Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

PNCPA.COM

pncpa.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Description:

Postlethwaite & Netterville (P&N ) - Louisiana - Mississippi - Texas CPA

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • pncpa-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • adobe-idp-site-verification=606660f02f660154d3bc68c39c9452fc651cf0ab5646dc5392c13becf3dadd3a
  • atlassian-domain-verification=VyUkYcojqe48HQ/hOEjLtntD79rvJaqWbr5/Qs2pp9X6uagrOx2mh5WaECVgSxh/
  • docusign=38cd0f91-6803-451a-b657-f2e2c339cd10
  • duo_sso_verification=MGDHIkNMLDqL1KLSKGbcWfA5orO5mYg1FRdDXvEQtIQmlJa1n5RSV7Kl798yVgUG
  • gR9mjOPbv391r5cZtP7suD16U8+v2oTEfJ3aCrBJIh64d1xKNGvIvaGboue0hLPav3EEPc0WA/xBXt4V9H/wMQ==
  • uvnq2li7s1598evmen3v5qbt8r.
  • v=spf1 mx a ip4:206.124.204.128/25 include:spf.protection.outlook.com include:spf-us.emailsignatures365.com include:dayforcehcm.com -all
  • 3r9hf3qored2qipasulo6e4nll
  • 8lfofov4brtoo6iir7qumrfvtp
  • MS=ms67568743
  • a60SWZz
Cloud / SaaS Services Detected
Adobe Atlassian Cisco Duo DocuSign Microsoft 365

Leak Screenshot:

Leak Screenshot