WELLBE.COM
WELLBE.COM
Group: clop
Discovered by ransomware.live: 2023-03-16
Estimated attack date: 2023-03-16
Description:
403 Forbidden
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse godaddy.com
MX Records
- us-smtp-inbound-2.mimecast.com.
- us-smtp-inbound-1.mimecast.com.
TXT Records
- smartsheet-site-validation=mFSTD9B6MbRxqkEiph765FBaXhz3uEDX
- apple-domain-verification=uYoS8yDQo56I5r5P
- google-site-verification=mKddpcDL2Bjk7Mkd3vib7fBP6EO6is5j2RrblTaDBAk
- ms-domain-verification=87d7f00b-f300-4199-969c-217470f34df2
- v=spf1 a:dispatch-us.ppe-hosted.com ip4:141.193.213.10 ip4:141.193.213.11 include:us._netblocks.mimecast.com include:_spf.google.com include:emailus.freshservice.com ~all
- 0ed1fe018ab55b4351d84e452ca9b8873f244cb8fb
- 35E9BA8152
- google-site-verification=26mKTjcY9PANpZ3sTyvUL_IoaaQ2q733Y15e74dP3ig
- google-site-verification=J3vKa61waep59B_bLArxIZHuLGkdDDkOQbaj1unYG1M
- knowbe4-site-verification=df7c5acd8ddb6602c7cba738f69081be
- MS=ms47408782
- ppe-d6df590a88ce1d48a5cb0493d8385e3edd067f2a
Cloud / SaaS Services Detected
Apple
Microsoft 365
KnowBe4
Mimecast
Proofpoint Essentials
Leak Screenshot:
