Ransomfeed

CARD INFO

Dominio: malaysiaairports.com.my
Registrar: First Online (M) Sdn Bhd
Motori AV recap
- Malevolo: 0
- Sospetto: 1
- Non rilevato: 30
- Innocuo: 63
Analisi Antivirus:

- Acronis: [harmless] clean
- 0xSI_f33d: [undetected] unrated
- Abusix: [harmless] clean
- ADMINUSLabs: [harmless] clean
- Axur: [undetected] unrated
- Criminal IP: [harmless] clean
- AILabs (MONITORAPP): [harmless] clean
- AlienVault: [harmless] clean
- alphaMountain.ai: [harmless] clean
- AlphaSOC: [undetected] unrated
- Antiy-AVL: [harmless] clean
- ArcSight Threat Intelligence: [undetected] unrated
- AutoShun: [undetected] unrated
- benkow.cc: [harmless] clean
- Bfore.Ai PreCrime: [undetected] unrated
- BitDefender: [harmless] clean
- Bkav: [undetected] unrated
- Blueliv: [harmless] clean
- Certego: [suspicious] suspicious
- Chong Lua Dao: [harmless] clean
- CINS Army: [harmless] clean
- Cluster25: [undetected] unrated
- CRDF: [harmless] clean
- CSIS Security Group: [undetected] unrated
- Snort IP sample list: [harmless] clean
- CMC Threat Intelligence: [harmless] clean
- Cyan: [undetected] unrated
- Cyble: [harmless] clean
- CyRadar: [harmless] clean
- DNS8: [harmless] clean
- Dr.Web: [harmless] clean
- Ermes: [undetected] unrated
- ESET: [harmless] clean
- ESTsecurity: [harmless] clean
- EmergingThreats: [harmless] clean
- Emsisoft: [harmless] clean
- Forcepoint ThreatSeeker: [harmless] clean
- Fortinet: [harmless] clean
- G-Data: [harmless] clean
- GCP Abuse Intelligence: [undetected] unrated
- Google Safebrowsing: [harmless] clean
- GreenSnow: [harmless] clean
- Gridinsoft: [undetected] unrated
- Heimdal Security: [harmless] clean
- Hunt.io Intelligence: [undetected] unrated
- IPsum: [harmless] clean
- Juniper Networks: [harmless] clean
- Kaspersky: [harmless] clean
- Lionic: [harmless] clean
- Lumu: [undetected] unrated
- MalwarePatrol: [harmless] clean
- MalwareURL: [undetected] unrated
- Malwared: [harmless] clean
- Mimecast: [undetected] unrated
- Netcraft: [undetected] unrated
- OpenPhish: [harmless] clean
- Phishing Database: [harmless] clean
- PhishFort: [undetected] unrated
- PhishLabs: [undetected] unrated
- Phishtank: [harmless] clean
- PREBYTES: [harmless] clean
- PrecisionSec: [undetected] unrated
- Quick Heal: [harmless] clean
- Quttera: [harmless] clean
- SafeToOpen: [undetected] unrated
- Sansec eComscan: [undetected] unrated
- Scantitan: [harmless] clean
- SCUMWARE.org: [harmless] clean
- Seclookup: [harmless] clean
- SecureBrain: [undetected] unrated
- SOCRadar: [harmless] clean
- Sophos: [harmless] clean
- Spam404: [harmless] clean
- StopForumSpam: [harmless] clean
- Sucuri SiteCheck: [harmless] clean
- ThreatHive: [harmless] clean
- Threatsourcing: [harmless] clean
- Trustwave: [harmless] clean
- Underworld: [undetected] unrated
- URLhaus: [harmless] clean
- URLQuery: [undetected] unrated
- Viettel Threat Intelligence: [harmless] clean
- VIPRE: [undetected] unrated
- VX Vault: [harmless] clean
- ViriBack: [harmless] clean
- Webroot: [harmless] clean
- Yandex Safebrowsing: [harmless] clean
- ZeroCERT: [harmless] clean
- desenmascara.me: [harmless] clean
- malwares.com URL checker: [harmless] clean
- securolytics: [harmless] clean
- Xcitium Verdict Cloud: [undetected] unrated
- zvelo: [undetected] unrated
- ZeroFox: [undetected] unrated

Motori che NON classificano il dominio come harmless:

- 0xSI_f33d: undetected (unrated)
- Axur: undetected (unrated)
- AlphaSOC: undetected (unrated)
- ArcSight Threat Intelligence: undetected (unrated)
- AutoShun: undetected (unrated)
- Bfore.Ai PreCrime: undetected (unrated)
- Bkav: undetected (unrated)
- Certego: suspicious (suspicious)
- Cluster25: undetected (unrated)
- CSIS Security Group: undetected (unrated)
- Cyan: undetected (unrated)
- Ermes: undetected (unrated)
- GCP Abuse Intelligence: undetected (unrated)
- Gridinsoft: undetected (unrated)
- Hunt.io Intelligence: undetected (unrated)
- Lumu: undetected (unrated)
- MalwareURL: undetected (unrated)
- Mimecast: undetected (unrated)
- Netcraft: undetected (unrated)
- PhishFort: undetected (unrated)
- PhishLabs: undetected (unrated)
- PrecisionSec: undetected (unrated)
- SafeToOpen: undetected (unrated)
- Sansec eComscan: undetected (unrated)
- SecureBrain: undetected (unrated)
- Underworld: undetected (unrated)
- URLQuery: undetected (unrated)
- VIPRE: undetected (unrated)
- Xcitium Verdict Cloud: undetected (unrated)
- zvelo: undetected (unrated)
- ZeroFox: undetected (unrated)

Analisi DNS

- Tipo: MX, Valore: alt1.aspmx.l.google.com
- Tipo: MX, Valore: alt2.aspmx.l.google.com
- Tipo: TXT, Valore: MS=ms55950863
- Tipo: NS, Valore: kliagate.malaysiaairports.com.my
- Tipo: TXT, Valore: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DRyWFEsDRpXbRybOtnagXFjz6WvYlsozDgyNj4CezgVsflqqdf845E6KFA+BOpc7Pl2GrcLH+JRanqNQziUJ0suSDCmKbo39vXyIbqKIFWfHUMtDBgs/vstxeQ15ityYMKi1fY3BZ+Gvts6ColWj6VOwN1HEh50L1G12dmb3QnnNvcrwAQ5AW9i70S/
- Tipo: TXT, Valore: successfactors-site-verification=MWY0NDgyYmZkNWQzMTljMGQ0ZjRhOGI0NzNhYzdlZjlhNmVjNDFkY2RlMWRmMDM0NzA4ZDI3ODUzYjM0MzE4MA==
- Tipo: TXT, Valore: v=spf1 +a +mx ip4:101.78.24.9 ip4:101.78.24.16 ip4:101.78.20.242 ip4:219.93.7.2 ip4:219.93.7.3 ip4:219.93.7.5 ip4:219.93.7.34 ip4:219.93.7.35 ip4:121.121.255.130 include:spf.protection.outlook.com include:_spf.google.com include:_spf-dc10.sapsf.com ~
- Tipo: TXT, Valore: zoho-verification=zb70838450.zmverify.zoho.com
- Tipo: A, Valore: 52.253.83.103
- Tipo: MX, Valore: alt4.aspmx.l.google.com
- Tipo: TXT, Valore: google-site-verification=CFfooCMyB-8j8rRHvoBRYt_vPxYKcwXYd4mqtlS0G8k
- Tipo: MX, Valore: aspmx.l.google.com
- Tipo: NS, Valore: kliagw2.malaysiaairports.com.my
- Tipo: TXT, Valore: google-site-verification=1DDyQWpwkzc5gZ7dkPKowc8-8sF_uFMVY74bL82Pjm8
- Tipo: SOA, Valore: kliagw2.malaysiaairports.com.my
- Tipo: MX, Valore: alt3.aspmx.l.google.com

Certificato HTTPS

- Emesso da: DigiCert Global G2 TLS RSA SHA256 2020 CA1
- Intestato a: *.malaysiaairports.com.my
- Valido dal: 2024-11-07 00:00:00
- Valido fino al: 2025-12-02 23:59:59
- Algoritmo firma: RSA
- Versione: V3
- Serial number: ed37af4f5bf92026dedf4ec96bf81a5

LEAKS NOTI e MALWARE Raw data by HudsonRock
Summary
🧠 Dispositivi infetti: 412
🌐 Utenti compromessi: 280
🧑‍💼 Utenti aziendali compromessi: 132
🔑 Password aziendali esposte: 355
🔑 Password users esposte: 668
🧬 Stealer family e conteggio

RedLine: 286
Generic Stealer: 100
Lumma: 152
Raccoon: 66
StealC: 44
Vidar: 32
Azorult: 22
UNKNOWN: 12

🏢 Utenze aziendali compromesse (link/conteggio)

https://fs.malaysiaairports.com.my/adfs/ls: 115
https://fs.malaysiaairports.com.my/adfs/ls/: 67
https://fs.malaysiaairports.com.my: 57
https://fs.malaysiaairports.com.my/: 16
https://itdapps.malaysiaairports.com.my: 16
https://••.malaysiaairports.com.my/••••/••/••••••••••••••••••.••••: 15
https://••.malaysiaairports.com.my/••••/••/••••••••••••••••••.••••: 14
https://••••.malaysiaairports.com.my/••: 11
https://•••••••.malaysiaairports.com.my/: 10
https://•••••••.malaysiaairports.com.my/••/••••••/•••••.••••: 8
https://•••••.malaysiaairports.com.my/•••••/•••••/••-••/•••••.••••: 7
https://•••••••.malaysiaairports.com.my: 4
https://•••.malaysiaairports.com.my/••••••-••••••••: 4
https://••••.malaysiaairports.com.my/•••••/•••••/•••••/••••••_••••••••.••••: 4
https://•••••••.malaysiaairports.com.my/••/••••••/•••••.••••: 3
https://••••.malaysiaairports.com.my/••/: 2
https://•••.malaysiaairports.com.my/•••••/•••••-••••••••/••••/••••••••••••••••••••••••••••••••••••••••: 1
https://•••.malaysiaairports.com.my/•••••/•••••: 1
https://•••.malaysiaairports.com.my/••••/••••••: 1
https://••••••.malaysiaairports.com.my/+•••••+/•••••.••••: 1
https://•••••••.malaysiaairports.com.my/•••••.•••: 1
http://••••••••.malaysiaairports.com.my/•••••.••••: 1

🔐 Utenze users compromesse

🛡️ Antivirus rilevati

Disabled: 1
Kaspersky Free: 1
Not Found: 41
Windows Defender: 20
Reason Cybersecurity: 2
McAfee Firewall: 2
Avast Antivirus: 1
McAfee Anti-Virus and Anti-Spyware: 1
McAfee VirusScan: 1
Windows Defender [ON]: 1
360 Total Security: 2
Kaspersky Anti-Virus: 1
Norton Security: 1
Kaspersky Total Security: 1
Advanced SystemCare Ultimate: 1
Panda Endpoint Protection: 1