Coreix
Coreix
Group: rhysida
Discovered by ransomware.live: 2025-06-18
Estimated attack date: 2025-06-18
Country:
Description:
Coreix Coreix Cloud Services Limited provides a wide range of cloud computing solutions including public cloud servers, dedicated servers, virtual private servers, and colocation services.
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 0
Compromised Users: 6
Third Party Employee Credentials: 0
External Attack Surface: 5
Infostealer Distribution
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse godaddy.com
MX Records
- coreix-net.mail.protection.outlook.com.
TXT Records
- google-site-verification=ID7dEtgFy0mRBF8xX-Py1Ielp-eGyF-gSA9gh9CxTcY
- MS=ms99886491
- v=spf1 ip4:85.13.217.85 ip4:85.13.226.174 include:spf.protection.outlook.com include:spf.mandrillapp.com include:stspg-customer.com -all
- status-page-domain-verification.coreix.net=nq90ds2tn89h
- rovag_verification_token=62E6AF94EEEF43A0A168E0C05353EEC4
- coreix-dns-verify=13-1e274dfc931d43cf9194c322
Cloud / SaaS Services Detected
Microsoft 365
Mandrill
Leak Screenshot:
