Synced files: - Quote wizard frontend (all components, hooks, types, config) - API updates (config, models, routers, schemas, services) - Client work (bg-builders, gurushow) - Scripts (BGB Lesley termination, CIPP, Datto, migration) - Temp files (Bardach contacts, VWP investigation, misc) - Credentials and session logs - Email service, PHP API, session logs Machine: ACG-M-L5090 Timestamp: 2026-03-10 19:11:00 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
288 lines
6.8 KiB
JSON
288 lines
6.8 KiB
JSON
{
|
|
"investigation": "Valley Wide Plastering BEC",
|
|
"description": "Victims who accepted Box.com file sharing invitation for malicious 'Valley Wide Plastering, INC......pdf'",
|
|
"source": "Box.com acceptance notification emails (from noreply@box.com) in JR's mailbox",
|
|
"total_acceptance_notifications": 275,
|
|
"notes": [
|
|
"275 Box acceptance notifications found - these are people who CLICKED the phishing link",
|
|
"Box acceptance emails only contain JR's email in the body URL (account.box.com/files/email/j-r@valleywideplastering.com/...)",
|
|
"Victim identity comes from the subject line display name, NOT an email address in the body",
|
|
"Only 12 victims had their email address as their Box display name (extractable)",
|
|
"2 additional victim emails found from Box invitation notifications (bdorf@weoneil.com, awajszcuk@amh.com)",
|
|
"252 victims are identified by display name only - their actual email addresses are NOT in these notification emails",
|
|
"To get the remaining 252 email addresses, you would need to check Box admin logs or the original invitation/collaboration records"
|
|
],
|
|
"confirmed_victim_emails_from_box_acceptance": [
|
|
"awajszcuk@amh.com",
|
|
"bdorf@weoneil.com",
|
|
"berrier@cooksonaz.com",
|
|
"bevraets@speedie.net",
|
|
"bkelly@unitedsub.com",
|
|
"brett.tanner@cti-az.com",
|
|
"brian@ameelectrical.com",
|
|
"brian@riggscompanies.com",
|
|
"jaimeduncan@emser.com",
|
|
"katie@tapandhandle.com",
|
|
"marty@magnumelectric.net",
|
|
"paul@stehlcorp.com",
|
|
"rseng@usiinc.com",
|
|
"tim@cvsaz.com"
|
|
],
|
|
"confirmed_victim_count": 14,
|
|
"victims_identified_by_name_only_count": 252,
|
|
"victims_identified_by_name_only": [
|
|
"Abel Rascon",
|
|
"Acosta, Espy",
|
|
"Adam Palant",
|
|
"Adrian Carino",
|
|
"Al De La Cerda",
|
|
"alex insel",
|
|
"Alexandria Fernandez",
|
|
"Alexis Siqueiros",
|
|
"Amie Nolan",
|
|
"ANDREW B OESTREICH",
|
|
"Andre Dozal",
|
|
"andy coy",
|
|
"Angel Cota",
|
|
"Angelo Trujillo",
|
|
"Anthony Marquez",
|
|
"Arnold Apodaca",
|
|
"Arturo Martinez",
|
|
"Ashley Thomes",
|
|
"Belinda Rosic",
|
|
"Ben Hirschland",
|
|
"Ben Rapstad",
|
|
"Bianca Aguas",
|
|
"Bianca Paderez",
|
|
"Bidding",
|
|
"Bidding Bidding",
|
|
"Bill",
|
|
"Bill Evans",
|
|
"Bobby",
|
|
"Brandon Dorf",
|
|
"BRANDON LAUDERBACH",
|
|
"Brent Turtle",
|
|
"Brian Holliday",
|
|
"Brian Reeck",
|
|
"Brock Knight",
|
|
"Bryan Bloomfield",
|
|
"bryce williams",
|
|
"Canyon State Drywall",
|
|
"Carissa M Stephens",
|
|
"Carla Layug",
|
|
"Charles DeHart",
|
|
"Charlotte Haught",
|
|
"Chico Vasquez",
|
|
"chris",
|
|
"Chris Benson",
|
|
"Chris Loeffelholz",
|
|
"Chris Ruffing",
|
|
"Chuck Reynolds",
|
|
"Cody Poplawski",
|
|
"Craig Jamerson",
|
|
"craig hauss",
|
|
"Craig Oberg",
|
|
"Dalia Martinez",
|
|
"Dale Reinhardt",
|
|
"Dale Walker",
|
|
"Dallon Murray",
|
|
"Dan Best",
|
|
"Daniel Bobbitt",
|
|
"danielle",
|
|
"Danielle Vasquez",
|
|
"Danny Albert",
|
|
"Danny Katave",
|
|
"Darrin Weiss",
|
|
"David Henry",
|
|
"David Mistler",
|
|
"David Perez",
|
|
"DJ Mereness",
|
|
"Dea Heffernan",
|
|
"Dean Bennett",
|
|
"Denise Andreas",
|
|
"Denise Salallandia",
|
|
"Denisse Taniyama",
|
|
"Dennis DiSanto",
|
|
"Derek Flick",
|
|
"dlb2009",
|
|
"Dominque Martinez",
|
|
"Doug Tyser",
|
|
"Douglas Johnson",
|
|
"Drew Bellon",
|
|
"Dustin Petty",
|
|
"Dyna Mora",
|
|
"Eddy Ramirez",
|
|
"eileen krahne",
|
|
"Elizabeth Marcy",
|
|
"Emmanuel Marcial",
|
|
"Eric",
|
|
"Erin Morris",
|
|
"Everett Pleasant",
|
|
"Francisco Campo",
|
|
"Francisco Jacinto",
|
|
"Gabriel Flores",
|
|
"Gary Skarsten",
|
|
"Greco Painting",
|
|
"Gustavo Valenzuela",
|
|
"Hannah Peevyhouse",
|
|
"Heather Michelle Bright",
|
|
"Jackson Kern",
|
|
"Jacob Kelly",
|
|
"james",
|
|
"James Bellar",
|
|
"Jason Bolen",
|
|
"jason wells",
|
|
"Javier",
|
|
"Javier Rodriguez",
|
|
"Jaycee Devera",
|
|
"jeffrey bernal",
|
|
"Jeffrey Yazwa",
|
|
"Jenifer Hansford",
|
|
"jesse",
|
|
"Jesse Fucci",
|
|
"Jesse Guerrero",
|
|
"Jessica Thompson",
|
|
"Jimmy G",
|
|
"Joanna LaBarr",
|
|
"Jodi Whitelaw",
|
|
"Joe",
|
|
"Joe Brown",
|
|
"Joe Holst",
|
|
"Joedy Herman",
|
|
"Joel Babcock",
|
|
"John Allan Mainprize",
|
|
"John Girard",
|
|
"John Tarr",
|
|
"Jorge Chavez",
|
|
"Jose Acosta",
|
|
"Jose Enriquez",
|
|
"jose r lopez",
|
|
"Joseph Falls",
|
|
"Josh Davie",
|
|
"Josh Jones",
|
|
"Josh Watson",
|
|
"Joshua Hollahan",
|
|
"Julie A Ruiz",
|
|
"Justin Naylor",
|
|
"JUSTIN ERICKSON",
|
|
"Karen Patterson",
|
|
"KATHI ROCHE",
|
|
"Kaylea Dolinski",
|
|
"Kaylee Girard",
|
|
"Kelly Cook",
|
|
"Kenny Kidd",
|
|
"Kevin Rubalcava",
|
|
"Kirk Evans",
|
|
"Kristi Cronin",
|
|
"Krizia Del Rosario",
|
|
"Kyla Greene",
|
|
"Kylie Weiss",
|
|
"Lance Patterson",
|
|
"Landscape Solutions",
|
|
"Larry martin",
|
|
"Laura Egan",
|
|
"Leo Menjivar",
|
|
"Lisa Banner",
|
|
"Lisa Roppo",
|
|
"Luis j rodriguez",
|
|
"Luis Muniz",
|
|
"Lydia Link",
|
|
"mark",
|
|
"Mark Evans 232",
|
|
"Mark Hamilton",
|
|
"Mark Koosmann",
|
|
"Mark Williams",
|
|
"Marissa Raleigh",
|
|
"Marshall Shawver",
|
|
"Marti Mahoney",
|
|
"Matt Carpenter",
|
|
"Matt Rossman",
|
|
"Maxine Patterson (Contractor)",
|
|
"Melanie Efune",
|
|
"michael g pinkerton",
|
|
"Michael Betcher",
|
|
"MICHAEL DIVRIS",
|
|
"Michael Peterson",
|
|
"Michael Wagy",
|
|
"Michelle Masterson",
|
|
"Miguel Mancinas",
|
|
"Mike",
|
|
"MIke Huss",
|
|
"Mike De Vito",
|
|
"Mike Fondren",
|
|
"Mike Madaras",
|
|
"Mike Schollmeyer",
|
|
"Nathan Howden",
|
|
"Nick Anderson",
|
|
"Noah Seymour",
|
|
"Noel Leslie Kurtz",
|
|
"Nyll Manabat",
|
|
"PAT HEINE",
|
|
"Patrick Sheehan",
|
|
"Paul Bulkley",
|
|
"Paul Johnson Drywall",
|
|
"perry schroedl",
|
|
"Primera",
|
|
"ProTeX",
|
|
"Ramon Vasquez",
|
|
"Richard Craft",
|
|
"richard juarez",
|
|
"Richard Mayo",
|
|
"Rob Bundy",
|
|
"Robert Lopez",
|
|
"Robert Tanner",
|
|
"robin smith",
|
|
"Roddy Riggs",
|
|
"Roman Figueroa",
|
|
"Ron Duran",
|
|
"Ron Fears",
|
|
"Ron Kaiser",
|
|
"Ron Maroney",
|
|
"Ronald Hanze",
|
|
"Rossi Kasabova",
|
|
"RTI Sealants",
|
|
"russ dollman",
|
|
"Russell Ruetz",
|
|
"Russett Southwest",
|
|
"Ryan",
|
|
"Ryan Fitzharris",
|
|
"Samantha Bell",
|
|
"Sandy Murany",
|
|
"Sarah",
|
|
"Scott Rosemann",
|
|
"Scott Schuster",
|
|
"Sean Fabor",
|
|
"Shalawn Bradley (Contractor)",
|
|
"Shannon Flaherty",
|
|
"Sintica Wilson",
|
|
"Stacey Dean King",
|
|
"Stephani Nicholas",
|
|
"Stephani Stewart",
|
|
"Stephanie Bonhomme",
|
|
"Steve Marascalco",
|
|
"Steve Robinson",
|
|
"steven pennington",
|
|
"Sydney Knopp",
|
|
"Tabitha Kono",
|
|
"Taylor Joseph Wilstead",
|
|
"tim knight",
|
|
"Tim Kovacs",
|
|
"Tim Lewis",
|
|
"Todd Russo",
|
|
"Todd Schneider",
|
|
"Tracy Grover",
|
|
"Tracy Smith",
|
|
"Troy Mannikko",
|
|
"Vadjuana Johnson",
|
|
"W Mark Mahan",
|
|
"Walter Lopez",
|
|
"Warren Townsend",
|
|
"Wayne R Collignon",
|
|
"Wayne Riggs",
|
|
"WENDY ANDERSON",
|
|
"westley hammond",
|
|
"William Swanson",
|
|
"Zulma Verdugo"
|
|
]
|
|
}
|