Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo Serviceplan Group (Korea branch)

Group: Qilin

Discovered by ransomware.live: 2026-03-09

Estimated attack date: 2026-03-09

Country: KR

Description:

N/A



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain-abuse@internetx.com
MX Records
  • houseofcommunication-com01cb.mail.protection.outlook.com.
TXT Records
  • google-site-verification=OUuNBtoPBQzOAx3hIGVBNvvxj0XMN-kUfwY5OF5PUNI
  • jamf-site-verification=lA8KTdkuEaQ50RT2xjTCvg
  • anthropic-domain-verification-t1dv0m=oDd69CMimamH1bQAiWB7NmXeP
  • canva-site-verification=JfBaDmaeRjAcggO1LkZ8Jg
  • google-gws-recovery-domain-verification=62719307
  • adobe-idp-site-verification=fab44394bbea6b2aef5a92bcfbe0f4a9c0ece2d0ec9f85ece545672b4a573df5
  • cursor-domain-verification-737xtr=RZwdjCADRTnH9dE6Z1PIwMYZg
  • v=spf1 include:spf.protection.outlook.com -all
  • 5DBY3nKf+5OjiNd8KYscw38duFwOQ85ClGAP133VvYsLUsWRD+wIgK++7aDafyEKvN++/n+k9raFT2aNNfQCWg==
  • teamviewer-sso-verification=529a6e3108a6476aa3fad4d1fa43bad5
  • openai-domain-verification=dv-2El8zYVh0L46II26O8Jl9Lk7
  • zone-ownership-verification-c48a8cb58c32f7e374b653455b152d4db4cd7772bdc517dfe2de1e96c5e95a59
  • QNnzLwRkrSYVMb5lQxvHZ+RCgAf9uV6VFppBoiJosX0zWOjf8lQfRv4rwjXzKNX5Sozn4NlDNYydLujdlRDQ9Q==
  • google-site-verification=9kXZOjCue6Pi_IGbeBYWzzwPXqFJOKhRU76zy5Lx02M
  • atlassian-domain-verification=0puZDB56jfsSYkaFa02HiGDEepvlHSuzR4F1HevB0ioaxmYN5pKdVuR/6H4c5e44
  • asv=b90c20148f747504f123cce61f1476d1
  • box-domain-verification=e464d12cb5c87460deeadd46c029327857cb01d0b09b44225516c788a1601d9a
  • apple-domain-verification=BuvHKoo7S8G1a44P
  • miro-verification=be5b479ea49a8065244f93e8f03492d31b8cc78b
  • luma-ai-domain-verification-akcymq=N4Hv7ivxHoZOXquHYNF8fVOFs
Cloud / SaaS Services Detected
Adobe Apple Atlassian Box Miro Teamviewer JamF

Leak Screenshot:

Leak Screenshot