Group:
Alphv
Discovered by ransomware.live: 2023-07-26
Estimated attack date:
2022-12-03
Country:
Description:
Cappagh House, Waterside Way, London SW17 0HB, United Kingdom Cappagh are a progressive, professional organisation who are proud to serve the construction industry across the South. Focussed on providing a dependable, agile service for large clients across the Utility, Highway, Airside and Land Remediation sectors and delivering exceptional services for local residents and developers including Skips, Aggregates and Utility Connections. From the smallest of tasks to national infrastructure projects, our customers and clients can truly rely on us to deliver. Clearnet links> https://anonfiles.com/bcrcJ2Kfy0/Audited_Accounts-finance_rar https://anonfiles.com/3ercJ7K8y3/Cappagh_Contractors_rar https://anonfiles.com/Eer7JaKey1/finance-othercoros_rar https://anonfiles.com/y0r6J5Key9/management-toerhcrops2_rar
DNS Records:
The following DNS records were found for the victim's domain.
- cappagh-co-uk.mail.protection.outlook.com.
- 9e16v3kp6urtna9kcio2h7ddus
- 2hc1sub23pbs2hss2tpat2ml4j
- bw=dkr9BwLTbX2+z1YmCalIotZUAXR1+kcYJimvdkqnLvM+
- v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO4zUPEYZSkWpYYIu/gfP5IpZRxeMQ2AVy+Z5e7lPuhgEYZ+XtpFyi8Ut+vuQiTQ503sxH33uq/JE43MPoZf5fkbYARRRMn3mqOX4yj5X342pDC9aHAb4PnpSv8wbTUYZePCwAB3Mvd/a2sWY2XB7hBzSAVEfCsCM0shL9lcVmZ4FZJD6MnZQZ+wsshkt0s" "/gx8r82aVI8ZaTprg07TXxpS9fHZkPL2lF9S3Ah9lPchFju3SDgDpRxdTIkGa2j0kClKK+mjKvzV3q3e8gSF8xg64KQo8CpmYIdzNyyxvRZlz+E41OF+Ki1TZ2scm+4sg5E97FI/fCcbyyUDiOW0U7wIDAQAB;
- v=spf1 ip4:185.199.220.111 include:spf.protection.outlook.com ip4:86.188.139.218 include:_spf.counterpart.systems include:spf.uk.exclaimer.net -all
- MS=ms26985222
- sdlq9pfco7liauhk5s4ok90sbg
Cloud / SaaS Services Detected
Microsoft 365
Leak Screenshot:
Legal Disclaimer:
Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
This platform indexes only publicly visible information posted by ransomware operators and
open web sources without accessing or obtaining the underlying stolen content.
The service is provided to support public awareness, legitimate research, and cyber-resilience.
No stolen personal or confidential data is collected or distributed via this site.