Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group Play
Discovered 2025-06-03 20:39 UTC
Est. attack date 2025-05-31
Country US

Description:

United States

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • mx1-us1.ppe-hosted.com. Proofpoint
  • mx1-us2.ppe-hosted.com. Proofpoint
TXT Records
  • ppe-8de244819b62718ca92c
  • google-site-verification=Nxnzw19CjQ0eHocMKY94im0ve3Jf-mEWa5eiUTmMyz8
  • MS=ms48146285
  • v=spf1 a:dispatch-us.ppe-hosted.com ip4:96.82.209.1 include:spf.protection.outlook.com include:spf.postmarkapp.com ~all
Cloud / SaaS Services Detected
Microsoft 365 Proofpoint Essentials

Leak Screenshot:

Leak Screenshot