefix** (ljguy, wilfrid_lo, timotheclifford pattern) ## Gravatar Profile Intelligence | Email | Real Name | Social | Profile URL | |-------|-----------|--------|-------------| | louicent19@gmail.com | Innocent Louinord | Twitter: @Inno100__ | https://gravatar.com/louicent19 | | timotheclifford@yahoo.fr | CT (Clifford Timothe) | -- | https://gravatar.com/timotheclifford | --- ## Unsolved Hashes (6 remaining) These 6 hashes resisted ~6.9 million brute-force attempts including: - All standard name permutations on 25+ domains - Number suffixes 0-9999 on 8 major free email providers - Haitian ISP domains (natcom, digicel, haitelonline, etc.) - Alternate spellings and Creole variants - Institutional/generic account patterns The remaining users likely have: - Non-obvious personal email addresses (nicknames, unrelated usernames) - Random or very large number suffixes (>9999) - Uncommon email providers not in our domain list - Emails with special characters or unusual formatting ``` 33e54dec0cd79fc4b5e911c15f836c46ec8d0e452ecd3ca5f707bce0a3540a3b PRL (admindev) @ md.gouv.ht d98b9d50d5d3acfaf8fde3a941b86cf2dbdbeed31c067e9db0f24252a80fef18 Jodelin Desrameaux @ dgi.gouv.ht e85a8c2d9285bfb3cf912c58b06b0d837e06d7bf01c266a4f439b915263ba318 La DGI @ dgi.gouv.ht 271e9f4f42b414c6e6d385d4512c61e0d6ec69ed9bb12a48970677912a0e2aa8 Fequelson Saint-Cyr (2010) @ dgi.gouv.ht b0d7088b226a69e2616f21a8a29bb5b65dac9adea3fddee522092aa0de9180c3 jeanphilippe baptiste @ primature.gouv.ht f34443b8071787d5b9f998bfdeeadf3ae9583384e08265628f2636100016d35a DINEPA HT @ dinepa.gouv.ht ```