Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Derp.org

Group: IMNCrew

Discovered by ransomware.live: 2025-05-05

Estimated attack date: 2025-05-05

Country: US

Description:

We’re the Denver Employees Retirement Plan (DERP). Your partner in building, planning, and living a secure retirement future while serving the city you love. DERP was established January 1, 1963, to provide a defined benefit plan for eligible City and County of Denver employees in the Career Service, certain employees of the Denver Health and Hospital Authority, and DERP staff. We provide a monthly DERP Pension Benefit payment to more than 10,800 retirees and beneficiaries, and are an essential element of the future financial security for almost 10,000 active members.



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • us-smtp-inbound-1.mimecast.com.
  • us-smtp-inbound-2.mimecast.com.
TXT Records
  • google-site-verification=iIc4cZXPg0JQGhB97XGSZO0SPde0uDwW6AQZzf7lwfQ
  • jq1jni5t5qlke47ejkvsjl3a5c
  • org\
  • v=spf1 +a ip4:208.80.200.0/21 include:us._netblocks.mimecast.com include:spf.protection.outlook.com -all
  • 0ed1fe018a5acd41403bce4ebfbe6b7c5fb15ea180
  • MS=5AFCC6A4323A1FB7D799698F27FBF8E693F4F234
  • OcT-3bD-F72
  • _globalsign-domain-verification=s0LwqGQ9_nFvY1L3BRF2snQPrKZoFvKBZ_5GxHGLoo
Cloud / SaaS Services Detected
Mimecast

Leak Screenshot:

Leak Screenshot