Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo GOVirtual-it.com ( VIRTUAL IT )

Group: qilin

Discovered by ransomware.live: 2025-02-03

Estimated attack date: 2025-02-03

Country: US

Description:

Virtual-IT is a technology partner that offers business IT services and support to help clients focus on their core activities. With a commitment to service excellence, they ensure that 98% of client calls are answered by highly skilled IT en ...



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse godaddy.com
MX Records
  • govirtualit-com02c.mail.protection.outlook.com.
TXT Records
  • sophos-domain-verification=73c40be886f320b6a724dc8ea888eb9c813c52f3
  • sophos-domain-verification=f9ee047bb29c111ada6642517a16e142605066c3c4b45c3c707d3aa17eaa3b88
  • v=spf1 a ip4:63.229.224.0/24 ip4:98.142.87.0/25 ip4:35.174.145.124 include:spf.protection.outlook.com include:spf.mailjet.com include:spf.constantcontact.com include:infusionmail.com -all
  • mscid=Qb7PFim8xTCWeFxI6w3B4qiHrxdOOGP6aJpS27OFNXU6q1Zn4yLMS5EDGRBQ+ZJcEDUZplrCs4tDcX4TBBZePw==
  • google-site-verification=TEmiYcFofNmipUcSIEpH_fx8McMqml43LevK3INFLcw
Cloud / SaaS Services Detected
Mailjet Sophos

Leak Screenshot:

Leak Screenshot