Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

gotocfr.com

gotocfr.com

Discovered 2023-11-09
Est. attack date 2023-11-09

Description:

CFR is a privately held Wisconsin –USA based system integrator for the dairy and food industry. 553GBEmployees (ssn numbers, residential addresses, license numbers, contracts, salary information, tax forms, FMLA forms and more)Clients (informat...

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations@web.com
MX Records
  • mx1-us1.ppe-hosted.com.
  • mx2-us1.ppe-hosted.com.
TXT Records
  • duo_sso_verification=tEewTvrNTcjNnNbO7wDlPnVB3zAMB4L2KXNqj07Wo4JB3gkqwv3ppV6SmCrux9mB
  • google-site-verification=kvpjWgbNTxKB2MSQGLkSoZkKCukTW6aOLPh114d0SW4
  • v=spf1 mx a ip4:206.176.193.123 include:gotocfr.com include:dispatch-us.ppe-hosted.com ~all
  • MS=ms17385414
  • MS=403EFAFDA2050A7EAD883BF677699416DFF9EF44
  • ppe-00256471e97f4eeb00e8
Cloud / SaaS Services Detected
Microsoft 365 Cisco Duo Proofpoint Essentials

Leak Screenshot:

Leak Screenshot