Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo Primus

Group: Thegentlemen

Discovered by ransomware.live: 2026-03-04

Estimated attack date: 2026-03-04

Description:

benzprimus.com is the official website of Primus Autohaus, a leading authorized Mercedes-Benz dealer in Thailand . They offer new and certified pre-owned vehicles, along with comprehensive after-sales services, and have won multiple awards for sales and service excellence



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse@dotarai.co.th
MX Records
  • benzprimus-com.mail.protection.outlook.com.
TXT Records
  • MS=6A66C49AA5A14633AA7F1ECB3E5D1707D1A92968
  • google-site-verification=ckldWo80zs1n5QrZjNWzb3lDmIwCo16VHneDLfA8Au0
  • v=spf1 include:spf.protection.outlook.com -all
  • MS=ms55245380
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot