Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Discovered 2025-11-03 10:52 UTC
Est. attack date 2025-11-03
Country US

Description:

We have over 1 TB of personal data belonging to this organization, and all attempts at peaceful resolution have been completely ignored. Aware that the addresses, phone numbers, and job titles of individual employees, medical records, and complete data on clients and partners have been lost (and will undoubtedly be used for selfish purposes by a huge number of people), they have shown complete indifference—REPECHAGE we want you to know about this before it is too late.

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • alt3.aspmx.l.google.com. Google Workspace
  • aspmx.l.google.com. Google Workspace
  • alt1.aspmx.l.google.com. Google Workspace
  • alt2.aspmx.l.google.com. Google Workspace
  • smtp.google.com. Google Workspace
  • alt4.aspmx.l.google.com. Google Workspace
TXT Records
  • google-site-verification=XgKqI3nYPw0bPKqWDf_hOvA41YN7ilkE8XuBR7fW1HQ
  • v=spf1 include:_spf.google.com ~all
  • bejl8mtrr6popbpb9mlr0tgmo8
  • google-site-verification=rTzOHGAeYR6gIOJ9o2-iWaecjA-Qk8L_hCgXE0ZZNEQ
  • klaviyo-site-verification=M3nkhZ
  • ELCAINUC
  • ahrefs-site-verification_4cd0caa4c9b53074b2b95148b49fe1f8e607bf0593e95960a5ae8e7a418077fb
  • MS=BB6EFA2BFF947E061B6BA868A7D958A24E9C6193
  • klaviyo-site-verification=QTkFfJ
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot