Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

rrib.com

rrib.com

Discovered 2024-03-16 14:49 UTC
Est. attack date 2024-01-26
Country CA
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation
Duplicate Entry
This victim has been identified as a duplicate of another entry in our database. However, this may not always be the case: the same organization can be targeted multiple times by the same or different ransomware groups, which may result in separate legitimate entries. Search for related entries

Description:

Discover our Programs: Working Together - Safe and Secure. Welcome to the web site of R. Robertson Insurance Brokers Ltd. R.R.I.B. is pleased to provide you with an overview of the products and services that we have to offer.

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
  • mn9pt7xv272networksolutionsprivateregistration.com
  • f99x558x25wnetworksolutionsprivateregistration.com
MX Records
  • mx2-us1.ppe-hosted.com. Proofpoint
  • mx1-us1.ppe-hosted.com. Proofpoint
TXT Records
  • pk7f2g88qqq92mvofo6s74qvee
  • v=spf1 ip4:199.243.80.138 ip4:64.40.242.74 ip4:167.89.105.212 ip4:192.254.119.187 ip4:207.164.28.194 include:ca._netblocks.mimecast.com include:spf.acturis.com include:spf.protection.outlook.com -all
  • 0ed1fe018a07177b13a1d5452fa01d75c7531a130d
  • ppe-cbedd001f74acbe11ef7bc693f851e85f0d28900
  • ppe-d843bdc8b45d261520a44af287ea87c5bf810985
Cloud / SaaS Services Detected
Mimecast Proofpoint Essentials

Leak Screenshot:

Leak Screenshot