Corvus
Evidence · Source Records · Forensic Audit Trail

Evidence

Every claim in this report traces back to one of 27 evidence records below. Each was captured passively during recon, hashed at capture for chain-of-custody, and graded per the Admiralty Scale (NATO STANAG 2511). Click any ev_xxx chip elsewhere in the report to jump straight to its source record.

27
Records
11
Sources
24
High Grade
3
Moderate
0
Low Grade
2026-05-28 → 2026-05-28
Captured
27 of 27 shown
ev_001 A-1
Source prestage:/enrich/domain · Captured
RDAP BENEFITADVISORSNETWORK.COM: registered 2002-08-05, expires 2027-05-05, last changed 2026-04-24, registrar GoDaddy.com LLC (IANA ID 146), nameservers NS69/NS70.DOMAINCONTROL.COM, status: client delete/renew/transfer/update prohibited, no DNSSEC.
SHA-256 f40716fbb5a5853d8918769598ba698df0e5879bb14f302f37345b439bf7a20a
ev_002 A-1
Source prestage:/enrich/domain · Captured
DNS A=209.126.24.185 TTL 600. MX=10 benefitadvisorsnetwork-com.in.shield.security. SPF: v=spf1 include:spf.encrypttitan.net ip4:207.89.37.211 ip4:207.89.37.210 ip4:3.13.39.22 include:spf.protection.outlook.com include:spf.shield.security -all. Zywave TXT: zywave-domain-verification=X+T4KESSB1w4vpTHelzgWh7yZAslPEi9l89mszOKl2A=. DMARC: v=DMARC1; p=none. MDN Observatory: grade F, score 0, 5/10 tests failed, HTTP 200.
SHA-256 059e7d6821197389728a6e896bac6441a31a1c6ad9209232ec445ef22521d627
ev_003 B-2
Source wikipedia_summary · Captured
Zywave, Inc. is a software company headquartered in Milwaukee, Wisconsin that provides SaaS products for insurance brokers and financial planners. Products include agency management, data analysis, compliance, risk management, marketing tools, financial planning. 350,000+ professional users across North America. Offices in Milwaukee WI, Carlsbad CA, Winnipeg Canada. Largest market share for personal financial planning software after 2010-2011 acquisitions.
SHA-256 d1b9b9d8273e55652fcd42fa535668162e7b35d15d4a9fb7d0599c88d2815998
ev_004 B-2
Source wikidata_sparql · Captured
Wikidata Q8075982 (Zywave): industry=software industry (Q880371), headquarters=Milwaukee (Q37836), inception=1995-01-01, website=https://www.zywave.com/, Crunchbase slug=zywave, Freebase ID=/m/0h1dzd_. No founder, parent company, or subsidiary data in Wikidata.
SHA-256 9ad0bc35c58d108d9f6bc38eb9986ff342d1b2406dc9542a604896d8cda5d1b7
ev_005 C-3
Source corp_crunchbase · Captured
Crunchbase profile https://www.crunchbase.com/organization/benefit-advisors-network confirmed live (Angular ng-state present, apollo.state key found) but structured extraction failed due to selector drift. Slug confirmed: benefit-advisors-network.
SHA-256 f24cfea6c32461c28f39dbbfc6e51de363f372f9aac42e5358fe1e1767603ce2
ev_006 A-1
Source gleif_search · Captured
GLEIF exact search Benefit Advisors Network: 0 results. Wildcard Benefit Advisors* US-only: 6 results all unrelated (Northern Trust fund entities). BAN has no LEI record in GLEIF.
SHA-256 caf23d1e74c969b3dab2e18710141213ee4f556d78b4173af6183d3348989b4f
ev_007 A-1
Source coho_search_companies · Captured
UK Companies House: Benefit Advisors Network, Benefit Advisors, BAN Inc all no match. BAN is not a UK entity. Closest: INTERNATIONAL BENEFITS NETWORK LIMITED (no. 04140693, active, High Wycombe) unrelated.
SHA-256 b2b1d54394fc5cb934dd9be64fa5327918814f508a88f2690a453ea7f3822557
ev_008 B-2
Source wikipedia_summary · Captured
Employee benefits (Q678774): non-wage compensation including group insurance, disability income protection, retirement benefits, daycare, tuition reimbursement, sick leave, vacation, social security, profit sharing.
SHA-256 c10b3085a2cc5c00bd0d6f20446f41548344638e3aeb85f9e124544ae18e4377
ev_010 B-1
Source serper:news · Captured
Benefit Advisors Network and the National Benefits Center on April 1 spun off from Alera Group to become an independent organization. 'As the market continues to evolve and change, so must our way of looking at our industry,' CEO Perry Braun says.
SHA-256 40f9ca00605e4a86ea2c0d338f52b018be55e3f551dd3f03173469c6682add1b
ev_012 B-2
Source serper:news · Captured
Bobbi Kloss and Pauline Sobelman Address Employee Well-Being and Inclusive Rewards. Bobbi Kloss, Vice President of HCM Consulting Services [at BAN], and Pauline Sobelman [of Baldwin Risk Partners] presented at the WorldatWork Total Rewards '23 Conference, June 2023.
SHA-256 b19628ca1daa30841803c132d7db4621276c3ecbe28698facfb366dd05ecfc09
ev_013 B-2
Source serper:news · Captured
The new firm is called Alera Group and has been formed by the coming together of 24 independent employee benefits, property/casualty, risk management and financial services firms. [January 4, 2017]
SHA-256 b1a164389e07799a84e41baa68dc25b812412f7fe8155e3145092b1db3ae0340
ev_016 B-2
Source serper:news · Captured
Benefit Advisors Network (BAN), an international network of progressive and visionary employee benefits brokers and consulting firms, admits Packard Wheeler Succession as newest member. [~April 2026, approximately 1 month before investigation date]
SHA-256 82083be3c4c59aad1327bd66391efb24d17d6d8f2a391f5bdd9cb0aef9991373
ev_017 B-2
Source serper:news · Captured
Benefit Advisors Network (BAN), an international network of progressive and visionary employee benefit brokers and consulting firms, partners with MASA Medical Transport Solutions to offer transportation benefits to members. [November 29, 2023]
SHA-256 f5ddddb59b85fb856ebd2b973f0e52a1a7f4e075163556e50d8c2c6e30044742
ev_018 B-3
Source serper:news · Captured
United Benefit Advisors has introduced a service for member firms that want to help employers keep healthy employees healthy. UBA... [Established independent employee benefits broker network, structurally comparable to BAN]
SHA-256 1dbe5bf75c50a5dedc696f0db328dc8b9a36b4d06381575962a1f180f86e6c52
ev_019 A-1
Source prestage:/enrich/domain · Captured
DNS TXT record for benefitadvisorsnetwork.com: zywave-domain-verification=X+T4KESSB1w4vpTHelzgWh7yZAslPEi9l89mszOKl2A= — confirms BAN uses Zywave platform services (domain ownership verification token).
SHA-256 82aab7e0ece15d01ad706f328a2ec5db21e54e14241acbd11bcb1d6db6a6f973
ev_020 A-2
Source wikipedia_pageviews:Zywave · Captured
Wikipedia pageviews for Zywave article, January 1 – May 27, 2026: consistently low (3–60 views/day). Notable daily peaks: 60 on 2026-05-15, 47 on 2026-03-18 and 2026-03-23, 42 on 2026-02-15. 5-month average approximately 17 views/day. No sustained spike indicating a major public news event. Pattern consistent with a B2B insurance technology platform with low public profile.
SHA-256 df69231d6c5acbafcedb884312330abe8d4652189c015a8d9016f076ab14e21c
ev_021 B-3
Source serper:news · Captured
The brokerage industry's litigation epidemic: When poaching becomes a business model. A rush of lawsuits is sweeping through the brokerage sector as established firms fight what they see as large-scale raids of talent. [~April/May 2026 — relevant sector context]
SHA-256 faff7cd2cd3d1082f57ea68b5c89788663fde37df0246f154515c7e606f4a993
ev_022 A-2
Source npm:search · Captured
npm search results for 'zywave': 80 packages under @zywave scope. Publisher: patrick.obrien@zywave.com (username: zywavepobrien). Co-maintainer: john.cruikshank@zywave.com (username: cruikshank). All packages licensed UNLICENSED. Active packages include @zywave/zui-bundle (v4.2.1, last updated 2026-03-04, 6838 monthly downloads), @zywave/zywave-shell (v1.0.63, last updated 2025-09-19), @zywave/zui-icons (v4.6.1), @zywave/zywave-analytics (v1.0.42). Total 80 packages in @zywave npm scope.
SHA-256 328e8d63490507ef547c7a955b34f34d51c8bb51eeab1bde3ee76d94d53bbc20
ev_023 A-2
Source prestage:/enrich/domain · Captured
MDN Observatory scan of benefitadvisorsnetwork.com: grade=F, score=0, tests_failed=5, tests_passed=5, tests_quantity=10. Observatory ID: 97531928. Status code: 200. Scanned 2026-05-28T17:36:49.356Z. Algorithm version 5.
SHA-256 ac196fae09af3401b55bf98f500a5876c1cd5ada41c155aaeb6187659fb072a7
ev_024 A-1
Source prestage:/enrich/domain · Captured
DNS/mail-auth for benefitadvisorsnetwork.com: DMARC='v=DMARC1; p=none;' (unenforced). secureDNS.delegationSigned=false. No CAA records present (SOA fallback only). SPF includes ip4:3.13.39.22 (AWS us-east-2), ip4:207.89.37.211, ip4:207.89.37.210, include:spf.encrypttitan.net, include:spf.protection.outlook.com, include:spf.shield.security. MX: benefitadvisorsnetwork-com.in.shield.security (priority 10). Nameservers: ns69.domaincontrol.com, ns70.domaincontrol.com (GoDaddy registrar IANA ID 146).
SHA-256 1d36434dcfd80290624534ddb16e162891323606abfca5fd04a1eec01b782995
ev_025 A-2
Source github:repos · Captured
GitHub org Zywave (https://github.com/Zywave) has 4 public repos: OctopusDeploy-Kraken (archived C# 2018, 15 stars), UptimeCalculator (active C# last pushed 2026-03-19, 1 star), OctopusDeploy-Nautilus (archived C# 2018), SMLogging (archived C# 2016). Total 0 BAN-specific public repositories found across multiple search queries. No breach/leak repos, no CVE advisories, no security disclosures found publicly for BAN or Zywave.
SHA-256 2f32a6586e0147b424cfe67953eaa41f0aae3a6e35028c3a4e6149b51f0f1b3e
ev_026 A-2
Source epo:search · Captured
EPO OPS search pa='Zywave' total-result-count=4. EPO OPS search pa='Zywave' AND ta=insurance: 3 results. First result: US2008294479 (A1), publication date 2008-11-27, family-id 40073244, applicant Zywave. EPO search pa='Zywave' date range 2015-2026: 0 results. EPO search pa='Benefit Advisors Network': 0 results. EPO search in='Perry Braun' OR pa='Perry Braun': 0 results.
SHA-256 916e29680a2135c44fb1e0828f16f3ab02150d689edbdd2148dcd5d12b0cb4da
ev_027 A-2
Source github:repos · Captured
GitHub searches: 'benefitadvisorsnetwork.com' = 0 results; 'benefit advisors network' = 3 unrelated results (Swedbank employee benefits article, cPanel quiz, digital marketing tips); 'zywave benefit' = 0 results; 'Perry Braun insurance benefits' = 0 results; 'alera group benefit advisors acquisition' = 0 results; 'Zywave vulnerability CVE security advisory' = 0 results; 'zywave breach leak data security' = 0 results.
SHA-256 03484108ae6774fc9375da53a641a095a3cc4cf2b7314b58c3a44dfe244005ef