Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

TWL.DE

twl.de

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22
Country DE

Description:

Technische Werke Ludwigshafen AG (TWL) - Technische Werke Ludwigshafen AG - Meine Energiequelle: Privatkunden

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mx2.twl.de.
  • mx1.twl.de.
TXT Records
  • apple-domain-verification=3fiFbNbcpV2XRZnY
  • google-site-verification=w5WlvRDuAPEltaCvJx_rdn3Whq1G5ytrlH1Mou_pIQ4
  • v=spf1 mx ip4:80.208.232.92 ip4:94.125.209.0/28 ip4:217.151.146.120 ip4:217.151.146.122 ip4:85.25.89.5 ip4:185.22.222.0/24 ip4:195.10.208.0/24 ip4:185.97.174.196/30 include:_spf1.twl.de include:_spf3.twl.de ~all
  • sVc9vh2aM6nyo1kmN0y5ZRk9VrAchYgd9tGjqw7axS1IG0MCu58ZnvCA2hlVBuhh06BeNVFBdxzIQYxBGHjvaQ==
  • asv=94f1fd3189b92769f5a96ce6c984a806
  • MS=ms58501255
Cloud / SaaS Services Detected
Apple Microsoft 365

Leak Screenshot:

Leak Screenshot