rjyoungcom
rjyoungcom
Group: alphv
Discovered by ransomware.live: 2023-07-26
Estimated attack date: 2022-11-09
Description:
FIRST 2 TB DATA ATTACHED. You have 3 days until last part will be public. Here is a lot of client info. Enjoy. https://twitter.com/RJYoungCo
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- domain.operations web.com
MX Records
- rjyoung-com.mail.protection.outlook.com.
TXT Records
- openai-domain-verification=dv-PZZjHP3YyEo1G6Db8VGZ9zsK
- amazon-business-verification=38515de8ec5314bb5163a9bb3832e52ab33eea94e510357ca43492ae68e76c24
- v=spf1 ip4:18.218.239.99 ip4:34.160.63.108 ip4:34.149.236.64 ip4:208.86.168.7 ip4:135.84.68.123 ip4:206.152.14.54 ip4:135.84.79.54 ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0/20 ip4:168.2" "45.0.0/17 ip4:149.72.0.0/16 ip4:159.183.0.0/16 ip4:223.165.113.0/24 ip4:223.165.115.0/24 ip4:223.165.118.0/23 ip4:223.165.120.0/23 include:spf.protection.outlook.com include:spf.myconnectwise.net include:spf.us.exclaimer.net include:_spf.salesforce.com in" "clude:_spf_uswest2.prod.hydra.sophos.com include:1719204.spf08.hubspotemail.net ip4:216.151.85.132 ip4:216.151.85.133 -all
- 9pt7o6mrrasi1ls1r1uuhlpeea
- 1password-site-verification=UXUAUTYRBBB65NZ6WBUGSPQ4MA
- docusign=5a5b08a0-e641-4eaf-a98f-f0f914e1ce7f
- apple-domain-verification=PgRDPMUBAp8kWG34
- 2252bdf2becf4c9aa1294aa52aa9f340
- sophos-domain-verification=ab371c200e663fdac031e47cdc72193c7d0a2f0e5bee360b5048a3ffd05c07c3
- google-site-verification=XFGJgvoYR2XBWtDkRvyU_GPsLPkg98FeWxTJ5xqk5sM
- MS=ms37432995
- 8eiqput0am5c9uaf2f62qv3eb4
- 0jMuc2aKY/O/+AKRisilULvJaHFUw8Ih2oDWcla6eqvSBJnXaDKSD5Rz1pVM2VS7qkCfj9sB0kwIKbrxI6ALZw==
- wpe-verification=rjyoungprod
- sophos-domain-verification=32968540fd9d1cdafcb7ef111c8f7f2618e96826
- google-site-verification=17ny8ZD6qLYRjNlCNgtlo4XlXlYjqvjGYqNt9hIzluE
Cloud / SaaS Services Detected
Apple
HubSpot
Microsoft 365
Salesforce
DocuSign
Sophos
Leak Screenshot:
