Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo NWIMS IT Group

Group: Dragonforce

Discovered by ransomware.live: 2026-01-16

Estimated attack date: 2026-01-16

Country: GB

Description:

NWIMS IT Group provides a complete service for all your technology needs including computer repair and upgrade services for Home and Small Business Users. That it's not always an option to take your equipment in for repair or assistance. Therefore they offer a unique service where we will arrange a visit to you at your Home and/or office, where they can fix the problems in your own environment and answer any questions that you may have. At times a site visit will not be necessary and assistance can be given remotely. Here is a summary of the some of the services they offer: Internet and networks installed Hardware and Software upgrades Communications : Mobile Phones, Broadband, VOIP Phone systems Lost file and crash recovery, as well as system backup Virus, Trojan and Malware removal Hardware and Software Sales Security and Internet Filtering Office Virtualization Network Support Hardware upgrades and installations Assistance with other computer problems



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • fccf18f14eed4d08a2b32c18ac1b1f59.protect@withheldforprivacy.com
  • abuse@namecheap.com
MX Records
  • mx11.nwims.co.uk.
TXT Records
  • have-i-been-pwned-verification=0a32e4cbad55a7448772b205bc2a0489
  • brevo-code:4b5ff78a0ebbb66d22b75774d8572907
  • ppe-d833d18fcbb8f574fedecee3a3513ec0e7d400ee
  • MS=ms57453497
  • v=spf1 a mx a:nwims.com ip4:194.15.37.0/24 ip4:10.1.2.0/24 include:_spf.quotientapp.com include:dispatch-us.ppe-hosted.com include:spf.protection.outlook.com -all
Cloud / SaaS Services Detected
Microsoft 365 Have I Been Pwned Proofpoint Essentials

Leak Screenshot:

Leak Screenshot