mercu#####
mercu#####
Group: clop
Discovered by ransomware.live: 2024-12-24
Estimated attack date: 2024-12-24
Country:
Description:
Presumed victim name: MercuryGate International - Cl0p announcement. We have data of many companies who use cleo. Our teams are reaching and calling your company and provide your special secret chat.
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- domain.operations web.com
MX Records
- mercurygate-com.mail.protection.outlook.com.
TXT Records
- atlassian-domain-verification=uG2ah/s2HnabbSEuIXdAJKvaeRUVrKCkJFGrFV5cQ808w/7r0SfvCXakJI7aOfGC
- wiz-domain-verification=3dbfdd1c387b9754cae6295ab6754c79d11935b052abe4bc81a74ef1840d0142
- figma-domain-verification=b6dc6e01ee1243934f917c2aec3b629b3d6a493c6adb4bb4cb9712cc480467f7-1740381551
- MS=ms36265553
- MS=ms25492239
- smartsheet-site-validation=mYBi_EjcKc0WX9O_vaooCuPUerYXQdkQ
- sending_domain55572=d43ee0d874ddb20b8ce1627bc901400e414a8020f1cd0c4ba8933cab2e91a9ec
- docker-verification=2dcdb5ab-0769-4b97-9052-74a664b9b8c1
- apple-domain-verification=dizEZzXbNI0iMiPO
- MS=ms44696868
- v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
- MS=ms87326014
- docker-verification=0b23763d-b7da-4541-b5e9-7d1c38beda61
- atlassian-domain-verification=bK2kOc139YY4Tf7AR7P12DzZhxLGnMCbvazK0yKWFGxssw6SgSTCE12lkHww/0ZZ
- postman-domain-verification=388294f66a0684989e4fc0d4ec676658939da4d3743b92f4ee1d5ab80aebac23ee29097ef35d41f38d6c238a63896154d7dda920661907f128651ce5ef63f8aa
- google-site-verification=daE_xM4_yZs_pPBHllDwKymW2BfBo2sX3QSuxAFpLlU
- intacct-esk=4FED1A3EF8CFE212E0539406A8C099CE
- MS=3AC1374A9A23A9B5A25976AAC01854E787B152FC
Cloud / SaaS Services Detected
Apple
Atlassian
Microsoft 365
Leak Screenshot:
