Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo ACCUZIP.COM

Group: Clop

Discovered by ransomware.live: 2023-03-23

Estimated attack date: 2023-03-23

Description:

AccuZIP Bulk Postal Software and Data Cleansing For Direct Mail Marketing


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • accuzip-com.mail.protection.outlook.com.
TXT Records
  • google-site-verification=8ja-P-KolKLWjqZt7ZQtOUbeLDrjyXA-h1Gj_1Sgu9I
  • firebase=customer-portal-dev-403220
  • MS=ms45755668
  • firebase=customer-portal-403220
  • v=spf1 ip4:68.189.116.30 a:dispatch-us.ppe-hosted.com a:support.tektegrity.com include:spf.protection.outlook.com include:_spf.elasticemail.com ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0" "/20 ip4:168.245.0.0/17 ip4:149.72.0.0/16 ip4:159.183.0.0/16 ip4:134.128.64.0/19 ip4:134.128.96.0/19 ip4:223.165.113.0/24 ip4:223.165.115.0/24 ip4:223.165.118.0/23 ip4:223.165.120.0/23 ip4:74.125.0.0/16 ip4:173.194.0.0/16 ip4:209.85.128.0/17 ip4:216.58.192" ".0/19 ip4:216.239.32.0/19 ip6:2001:4860:4000::/36 ip6:2404:6800:4000::/36 ip6:2607:f8b0:4000::/36 ip6:2800:3f0:4000::/36 ip6:2a00:1450:4000::/36 ip6:2c0f:fb50:4000::/36 ip4:172.217.32.0/20 ip4:172.217.128.0/20 ip4:172.217.160.0/20 ip4:172.217.192.0/19 ip4" ":172.253.56.0/21 ip4:172.253.112.0/20 ~all
  • postman-domain-verification=304e735dcb65e5b5629a1e9956579db323aeb3e67925fd809096fe2277ea403202f789082c73ccf16a059ccc6dcd94b5bfde64653a39348e3a947027bdb52d5d
  • google-site-verification=9zpKxt2p6ZKnvml4NS6cvAMcmdIzG-YwkgbdvbzpY1M
Cloud / SaaS Services Detected
Microsoft 365 Proofpoint Essentials

Leak Screenshot:

Leak Screenshot