Corvus
Evidence · Source Records · Forensic Audit Trail

Evidence

Every claim in this report traces back to one of 9 evidence records below. Each was captured passively during recon, hashed at capture for chain-of-custody, and graded per the Admiralty Scale (NATO STANAG 2511). Click any ev_xxx chip elsewhere in the report to jump straight to its source record.

9
Records
9
Sources
9
High Grade
0
Moderate
0
Low Grade
2026-05-28 → 2026-05-28
Captured
9 of 9 shown
ev_001 A-1
Source prestage:/enrich/domain (rdap) · Captured
Domain: ALLIEDADVISORSGROUP.COM. Registrar: GoDaddy.com LLC (IANA 146). Registered 2017-07-29, expires 2026-07-29, last changed 2023-07-30. Status: client delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited. Nameservers: ns1.wordpress.com, ns2.wordpress.com, ns3.wordpress.com. DNSSEC delegationSigned: false.
SHA-256 06b6a1a97af58432a4e7d59d85b990ed6e70959870f8c619ed7a73bcb58d59ef
ev_002 A-1
Source prestage:/enrich/domain (dns) · Captured
A records: 192.0.78.227 (TTL 300), 192.0.78.129 (TTL 300). No AAAA records. MX: 0 alliedadvisorsgroup-com.mail.protection.outlook.com (TTL 3600). NS: ns1/ns2/ns3.wordpress.com. TXT: NETORGFT3468830.onmicrosoft.com. | v=spf1 include:servers.mcsv.net ?all | v=spf1 include:spf.protection.outlook.com include:_spf.wpcloud.com -all. SOA: ns1.wordpress.com. hostmaster.wordpress.com. No CAA records.
SHA-256 d26c55dbf21c9fc220eb7e93e64991463128332a4df4b9ad2c39a24e51b01e8c
ev_003 A-1
Source prestage:/enrich/domain (mail_auth) · Captured
SPF records (multiple RFC violation): (1) v=spf1 include:servers.mcsv.net ?all; (2) v=spf1 include:spf.protection.outlook.com include:_spf.wpcloud.com -all. DMARC: v=DMARC1;p=none; MX count: 1.
SHA-256 b8653456f776cf400a6d13c61d0ca32749fde54a987a6a3d083c79186da54ee4
ev_004 A-2
Source prestage:/enrich/domain (mdn_observatory) · Captured
Mozilla Observatory scan of alliedadvisorsgroup.com. Grade: C-. Score: 45/100. Tests failed: 4. Tests passed: 6. Total tests: 10. Status code: 200. Scan ID: 97540592. Details URL: https://developer.mozilla.org/en-US/observatory/analyze?host=alliedadvisorsgroup.com
SHA-256 dc39eaf31d3d29cad43e6634883422c1be3c74f5db70e0434b0959c00ad84975
ev_005 A-1
Source certspotter_enumerate · Captured
Domain alliedadvisorsgroup.com: 1 certificate found covering 46 unique names. Cert ID 14537423605 (not_before 2026-04-16T11:00:23Z, not_after 2026-07-15T11:00:22Z). SANs include alliedadvisorsgroup.com and www.alliedadvisorsgroup.com plus 44 other co-hosted WordPress.com customer domains including tls.automattic.com, stockerforcongress.com, vitalseniornews.com, trendmediallc.com, jackmassing.org, johntheriot.com, lorieloe.com, calibratekombucha.com, baum-training.com, vupub.com, tpaav.com. [...]
SHA-256 3d7202d19a040f194d251c7ae426c44d12e4dda3dc7ee26c37f13d8e5271f85a
ev_006 B-2
Source hackertarget_host_search · Captured
alliedadvisorsgroup.com,192.0.78.227 www.alliedadvisorsgroup.com,192.0.78.129 No additional subdomains discovered by HackerTarget hostsearch.
SHA-256 031d7c165648abfc778a3fabde89727fb2cda78f28f254984f4e929a01359246
ev_007 A-2
Source wayback_cdx_search · Captured
200 archived URL records for alliedadvisorsgroup.com (domain matchtype, collapsed by urlkey). Oldest: 2018-08-07 (301 redirect). WordPress/Divi theme confirmed by URLs: /wp-content/themes/Divi/js/scripts.min.js and /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/. Staff names in URL slugs: /adrianne/, /greg/, /greg-working-1/, /greg-working-1-2/, /ascend-award-greg/, /final-richard/, /josh1/, /sandy/, /cari2/. Partner/member logos: /benefit-advisors-logo/, /cary-ins-logo/, /[...]
SHA-256 696853484b2ddffe0fa83596d87c1618c2bb35cd0bba47817118d8e67884e7c3
ev_008 B-2
Source anubisdb_subdomains · Captured
AnubisDB returned empty array for alliedadvisorsgroup.com. No subdomains recorded in passive DNS corpus.
SHA-256 c3fcd996f06b16f618cca5bac904cadcd8abee903531fe9c81e077578bc31660
ev_009 A-2
Source commoncrawl_search · Captured
Common Crawl index CC-MAIN-2026-21: 2 records found, both for robots.txt returning HTTP 429 (rate limited by WordPress.com). URLs: https://alliedadvisorsgroup.com/robots.txt (20260511), http://www.alliedadvisorsgroup.com/robots.txt (20260512). WARC digest RO26N3XRFN7O7BDFHYAJFQTJSXHEZHNR. No main content pages indexed in current crawl period.
SHA-256 b3273426b469322270541b1fd3589c1d6811b03ffee8eb7fcf1d6d052508ae5d