Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Visa Lighting

Group: play

Discovered by ransomware.live: 2024-05-22

Estimated attack date: 2024-04-25

Country: US

Description:

United States


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • visalighting-com.mail.protection.outlook.com.
TXT Records
  • v=spf1 ip4:74.62.83.34/32 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.0.0/16 ip4:134.209.68.126/32 ip4:70.249.180.99/32 include:mailgun.org include:shops.shopify.com include:spf.protection.outlook.com a:do-visalighting-w1.stark-host.com -all
  • MS=A35FEC6941809BE18247EEF55E078C5DFCE841ED
Cloud / SaaS Services Detected
Shopify Mailgun

Leak Screenshot:

Leak Screenshot