Safti First
Safti First
Group: akira
Discovered by ransomware.live: 2025-08-11
Estimated attack date: 2025-08-11
Country:
Description:
In summer 2025 our team managed to crack IT defenses of a large number of companies. Data of some of them hasn't been leaked, so we will just list company names.
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- registrar-abuse cloudflare.com
MX Records
- mx1-us1.ppe-hosted.com.
- mx2-us1.ppe-hosted.com.
TXT Records
- 0vp9lh8d7q7cmqd1y1qkn6jwr684v0m6
- 3ZK8RMTLKGJY0FU95S8P67ZDCW2QF4GNMPSZEAVH
- MS=FC997AA78868F3D82441A6AD4840F48A0E5E7391
- MS=ms17264292
- QMRXP2NQR7GNWM0SAK545BVMSCTJXYEFJUK933DK
- ZOOM_verify_G93uyT7KT_ehEQedQ8YIow
- _eivnikb72rhz7jkqive5pr6clqhvf3a
- apple-domain-verification=k3xaMfGt9EYvh15P
- duo_sso_verification=juN1sCPFuT0bw5fkdVXkPRelivWa3ZXMI7belnhNxBLOQmhe9rlsKHBEo14iEvwj
- g8p6nh46j0wp13t0cxz0ngcy9fskzpqt
- google-site-verification=tqYaLdlkgChJ3u81NsscknS8XXBAzm4dHa_VEBZb5Zw
- v=spf1 ip4:50.31.59.3 ip4:167.89.12.138 ip4:167.89.17.173 ip4:12.219.156.121 ip4:12.219.156.123 ip4:12.219.156.117 ip4:174.138.53.208 ip4:104.131.72.225 ip4:104.131.45.46 ip4:166.78.201.90 include:_spf.google.com include:bectran.com include:bectran.net a:" "dispatch-us.ppe-hosted.com a:dispatch1-us1.ppe-hosted.com mx -all
- 0fe782c7a342f387fa2ae441defca517
Cloud / SaaS Services Detected
Apple
Microsoft 365
Cisco Duo
Proofpoint Essentials
Zoom