Sit
Sit
Group: play
Discovered by ransomware.live: 2024-04-04
Estimated attack date: 2024-03-27
Country:
Description:
United States
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 0
Compromised Users: 2
Third Party Employee Credentials: 2
External Attack Surface: 0
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- domain.operations web.com
MX Records
- cloud11.spamtitan.com.
- cloud12.spamtitan.com.
TXT Records
- klaviyo-site-verification=U7tMCk
- twilio-domain-verification=02f46307bd04447e76a5d3281540737a
- v=spf1 mx a ip4:3.19.87.175 ip4:18.217.94.247 ip4:18.223.46.43 include:spf.protection.outlook.com -all
- 796sydydswbsr0hdcw8cqdgn1yf0g2mn
- MS=C06E96571753FC5EB3F90F9E2E3FCBD248F28805
- MS=ms98518936
- _89hx8gouc9mosql1zxu2llrb6ftil11
- apple-domain-verification=ayXtqD8RkpKxnwYg
- apple-domain-verification=s9GoEojka7ohRXGDAI55_HjnroIIJ0yPCYQ_R998vfA
- google-site-verification=e3WuKOzUjeW__Wb0eL9hBb-njp2RE-MMZTkWba0hRhw
- google-site-verification=s7x8gCVdT7AgmRuukFAan64IBCx7x-aj7VYw6okW494
Cloud / SaaS Services Detected
Apple
Microsoft 365
Twilio
Leak Screenshot:
