Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group D1r
Discovered 2026-07-13 11:32 UTC
Est. attack date 2026-07-13
Country US
Duplicate Entry
This victim has been identified as a duplicate of another entry in our database. However, this may not always be the case: the same organization can be targeted multiple times by the same or different ransomware groups, which may result in separate legitimate entries. Search for related entries

Description:

Data, Leak

Infostealer activity detected by HudsonRock

Compromised Employees: 103

Compromised Users: 829

Third Party Employee Credentials: 108


External Attack Surface: 137


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mxa-00230701.gslb.pphosted.com. Proofpoint
  • mxb-00230701.gslb.pphosted.com. Proofpoint
TXT Records
  • mongodb-site-verification=bwGpGKNN4jvJFwEdKmq0YmEHk3T1AQqD
  • MS=88865D956AA98BBEFA948D10F45FF79BA7A92ADB
  • v=verifydomain" "MS=msB0D400
  • b593976b-c8ed-4682-89a6-98f2d83bffb4
  • 00d3000000007mmeai
  • google-site-verification=wVreJ96AXv6fa6UUAQSYzWtN1S6ZGQ8hJMbo17TkFGI
  • P2A_5084_6
  • successfactors-site-verification=YzNkMDE1M2I1ZjZmMzY4ZmQ2NWEwMDBlOTZkY2ZlNmE3MjM4M2Y1NDRhNTZmN2FhODAzZGVkZTlhMjI2NWNjMw==
  • anthropic-domain-verification-10hjz7=Sle6MnsLimbxNz450UDzmht3z
  • Box-domain-verification=9b172a44cd703e553007029f95ee420c9042cc1bd1d9e4a99d632aaa178e5a92
  • postman-domain-verification=d11ad187c9cdda5f5da65d7a523d5540a94bb29943799d0f18ad70ed59d6d9c0cc12c1d44ea0867d8573b252fb9c311de5ad8d5e80fcd75b86cd654dafe17e07
  • ibmid=c0c14b32-10f8-430d-a816-a80daa67817e
  • Google-site-verification=Ec3zZnY74WH1zikDXcm7kKtuPbqD0YUxDg79BvAKOuo
  • mixpanel-domain-verify=2a654d80-9169-4745-b703-97f3a6953e12
  • 11ea5740-6a84-431a-9495-d1aec10f114a
  • atlassian-domain-verification=GqyibgPiaXhOERsot4TRzihsTmsusxwuzsX5lOONRQCMVDaAa2gXQ4PoR/W8za/N
  • MS=ms40559454
  • successfactors-site-verification=OWFlZTEwNzM1YmI2NGQxMzMxMmNjNTI5NzU5NmJhNGU2ZTFkNTYwOWM5MmYwMmRhY2VhZTBjMWU3ZGI2NDBlYw==
  • v=spf1 include:_spf.synopsys.com include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • docusign=9ce82f70-8ba8-45c5-87a2-7219a4c84a09
  • qH78HbzFm/WML+0z1ClPg6h/ALz5qTVq6SF7fSMxZG6TaNcPtFbA7TCbMmdBelywDqID5zH8ZSlP0nJtUVCbvA==
  • KqF0xBhtcfu309yxE829ne3ZLyXZeaNpi2h7uRHEBBIZcutwGAusobf+S3eu7G5fzaAJPxfrD4yJG864RU1GJQ==
  • jamf-site-verification=odGmIhRE-sw9gYrdDd0-WA
  • smartsheet-site-validation=JgHRDHUEUdnQLP0J67NliHUr5jgwaOik
  • asv=a27efce1e17159e20a3607d7dd59e3aa
  • monday-com-verification=tc8R0JJPc93ynzdvfunX3oPSK2ox11XtdAZo-Akbjrg
Cloud / SaaS Services Detected
Atlassian Microsoft 365 Box Anthropic JamF DocuSign Proofpoint