Hill International
Hill International
Group: play
Discovered by ransomware.live: 2023-06-22
Estimated attack date: 2023-06-22
Description:
Pennsylvania, USA
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- domain.operations web.com
MX Records
- hillintl-com.mail.protection.outlook.com.
TXT Records
- kJok7h8SytBVkMQiJMfmj2nF6a410Ybea/KFTkhnPzLOc67KWuFNbaSUDUZ7ki/zK8f994rKzp4KxjXDTeOajg==
- l08dbfy5ybn3thmp8tk5fh6yg2r31dx4
- wrike-verification=NjQ1NDA5OTo2OTI1NjQxYjA2Nzc1MmQ2MzE0ZWExODMwNzRlYjNjYzgyMTY4MzQ2YzQyMjYzYjUwZWE5ODc1OTE1ZDA4Mjlj
- v=spf1 mx a ip4:63.119.222.0/24 include:spf.protection.outlook.com include:spf.mandrillapp.com include:b.spf.service-now.com include:c.spf.service-now.com include:d.spf.service-now.com -all
- MS=ms17033457
Cloud / SaaS Services Detected
Microsoft 365
Mandrill
ServiceNow