Ransomfeed

CARD INFO

Dominio: infinox.com
Registrar: Cloudflare, Inc.
Motori AV recap
- Malevolo: 1
- Sospetto: 0
- Non rilevato: 31
- Innocuo: 62
Analisi Antivirus:

- Acronis: [harmless] clean
- 0xSI_f33d: [undetected] unrated
- Abusix: [harmless] clean
- ADMINUSLabs: [harmless] clean
- Axur: [undetected] unrated
- Criminal IP: [harmless] clean
- AILabs (MONITORAPP): [harmless] clean
- AlienVault: [harmless] clean
- alphaMountain.ai: [harmless] clean
- AlphaSOC: [undetected] unrated
- Antiy-AVL: [harmless] clean
- ArcSight Threat Intelligence: [undetected] unrated
- AutoShun: [undetected] unrated
- benkow.cc: [harmless] clean
- Bfore.Ai PreCrime: [undetected] unrated
- BitDefender: [harmless] clean
- Bkav: [undetected] unrated
- Blueliv: [harmless] clean
- Certego: [harmless] clean
- Chong Lua Dao: [harmless] clean
- CINS Army: [harmless] clean
- Cluster25: [undetected] unrated
- CRDF: [harmless] clean
- CSIS Security Group: [undetected] unrated
- Snort IP sample list: [harmless] clean
- CMC Threat Intelligence: [harmless] clean
- Cyan: [undetected] unrated
- Cyble: [harmless] clean
- CyRadar: [harmless] clean
- DNS8: [harmless] clean
- Dr.Web: [harmless] clean
- Ermes: [undetected] unrated
- ESET: [harmless] clean
- ESTsecurity: [harmless] clean
- EmergingThreats: [harmless] clean
- Emsisoft: [harmless] clean
- Forcepoint ThreatSeeker: [harmless] clean
- Fortinet: [harmless] clean
- G-Data: [harmless] clean
- GCP Abuse Intelligence: [undetected] unrated
- Google Safebrowsing: [harmless] clean
- GreenSnow: [harmless] clean
- Gridinsoft: [undetected] unrated
- Heimdal Security: [harmless] clean
- Hunt.io Intelligence: [undetected] unrated
- IPsum: [harmless] clean
- Juniper Networks: [harmless] clean
- Kaspersky: [harmless] clean
- Lionic: [harmless] clean
- Lumu: [undetected] unrated
- MalwarePatrol: [harmless] clean
- MalwareURL: [undetected] unrated
- Malwared: [harmless] clean
- Mimecast: [undetected] unrated
- Netcraft: [undetected] unrated
- OpenPhish: [harmless] clean
- Phishing Database: [harmless] clean
- PhishFort: [undetected] unrated
- PhishLabs: [undetected] unrated
- Phishtank: [harmless] clean
- PREBYTES: [harmless] clean
- PrecisionSec: [undetected] unrated
- Quick Heal: [harmless] clean
- Quttera: [harmless] clean
- SafeToOpen: [undetected] unrated
- Sansec eComscan: [undetected] unrated
- Scantitan: [harmless] clean
- SCUMWARE.org: [harmless] clean
- Seclookup: [harmless] clean
- SecureBrain: [undetected] unrated
- SOCRadar: [undetected] unrated
- Sophos: [harmless] clean
- Spam404: [harmless] clean
- StopForumSpam: [harmless] clean
- Sucuri SiteCheck: [harmless] clean
- ThreatHive: [harmless] clean
- Threatsourcing: [harmless] clean
- Trustwave: [undetected] unrated
- Underworld: [undetected] unrated
- URLhaus: [harmless] clean
- URLQuery: [harmless] clean
- Viettel Threat Intelligence: [harmless] clean
- VIPRE: [undetected] unrated
- VX Vault: [harmless] clean
- ViriBack: [harmless] clean
- Webroot: [malicious] malicious
- Yandex Safebrowsing: [harmless] clean
- ZeroCERT: [harmless] clean
- desenmascara.me: [harmless] clean
- malwares.com URL checker: [harmless] clean
- securolytics: [harmless] clean
- Xcitium Verdict Cloud: [undetected] unrated
- zvelo: [undetected] unrated
- ZeroFox: [undetected] unrated

Motori che NON classificano il dominio come harmless:

- 0xSI_f33d: undetected (unrated)
- Axur: undetected (unrated)
- AlphaSOC: undetected (unrated)
- ArcSight Threat Intelligence: undetected (unrated)
- AutoShun: undetected (unrated)
- Bfore.Ai PreCrime: undetected (unrated)
- Bkav: undetected (unrated)
- Cluster25: undetected (unrated)
- CSIS Security Group: undetected (unrated)
- Cyan: undetected (unrated)
- Ermes: undetected (unrated)
- GCP Abuse Intelligence: undetected (unrated)
- Gridinsoft: undetected (unrated)
- Hunt.io Intelligence: undetected (unrated)
- Lumu: undetected (unrated)
- MalwareURL: undetected (unrated)
- Mimecast: undetected (unrated)
- Netcraft: undetected (unrated)
- PhishFort: undetected (unrated)
- PhishLabs: undetected (unrated)
- PrecisionSec: undetected (unrated)
- SafeToOpen: undetected (unrated)
- Sansec eComscan: undetected (unrated)
- SecureBrain: undetected (unrated)
- SOCRadar: undetected (unrated)
- Trustwave: undetected (unrated)
- Underworld: undetected (unrated)
- VIPRE: undetected (unrated)
- Webroot: malicious (malicious)
- Xcitium Verdict Cloud: undetected (unrated)
- zvelo: undetected (unrated)
- ZeroFox: undetected (unrated)

Analisi DNS

- Tipo: MX, Valore: aspmx3.googlemail.com
- Tipo: CAA, Valore: digicert.com;
- Tipo: CAA, Valore: awstrust.com
- Tipo: TXT, Valore: google-site-verification=qoMMz380nR0bKO5gjwPB5MKT0-bUPEOiIFARhyUr2HQ
- Tipo: TXT, Valore: google-site-verification=j8v4UYg0iouTiP4501gTN78OfxV4ecH-TSGKy4ThH9c
- Tipo: MX, Valore: alt2.aspmx.l.google.com
- Tipo: TXT, Valore: apple-domain-verification=exgNoG8hC9nOiKmH
- Tipo: TXT, Valore: atlassian-domain-verification=0QEt5Oke5fIxy0EGpazTgDhC5DI0a1xW09AY91GoZnsT31abCDRdOoLVP1KLijON
- Tipo: NS, Valore: darl.ns.cloudflare.com
- Tipo: CAA, Valore: awstrust.com
- Tipo: CAA, Valore: pki.goog;
- Tipo: CAA, Valore: letsencrypt.org
- Tipo: TXT, Valore: zoho-verification=zb14908691.zmverify.zoho.com
- Tipo: MX, Valore: aspmx2.googlemail.com
- Tipo: MX, Valore: aspmx.l.google.com
- Tipo: CAA, Valore: pki.goog;
- Tipo: TXT, Valore: facebook-domain-verification=er0qxympkvilbtjnaq8ac99o7pk6yw
- Tipo: TXT, Valore: google-site-verification=gXEQ1xND-jxcJDHBEIaOhrnh0wAaRFew9SlwUou11Tw
- Tipo: TXT, Valore: SFMC-QvWNS6S4YG4ykYlXwccP4IZPhAlchYXBJTylAqzB
- Tipo: TXT, Valore: MS=ms52339873
- Tipo: CAA, Valore: letsencrypt.org
- Tipo: CAA, Valore: amazonaws.com
- Tipo: TXT, Valore: google-site-verification=uq6Ro-WIXCM-IZ_Jj4nRDpENwGnhDKO1OdQjjE8B8ys
- Tipo: CAA, Valore: comodoca.com
- Tipo: TXT, Valore: ZOOM_verify_Q9QvRNUpcOWMZ2ZlE6orJi
- Tipo: A, Valore: 172.64.149.254
- Tipo: CAA, Valore: amazon.com
- Tipo: TXT, Valore: google-site-verification=9uhdIvI6mbqEIFuFa4tk-rMsT-V1IcguIItUOI4HSKY
- Tipo: CAA, Valore: amazonaws.com
- Tipo: A, Valore: 104.18.38.2
- Tipo: SOA, Valore: darl.ns.cloudflare.com
- Tipo: CAA, Valore: amazon.com
- Tipo: CAA, Valore: amazontrust.com
- Tipo: TXT, Valore: MS=BE0BCF1A1675797ED7C5AC7E02DB45746ED5530B
- Tipo: CAA, Valore: ssl.com
- Tipo: TXT, Valore: 1password-site-verification=HADLTHO3BBAULJ6IPPPU32T6NU
- Tipo: AAAA, Valore: 2606:4700:4400::6812:2602
- Tipo: NS, Valore: poppy.ns.cloudflare.com
- Tipo: AAAA, Valore: 2606:4700:4400::ac40:95fe
- Tipo: CAA, Valore: comodoca.com
- Tipo: TXT, Valore: v=spf1 include:spf.mandrillapp.com include:spf.protection.outlook.com include:cust-spf.exacttarget.com include:_spf.google.com include:mktomail.com ~all
- Tipo: CAA, Valore: digicert.com;
- Tipo: CAA, Valore: amazontrust.com
- Tipo: MX, Valore: alt1.aspmx.l.google.com
- Tipo: CAA, Valore: ssl.com
- Tipo: TXT, Valore: slack-domain-verification=JZzgPW7boUACy9EH0JKSzRBulF1iiKgQxpFQWUrN

Certificato HTTPS

- Emesso da: E6
- Intestato a: infinox.com
- Valido dal: 2025-04-14 06:16:24
- Valido fino al: 2025-07-13 06:16:23
- Algoritmo firma: EC
- Versione: V3
- Serial number: 6f8a1dd56d9d7faac17dcedc88067d6ed13

LEAKS NOTI e MALWARE Raw data by HudsonRock
Summary
🧠 Dispositivi infetti: 2887
🌐 Utenti compromessi: 2885
🧑‍💼 Utenti aziendali compromessi: 2
🔑 Password aziendali esposte: 0
🔑 Password users esposte: 0
🧬 Stealer family e conteggio

RedLine: 1990
Lumma: 1898
StealC: 470
Raccoon: 426
Vidar: 132
UNKNOWN: 30
Mystic: 18
Azorult: 4
Taurus: 2
Ficker: 2

🏢 Utenze aziendali compromesse (link/conteggio)

https://ixnxt.infinox.com/login/to_login: 3

🔐 Utenze users compromesse

🛡️ Antivirus rilevati

Not Found: 1