Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Germany

Group: play

Discovered by ransomware.live: 2023-05-10

Estimated attack date: 2023-05-10

Country: DE

Description:

Berlin, Germany



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • gtai-de.mail.protection.outlook.com.
TXT Records
  • MS=ms93531849
  • _telesec-domain-validation=343579_2025-08-25_cRaGL0I6P3PlnZDk5ymr4P7KGWGV8PysnmU1kCssSBcF9K2XLT
  • v=spf1 ip4:212.117.80.228 ip4:212.117.80.241 ip4:212.117.80.247 include:spf.protection.outlook.com include:spf.init.de mx -all
  • sd6-71a-43s
  • tmes=0de4694cb6522324cbd7c467d30cd491
  • google-site-verification=f2ClJwd94-hImZe6S_WtYYjmsduZDOBsQtskwNTa0aY
  • duo_sso_verification=gmAGmvhrRVhtn8f7iQEIdmwiyH3J8dEuifU2vXA5zEyGH22WWjcLKxtB4l0xTvfA
  • google-site-verification=GqA5MH_Pbw2I_boffTmTAuydbL2CEMia9L9R1Gkdkew
  • 201906201200505suowlqvs6p4k6phnufgnpzch6p15h4g5k0f7755vz45pfu3ko
  • apple-domain-verification=VkEcOmaKHikQV1E7
  • _telesec-domain-validation=326199_2024-01-09_XJ2nmf270Fuvt7YbGCOUdtgDzr2ourkFzQf5Uxih63vBWxTHN8
Cloud / SaaS Services Detected
Apple Microsoft 365 Cisco Duo

Leak Screenshot:

Leak Screenshot