Group:
Clop
Discovered by ransomware.live: 2025-11-13
Estimated attack date:
2025-11-13
Country:
Description:
[AI generated] Fluke Corporation is an international company known for its production of electronic test tools and software. Established in 1948 in Everett, Washington, Fluke has become a global leader in the commercial electric test tool and software industry. Its products serve diverse markets such as wireless networking, precision measurement, and condition monitoring, helping various businesses and professionals across the globe.
Infostealer activity detected by HudsonRock
Compromised Employees: 5
Compromised Users: 1668
Third Party Employee Credentials: 17
External Attack Surface:
109
DNS Records:
The following DNS records were found for the victim's domain.
- abuse@safenames.net
- cgeeulgahida@idp.email
- hostmaster@safenames.net
- mxb-001d2f02.gslb.pphosted.com.
- mxa-001d2f02.gslb.pphosted.com.
- mixpanel-domain-verify=ebb47e9a-6751-4bb9-8bbb-38f93b235812
- 6uw9XZVuaNL7O6a2elyhHRjBYNEbUj14R8x5T4bgxa+DvUOdwXo2d9Sh4DNxmlQxTI/CHZT6Zk/2nlyNn8qH5g==
- ac45df8f-cbb3-4b8b-b154-e57e2ce3d709
- d365mktkey=QDehx1JByN7QsAK2K55zUmlMTKKsyd54NSuuVDmpj1kx
- flexera-domain-verification-ajxmcvgivfmszctu
- docker-verification=043638e9-c30f-4057-86c0-e0d544175c85
- google-site-verification=v2rnO3-lW8t65yfFJv0TacxV06ELmCrUtRodLfVAQRk
- mandrill_verify.cgSNlbIM5Cm5DA7mHS5yPQ
- intacct-esk=4FED1A5021C3D94FE053ED06A8C0E14D
- ca3-acb7ec12301b4bb09eb54fe39763b445
- v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
- ca3-1051bf75e5ca48f1a05c608e167036af
- google-site-verification=0lBF82HC7EotYmZcq0JydEd66egAAQRWLvGrCyrKY6M
- amazonses:zSZ8VKbSShaTR0/V6ADVlURdJC/P2mSBRme7m4V6UQY=
- _xzjcfy5foauubffmvykq836wibzrum1
- MS=ms68475308
- atlassian-domain-verification=pCI1ZcQBf2dMXkXWuKEuV8t89LuXntz8FJEePhxeG609QvWTGrExGzT7fP/zG0tK
- atlassian-sending-domain-verification=0c0cc069-94bb-4c99-a0c6-41341bcdc04b
- autodesk-domain-verification=MCem-00fUtrRbHsug7F2
- klaviyo-site-verification=S7Fxiv
- atlassian-domain-verification=aFqZRkAg10BNJtEWugNVVI8u51DJmoGwcp5A/pawmoHAxzrJ/bf1WCmOxJNH9bZ1
- 20w3lmtz9rwz0sm33skks8b01hzgnt1w
- msfpkey=6ao8trze816pmh76vgwucso31
- canva-site-verification=9TLkysK9W99ckNttCYx3IQ
- _7wys0c8jkmxxmzobncx2nht1lcc7ihp
- z69bwnxl0crh6xzkbxt452zqggfmwb76
- miro-verification=e7fb47f3794ac29bac582246283a63df57352189
- cursor-domain-verification-rdbgrk=x6boucAwQILcaJItXsnbcPOHU
- mandrill_verify._axXJvxupPgZiSk2eY7-_w
- b6wj2vfw60hbd3ycgtqw2bbx78sxk7q6
Cloud / SaaS Services Detected
Atlassian
Amazon SES/WorkMail
Mailchimp
Microsoft 365
Sage
Miro
Autodesk
Flexera
Proofpoint
Leak Screenshot:
Legal Disclaimer:
Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
This platform indexes only publicly visible information posted by ransomware operators and
open web sources without accessing or obtaining the underlying stolen content.
The service is provided to support public awareness, legitimate research, and cyber-resilience.
No stolen personal or confidential data is collected or distributed via this site.