The Reddit Files
The Reddit Files
Group: alphv
Discovered by ransomware.live: 2023-07-26
Estimated attack date: 2023-06-17
Description:
Reddit is an American social news aggregation, content rating, and discussion website. Registered users submit content to the site such as links, text posts, images, and videos, which are then voted up or down by other members. Posts are organized by subject into user-created boards called "communities" or "subreddits".
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abusecomplaints markmonitor.com
- whoisrequest markmonitor.com
MX Records
- aspmx.l.google.com.
- aspmx2.googlemail.com.
- aspmx3.googlemail.com.
- alt1.aspmx.l.google.com.
- alt2.aspmx.l.google.com.
TXT Records
- v=spf1 include:amazonses.com include:_spf.google.com include:19922862.spf01.hubspotemail.net include:reddit.deliver.highspot.com include:_spf.salesforce.com include:mail.zendesk.com ip4:52.50.24.208 ~all
- 614ac4be-8664-4cea-8e29-f84d08ad875c
- stripe-verification=80aa7e2c9775fee2653f61b04b46da6fd227b56fecd9499e5f63cd0dcf563984
- box-domain-verification=95c33f4ee4b11d8827190dbc5371ca7df25b961019116e5565ce4aa36de9be3a
- google-site-verification=0uv13-wxlHK8FFKaUpgzyrVmL1YdNYW6v3PupLdw3JI
- MS=ms71041902
- docusign=6ba0c5a9-5a5e-41f8-a7c8-8b4c6e35c10c
- jamf-site-verification=EGK11tNR4hezQg0jZaIDpA
- twilio-domain-verification=5e37855d7c9445e967b31c5e0371ebb5
- atlassian-domain-verification=aGWDxGvt+oY3p7qTWt5v2uJDVJkoJAeHxwGqKmGQLMEsUXUJJe/Pm/k+GGNPpn6M
- a5897185-49e1-4181-9065-51bd24737466
- apple-domain-verification=qC3rSSKrh10DoMI7
- jetbrains-domain-verification=bjn7o9fxbduga0omhaepeewtx
- google-site-verification=zZHozYbAJmSLOMG4OjQFoHiVqkxtdgvyBzsE7wUGFiw
- atlassian-domain-verification=vBaV6PXyyu4OAPLiQFbxFMCboSTjoR/qxKJ2OlpI46ZEpZL/FVTIfMlgoM5Hy9eY
- onetrust-domain-verification=6b98ba3dd087405399bbf45b6cbdcd37
- postman-domain-verification=ad4c89daaf83d06f70cb6e8737cb323b039aeaae9e0e288c75081b0a715812a2d30e7c31402da867c70287ad8216da42074ffe7b4fcfcbf86f9316301329308f
- stripe-verification=9bd70dd1884421b47f596fea301e14838c9825cdba5b209990968fdc6f8010c7
- google-site-verification=oh_YJE560y0e6FHP1RT7NIjyTlBhACNMvD2EgSss0sc
Cloud / SaaS Services Detected
Apple
Atlassian
Amazon SES/WorkMail
Box
HubSpot
Microsoft 365
Salesforce
Stripe
Twilio
Zendesk
JamF
OneTrust
DocuSign
Leak Screenshot:
