Loading...
CARD INFO

Dominio: dfamilk.com
Registrar: GoDaddy Corporate Domains, LLC
Motori AV recap
- Malevolo: 0
- Sospetto: 0
- Non rilevato: 30
- Innocuo: 64
Analisi Antivirus:
- Acronis: [harmless] clean
- 0xSI_f33d: [undetected] unrated
- Abusix: [harmless] clean
- ADMINUSLabs: [harmless] clean
- Axur: [undetected] unrated
- Criminal IP: [undetected] unrated
- AILabs (MONITORAPP): [harmless] clean
- AlienVault: [harmless] clean
- alphaMountain.ai: [harmless] clean
- AlphaSOC: [undetected] unrated
- Antiy-AVL: [harmless] clean
- ArcSight Threat Intelligence: [undetected] unrated
- AutoShun: [undetected] unrated
- benkow.cc: [harmless] clean
- Bfore.Ai PreCrime: [undetected] unrated
- BitDefender: [harmless] clean
- Bkav: [undetected] unrated
- Blueliv: [harmless] clean
- Certego: [harmless] clean
- Chong Lua Dao: [harmless] clean
- CINS Army: [harmless] clean
- Cluster25: [undetected] unrated
- CRDF: [harmless] clean
- CSIS Security Group: [undetected] unrated
- Snort IP sample list: [harmless] clean
- CMC Threat Intelligence: [harmless] clean
- Cyan: [undetected] unrated
- Cyble: [harmless] clean
- CyRadar: [harmless] clean
- DNS8: [harmless] clean
- Dr.Web: [harmless] clean
- Ermes: [undetected] unrated
- ESET: [harmless] clean
- ESTsecurity: [harmless] clean
- EmergingThreats: [harmless] clean
- Emsisoft: [harmless] clean
- Forcepoint ThreatSeeker: [harmless] clean
- Fortinet: [harmless] clean
- G-Data: [harmless] clean
- GCP Abuse Intelligence: [undetected] unrated
- Google Safebrowsing: [harmless] clean
- GreenSnow: [harmless] clean
- Gridinsoft: [undetected] unrated
- Heimdal Security: [harmless] clean
- Hunt.io Intelligence: [undetected] unrated
- IPsum: [harmless] clean
- Juniper Networks: [harmless] clean
- Kaspersky: [harmless] clean
- Lionic: [harmless] clean
- Lumu: [undetected] unrated
- MalwarePatrol: [harmless] clean
- MalwareURL: [undetected] unrated
- Malwared: [harmless] clean
- Mimecast: [undetected] unrated
- Netcraft: [harmless] clean
- OpenPhish: [harmless] clean
- Phishing Database: [harmless] clean
- PhishFort: [undetected] unrated
- PhishLabs: [undetected] unrated
- Phishtank: [harmless] clean
- PREBYTES: [harmless] clean
- PrecisionSec: [undetected] unrated
- Quick Heal: [harmless] clean
- Quttera: [harmless] clean
- SafeToOpen: [undetected] unrated
- Sansec eComscan: [undetected] unrated
- Scantitan: [harmless] clean
- SCUMWARE.org: [harmless] clean
- Seclookup: [harmless] clean
- SecureBrain: [undetected] unrated
- SOCRadar: [undetected] unrated
- Sophos: [harmless] clean
- Spam404: [harmless] clean
- StopForumSpam: [harmless] clean
- Sucuri SiteCheck: [harmless] clean
- ThreatHive: [harmless] clean
- Threatsourcing: [harmless] clean
- Trustwave: [harmless] clean
- Underworld: [undetected] unrated
- URLhaus: [harmless] clean
- URLQuery: [undetected] unrated
- Viettel Threat Intelligence: [harmless] clean
- VIPRE: [undetected] unrated
- VX Vault: [harmless] clean
- ViriBack: [harmless] clean
- Webroot: [harmless] clean
- Yandex Safebrowsing: [harmless] clean
- ZeroCERT: [harmless] clean
- desenmascara.me: [harmless] clean
- malwares.com URL checker: [harmless] clean
- securolytics: [harmless] clean
- Xcitium Verdict Cloud: [harmless] clean
- zvelo: [undetected] unrated
- ZeroFox: [undetected] unrated
Motori che NON classificano il dominio come harmless:
- 0xSI_f33d: undetected (unrated)
- Axur: undetected (unrated)
- Criminal IP: undetected (unrated)
- AlphaSOC: undetected (unrated)
- ArcSight Threat Intelligence: undetected (unrated)
- AutoShun: undetected (unrated)
- Bfore.Ai PreCrime: undetected (unrated)
- Bkav: undetected (unrated)
- Cluster25: undetected (unrated)
- CSIS Security Group: undetected (unrated)
- Cyan: undetected (unrated)
- Ermes: undetected (unrated)
- GCP Abuse Intelligence: undetected (unrated)
- Gridinsoft: undetected (unrated)
- Hunt.io Intelligence: undetected (unrated)
- Lumu: undetected (unrated)
- MalwareURL: undetected (unrated)
- Mimecast: undetected (unrated)
- PhishFort: undetected (unrated)
- PhishLabs: undetected (unrated)
- PrecisionSec: undetected (unrated)
- SafeToOpen: undetected (unrated)
- Sansec eComscan: undetected (unrated)
- SecureBrain: undetected (unrated)
- SOCRadar: undetected (unrated)
- Underworld: undetected (unrated)
- URLQuery: undetected (unrated)
- VIPRE: undetected (unrated)
- zvelo: undetected (unrated)
- ZeroFox: undetected (unrated)
Analisi DNS
- Tipo: TXT, Valore: v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
- Tipo: TXT, Valore: google-site-verification=luhACfqOMoBrW1PHMCN4DVqhlrWbMKWAAu7l5L5sVk0
- Tipo: MX, Valore: mxa-004c8e03.gslb.pphosted.com
- Tipo: MX, Valore: mxb-004c8e03.gslb.pphosted.com
- Tipo: TXT, Valore: nintex.63e42d6dea038560e5d8207a
- Tipo: A, Valore: 20.12.206.225
- Tipo: TXT, Valore: adobe-idp-site-verification=5811f0622c4d6580261b817b3a055ebea503e4bdc688fa74b5978f8e54f30f51
- Tipo: TXT, Valore: qxxs3wmk0x594g62274329x42jmxvg8x
- Tipo: NS, Valore: ns11.gcd-dns.com
- Tipo: TXT, Valore: _ijdt93oyaln6xw9nxrf9vcymar6bhii
- Tipo: TXT, Valore: y37xzcj033v6r12c8znr866rxflxzcfx
- Tipo: SOA, Valore: ns11.gcd-dns.com
- Tipo: TXT, Valore: atlassian-domain-verification=oA8sqNfQowapfXMLaJGCoEj1j4Hf570iHeg7y8SUZQE9Vx5/eoEM0O0uwl9JYigV
- Tipo: TXT, Valore: _dmarc.dfamilk.com to match v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
- Tipo: NS, Valore: ns12.gcd-dns.com
- Tipo: TXT, Valore: pexip-ms-tenant-domain-verification=58e6ecc4-2d87-44c7-a8cd-3f9e33016850
- Tipo: TXT, Valore: asv=d13c1e15a48b8c738a0583506428b028
- Tipo: TXT, Valore: box-domain-verification=6a54d30d41b70e261180f095b28811318cd490d8ebcbc54447031661c89621ad
- Tipo: TXT, Valore: j+bpNL/q5UCz8ZyuYgjN4GTCivfPmvacT9JQ9lgP6W1SfzERFgWhd2EeeN2VALLDGPBHyyARjPhIyDClpjTK4A==
- Tipo: TXT, Valore: pexip-ms-tenant-domain-verification=value1,58e6ecc4-2d87-44c7-a8cd-3f9e33016850
- Tipo: TXT, Valore: jamf-site-verification=uVqHs7yRYx0w12diffxMtA
Certificato HTTPS
- Emesso da: DigiCert Global G2 TLS RSA SHA256 2020 CA1
- Intestato a: *.dfamilk.com
- Valido dal: 2025-04-29 00:00:00
- Valido fino al: 2026-05-30 23:59:59
- Algoritmo firma: RSA
- Versione: V3
- Serial number: fb9b0db9e3c2c7fea7fbb511591be41
LEAKS NOTI e MALWARE Raw data by HudsonRock
Summary
🧠 Dispositivi infetti: 15
🌐 Utenti compromessi: 13
🧑‍💼 Utenti aziendali compromessi: 2
🔑 Password aziendali esposte: 2
🔑 Password users esposte: 15
🧬 Stealer family e conteggio
RedLine: 9
Lumma: 3
Generic Stealer: 1
Vidar: 1
Azorult: 1
🏢 Utenze aziendali compromesse (link/conteggio)
https://contentcenter.dfamilk.com: 1
https://desktop.dfamilk.com/vpn/index.html: 1
🔐 Utenze users compromesse
    https://sso.dfamilk.com/register: 9
    https://sso.dfamilk.com/login: 1
    https://brorders.dfamilk.com/Home/(S(hmga1rhqsxcodekjndu4ynfp)): 1
    http://weare.dfamilk.com/irj/portal: 1
    https://contentcenter.dfamilk.com: 1
    https://••••••.dfamilk.com/(•(••••••••••••••••••••••••))/•••••••/•••••••••: 1
    https://•••.dfamilk.com/••••••••••••: 1
🛡️ Antivirus rilevati
Windows Defender: 2

Questo script colleziona ogni rivendicazione criminale esattamente come esposta dalle fonti (modello "As Is"), in un database SQL per creare un feed permanente, che può anche essere seguito con tecnologia RSS.
Il motore è basato sul progetto ransomFeed, fork in GitHub.