fpr-us.com
fpr-us.com
Group: cactus
Discovered by ransomware.live: 2024-06-06
Estimated attack date: 2024-05-30
Country:
Description:
Download link #1: https://***************.onion/FPS/PROOF/Mirror: https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/FPS/PROOF/DATA DESCRIPTIONS: Employees and executives personal data, contracts, reports, customer data, personal identification information, etc.
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse godaddy.com
MX Records
- mx2-us1.ppe-hosted.com.
- mx1-us1.ppe-hosted.com.
TXT Records
- v=spf1 a:dispatch-us.ppe-hosted.com ip4:47.206.188.72 ip4:76.141.176.42 include:spf.protection.outlook.com ~all
- MS=ms40458155
Cloud / SaaS Services Detected
Microsoft 365
Proofpoint Essentials
Leak Screenshot:
