Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo GREEN MOUNTAIN ELECTRIC SUPPLY (gmescom)

Group: Alphv

Discovered by ransomware.live: 2023-07-26

Estimated attack date: 2022-05-24

Description:

Green Mountain Electric Supply, Inc. provides innovative and renewable energy solutions. We support this effort through a commitment to highly trained staff, changes in technology, new products, and strong partnerships with customers and vendors. Our goal is to lead the industry in advancement and to deliver excellent service with honesty, integrity, and urgency.



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • 6776b31d-4c3c-4f7b-a372-5389dc5e34c5@identity-protect.org
  • trustandsafety@support.aws.com
MX Records
  • gmes-com.mail.protection.outlook.com.
TXT Records
  • n9kognua8e07lkufe2s0lk1c51
  • ppe-c20bf4292a215ae4a506
  • sbqqk82bgupi34ecigpujko8a9
  • v=spf1 mx a ip4:64.25.220.61 ip4:64.25.220.58 a:billtrust.com include:spf.protection.outlook.com include:sendgrid.net include:_spf.createsend.com -all
  • 9c2qj4o6ue0epe8i8cbda65ljb
  • MS=1529ED4ECE02449E7C55341914C5D07F1D5E4DF2
  • MS=ms12373764
  • MS=ms88130033
  • apple-domain-verification=NPxcog14e8jELsNq
  • caf08661c26bc82c03f3c5756973ea04c791b957
  • google-site-verification=AsyYiRq4MW3Zso5tMxFhma0w8QfLJGqs44IdKp3KdXM
  • gpb5bfpm07qjqkkuqiltigi1l7
Cloud / SaaS Services Detected
Apple Microsoft 365 SendGrid

Leak Screenshot:

Leak Screenshot