Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Discovered 2026-07-07 18:27 UTC
Est. attack date 2026-06-15
Country US

Description:

[AI generated] Welldyne is a pharmacy benefit management (PBM) company based in the United States. It provides prescription drug management services to health plans, employers, and government programs. The company focuses on improving medication adherence and controlling prescription costs through its pharmacy network, mail-order pharmacy services, and data-driven clinical programs. Welldyne operates primarily across the US healthcare sector.

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • infodomain-contact.org
  • trustandsafetysupport.aws.com
MX Records
  • us-smtp-inbound-1.mimecast.com. Mimecast
  • us-smtp-inbound-2.mimecast.com. Mimecast
TXT Records
  • v=spf1 mx a include:aspmx.pardot.com include:_spf.qualtrics.com include:_spf.salesforce.com include:us._netblocks.mimecast.com include:_spf.psm.knowbe4.com include:amazonses.com ~all
  • 132d8161ea87ecb6db4ca3a9ca8b2e7f02aabcc53e9d706b6834c115bfc0d9e0
  • MS=ms65484104
  • _globalsign-domain-verification=KUHTV0K_ZtEhQq4mEYinEBPnk6l_qzJhiwmD6mukBI
  • _globalsign-domain-verification=dttfOwTdn7KOGwmh7zKWXJQDyfMfzrc6R4tBz6Zb6d
  • adobe-idp-site-verification=9359387193e3a2f8c2a38ff05d5dd913e3532a68ba6b4e318b73d61ca67cf6dc
  • apple-domain-verification=DFfWS2ypAYb0hTdt
  • duo_sso_verification=06GOdc2Az8YhEsbzd2Lsver9J3vXkbEYTspFIVBWkoLDRdvltjRlilBDX0aZtSIA
  • globalsign-domain-verification=a6c08589d2429248ccd16b3177bddbaf
  • kalr8v1061qgdqo80in3qv6sd8
  • knowbe4-site-verification=9fec83a13327a929918347cadf7fd760
  • paloaltonetworks-site-verification=a21e6b59e6c8f34de859cd51401f7a28d69aa605f9e5c7d8741530939d8217ec
  • pardot875411=7364affa51f8f50e2dd45055780c23d8a877014f01130c771012ac5a4084ac44
  • q81d4n1e2pfh45fbgrho7an4v3
Cloud / SaaS Services Detected
Adobe Amazon SES/WorkMail Apple Cisco Duo Global Sign KnowBe4 Microsoft 365 Mimecast Salesforce

Leak Screenshot:

Leak Screenshot