tjx.com
tjx.com
Group: dispossessor
Discovered by ransomware.live: 2024-04-19
Estimated attack date: 2021-02-21
Country:
Description:
tjx.com
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 40
Compromised Users: 1443
Third Party Employee Credentials: 28
External Attack Surface: 107
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abusecomplaints markmonitor.com
- dnsmonitor tjx.com
- whoisrequest markmonitor.com
MX Records
- mxb-00081a02.gslb.pphosted.com.
- mx0a-00081a02.pphosted.com.
- mx0b-00081a02.pphosted.com.
- mxa-00081a02.gslb.pphosted.com.
TXT Records
- docusign=a283b9b7-63e7-4070-b0aa-65db99d5b63e
- atlassian-domain-verification=vFtZaW8dfYoOeyuJzvvp83TxY7a9JVnf6dlraKufipZyQfnVo2LwmxxR3GI7Xs4g
- vmware-cloud-verification-7769cbad-b949-4a02-bc59-e01e988b814c
- airtable-verification=fa2d777d81b0803961f0db639d5b2e62
- _8k1n29j40stup3529pgumupmij0hvc4
- _whinlty1rxx84umsl6hpwp10jvj6sig
- onetrust-domain-verification=54139bb4ff844c22bd83f60c41287bbf
- wiz-domain-verification=dde3fcbaabf5331b009053cff8e011632ec60eb7d57e4b69f2ede36ada31d918
- atlassian-sending-domain-verification=b4a6f410-5e59-4fa2-9781-d4a5657b3d7f
- adobe-idp-site-verification=57cfc172-2dba-4a1e-a0f9-fe4845059646
- v=spf1 ip4:205.220.171.102 ip4:205.220.182.205 ip4:205.220.173.171 ip4:205.220.161.171 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
- QJP!1uJjFF&n$Ty8TXqc9leQe*coykSKmYygB#eJWeJ5t72Wb5v78CYt!ayHnH$znuFJ9N#y@w#43jlaGR1!zVA2^M&z*nWkRrq
- MS=ms16685402
- onetrust-domain-verification=4da4140a35644f4fac8842a50bef4f7d
- google-site-verification=l5TiG1tRR7r_ZAJIddsb54uz_2e53gcNotCCi51dpww
- docusign=687c4dd6-d319-4f9f-8207-003d9c08a64e
- apple-domain-verification=LmInHnu5pOI6N5wE
- google-site-verification=U2QuXIvujpS-mFl32QR3wVRLzEHERjJpLMGA4mDmPJU
Cloud / SaaS Services Detected
Adobe
Apple
Atlassian
Microsoft 365
OneTrust
DocuSign
Proofpoint
Leak Screenshot:
