Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Ketel Thorstenson

www.ktllp.com

Group Qilin
Discovered 2025-11-06 00:00 UTC
Est. attack date 2025-11-06
Country US
Sector
Not Found

Description:

N/A

Exposure Report
by ParanoidLab
443
Passwords
10 critical
0
Cookies
0 critical
Last queried 2026-10-26 13:53 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • ktllp-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • bkt8ol1iuio3kfe4i04eh2e282
  • duo_sso_verification=cRm8m3QyxflNXoTkH52f8mAu8aTay3svvFngadG8C07zVb9ZhjuYAEFIJYYq24Of
  • mandrill_verify.O_feuYts1FYp1cKdyArAhQ
  • mlosgl87ilnhjkgku2bl3678kt
  • v=spf1 a include:spf.us.exclaimer.net ip4:198.37.147.129 ip4:167.68.16.96 ip4:208.117.102.114 ip4:167.68.17.96 ip4:167.89.13.58 include:spf.protection.outlook.com include:spf.myconnectwise.net include:spf.mandrillapp.com include:ktllp-com.spf.smtp25.com i" "p4:167.68.0.1/16 include:jsmtp.net -all
  • v=verifydomain MS=4978126
  • 2j14730d5hoo7aqp2arhv9ij87
  • 9ruofg2tvceps2dgvbl0oc1dcl
  • a2e0f72d-7bc8-43de-ac1b-4f44c2cf57f2
Cloud / SaaS Services Detected
Cisco Duo Mailchimp Mandrill Microsoft 365

Leak Screenshot:

Leak Screenshot

Other recent victims