Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

copcp.com

copcp.com

Group Chaos
Discovered 2026-08-25 19:23 UTC
Est. attack date 2026-08-25
Country CN
Sector
Not Found
Data exfiltrated 362 GB

Description:

Central Ohio Primary Care (copcp.com) – Countdown to Publication Management at Central Ohio Primary Care has chosen to completely ignore all attempts to establish a constructive dialogue regarding their security breach. Silence will not make this situation go away. Since leadership refuses to en…

Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 60

Third Party Employee Credentials: 1


External Attack Surface: 10


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • e4ffa1744c4c196d894afde695183ab1ac342201af2999c476871f37ee383363copcp.com.whoisproxy.org
  • e4ffa1744c4c196d894afde695183ab1254142ba002cb619c7cc709d4334660ccopcp.com.whoisproxy.org
  • e4ffa1744c4c196d894afde695183ab1febacdfd259ce804af280e918506f001copcp.com.whoisproxy.org
  • trustandsafetysupport.aws.com
  • e4ffa1744c4c196d894afde695183ab1e168f5c8b18a6cb9059341c6de88679acopcp.com.whoisproxy.org
MX Records
  • copcp-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • have-i-been-pwned-verification=dweb_n0wg7qtfm4iysydixqk7763l
  • google-site-verification=JAmo10ElXkOS74NcXZlWHEr9mQL1bzmU4Yi-AD3tK_w
  • pexip-portal-domain-verification=dd22d331-174f-49b1-ad93-979a5b0ef745
  • Awr51z9uLkst85ubwp4abYAs6/OWo+Qp/UMYxg5vlOIfcbw9noUFkIBdzD2kZlvAZt6uoLP3EKBe/gPIZYh8EQ==
  • 2yRdEb2FLa8tpK0R6prs2Msw7HidGyRfqWwDaAwdOvbvif1ByrrxvhDRlTpgEkD0nuvDv9f8cInbiO5Jn4OhXw==
  • pexip-ms-tenant-domain-verification=dd22d331-174f-49b1-ad93-979a5b0ef745
  • 7/bsmg0aKbR4/52y5F0JMDHfqiU9E5HSEE5k3a4OfLVisaSl7/QMgU2ly1zqJSL3hep5mZEiXnSLRAZ9XUOgMg==
  • 4PaREjoP14ZL0TzKr68B2ODknv8zmBSVkZ/j7tzL0tZSBideYLRMo1/gD5o4CndnI4E5nYXN1YXRUNMxIrsGNQ==
  • MS=ms95101127
  • atlassian-domain-verification=hxk4uDSuV1PxRGvOwtzSKqBKK0SvMdPeW//f88RgcZ4Hgb30NRB/GpDKk7voZTH6
  • MS=7E361F013BEF6F8B1131485666D322457FD351C0
  • specops-verification-code=eaa42111-6552-4eba-8908-9d924aa4e037
  • atlassian-sending-domain-verification=613c4c97-bcbf-494c-aeaf-6d9c15a667c2
  • Rlm+KAu2ByxTvJiJuTj6CzhiqdcSDS1gRxxF4lf1F/ovMZgglln86OUEU+3g9JhuAzAxBtQsLqODZRMEynznDg==
  • domain-verification=4653b4f2-a435-d773-4b1f-262bf6fc01f0
  • google-site-verification=BWuYKCcLrBK_x63OQlQZyYkm0LQsiyKepAK6hxpYE38
  • have-i-been-pwned-verification=b47e23cd19841e9a79849e0773965ac6
  • apple-domain-verification=TBMiGrQIyz9IzDQ6
  • duo_sso_verification=8nOKPijMJZ473KcR44VJsTOiEev9qrkPOFwu3w1BHT3jUyhXbt6NQTgiKvxCsj6J
  • v=spf1 mx ip4:98.102.245.34 ip4:98.102.245.36 ip4:199.182.191.3 ip4:4.14.11.34 ip4:98.103.45.34 include:spf.protection.outlook.com include:_spf.google.com include:mail.zendesk.com -all
  • anthropic-domain-verification-7j9s42=fW00iJ1sydKBaRjpwCY1vne03
Cloud / SaaS Services Detected
Anthropic Apple Atlassian Cisco Duo Have I Been Pwned Microsoft 365 Zendesk

Leak Screenshot:

Leak Screenshot