In many pages I explored from the leak I keep coming across this *.devlan.net ___domain. Whois info belongs to a French personality and is suspiciously updated 2 days ago and it has a month for expiration:
Updated Date: 2017-03-05T16:38:16Z
Creation Date: 2004-04-19T13:12:21Z
Registrar Registration Expiration Date: 2017-04-19T04:00:00Z
Registrant Name: SADIER, NICOLAS
Registrant Organization:
Registrant Street: 5 Bis Chemin Des Hautes Terres
Registrant City: ST HILAIRE
Registrant State/Province:
Registrant Postal Code: 91780
Registrant Country: FR
Registrant Phone: +33164954698
Registrant Email: [email protected]
What's suspicious about that? It's certainly hosted on their intranet, they just picked a sensible name that employees could remember. The publicly-registered devlan.net is probably unrelated or unused.
