Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

BOUTINEXPRESS.COM

boutinexpress.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Description:

Accueil - Transport Boutin

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegcd.com
MX Records
  • mxb-001e6b01.gslb.pphosted.com. Proofpoint
  • mxa-001e6b01.gslb.pphosted.com. Proofpoint
TXT Records
  • MS=ms29007152
  • 7M1VEByyER6IjFLMzKKXYyIjCYc00kCFF/UhRNpvFziP3a3zKo/ghAy0nL+h42bHcruhirIS+fiX3X7rCBwc+Q==
  • v=spf1 ip4:69.51.202.76 ip4:216.137.165.195 a:smtp.besner.com include:tfiintl.com -all
  • adobe-idp-site-verification=e282c134914172cf129c7e14cc58b8b126c031fe90a74426f51419ccf73f298b
  • MS=ms70867834
  • rihf0ekt4tgj3hk40bs20u70n0
  • fan6gfuluoiqlo3kkgn55vnb8b
  • docusign=be30c473-1750-4f13-baf6-ccbbe66447d8
  • rbd2evuo3mc2oqg8la7ig2nb3d
Cloud / SaaS Services Detected
Adobe DocuSign Microsoft 365 Proofpoint

Leak Screenshot:

Leak Screenshot