Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

BOLTONUSA.COM

boltonusa.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Description:

Bolton

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • d359254a.ess.barracudanetworks.com. Barracuda
  • d359254b.ess.barracudanetworks.com. Barracuda
  • us-smtp-inbound-1.mimecast.com. Mimecast
  • us-smtp-inbound-2.mimecast.com. Mimecast
TXT Records
  • d365mktkey=xNfQJ5MP1dihmPgbKDkxYRMbVEENSGrGExnzdrWiRfsx
  • MS=ms57091652
  • 0ed1fe018ae982b9aca42f41b0a79e918d22f48c61
  • v=spf1 ip4:3.145.232.16/28 include:spf.ess.barracudanetworks.com include:spf.protection.outlook.com include:us._netblocks.mimecast.com include:sendgrid.net include:spf.emailsignatures365.com include:u34332770.wl021.sendgrid.net include:mail.zendesk.com ~a" "ll
Cloud / SaaS Services Detected
Microsoft 365 Mimecast SendGrid Zendesk

Leak Screenshot:

Leak Screenshot