Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

NOWFOODS.COM

nowfoods.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Description:

NOW Foods - Vitamins and Supplements - Essential Oils

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuseionos.com
  • dataprivacyprotectedionos.de
MX Records
  • mxa-0053af01.gslb.pphosted.com. Proofpoint
  • mxb-0053af01.gslb.pphosted.com. Proofpoint
TXT Records
  • cisco-ci-domain-verification=1bc6ef8f07eaaf04420f4c0a6f500a84009c2e98a4eb1410490d197ba591bf7e
  • facebook-domain-verification=fbpofxa3cnhyim3uj3o6eox4y3vi9r
  • globalsign-domain-verification=F5FC8BB901D22E346F69E4A3321C0BE7
  • google-site-verification=PdMcdd-zmi91JHBrrz1o_cGJH5CKzaW4AIoaqyncG0Y
  • have-i-been-pwned-verification=dweb_2omks337z0hwe2oc72mqwszo
  • klaviyo-site-verification=SAyZAm
  • klaviyo-site-verification=W4NjBP
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • 18bT9eP33TIRO5yPsXbUzuS58ogAfkmtWPJoTkj+8nvAYog7kGhSw6OLtFWj6WJURqAiSeBdmr/lkEFMSuo7yA==
  • MS=53E91C0626055965FA39C7F3E172C9DF7732DF55
  • _3wptw9pr9tcd5ucm4ey2pcw9yf4f70a
  • amazonses:cSgsPpRab5whJeI9R8WmeILnVHKpGLvb6yEP0ISrMyg=
  • amazonses:j9lvXu95T03iCtcoWZ6a3nATSgug3u4mOvZhrBiYHUY=
  • apple-domain-verification=BbmgvFgcGAnADY6P
  • bw=DnMK0Wp03ugZtpBRfgoJMVlgzg5Pwk493cfUOXGkubEU
Cloud / SaaS Services Detected
Amazon SES/WorkMail Apple Cisco Have I Been Pwned Proofpoint

Leak Screenshot:

Leak Screenshot