Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

avoltaworld.com

avoltaworld.com
Group Incransom
Discovered 2026-11-12 10:15 UTC
Est. attack date 2026-10-08
Country CH
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

Avolta is a global retail company specializing in convenience stores and travel retail operations. Founded in 2020 and headquartered in Switzerland, the company maintains a significant international presence across Europe, North America, Asia-Pacific, Middle East, and South America. Avolta operates extensive retail networks in airports, transportation hubs, and commercial centers, offering consumers convenient shopping experiences with a diverse range of products and services. The company leverages mobile applications and digital solutions to enhance customer engagement while maintaining physical retail locations worldwide.
Exposure Report
by ParanoidLab
0
Passwords
0 critical
5
Cookies
0 critical
Last queried 2026-11-12 10:15 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusenamesrs.com
MX Records
  • No MX records found.
TXT Records
  • linkedin-site-verification=6b1462e9-ae4b-464a-bf02-961551a852c2
  • google-site-verification=oe8asrFsweF4x-9xAs-S-nzoCNc9d6eejkmQ7r09P4I
  • MS=ms65033524
  • _rhvm25cngzyy1gi3mg21118zlsaha2q
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
  • globalsign-domain-verification=24B9CF5C3BF862DE78015143CCC9D684
  • globalsign-domain-verification=477E38D51AE94EF6AC1FD16CE8961BD7
  • globalsign-domain-verification=B00C3F9C920E0309E487411E74445364
Cloud / SaaS Services Detected
Microsoft 365 Proofpoint

Other recent victims

Same group: Incransom
Same sector: Other
Same country: Switzerland

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.