Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group: Thegentlemen

Discovered by ransomware.live: 2026-03-23

Estimated attack date: 2026-03-23

Country: PE

Description:

grupotawa.com zoominfo.com/c/grupo-tawa/459512890 Grupo Tawa is a business group operating in Peru and Chile, dedicated to providing comprehensive business solutions that allow clients to focus on their core competencies. With over 18 years of experience, they offer expertise in personnel solutions, process outsourcing, cleaning, maintenance, and commercial management. The group serves more than 2,500 clients and employs over 15,000 individuals annually. Their commitment to excellence positions them as a reliable partner for companies across various industries


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations@web.com
MX Records
  • grupotawa-com.mail.protection.outlook.com.
TXT Records
  • 8262-D019-DE11-EA4A-C13F-BD2F-8FE2-6473
  • MS=ms71745138
  • google-site-verification=BUwatxm2AwJGGMSwf-hHB1i5W_Z2DjE9DSp2ZTmIj-0
  • google-site-verification=vfSQghXatcvsvGVoxbhIUXQ6TH4R3wisz4SQUDz3fY0
  • sendinblue-code:a866cfd547da92fea5217d66a2911e9a
  • sophos-domain-verification=b468eab1414e5e046e66bdb79bac2cd4b81b50a091ba1069b23f46e2c32b2dc2
  • v=spf1 include:spf.masterbase.com ip4:108.62.143.113 ip4:190.187.31.115 ip4:13.82.93.74 ip4:204.236.217.140 ip4:190.187.31.114 ip4:167.249.8.232 ip4:148.105.251.17 include:spf.protection.outlook.com include:servers.mcsv.net include:spf.sendinblue.com incl" "ude:_spf.embluemail.com ~all
Cloud / SaaS Services Detected
Mailchimp Microsoft 365 Sendinblue Sophos

Leak Screenshot:

Leak Screenshot