Calmont Group
Calmont Group
Group: play
Discovered by ransomware.live: 2025-04-14
Estimated attack date: 2025-03-29
Country:
Description:
Canada
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse wildwestdomains.com
- support nextdigital.ca
MX Records
- calmont-ca.mail.protection.outlook.com.
TXT Records
- sophos-domain-verification=a0b909d6524dfc4cc55aacc9d25279fa6d25dd52
- MS=ms96232580
- tur7fnf2n0qo4lmvkrv0emrhbq
- v=spf1 a ip4:204.12.157.222 ip4:72.13.177.160/29 ip4:64.56.140.110/27 ip4:64.141.8.232/29 ip4:66.244.195.90 ip4:208.38.15.186 ip4:72.29.241.182 ip4:207.228.90.176/29 ip4:216.145.103.192/29 ip4:66.244.195.88/29 ip4:54.208.163.145 ip4:54.85.167.36 ip4:173.2" "51.77.3 ip4:207.186.164.25 ip4:100.77.1.132 ip4:104.130.47.71 ip4:216.145.110.126 ip4:24.109.9.216/30 include:1._spf.cdkglobal.com include:2._spf.cdkglobal.com include:_spf.hosting.cdkglobal.com include:spf.protection.outlook.com include:_spf_useast2.prod" ".hydra.sophos.com ~all
- jk7ncvp44iu82l132t8safpjf1
Cloud / SaaS Services Detected
Microsoft 365
Sophos
Leak Screenshot:
