================================================================================ GIVEWP PII EXTRACTION REPORT Target: primature.gouv.ht (Haiti Prime Minister's Office) Generated: 2026-03-04 10:16:09 Method: Unauthenticated HTTP GET to public GiveWP v3 REST API endpoints Status: RESEARCH ONLY - read, parse, report ================================================================================ ================================================================================ SECTION 1: EXECUTIVE SUMMARY ================================================================================ Total unique donors: 81 Total unique donations: 82 Total campaign comments: 16 Date range: 2019-02-01 to 2021-10-11 Sum of donation amounts: $120,785.00 USD Sum of donor totals (per-donor): $146,284.00 USD Donor classification: Potentially real people: 41 Test/gibberish entries: 35 Suspicious entries: 5 Gravatar email hashes recovered: 16 Full names from comments: 16 CRITICAL FINDING: The GiveWP REST API at primature.gouv.ht exposes donor records including names, donation amounts, dates, comments, and Gravatar SHA256 hashes (which are email fingerprints) to any unauthenticated visitor. While the email field itself is redacted (returned as empty string), the Gravatar hashes in campaign comments are derived from the raw email addresses and can be used for correlation attacks or brute-force email recovery. NOTE: All 82 donations and the 6 earlier offline donations use the 'Test Donation' or 'Offline Donation' gateway. No live payment gateway (Stripe, PayPal, etc.) was ever configured. This means the donation form was publicly accessible but never connected to a real payment processor. All 'donations' are test/demo entries. ================================================================================ SECTION 2: ALL DONOR RECORDS (81 unique) ================================================================================ ID | Classification | Name | Full Name (from comments) | Total Donated | # Donations | Created -------------------------------------------------------------------------------------------------------------------------------------------- 1 | POTENTIALLY REAL | Skye S | | $ 0.00 | 0 | 2018-06-01T11:36:33 2 | POTENTIALLY REAL | Irvin B | | $ 0.00 | 0 | 2018-06-04T11:26:01 4 | POTENTIALLY REAL | Baxton S | | $ 1,250.00 | 2 | 2018-06-07T05:43:17 5 | POTENTIALLY REAL | Brad K | | $ 8,079.00 | 3 | 2018-06-07T05:44:30 6 | POTENTIALLY REAL | Ackerley J | | $ 2,000.00 | 1 | 2018-06-07T05:45:49 7 | POTENTIALLY REAL | Fabio K | | $ 3,000.00 | 3 | 2018-06-07T05:47:44 8 | POTENTIALLY REAL | Taavetti J | | $ 5,500.00 | 2 | 2018-06-07T05:49:21 9 | POTENTIALLY REAL | Ackerley J | | $ 3,000.00 | 1 | 2018-06-07T05:55:40 10 | POTENTIALLY REAL | Taavetti J | | $ 4,500.00 | 1 | 2018-06-07T05:59:47 11 | POTENTIALLY REAL | Clara J | | $ 750.00 | 1 | 2018-06-08T06:15:54 12 | POTENTIALLY REAL | Lupita S | | $ 0.00 | 0 | 2018-06-12T04:22:01 13 | POTENTIALLY REAL | Savannah K | | $ 0.00 | 0 | 2018-06-12T04:22:37 14 | POTENTIALLY REAL | Marko C | | $ 0.00 | 0 | 2018-06-12T04:36:51 15 | POTENTIALLY REAL | Lucio B | | $ 0.00 | 0 | 2018-06-12T04:39:29 16 | POTENTIALLY REAL | Ashely M | | $ 0.00 | 0 | 2018-06-12T04:44:04 17 | POTENTIALLY REAL | James G | | $ 0.00 | 0 | 2019-02-01T12:51:14 18 | TEST/GIBBERISH | fdvdfbg d | | $ 500.00 | 1 | 2019-08-28T13:48:26 19 | POTENTIALLY REAL | asa a | asa aasas | $ 20.00 | 1 | 2019-08-29T00:40:33 20 | TEST/GIBBERISH | fbzdgbzfvS d | | $ 25.00 | 2 | 2019-08-29T06:43:25 21 | TEST/GIBBERISH | tatag r | tatag rus | $ 20.00 | 1 | 2019-08-29T12:00:55 22 | TEST/GIBBERISH | rewrwr r | | $ 20.00 | 1 | 2019-08-29T17:16:12 23 | TEST/GIBBERISH | вяаыва ф | | $ 80.00 | 1 | 2019-08-30T08:39:35 24 | POTENTIALLY REAL | Agustín S | | $ 20.00 | 1 | 2019-08-30T19:15:20 25 | TEST/GIBBERISH | klkjk k | | $ 5.00 | 1 | 2019-08-31T20:48:42 26 | TEST/GIBBERISH | gfd d | | $ 80.00 | 1 | 2019-09-02T08:01:36 27 | SUSPICIOUS | john d | john doe | $ 750.00 | 1 | 2019-09-04T21:49:10 28 | TEST/GIBBERISH | asd a | asd asd | $ 5.00 | 1 | 2019-09-05T11:25:27 29 | POTENTIALLY REAL | Mehak N | | $ 100.00 | 1 | 2019-09-05T12:10:43 30 | POTENTIALLY REAL | Santhosh t | | $ 5.00 | 1 | 2019-09-06T11:26:06 31 | TEST/GIBBERISH | ghhh h | | $ 25.00 | 2 | 2019-09-06T12:20:05 32 | POTENTIALLY REAL | patryck l | | $ 20.00 | 1 | 2019-09-08T14:21:54 33 | POTENTIALLY REAL | Jeff t | | $ 80.00 | 1 | 2019-09-10T01:03:22 34 | TEST/GIBBERISH | sda d | | $ 5.00 | 1 | 2019-09-11T04:06:18 35 | SUSPICIOUS | Barack O | | $ 80.00 | 1 | 2019-09-16T06:26:40 36 | TEST/GIBBERISH | fdghdt d | | $ 20.00 | 1 | 2019-09-17T15:14:51 37 | TEST/GIBBERISH | test t | | $ 5.00 | 1 | 2019-09-18T07:23:44 38 | SUSPICIOUS | Jimmy C | | $ 750.00 | 1 | 2019-09-18T23:29:20 39 | POTENTIALLY REAL | liba n | | $ 1,505.00 | 2 | 2019-09-19T12:01:40 40 | TEST/GIBBERISH | asdfasdf a | | $ 15.00 | 3 | 2019-10-04T07:16:08 41 | POTENTIALLY REAL | eric t | | $ 80.00 | 1 | 2019-10-05T04:03:01 42 | TEST/GIBBERISH | dxvx a | | $ 10.00 | 2 | 2019-10-05T07:45:33 43 | POTENTIALLY REAL | Carlos Gabriel P | | $ 5.00 | 1 | 2019-10-13T21:52:34 44 | TEST/GIBBERISH | ddf s | | $ 20.00 | 1 | 2019-10-20T14:37:56 45 | TEST/GIBBERISH | sfsdf s | sfsdf sdfdsf | $ 80.00 | 1 | 2019-10-20T14:38:51 46 | POTENTIALLY REAL | toni v | | $ 240.00 | 3 | 2019-10-28T05:01:55 47 | POTENTIALLY REAL | Romain C | | $ 1,000.00 | 2 | 2019-11-06T09:43:17 48 | SUSPICIOUS | MOMA E | | $ 100,005.00 | 2 | 2019-11-07T21:38:39 49 | TEST/GIBBERISH | ee f | | $ 80.00 | 1 | 2019-11-17T12:09:37 50 | POTENTIALLY REAL | pedro m | pedro mulluni | $ 20.00 | 1 | 2019-11-20T05:31:30 51 | POTENTIALLY REAL | Cem G | Cem GÖKSU | $ 10.00 | 1 | 2019-11-21T11:00:39 52 | TEST/GIBBERISH | ejhkerk k | | $ 1,500.00 | 1 | 2019-11-23T11:08:15 53 | POTENTIALLY REAL | merlo p | | $ 20.00 | 1 | 2019-11-23T17:09:33 54 | TEST/GIBBERISH | asd a | asd asd | $ 20.00 | 1 | 2019-11-26T16:12:06 55 | TEST/GIBBERISH | DFD S | | $ 20.00 | 1 | 2019-11-27T14:03:01 56 | SUSPICIOUS | Steve J | | $ 80.00 | 1 | 2019-12-02T18:30:27 57 | POTENTIALLY REAL | Media S | | $ 5.00 | 1 | 2019-12-16T10:46:43 58 | POTENTIALLY REAL | Romain C | | $ 20.00 | 1 | 2020-01-07T15:46:39 59 | POTENTIALLY REAL | Owomaniya A | | $ 20.00 | 1 | 2020-01-11T09:57:15 60 | TEST/GIBBERISH | First Name L | | $ 10.00 | 2 | 2020-01-16T07:51:58 61 | TEST/GIBBERISH | sdaD a | | $ 1,500.00 | 1 | 2020-01-25T03:14:11 62 | TEST/GIBBERISH | d d | | $ 20.00 | 1 | 2020-01-26T16:17:31 63 | POTENTIALLY REAL | ahmed w | | $ 5.00 | 1 | 2020-02-12T07:16:48 64 | TEST/GIBBERISH | rrtg r | | $ 5.00 | 1 | 2020-02-12T07:17:54 65 | TEST/GIBBERISH | fsf f | fsf fdsfs | $ 1,500.00 | 1 | 2020-02-12T19:46:51 66 | TEST/GIBBERISH | fsf f | fsf fdsfs | $ 750.00 | 1 | 2020-02-12T19:47:46 67 | TEST/GIBBERISH | ewf f | ewf fveg | $ 3,000.00 | 1 | 2020-03-09T03:05:41 68 | POTENTIALLY REAL | Uus J | Uus Jus | $ 750.00 | 1 | 2020-03-12T07:30:57 69 | POTENTIALLY REAL | Anthony A | | $ 5.00 | 1 | 2020-03-14T04:46:59 70 | TEST/GIBBERISH | asd a | asd asd | $ 100.00 | 1 | 2020-05-12T07:55:59 71 | POTENTIALLY REAL | ion | | $ 100.00 | 1 | 2020-05-18T20:19:21 72 | TEST/GIBBERISH | cv v | | $ 1,500.00 | 1 | 2020-06-06T10:55:53 73 | POTENTIALLY REAL | Kaycee c | | $ 1,500.00 | 1 | 2020-06-13T12:38:47 74 | TEST/GIBBERISH | Test t | | $ 20.00 | 1 | 2020-06-24T11:16:34 75 | POTENTIALLY REAL | Abdalla I | Abdalla IBRAHIM | $ 20.00 | 1 | 2020-06-24T23:52:58 76 | TEST/GIBBERISH | aaa a | | $ 20.00 | 1 | 2020-06-25T23:35:36 77 | TEST/GIBBERISH | asdsada d | | $ 5.00 | 1 | 2020-07-08T07:43:48 78 | TEST/GIBBERISH | jkljklj j | | $ 5.00 | 1 | 2020-07-10T13:22:41 79 | TEST/GIBBERISH | kujihkujh D | | $ 5.00 | 1 | 2020-07-23T12:56:49 80 | POTENTIALLY REAL | FODOUOP J | FODOUOP JAHSWANT | $ 5.00 | 1 | 2020-08-16T13:20:21 81 | TEST/GIBBERISH | kjhkjhjh b | kjhkjhjh bjhvjhv | $ 5.00 | 1 | 2020-10-17T18:19:16 82 | POTENTIALLY REAL | nadir m | | $ 5.00 | 1 | 2021-06-01T13:04:28 ================================================================================ SECTION 3: POTENTIALLY REAL PEOPLE (flagged for review) ================================================================================ These donors have names that appear to be real human names rather than keyboard mashing or test data. However, given that ALL donations used the 'Test Donation' gateway, even these may be test entries. Donor ID 1: Name (truncated): Skye S Total donated: $0.00 USD # Donations: 0 First seen: 2018-06-01T11:36:33 Donor ID 2: Name (truncated): Irvin B Total donated: $0.00 USD # Donations: 0 First seen: 2018-06-04T11:26:01 Donor ID 4: Name (truncated): Baxton S Total donated: $1,250.00 USD # Donations: 2 First seen: 2018-06-07T05:43:17 Donor ID 5: Name (truncated): Brad K Total donated: $8,079.00 USD # Donations: 3 First seen: 2018-06-07T05:44:30 Donor ID 6: Name (truncated): Ackerley J Total donated: $2,000.00 USD # Donations: 1 First seen: 2018-06-07T05:45:49 Donor ID 7: Name (truncated): Fabio K Total donated: $3,000.00 USD # Donations: 3 First seen: 2018-06-07T05:47:44 Donor ID 8: Name (truncated): Taavetti J Total donated: $5,500.00 USD # Donations: 2 First seen: 2018-06-07T05:49:21 Donor ID 9: Name (truncated): Ackerley J Total donated: $3,000.00 USD # Donations: 1 First seen: 2018-06-07T05:55:40 Donor ID 10: Name (truncated): Taavetti J Total donated: $4,500.00 USD # Donations: 1 First seen: 2018-06-07T05:59:47 Donor ID 11: Name (truncated): Clara J Total donated: $750.00 USD # Donations: 1 First seen: 2018-06-08T06:15:54 Donor ID 12: Name (truncated): Lupita S Total donated: $0.00 USD # Donations: 0 First seen: 2018-06-12T04:22:01 Donor ID 13: Name (truncated): Savannah K Total donated: $0.00 USD # Donations: 0 First seen: 2018-06-12T04:22:37 Donor ID 14: Name (truncated): Marko C Total donated: $0.00 USD # Donations: 0 First seen: 2018-06-12T04:36:51 Donor ID 15: Name (truncated): Lucio B Total donated: $0.00 USD # Donations: 0 First seen: 2018-06-12T04:39:29 Donor ID 16: Name (truncated): Ashely M Total donated: $0.00 USD # Donations: 0 First seen: 2018-06-12T04:44:04 Donor ID 17: Name (truncated): James G Total donated: $0.00 USD # Donations: 0 First seen: 2019-02-01T12:51:14 Donor ID 19: Name (truncated): asa a Name (full): asa aasas Total donated: $20.00 USD # Donations: 1 First seen: 2019-08-29T00:40:33 Gravatar SHA256: 18c66f1542338c13be591dc5d6f5d532a0aee52a2bcbd90eb5007e5c328e08b6 (This hash is derived from the donor's email address) Donor ID 24: Name (truncated): Agustín S Total donated: $20.00 USD # Donations: 1 First seen: 2019-08-30T19:15:20 Donor ID 29: Name (truncated): Mehak N Total donated: $100.00 USD # Donations: 1 First seen: 2019-09-05T12:10:43 Donor ID 30: Name (truncated): Santhosh t Total donated: $5.00 USD # Donations: 1 First seen: 2019-09-06T11:26:06 Donor ID 32: Name (truncated): patryck l Total donated: $20.00 USD # Donations: 1 First seen: 2019-09-08T14:21:54 Donor ID 33: Name (truncated): Jeff t Total donated: $80.00 USD # Donations: 1 First seen: 2019-09-10T01:03:22 Donor ID 39: Name (truncated): liba n Total donated: $1,505.00 USD # Donations: 2 First seen: 2019-09-19T12:01:40 Donor ID 41: Name (truncated): eric t Total donated: $80.00 USD # Donations: 1 First seen: 2019-10-05T04:03:01 Donor ID 43: Name (truncated): Carlos Gabriel P Total donated: $5.00 USD # Donations: 1 First seen: 2019-10-13T21:52:34 Donor ID 46: Name (truncated): toni v Total donated: $240.00 USD # Donations: 3 First seen: 2019-10-28T05:01:55 Donor ID 47: Name (truncated): Romain C Total donated: $1,000.00 USD # Donations: 2 First seen: 2019-11-06T09:43:17 Donor ID 50: Name (truncated): pedro m Name (full): pedro mulluni Total donated: $20.00 USD # Donations: 1 First seen: 2019-11-20T05:31:30 Gravatar SHA256: b93620360c25a3bbce67ad31ac9fdfe21bf48dd45db667268234bc48dea81c53 (This hash is derived from the donor's email address) Donor ID 51: Name (truncated): Cem G Name (full): Cem GÖKSU Total donated: $10.00 USD # Donations: 1 First seen: 2019-11-21T11:00:39 Gravatar SHA256: 1d2cc9a7391da341a36d17c51551cb3656b6fe0e4ef86607f14c9eeaa0e64fd1 (This hash is derived from the donor's email address) Donor ID 53: Name (truncated): merlo p Total donated: $20.00 USD # Donations: 1 First seen: 2019-11-23T17:09:33 Donor ID 57: Name (truncated): Media S Total donated: $5.00 USD # Donations: 1 First seen: 2019-12-16T10:46:43 Donor ID 58: Name (truncated): Romain C Total donated: $20.00 USD # Donations: 1 First seen: 2020-01-07T15:46:39 Donor ID 59: Name (truncated): Owomaniya A Total donated: $20.00 USD # Donations: 1 First seen: 2020-01-11T09:57:15 Donor ID 63: Name (truncated): ahmed w Total donated: $5.00 USD # Donations: 1 First seen: 2020-02-12T07:16:48 Donor ID 68: Name (truncated): Uus J Name (full): Uus Jus Total donated: $750.00 USD # Donations: 1 First seen: 2020-03-12T07:30:57 Gravatar SHA256: 1900b2d775c3aea428720451b80b15b1fd8a5585edf039336d403cc31202a2da (This hash is derived from the donor's email address) Donor ID 69: Name (truncated): Anthony A Total donated: $5.00 USD # Donations: 1 First seen: 2020-03-14T04:46:59 Donor ID 71: Name (truncated): ion Total donated: $100.00 USD # Donations: 1 First seen: 2020-05-18T20:19:21 Donor ID 73: Name (truncated): Kaycee c Total donated: $1,500.00 USD # Donations: 1 First seen: 2020-06-13T12:38:47 Donor ID 75: Name (truncated): Abdalla I Name (full): Abdalla IBRAHIM Total donated: $20.00 USD # Donations: 1 First seen: 2020-06-24T23:52:58 Gravatar SHA256: 218f411b4da19e56cc2022f4636cc4a2580131f0ee14bba235f7bac7bc3a075a (This hash is derived from the donor's email address) Donor ID 80: Name (truncated): FODOUOP J Name (full): FODOUOP JAHSWANT Total donated: $5.00 USD # Donations: 1 First seen: 2020-08-16T13:20:21 Gravatar SHA256: 89d92af5cd4c89bd12cfb578b65a8e7ef6b92d4c2e47a62026bcacbf40825ec2 (This hash is derived from the donor's email address) Donor ID 82: Name (truncated): nadir m Total donated: $5.00 USD # Donations: 1 First seen: 2021-06-01T13:04:28 ================================================================================ SECTION 4: SUSPICIOUS ENTRIES ================================================================================ Donor ID 27: john d Full name: john doe Total: $750.00 | Donations: 1 | Created: 2019-09-04T21:49:10 FLAG: Matches famous person pattern (likely joke) Gravatar SHA256: 910789803908d9ab8a57b28ff0af7ab81b9607356aef6f18d8499eb1489ed8ab Donor ID 35: Barack O Total: $80.00 | Donations: 1 | Created: 2019-09-16T06:26:40 FLAG: Matches famous person pattern (likely joke) Donor ID 38: Jimmy C Total: $750.00 | Donations: 1 | Created: 2019-09-18T23:29:20 FLAG: Matches famous person pattern (likely joke) Donor ID 48: MOMA E Total: $100,005.00 | Donations: 2 | Created: 2019-11-07T21:38:39 FLAG: Unusually large amount: $100,005.00 Donor ID 56: Steve J Total: $80.00 | Donations: 1 | Created: 2019-12-02T18:30:27 FLAG: Matches famous person pattern (likely joke) ================================================================================ SECTION 5: ALL DONATIONS (chronological) ================================================================================ DonID | DonorID | Name | Amount | Status | Gateway | Date | Comment -------------------------------------------------------------------------------------------------------------------------------------------- 914 | 17 | James G | $ 750.00 | pending | Offline Donation | 2019-02-01T12:51:14 | 916 | 11 | Saqib H | $ 750.00 | pending | Offline Donation | 2019-02-05T07:03:21 | 918 | 11 | Test D | $ 250.00 | pending | Offline Donation | 2019-02-19T06:47:28 | 919 | 11 | Test D | $ 500.00 | pending | Offline Donation | 2019-02-19T06:48:02 | 920 | 11 | Test D | $ 80.00 | pending | Offline Donation | 2019-02-19T06:55:06 | 921 | 11 | test D | $ 250.00 | pending | Offline Donation | 2019-02-19T06:55:47 | 1306 | 18 | fdvdfbg d | $ 500.00 | publish | Test Donation | 2019-08-28T13:48:26 | 1307 | 19 | asa a | $ 20.00 | publish | Test Donation | 2019-08-29T00:40:33 | asas 1308 | 20 | dfgdhxdg f | $ 20.00 | publish | Test Donation | 2019-08-29T06:43:26 | 1309 | 20 | fbzdgbzfvS d | $ 5.00 | publish | Test Donation | 2019-08-29T06:44:20 | 1317 | 21 | tatag r | $ 20.00 | publish | Test Donation | 2019-08-29T12:00:55 | tes ajah 1318 | 22 | rewrwr r | $ 20.00 | publish | Test Donation | 2019-08-29T17:16:12 | 1319 | 23 | вяаыва ф | $ 80.00 | publish | Test Donation | 2019-08-30T08:39:35 | 1320 | 24 | Agustín S | $ 20.00 | publish | Test Donation | 2019-08-30T19:15:20 | 1321 | 25 | klkjk k | $ 5.00 | publish | Test Donation | 2019-08-31T20:48:42 | 1322 | 26 | gfd d | $ 80.00 | publish | Test Donation | 2019-09-02T08:01:36 | 1323 | 27 | john d | $ 750.00 | publish | Test Donation | 2019-09-04T21:49:10 | test 1324 | 28 | asd a | $ 5.00 | publish | Test Donation | 2019-09-05T11:25:27 | 1325 | 29 | Mehak N | $ 100.00 | publish | Test Donation | 2019-09-05T12:10:43 | 1326 | 30 | Santhosh t | $ 5.00 | publish | Test Donation | 2019-09-06T11:26:06 | 1327 | 31 | ghhh h | $ 20.00 | publish | Test Donation | 2019-09-06T12:20:05 | 1328 | 32 | patryck l | $ 20.00 | publish | Test Donation | 2019-09-08T14:21:54 | 1329 | 33 | Jeff t | $ 80.00 | publish | Test Donation | 2019-09-10T01:03:22 | 1330 | 34 | sda d | $ 5.00 | publish | Test Donation | 2019-09-11T04:06:19 | 1331 | 35 | Barack O | $ 80.00 | publish | Test Donation | 2019-09-16T06:26:40 | 1333 | 36 | fdghdt d | $ 20.00 | publish | Test Donation | 2019-09-17T15:14:51 | 1334 | 31 | ghhh h | $ 5.00 | publish | Test Donation | 2019-09-18T03:17:51 | 1335 | 37 | test t | $ 5.00 | publish | Test Donation | 2019-09-18T07:23:44 | 1336 | 38 | Jimmy C | $ 750.00 | publish | Test Donation | 2019-09-18T23:29:20 | 1337 | 39 | liba n | $ 5.00 | publish | Test Donation | 2019-09-19T12:01:40 | 1338 | 39 | liba n | $ 1,500.00 | publish | Test Donation | 2019-09-19T12:02:33 | 1340 | 40 | test t | $ 5.00 | publish | Test Donation | 2019-10-04T07:16:08 | 1341 | 40 | test t | $ 5.00 | publish | Test Donation | 2019-10-04T07:16:52 | 1342 | 41 | eric t | $ 80.00 | publish | Test Donation | 2019-10-05T04:03:01 | 1343 | 42 | dxvx a | $ 5.00 | publish | Test Donation | 2019-10-05T07:45:33 | 1344 | 42 | dxvx a | $ 5.00 | publish | Test Donation | 2019-10-05T07:45:37 | 1346 | 43 | Carlos Gabriel P | $ 5.00 | publish | Test Donation | 2019-10-13T21:52:34 | 1347 | 44 | ddf s | $ 20.00 | publish | Test Donation | 2019-10-20T14:37:56 | 1348 | 45 | sfsdf s | $ 80.00 | publish | Test Donation | 2019-10-20T14:38:51 | sdfdsf 1350 | 46 | toniyes v | $ 80.00 | publish | Test Donation | 2019-10-28T05:01:55 | 1351 | 46 | toniyes v | $ 80.00 | publish | Test Donation | 2019-10-28T05:02:05 | 1352 | 46 | toni v | $ 80.00 | publish | Test Donation | 2019-10-28T05:29:36 | test 1355 | 47 | Romain C | $ 250.00 | publish | Test Donation | 2019-11-06T09:43:17 | 1356 | 47 | Romain C | $ 750.00 | publish | Test Donation | 2019-11-06T09:43:39 | 1357 | 48 | MOMA E | $ 5.00 | publish | Test Donation | 2019-11-07T21:38:39 | 1358 | 48 | MOMA E | $100,000.00 | publish | Test Donation | 2019-11-07T21:44:01 | A 1359 | 49 | ee f | $ 80.00 | publish | Test Donation | 2019-11-17T12:09:37 | 1360 | 50 | pedro m | $ 20.00 | publish | Test Donation | 2019-11-20T05:31:30 | quiero donar 1361 | 51 | Cem G | $ 10.00 | publish | Test Donation | 2019-11-21T11:00:40 | asasas 1362 | 52 | ejhkerk k | $ 1,500.00 | publish | Test Donation | 2019-11-23T11:08:15 | 1363 | 53 | merlo p | $ 20.00 | publish | Test Donation | 2019-11-23T17:09:34 | 1364 | 54 | asd a | $ 20.00 | publish | Test Donation | 2019-11-26T16:12:06 | asd 1365 | 55 | DFD S | $ 20.00 | publish | Test Donation | 2019-11-27T14:03:01 | 1366 | 56 | Steve J | $ 80.00 | publish | Test Donation | 2019-12-02T18:30:27 | 1367 | 57 | Media S | $ 5.00 | publish | Test Donation | 2019-12-16T10:46:43 | 1368 | 58 | Romain C | $ 20.00 | publish | Test Donation | 2020-01-07T15:46:39 | 1371 | 59 | Owomaniya A | $ 20.00 | publish | Test Donation | 2020-01-11T09:57:15 | 1372 | 60 | First Name L | $ 5.00 | publish | Test Donation | 2020-01-16T07:51:58 | test 1373 | 60 | First Name L | $ 5.00 | publish | Test Donation | 2020-01-16T07:53:01 | 1374 | 61 | sdaD a | $ 1,500.00 | publish | Test Donation | 2020-01-25T03:14:11 | 1375 | 62 | d d | $ 20.00 | publish | Test Donation | 2020-01-26T16:17:31 | 1380 | 63 | ahmed w | $ 5.00 | publish | Test Donation | 2020-02-12T07:16:48 | 1381 | 64 | rrtg r | $ 5.00 | publish | Test Donation | 2020-02-12T07:17:54 | 1382 | 65 | fsf f | $ 1,500.00 | publish | Test Donation | 2020-02-12T19:46:51 | 1383 | 66 | fsf f | $ 750.00 | publish | Test Donation | 2020-02-12T19:47:46 | ffsdfsd 1386 | 67 | ewf f | $ 3,000.00 | publish | Test Donation | 2020-03-09T03:05:41 | ss 1387 | 68 | Uus J | $ 750.00 | publish | Test Donation | 2020-03-12T07:30:57 | Nsjsj 1388 | 69 | Anthony A | $ 5.00 | publish | Test Donation | 2020-03-14T04:46:59 | 1400 | 70 | asd a | $ 100.00 | publish | Test Donation | 2020-05-12T07:55:59 | 1401 | 71 | ion | $ 100.00 | publish | Test Donation | 2020-05-18T20:19:21 | 1403 | 72 | cv v | $ 1,500.00 | publish | Test Donation | 2020-06-06T10:55:53 | 1404 | 73 | Kaycee c | $ 1,500.00 | publish | Test Donation | 2020-06-13T12:38:48 | 1405 | 74 | Test t | $ 20.00 | publish | Test Donation | 2020-06-24T11:16:34 | 1406 | 75 | Abdalla I | $ 20.00 | publish | Test Donation | 2020-06-24T23:52:58 | cvncngf 1407 | 76 | aaa a | $ 20.00 | publish | Test Donation | 2020-06-25T23:35:36 | 1408 | 77 | asdsada d | $ 5.00 | publish | Test Donation | 2020-07-08T07:43:48 | 1410 | 78 | jkljklj j | $ 5.00 | publish | Test Donation | 2020-07-10T13:22:41 | 1411 | 79 | kujihkujh D | $ 5.00 | publish | Test Donation | 2020-07-23T12:56:49 | 1624 | 80 | FODOUOP J | $ 5.00 | publish | Test Donation | 2020-08-16T13:20:21 | DOUALA 1626 | 81 | kjhkjhjh b | $ 5.00 | publish | Test Donation | 2020-10-17T18:19:16 | kj;dflkasjkldjs 1629 | 82 | nadir m | $ 5.00 | publish | Test Donation | 2021-06-01T13:04:28 | 1630 | 40 | asdfasdf a | $ 5.00 | publish | Test Donation | 2021-10-11T18:18:45 | ================================================================================ SECTION 6: DONATION STATISTICS ================================================================================ Total donations: 82 Total amount: $120,785.00 USD Average donation: $1,472.99 USD Median donation: $20.00 USD Min donation: $5.00 USD Max donation: $100,000.00 USD Date range: 2019-02-01 to 2021-10-11 By Gateway: Test Donation 76 donations Offline Donation 6 donations By Status: publish 76 donations pending 6 donations By Form: Support us with your Funds 43 donations Make a Donation 29 donations Support Baxton 6 donations Make a Donate 2 donations Save Children From Hunger 2 donations Campaign IDs referenced: [1, 9, 12, 13] Amount Distribution: $ 0.00 - $ 5.00: 27 donations $ 5.01 - $ 20.00: 20 donations $ 20.01 - $ 100.00: 15 donations $ 100.01 - $ 500.00: 5 donations $ 500.01 - $ 1,000.00: 7 donations $ 1,000.01 - $ 5,000.00: 7 donations $ 10,000.01 - $1,000,000.00: 1 donations ================================================================================ SECTION 7: CAMPAIGN COMMENTS & GRAVATAR EMAIL HASHES ================================================================================ Campaign 12 comments expose full donor names and Gravatar SHA256 hashes. Gravatar hashes are SHA256(lowercase(trim(email))). These can be used to: 1. Confirm if a suspected email belongs to a donor (hash comparison) 2. Brute-force common email patterns (name@domain combinations) 3. Cross-reference with other Gravatar hash leaks Name: asa aasas Comment: asas Anonymous: False Date: 7 years Gravatar: 18c66f1542338c13be591dc5d6f5d532a0aee52a2bcbd90eb5007e5c328e08b6 Avatar: https://secure.gravatar.com/avatar/18c66f1542338c13be591dc5d6f5d532a0aee52a2bcbd90eb5007e5c328e08b6?s=96&d=mm&r=g Name: tatag rus Comment: tes ajah Anonymous: False Date: 7 years Gravatar: d465b54719edc749e3479da367916060f13a2b84665d95c0df686ce78fcfbeb3 Avatar: https://secure.gravatar.com/avatar/d465b54719edc749e3479da367916060f13a2b84665d95c0df686ce78fcfbeb3?s=96&d=mm&r=g Name: john doe Comment: test Anonymous: False Date: 7 years Gravatar: 910789803908d9ab8a57b28ff0af7ab81b9607356aef6f18d8499eb1489ed8ab Avatar: https://secure.gravatar.com/avatar/910789803908d9ab8a57b28ff0af7ab81b9607356aef6f18d8499eb1489ed8ab?s=96&d=mm&r=g Name: sfsdf sdfdsf Comment: sdfdsf Anonymous: False Date: 6 years Gravatar: c7bc426c017df7f3eae67d621b27287dadd5787e79737a4b7f024c7fde1cdc7d Avatar: https://secure.gravatar.com/avatar/c7bc426c017df7f3eae67d621b27287dadd5787e79737a4b7f024c7fde1cdc7d?s=96&d=mm&r=g Name: toniyes vendr Comment: test Anonymous: False Date: 6 years Gravatar: 6a037209ad2df51da42f960c9daf4d3e32733a0fa1ec659c38c5e90e8c1f3452 Avatar: https://secure.gravatar.com/avatar/6a037209ad2df51da42f960c9daf4d3e32733a0fa1ec659c38c5e90e8c1f3452?s=96&d=mm&r=g Name: MOMA EL MOCTAR Comment: A Anonymous: False Date: 6 years Gravatar: bac786ab7205c259727a4d0d3b3ae1c7a0cf667fbe64aca8b7c0e8a25181e589 Avatar: https://secure.gravatar.com/avatar/bac786ab7205c259727a4d0d3b3ae1c7a0cf667fbe64aca8b7c0e8a25181e589?s=96&d=mm&r=g Name: pedro mulluni Comment: quiero donar Anonymous: False Date: 6 years Gravatar: b93620360c25a3bbce67ad31ac9fdfe21bf48dd45db667268234bc48dea81c53 Avatar: https://secure.gravatar.com/avatar/b93620360c25a3bbce67ad31ac9fdfe21bf48dd45db667268234bc48dea81c53?s=96&d=mm&r=g Name: Cem GÖKSU Comment: asasas Anonymous: False Date: 6 years Gravatar: 1d2cc9a7391da341a36d17c51551cb3656b6fe0e4ef86607f14c9eeaa0e64fd1 Avatar: https://secure.gravatar.com/avatar/1d2cc9a7391da341a36d17c51551cb3656b6fe0e4ef86607f14c9eeaa0e64fd1?s=96&d=mm&r=g Name: asd asd Comment: asd Anonymous: False Date: 6 years Gravatar: 5cedda60ec8d259ebd256a526d481d16acfe2e540cb78fa1d3dbcdbf2b22daec Avatar: https://secure.gravatar.com/avatar/5cedda60ec8d259ebd256a526d481d16acfe2e540cb78fa1d3dbcdbf2b22daec?s=96&d=mm&r=g Name: First Name Last Name Comment: test Anonymous: False Date: 6 years Gravatar: 32e19a491662fd86de7d3806b1199b76f0ee44e928d3475f05b0c8a59912c097 Avatar: https://secure.gravatar.com/avatar/32e19a491662fd86de7d3806b1199b76f0ee44e928d3475f05b0c8a59912c097?s=96&d=mm&r=g Name: fsf fdsfs Comment: ffsdfsd Anonymous: False Date: 6 years Gravatar: 3b5bf08cad917d83539a0d4b91d08e662a4a79f53999b67481000d5eafe430db Avatar: https://secure.gravatar.com/avatar/3b5bf08cad917d83539a0d4b91d08e662a4a79f53999b67481000d5eafe430db?s=96&d=mm&r=g Name: ewf fveg Comment: ss Anonymous: False Date: 6 years Gravatar: 9c12d7bc622df01cc2214f2ad837f66940596b520a922c76d3d00f4c99e9364e Avatar: https://secure.gravatar.com/avatar/9c12d7bc622df01cc2214f2ad837f66940596b520a922c76d3d00f4c99e9364e?s=96&d=mm&r=g Name: Uus Jus Comment: Nsjsj Anonymous: False Date: 6 years Gravatar: 1900b2d775c3aea428720451b80b15b1fd8a5585edf039336d403cc31202a2da Avatar: https://secure.gravatar.com/avatar/1900b2d775c3aea428720451b80b15b1fd8a5585edf039336d403cc31202a2da?s=96&d=mm&r=g Name: Abdalla IBRAHIM Comment: cvncngf Anonymous: False Date: 6 years Gravatar: 218f411b4da19e56cc2022f4636cc4a2580131f0ee14bba235f7bac7bc3a075a Avatar: https://secure.gravatar.com/avatar/218f411b4da19e56cc2022f4636cc4a2580131f0ee14bba235f7bac7bc3a075a?s=96&d=mm&r=g Name: FODOUOP JAHSWANT Comment: DOUALA Anonymous: False Date: 6 years Gravatar: 89d92af5cd4c89bd12cfb578b65a8e7ef6b92d4c2e47a62026bcacbf40825ec2 Avatar: https://secure.gravatar.com/avatar/89d92af5cd4c89bd12cfb578b65a8e7ef6b92d4c2e47a62026bcacbf40825ec2?s=96&d=mm&r=g Name: kjhkjhjh bjhvjhv Comment: kj;dflkasjkldjs Anonymous: False Date: 5 years Gravatar: a4c22fb3cac1d3fe3801e73d0df2717d2199cab9fff92d63b1f9bea7092e955f Avatar: https://secure.gravatar.com/avatar/a4c22fb3cac1d3fe3801e73d0df2717d2199cab9fff92d63b1f9bea7092e955f?s=96&d=mm&r=g ================================================================================ SECTION 8: FULL NAME RECOVERY (donor API truncated -> comments full) ================================================================================ The donor API returns last names truncated to a single initial. Campaign comments reveal the full last names for 16 donors: Donor API Name | Full Name (from comments) | Gravatar SHA256 ---------------------------------------------------------------------------------------------------- abdalla i | Abdalla IBRAHIM | 218f411b4da19e56cc2022f4636cc4a2580131f0ee14bba235f7bac7bc3a075a cem g | Cem GÖKSU | 1d2cc9a7391da341a36d17c51551cb3656b6fe0e4ef86607f14c9eeaa0e64fd1 fodouop j | FODOUOP JAHSWANT | 89d92af5cd4c89bd12cfb578b65a8e7ef6b92d4c2e47a62026bcacbf40825ec2 first n | First Name Last Name | 32e19a491662fd86de7d3806b1199b76f0ee44e928d3475f05b0c8a59912c097 moma m | MOMA EL MOCTAR | bac786ab7205c259727a4d0d3b3ae1c7a0cf667fbe64aca8b7c0e8a25181e589 uus j | Uus Jus | 1900b2d775c3aea428720451b80b15b1fd8a5585edf039336d403cc31202a2da asa a | asa aasas | 18c66f1542338c13be591dc5d6f5d532a0aee52a2bcbd90eb5007e5c328e08b6 asd a | asd asd | 5cedda60ec8d259ebd256a526d481d16acfe2e540cb78fa1d3dbcdbf2b22daec ewf f | ewf fveg | 9c12d7bc622df01cc2214f2ad837f66940596b520a922c76d3d00f4c99e9364e fsf f | fsf fdsfs | 3b5bf08cad917d83539a0d4b91d08e662a4a79f53999b67481000d5eafe430db john d | john doe | 910789803908d9ab8a57b28ff0af7ab81b9607356aef6f18d8499eb1489ed8ab kjhkjhjh b | kjhkjhjh bjhvjhv | a4c22fb3cac1d3fe3801e73d0df2717d2199cab9fff92d63b1f9bea7092e955f pedro m | pedro mulluni | b93620360c25a3bbce67ad31ac9fdfe21bf48dd45db667268234bc48dea81c53 sfsdf s | sfsdf sdfdsf | c7bc426c017df7f3eae67d621b27287dadd5787e79737a4b7f024c7fde1cdc7d tatag r | tatag rus | d465b54719edc749e3479da367916060f13a2b84665d95c0df686ce78fcfbeb3 toniyes v | toniyes vendr | 6a037209ad2df51da42f960c9daf4d3e32733a0fa1ec659c38c5e90e8c1f3452 ================================================================================ SECTION 9: HIGH-VALUE & NOTABLE ENTRIES ================================================================================ --- Largest Single Donation --- Donation ID: 1358 Donor ID: 48 Name: MOMA E Amount: $100,000.00 USD Date: 2019-11-07T21:44:01 Gateway: Test Donation Comment: A --- Top 10 Donors by Total Amount --- 1. MOMA E $ 100,005.00 USD (2 donations) 2. Brad K $ 8,079.00 USD (3 donations) 3. Taavetti J $ 5,500.00 USD (2 donations) 4. Taavetti J $ 4,500.00 USD (1 donations) 5. Fabio K $ 3,000.00 USD (3 donations) 6. Ackerley J $ 3,000.00 USD (1 donations) 7. ewf fveg $ 3,000.00 USD (1 donations) 8. Ackerley J $ 2,000.00 USD (1 donations) 9. liba n $ 1,505.00 USD (2 donations) 10. Kaycee c $ 1,500.00 USD (1 donations) --- Donors with Multiple Donations --- Donor 5: Brad K - 3 donations, $8,079.00 Donor 7: Fabio K - 3 donations, $3,000.00 Donor 46: toni v - 3 donations, $240.00 Donor 40: asdfasdf a - 3 donations, $15.00 Donor 4: Baxton S - 2 donations, $1,250.00 Donor 8: Taavetti J - 2 donations, $5,500.00 Donor 60: First Name L - 2 donations, $10.00 Donor 48: MOMA E - 2 donations, $100,005.00 Donor 47: Romain C - 2 donations, $1,000.00 Donor 42: dxvx a - 2 donations, $10.00 Donor 39: liba n - 2 donations, $1,505.00 Donor 31: ghhh h - 2 donations, $25.00 Donor 20: fbzdgbzfvS d - 2 donations, $25.00 --- Notable Name Patterns --- 'Barack O' (ID 35) - Famous name pattern, $80 test donation 'Jimmy C' (ID 38) - Famous name pattern, $750 test donation 'Steve J' (ID 56) - Famous name pattern, $80 test donation 'john d' (ID 27) -> 'john doe' (from comments) - Classic test name 'First Name L' (ID 60) -> 'First Name Last Name' (from comments) - Literal placeholder 'MOMA E' (ID 48) -> 'MOMA EL MOCTAR' (from comments) - $100,005 total, possibly real 'FODOUOP J' (ID 80) -> 'FODOUOP JAHSWANT' - Comment says 'DOUALA' (city in Cameroon) 'Abdalla I' (ID 75) -> 'Abdalla IBRAHIM' - Comment is gibberish but name looks real 'Cem G' (ID 51) -> 'Cem GOKSU' - Turkish name, commented 'asasas' 'pedro m' (ID 50) -> 'pedro mulluni' - Spanish comment 'quiero donar' (I want to donate) ================================================================================ SECTION 10: PII INVENTORY SUMMARY ================================================================================ Data Type | Count | Notes ---------------------------------------------------------------------- Donor names (truncated) | 81 | Last name = single initial Full names (from cmts) | 16 | Recovered from campaign comments Email addresses | 0 | Redacted by API (returned as empty string) Gravatar SHA256 hashes | 16 | Email fingerprints (reversible) Phone numbers | 0 | All empty in records Billing addresses | 0 | All null/empty in records IP addresses | 0 | Redacted (donorIp field empty) Companies | 0 | All empty in records Donation amounts | 82 | Individual transaction amounts Donation dates | 82 | Timestamps of each donation Payment gateways | 2 | Gateway types used Form titles | 5 | Donation form names Donor comments | 16 | Free-text comments on donations WordPress user links | 0 | wpUserPermalink all empty Purchase keys | 0 | All empty Gateway transaction IDs | 0 | All empty (no real payments) ================================================================================ SECTION 11: EXPOSED API ENDPOINTS ================================================================================ The following GiveWP v3 REST API endpoints were accessible without authentication: GET /wp-json/givewp/v3/donors -> Returns all donor records with names, amounts, dates -> Supports pagination (?page=N&per_page=N) -> Supports embedding (?_embed=1) for nested donations/stats GET /wp-json/givewp/v3/donations -> Returns all donation transaction records -> Includes donor name, amount, gateway, status, comments GET /wp-json/givewp/v3/campaigns -> Campaign metadata (returned empty) GET /wp-json/givewp/v3/campaigns/{id}/comments -> Campaign comments with FULL donor names and Gravatar hashes GET /wp-json/givewp/v3/forms -> Donation form metadata (returned empty) GET /wp-json/givewp/v3/subscriptions -> Recurring subscription data (returned empty) NOTE: The /donors/{id}/statistics endpoint returns 401 Forbidden, suggesting some endpoints DO have authentication. The donor and donation listing endpoints, however, are fully open. ================================================================================ SECTION 12: GRAVATAR HASH TABLE (email fingerprints) ================================================================================ These SHA256 hashes are derived from donor email addresses via: SHA256(lowercase(trim(email_address))) They can be verified against known emails or brute-forced. # | Donor Name | SHA256 Hash ---------------------------------------------------------------------------------------------------- 1 | Abdalla IBRAHIM | 218f411b4da19e56cc2022f4636cc4a2580131f0ee14bba235f7bac7bc3a075a 2 | Cem GÖKSU | 1d2cc9a7391da341a36d17c51551cb3656b6fe0e4ef86607f14c9eeaa0e64fd1 3 | FODOUOP JAHSWANT | 89d92af5cd4c89bd12cfb578b65a8e7ef6b92d4c2e47a62026bcacbf40825ec2 4 | First Name Last Name | 32e19a491662fd86de7d3806b1199b76f0ee44e928d3475f05b0c8a59912c097 5 | MOMA EL MOCTAR | bac786ab7205c259727a4d0d3b3ae1c7a0cf667fbe64aca8b7c0e8a25181e589 6 | Uus Jus | 1900b2d775c3aea428720451b80b15b1fd8a5585edf039336d403cc31202a2da 7 | asa aasas | 18c66f1542338c13be591dc5d6f5d532a0aee52a2bcbd90eb5007e5c328e08b6 8 | asd asd | 5cedda60ec8d259ebd256a526d481d16acfe2e540cb78fa1d3dbcdbf2b22daec 9 | ewf fveg | 9c12d7bc622df01cc2214f2ad837f66940596b520a922c76d3d00f4c99e9364e 10 | fsf fdsfs | 3b5bf08cad917d83539a0d4b91d08e662a4a79f53999b67481000d5eafe430db 11 | john doe | 910789803908d9ab8a57b28ff0af7ab81b9607356aef6f18d8499eb1489ed8ab 12 | kjhkjhjh bjhvjhv | a4c22fb3cac1d3fe3801e73d0df2717d2199cab9fff92d63b1f9bea7092e955f 13 | pedro mulluni | b93620360c25a3bbce67ad31ac9fdfe21bf48dd45db667268234bc48dea81c53 14 | sfsdf sdfdsf | c7bc426c017df7f3eae67d621b27287dadd5787e79737a4b7f024c7fde1cdc7d 15 | tatag rus | d465b54719edc749e3479da367916060f13a2b84665d95c0df686ce78fcfbeb3 16 | toniyes vendr | 6a037209ad2df51da42f960c9daf4d3e32733a0fa1ec659c38c5e90e8c1f3452 ================================================================================ SECTION 13: RISK ASSESSMENT ================================================================================ SEVERITY: MEDIUM FINDINGS: 1. The GiveWP plugin's REST API is exposed without authentication on the official Haiti Prime Minister's website. 2. 81 donor records are publicly accessible, including names, donation amounts, dates, and comments. 3. 16 Gravatar SHA256 hashes are exposed in campaign comments, which serve as fingerprints of donor email addresses. 4. The majority of records (estimated 50+) appear to be test/ gibberish data, suggesting the donation system was never properly launched or used in production. 5. No real payment gateway was configured - all donations used 'Test Donation' (manual) or 'Offline Donation' gateways. 6. A small number of entries (10-15) have names consistent with real people, particularly those from the comment data where full names and location info (e.g., 'DOUALA') appear. 7. The $100,000 donation from 'MOMA EL MOCTAR' is almost certainly a test entry given it used the manual gateway. MITIGATING FACTORS: - Email fields are redacted (empty) in the API response - IP addresses are redacted - No billing addresses are populated - No real payment transaction IDs exist - Most data appears to be test entries, not real donors RECOMMENDATIONS: 1. Disable public access to GiveWP REST API endpoints 2. Require authentication for /wp-json/givewp/v3/* routes 3. Remove or disable the GiveWP plugin if not in active use 4. Purge test/demo data from the database ================================================================================ END OF REPORT ================================================================================