Contact us Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo

UNOde50

www.unode50.com
Group Worldleaks
Discovered 2025-11-14
Est. attack date 2025-11-14
Country US

Description:

[AI generated] UNOde50 is a Spanish jewelry and accessory brand. Established in the late '90s, it initially created only 50 units of each design, hence its name which translates as "One of 50." The company is known for its bold and unique designs in each collection. Their products are handcrafted, ensuring individual uniqueness and quality. It experiences global success and availability because of its distinctive approach to modern jewelry and accessory design.
Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 185

Third Party Employee Credentials: 0

External Attack Surface: 57

Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse@tecnocratica.net
  • abuse@registrador.es
MX Records
  • unode50-com.mail.protection.outlook.com.
TXT Records
  • google-site-verification=ZcDMuHo1OHTyGT7yxcdh_vXMjzkPiRT97bcC2-G3ACw
  • google-site-verification=hAZUi9W6FWnbidAwHRdjXPR_TJJiNemR8vOo7DawIfo
  • google-site-verification=tQ-5eTwsLCrCo4sB5N3lXJv_QljyuIu1ugwJ88kBHuk
  • v=spf1 a mx include:spf.protection.outlook.com a:cph-unode50.customprofessionalhosting.com ip4:185.22.92.91 -all
  • MS=ms86372644
  • apple-domain-verification=X5oVorlZxjRj9D9J
  • atlassian-domain-verification=KlFfTSYQue84qhd0E69jC8vtWgcp7EjcxH9jmV3Mofy506q4VWmbsICPElYxdQEr
  • facebook-domain-verification=8qp657p481jqdadufpuwfc342msdxi
Cloud / SaaS Services Detected
Apple Atlassian Microsoft 365

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.