quevedo-ponce.com
quevedo-ponce.com
Group
Safepay
Discovered
2026-10-31 08:04 UTC
Est. attack date
2026-10-31
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professional Services
Retail & E-Commerce
Technology
Transportation
Description:
Headquartered in Quito, the firm serves domestic and international clients, including businesses, investors, entrepreneurs and multinational companies operating in Ecuador …
Exposure Report
by ParanoidLab52
Passwords
1 critical
2
Cookies
0 critical
Last queried 2026-10-31 08:03 UTC
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- registrar-abusecloudflare.com
MX Records
- quevedoponce-com01i.mail.protection.outlook.com. Microsoft 365
TXT Records
- MS=ms66919236
- MS=ms99092872
- v=spf1 include:spf.protection.outlook.com ~all
- (v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpr0fMlm3JQIlHQBn3bln5zLsR8jkvqaTupy/tGvGwU9+iYmOUYtpMkaPS/q3IBYYhejY6bW8PTeY7ao6PzU9kBJeA5kdUy5 J9fnHs2uONcshIVag7hZfBJ93EfNxmMQ5AnMuArqNUECnegxhleg2fdjV58JsJ/LsMCrtufLQNigVIvnEfmf9N1dm7kOAZh" "EcE9nIFFU/lXqQS39VZ0YISXTrkAx7t1Qi7xy/EQkqfBCgJVCsr1NLP1FuWIbqyXclOBSo6g4BhcTuItaC1vql3d848d/4ctPtrkQhoIO 1trRHjYDOKxUUgfxkKRtAm147qnIbQHcfHG5pXOhjm5dsQIDAQAB;)
- MS=0193A64BAC565D05180D064C5D732F1A9B3D8FD5
Cloud / SaaS Services Detected
Microsoft 365
Leak Screenshot:
Other recent victims
Same group: Safepay
-
mars-semi.com.tw
2026-10-31
-
Rood Trucking
2026-10-31
-
grifosespinoza.com
2026-10-31
-
jumonji-u.ac.jp
2026-10-31
-
everon.com.ar
2026-10-31
Same sector: Other
-
grifosespinoza.com
2026-10-31
-
everon.com.ar
2026-10-31
-
atljamaica.com
2026-10-31
-
Pac Production
2026-10-31
-
Surexport
2026-10-31
Same country: Ecuador
-
Farmacias 911
2026-10-31
-
EPMMOP
2026-10-31
-
Ecuadors National Police
2026-10-16
-
Ecuador police headquarters
2026-10-13
-
ConAuto
2026-10-12
Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.