Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

MTMRECOGNITION.COM

mtmrecognition.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • aspmx.l.google.com. Google Workspace
  • alt1.aspmx.l.google.com. Google Workspace
  • alt2.aspmx.l.google.com. Google Workspace
  • aspmx2.googlemail.com. Google Workspace
  • aspmx3.googlemail.com. Google Workspace
TXT Records
  • atlassian-domain-verification=q++ZVbHGDInXExWfdmHvZqsTlLhhrODotKRERdG7V9+Wwuj8p4sxZ0uemFm9oICb
  • v=spf1 a mx ip4:66.210.200.128/25 ip4:167.89.90.191 ip4:167.89.93.95 ip4:167.89.82.151 ip4:167.89.73.112 ip4:149.72.82.47 include:google.com include:_spf.psm.knowbe4.com include:_spf.bigcommerce.com -all
  • Foxit-domain-verification=ee63a54de4feee632018d3af503676d8
  • duo_sso_verification=bPdWtBftWPMrb7cw808OpymKfV78JtXC0QAehsOTHndwZVEoCkdMexPlZkDuQn9x
  • _z6h6do47sfsra4ns5aonvdtot044eil
  • _uyj0gskt1qabh5cww6nin4fhi506s2h
  • _globalsign-domain-verification=zL8uTWkflljqn81KBf6v4AcO9LB2Ea4JtIS-VQK4DS
  • MS=ED4C6375A400D67E1CDC052DA93B7720FF071F7D
Cloud / SaaS Services Detected
Atlassian Cisco Duo Global Sign KnowBe4

Leak Screenshot:

Leak Screenshot