swanforlife.com
swanforlife.com
Group: qilin
Discovered by ransomware.live: 2025-08-25
Estimated attack date: 2025-08-18
Country:
Description:
SWAN, Mauritius – welcome to the dark side of the insurance business. The company is based in a country known for its money laundering and offshore account creation organizations. SWAN specializes in all types of insurance and advertises th ...
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 5
Compromised Users: 28
Third Party Employee Credentials: 5
External Attack Surface: 7
Infostealer Distribution
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse enom.com
MX Records
- swanforlife-com.mail.protection.outlook.com.
TXT Records
- globalsign-domain-verification=_eqBsZvA-8ExiCmcSwnq1E051CUWPRqLGJkSmwWDAD
- faxination=fen65387855
- MS=ms80862290
- jAGb1vdR9qBzbwoD2wQVImT1HpDKX6nv/5MR3hsvfgM=
- tpsKv1ILdzKux9X3Sgg+wIRa8Qpom7bxvamVzWn9jygx7qCk1oj0bbzoy9gZGp/oCU3BgX0yyexNKb8FUlSz+A==
- v=spf1 mx ip4:202.123.29.132 ip4:41.74.207.40 ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:139.185.2.112/28 ip4:216.131.131.240/28 ip4:103.28.42.0/24 ip4:146.88.28.0/24 include:_spf.firebasemail.com include:spf.protection.outlook.com include:spf.emailsignatu" "res365.com -all
- firebase=myswan-1497161299426
- atlassian-domain-verification=3/3rt5eGLU4wRK54Ey3ge7ypeDaqinvaz8jJ4zghvAb5RtacjsA9e4OTxgaGDkuC
Cloud / SaaS Services Detected
Atlassian
Microsoft 365
Leak Screenshot:
