nokair.com
nokair.com
Group: Lockbit3
Discovered by ransomware.live: 2023-02-28
Estimated attack date: 2023-02-28
Country:
Description:
Nok Air is a low-cost airline in Thailand operating mostly domestic services out of Bangkok's Don Mueang International Airport. Thai Airways International owns the fourth-largest stake in the airline.
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse godaddy.com
MX Records
- nokair-com.mail.protection.outlook.com.
TXT Records
- \009 google-site-verification=bASCu7v62ndb7FBUKUeZIkHGhzxEG-8mdWMxeh_hLZI
- google-site-verification=QsOYsKVFnWc2XmjVinlLAacNk4oxTdE9q_NS61V3Ex0
- amazonses:XQ4QlnbE0z6OYWGBOQ0Cn45KWUQnpwEN/wXbneAJlDQ=
- google-site-verification=MWxzTYfyU_Q2X2SJ0RTrOZNlyydg6oza7J8S7FjhTWU
- v=spf1 ip4:210.86.181.20 ip4:210.86.181.27 ip4:210.86.181.28 ip4:210.86.181.29 include:spf.protection.outlook.com include:sendgrid.net include:amazonses.com include:spf.sabre.com ~all
- MS=ms89783719
- amazonses:Q0guC4hSAHKquP9xK9uuF5H7Uud84jNouaaOsKy4grg=
Cloud / SaaS Services Detected
Amazon SES/WorkMail
Microsoft 365
SendGrid