PILOTPEN.COM
PILOTPEN.COM
Group: clop
Discovered by ransomware.live: 2024-05-01
Estimated attack date: 2024-05-01
Country:
Description:
Welcome To Pilot Pen Global Landing Page
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- domain.operations web.com
MX Records
- mx1.pilotpen.iphmx.com.
- mx2.pilotpen.iphmx.com.
TXT Records
- atlassian-domain-verification=jYz0X8yV2WIafZYxrUiDtTN9q81cZcRP1URnGMGx6e3cCFnxdEyzgirjVXhoapua
- esYErjCOA6C0kUAtEQWyjbS5exBQ5v9KO+zjhorIiOslojbLxQDyZrrf6ZfuMIuByhKvjgt//jUB8XSqTov8UA==
- duo_sso_verification=xNh64ErLbxIqKQ5Vo3YCnPigg8a2bXSRgeY6rqUppWvIAr5xk0AzxkGfxbhwe72e
- 501lhdvb8keka3efarjflq98v5
- v=spf1 a include:spf.protection.outlook.com a:smtp.pilotpen.com ip4:205.186.153.173 ip4:12.32.147.170 exists:%{i}.spf.pilotpen.iphmx.com -all
- odar41kolrds64m75doq6gvl5c
Cloud / SaaS Services Detected
Atlassian
Cisco Duo
Leak Screenshot:
