The PHOENIX
The PHOENIX
Group: blacklock
Discovered by ransomware.live: 2025-05-16
Estimated attack date: 2024-11-18
Description:
a company with more than 15 years in the market, providing innovative solutions to government and private institutions. Revenue $3.8 M
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- domain.operations web.com
MX Records
- mx-01-us-west-2.prod.hydra.sophos.com.
- mx-02-us-west-2.prod.hydra.sophos.com.
TXT Records
- rnhemKs6YDC1tPXnuvHZF8YR7lEiyP2UHzGbf089ABKs8Hi9yKVAW4NWla68037T3rHGbgovG61lasxtyfwx4A==
- v=spf1 +a +mx +a:mx.dnpnetworks.net -all"
- sophos-domain-verification=69369c85e0df56ae183d952c719f8649528be6b8
- MS=ms11829206
Cloud / SaaS Services Detected
Microsoft 365
Sophos
Leak Screenshot:
