Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo Phoenix Systems

Group: Qilin

Discovered by ransomware.live: 2026-03-02

Estimated attack date: 2026-03-02

Description:

N/A



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse@godaddy.com
MX Records
  • phoenixsystems-tv.mail.eo.outlook.com.
TXT Records
  • zoho-verification=zb15708192.zmverify.zoho.com
  • v=spf1 ip4:104.47.66.10 ip4:64.0.146.125 ip4:51.4.72.0/24 ip4:51.5.72.0/24 ip4:51.5.80.0/27 ip4:64.0.146.124 ip4:51.4.80.0/27 ip4:40.92.0.0/15 ip4:149.72.0.0/16 ip4:50.31.32.0/19 ip4:198.21.0.0/21 ip4:52.100.0.0/14 ip4:104.47.0.0/17 ip4:167.89.0.0/17 ip4:" "40.107.0.0/16 ip4:104.47.59.138 ip4:198.58.102.78 ip4:216.36.42.0/26 ip4:198.2.128.0/18 ip4:148.105.8.0/21 ip4:168.245.0.0/17 ip4:168.245.30.126 include:ebizcharge.net ip4:209.239.233.0/24 ip4:64.0.146.0/24 ip4:209.220.191.0/24 include:spf.alarm.com inclu" "de:spf.zoho.com include:spf.protection.outlook.com ~all
  • google-site-verification=ihxdBYWn_XTXi2_dUo-9mV3oIEU9xO61sVau3_0sTWE
  • MS=4DE901D5F326B16D3F6B75E2DBA995414A2BC645
Cloud / SaaS Services Detected
Zoho Campaigns

Leak Screenshot:

Leak Screenshot