KlamoyaCasino
KlamoyaCasino
Group: alphv
Discovered by ransomware.live: 2023-07-26
Estimated attack date: 2022-11-17
Description:
Full pack of documents will be attached soon. SQL export contains players info with SSN. DL scans for KYC is attached.
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse godaddy.com
MX Records
- klamoyacasino-com.mail.protection.outlook.com.
- alt1.us.email.fireeyecloud.com.
- alt3.us.email.fireeyecloud.com.
- primary.us.email.fireeyecloud.com.
- alt2.us.email.fireeyecloud.com.
TXT Records
- v=spf1 include:spf.mailjet.com +a +mx +ip4:50.87.144.81 +ip4:216.115.9.98 include:spf.protection.outlook.com -all
- 9u443gdmi5b9uuvqpt2e9d5t18
- google-site-verification=ZKrNOY3xuoV67QPtilynPcB4c_-xfxxalle_Sy_o6MI
- hf543rf90e96qmk0qmvn53fp1ePXcDdftJnGhHMMtV0Nxff55Fsy5WHGCOrVJ52i/0eTGsABvNskEBTL6rt6nNrO3wXtWDZPI3Zyftfx2FyDV25A==
- jet4mmorcr2frfls9ummurd4a5
Cloud / SaaS Services Detected
Mailjet
Leak Screenshot:
