Evans Distribution Systems
Evans Distribution Systems
Group: play
Discovered by ransomware.live: 2024-09-10
Estimated attack date: 2024-09-05
Country:
Description:
United States
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse godaddy.com
MX Records
- evansdist-com.mail.protection.outlook.com.
TXT Records
- v=verifydomain MS=2723582
- v=verifydomain MS=2769414
- v=verifydomain MS=4213589
- v=verifydomain MS=5173697
- v=verifydomain MS=8876819
- v=verifydomain MS=4705870
- v=spf1 include:spf.protection.outlook.com ip4:174.230.0.0/16 ip4:74.126.4.208/30 ip4:35.174.145.124 ip4:144.121.165.230/30 ip4:38.32.96.0/29 ip4:131.239.186.12/30 ip4:131.239.186.170/30 ip4:216.150.231.64/27 ip4:216.150.231.96/27 ip4:131.239.36.122/30 ip4" ":152.160.24.36/30 ip4:205.145.131.224/27 ip4:205.145.131.250/27 ip4:20.109.227.185 -all
- duo_sso_verification=5x9d1WVv4iPyEWS0f2x2E2GBsuF9DkwYS0XbacwIBbb83fHDv7HV16UNhCunQgL8
- google-site-verification=0w6Rr_OhKmhoJWjzA1FI_tZlZy_hqOzMFX5kQN5LU3I
- google-site-verification=54ZZfn_LWUvw-jp-NqdKhXEW1RHd6puKfxcJk_86ZPE
- google-site-verification=BdvcZd4FTj62874NnThQ1kjQFmiYsQR7CLjG0mI5eww
- google-site-verification=rgbHUkiotfuizJbwyCRyBDGsyYvSmItlTLfeTqWGVGg
- MS=ms89072960
Cloud / SaaS Services Detected
Microsoft 365
Cisco Duo
Leak Screenshot:
