CONFORAMA - HACKED AND MORE THEN 1TB DATA LEAKED!
conforama.fr
Discovered
2023-07-26
Est. attack date
2022-11-06
Country
Description:
Headquarters: 2 Rue Du Pont-neuf, Paris, Île-de-France, 75001, France Phone Number: +33 892010808 Website: www.conforama.fr Website: www.conforama.es Website: www.conforama.pt Revenue: $4 Billion
DNS Records:
The following DNS records were found for the victim's domain.
- admins@ordipat.fr
- noc@ordipat.fr
- mxa-0055e301.gslb.pphosted.com.
- mxb-0055e301.gslb.pphosted.com.
- v=spf1 include:_spf.conforama_fr._d.easydmarc.pro ~all
- _op6vpcz1adkn87qpsk810xm1tfbi6le
- _globalsign-domain-verification=RpTtPA5YoE9BQ1XN7PC3244NSjosICjidVzbmm9P7W
- facebook-domain-verification=mkaivjfai9ok8v6otq2g1o88n8aynl
- google-site-verification=sxIKQnLPC6A-Pu4Ktikui1CdJzR51pYcyRpqzmXykKw
- zscaler-verification-92581/48625118-11132025-pb201247
- atlassian-domain-verification=L1m5pnGoLaB2JDnywV8XZVqt94SyWCK0AxRHHrAD7BcxWwjPCJJXKODOTIihVyL3
- facebook-domain-verification=nwf1p147ltwano67u8m1rh7bx8hmxv
- atlassian-sending-domain-verification=3e577f97-9c90-4ffd-b616-84444c7ed0af
- mandrill_verify.pj-rTmtXdN4b4KePdJejUQ
- MS=ms88964492
- globalsign-domain-verification=e156cda4a711a777009543aff717f231
- _globalsign-domain-verification=pzedxZB3uejNYhrpJMmwSWF7ZbCgEHCGqLSIpEF4o6I=
- Dynatrace-site-verification=4c954764-3044-4126-b0a0-406a54d3ed38__komncgeu7ng2b9n7kcgc07h5se
- google-site-verification=SZEF37lnAiSKDaTTiBAC1DMRiy72JfBxOMbWvRVp9Z8
- spf2.0/mfrom mx ip4:83.206.208.128/25 ip4:81.252.92.0/23 ip4:86.64.210.0/23 ip4:195.62.74.0/23 ip4:91.121.84.43 ip4:94.125.164.60/32 include:mirakl.conforama.fr include:spf.mirakl.net ~all
- adobe-idp-site-verification=c5ead564062ee3930c1ec8636bec533a54af710b46dab64fdeaa8bf89de57005
Cloud / SaaS Services Detected
Adobe
Atlassian
Mailchimp
Microsoft 365
Zscaler
Proofpoint
Leak Screenshot:
Legal Disclaimer:
Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
This platform indexes only publicly visible information posted by ransomware operators and
open web sources without accessing or obtaining the underlying stolen content.
The service is provided to support public awareness, legitimate research, and cyber-resilience.
No stolen personal or confidential data is collected or distributed via this site.