Ransomfeed

CARD INFO

Dominio: scania.com
Registrar: CSC CORPORATE DOMAINS, INC.
Motori AV recap
- Malevolo: 0
- Sospetto: 0
- Non rilevato: 29
- Innocuo: 65
Analisi Antivirus:

- Acronis: [harmless] clean
- 0xSI_f33d: [undetected] unrated
- Abusix: [harmless] clean
- ADMINUSLabs: [harmless] clean
- Axur: [undetected] unrated
- Criminal IP: [harmless] clean
- AILabs (MONITORAPP): [harmless] clean
- AlienVault: [harmless] clean
- alphaMountain.ai: [harmless] clean
- AlphaSOC: [undetected] unrated
- Antiy-AVL: [harmless] clean
- ArcSight Threat Intelligence: [undetected] unrated
- AutoShun: [undetected] unrated
- benkow.cc: [harmless] clean
- Bfore.Ai PreCrime: [undetected] unrated
- BitDefender: [harmless] clean
- Bkav: [undetected] unrated
- Blueliv: [harmless] clean
- Certego: [harmless] clean
- Chong Lua Dao: [harmless] clean
- CINS Army: [harmless] clean
- Cluster25: [undetected] unrated
- CRDF: [harmless] clean
- CSIS Security Group: [undetected] unrated
- Snort IP sample list: [harmless] clean
- CMC Threat Intelligence: [harmless] clean
- Cyan: [undetected] unrated
- Cyble: [harmless] clean
- CyRadar: [harmless] clean
- DNS8: [harmless] clean
- Dr.Web: [harmless] clean
- Ermes: [undetected] unrated
- ESET: [harmless] clean
- ESTsecurity: [harmless] clean
- EmergingThreats: [harmless] clean
- Emsisoft: [harmless] clean
- Forcepoint ThreatSeeker: [harmless] clean
- Fortinet: [harmless] clean
- G-Data: [harmless] clean
- GCP Abuse Intelligence: [undetected] unrated
- Google Safebrowsing: [harmless] clean
- GreenSnow: [harmless] clean
- Gridinsoft: [undetected] unrated
- Heimdal Security: [harmless] clean
- Hunt.io Intelligence: [undetected] unrated
- IPsum: [harmless] clean
- Juniper Networks: [harmless] clean
- Kaspersky: [harmless] clean
- Lionic: [harmless] clean
- Lumu: [undetected] unrated
- MalwarePatrol: [harmless] clean
- MalwareURL: [undetected] unrated
- Malwared: [harmless] clean
- Mimecast: [undetected] unrated
- Netcraft: [undetected] unrated
- OpenPhish: [harmless] clean
- Phishing Database: [harmless] clean
- PhishFort: [undetected] unrated
- PhishLabs: [undetected] unrated
- Phishtank: [harmless] clean
- PREBYTES: [harmless] clean
- PrecisionSec: [undetected] unrated
- Quick Heal: [harmless] clean
- Quttera: [harmless] clean
- SafeToOpen: [undetected] unrated
- Sansec eComscan: [undetected] unrated
- Scantitan: [harmless] clean
- SCUMWARE.org: [harmless] clean
- Seclookup: [harmless] clean
- SecureBrain: [undetected] unrated
- SOCRadar: [harmless] clean
- Sophos: [harmless] clean
- Spam404: [harmless] clean
- StopForumSpam: [harmless] clean
- Sucuri SiteCheck: [harmless] clean
- ThreatHive: [harmless] clean
- Threatsourcing: [harmless] clean
- Trustwave: [harmless] clean
- Underworld: [undetected] unrated
- URLhaus: [harmless] clean
- URLQuery: [undetected] unrated
- Viettel Threat Intelligence: [harmless] clean
- VIPRE: [undetected] unrated
- VX Vault: [harmless] clean
- ViriBack: [harmless] clean
- Webroot: [harmless] clean
- Yandex Safebrowsing: [harmless] clean
- ZeroCERT: [harmless] clean
- desenmascara.me: [harmless] clean
- malwares.com URL checker: [harmless] clean
- securolytics: [harmless] clean
- Xcitium Verdict Cloud: [harmless] clean
- zvelo: [undetected] unrated
- ZeroFox: [undetected] unrated

Motori che NON classificano il dominio come harmless:

- 0xSI_f33d: undetected (unrated)
- Axur: undetected (unrated)
- AlphaSOC: undetected (unrated)
- ArcSight Threat Intelligence: undetected (unrated)
- AutoShun: undetected (unrated)
- Bfore.Ai PreCrime: undetected (unrated)
- Bkav: undetected (unrated)
- Cluster25: undetected (unrated)
- CSIS Security Group: undetected (unrated)
- Cyan: undetected (unrated)
- Ermes: undetected (unrated)
- GCP Abuse Intelligence: undetected (unrated)
- Gridinsoft: undetected (unrated)
- Hunt.io Intelligence: undetected (unrated)
- Lumu: undetected (unrated)
- MalwareURL: undetected (unrated)
- Mimecast: undetected (unrated)
- Netcraft: undetected (unrated)
- PhishFort: undetected (unrated)
- PhishLabs: undetected (unrated)
- PrecisionSec: undetected (unrated)
- SafeToOpen: undetected (unrated)
- Sansec eComscan: undetected (unrated)
- SecureBrain: undetected (unrated)
- Underworld: undetected (unrated)
- URLQuery: undetected (unrated)
- VIPRE: undetected (unrated)
- zvelo: undetected (unrated)
- ZeroFox: undetected (unrated)

Analisi DNS

- Tipo: MX, Valore: cluster2.eu.messagelabs.com
- Tipo: TXT, Valore: MS=ms77612244
- Tipo: TXT, Valore: openai-domain-verification=dv-U0ywfhqEsTvaLIRQXSqnS3GC
- Tipo: TXT, Valore: 51/onVAIsN5gb3YCbaNZI6fU1QO/zB+28Y9sN/VTbXGz4HHCiLg98JoqUVHpo485cbLSLNJmVP7AdV+P0vfUFw==
- Tipo: SOA, Valore: ns4.scania.com
- Tipo: TXT, Valore: atlassian-domain-verification=YL3HRreMhgrmGFdBdH/GWEqtj7DNYs6CI2N/w6ixRir2N9dXYcIWVxb8E/moLTlp
- Tipo: NS, Valore: ns8.scania.com
- Tipo: TXT, Valore: modusign=01GJYF0F3V5C2Q5RTXD9XK98PP
- Tipo: NS, Valore: ns4.scania.com
- Tipo: MX, Valore: cluster2a.eu.messagelabs.com
- Tipo: A, Valore: 151.101.67.10
- Tipo: A, Valore: 151.101.3.10
- Tipo: TXT, Valore: o5NqOzUyPzHA7eksD+MsD/cIiuOz+jCAA8V+h5yXVBM=
- Tipo: TXT, Valore: v=spf1 ip4:20.76.228.226 include:spf.messagelabs.com include:aspmx.pardot.com include:servers.mcsv.net include:spf.protection.outlook.com ~all
- Tipo: TXT, Valore: docker-verification=6d925cfa-fbdd-4622-87d3-6b3dbefcc36f
- Tipo: TXT, Valore: _globalsign-domain-verification=ryREIdjfeM3vDvOgamIFeorT3dkYhiyvYlRH0-fDTJ
- Tipo: TXT, Valore: _globalsign-domain-verification=IciSKoYhci2sYm5g6b-ddeohiloIEoSubMpoV1G8Je
- Tipo: NS, Valore: ns7.scania.com
- Tipo: NS, Valore: spdns3.cscdns.net
- Tipo: TXT, Valore: flexera-domain-verification-xxicofqsvgsefeph
- Tipo: A, Valore: 151.101.195.10
- Tipo: A, Valore: 151.101.131.10
- Tipo: TXT, Valore: 924e01d0-6dab-499d-902e-ceecf3a54072
- Tipo: TXT, Valore: docusign=b07fa50d-1c4e-49fe-b99b-708abf3c4642
- Tipo: TXT, Valore: cJdPVsjlKOhYqnV69F8V7LWoq8+uKQ4Aj1j/MhSOL9c=
- Tipo: TXT, Valore: adobe-idp-site-verification=868f105e2d05671c7283e198c2663c0b6ae13eef5096e3c3f348dbcea756b758

Certificato HTTPS

- Emesso da: R10
- Intestato a: scania.com
- Valido dal: 2025-07-15 12:17:59
- Valido fino al: 2025-10-13 12:17:58
- Algoritmo firma: RSA
- Versione: V3
- Serial number: 5004887cade98c9401c9d9af20e82717dff

LEAKS NOTI e MALWARE Raw data by HudsonRock
Summary
🧠 Dispositivi infetti: 1733
🌐 Utenti compromessi: 1617
🧑‍💼 Utenti aziendali compromessi: 116
🔑 Password aziendali esposte: 110
🔑 Password users esposte: 2020
🧬 Stealer family e conteggio

RedLine: 721
Lumma: 315
Generic Stealer: 297
Raccoon: 198
StealC: 74
Vidar: 53
Azorult: 31
UNKNOWN: 17
DarkCrystal: 2
Mystic: 2
CRYPTBOT: 1
Atomic: 1
Taurus: 1
KPOT: 1
Predator: 1

🏢 Utenze aziendali compromesse (link/conteggio)

https://stssas.scania.com: 37
https://stssas.scania.com/adfs/ls: 28
https://fmpnextgen.scania.com: 24
https://primus.scania.com/Citrix/PrimusWeb: 20
https://configurator.scania.com/index.aspx: 18
https://•••••••••.scania.com/•••/•••••.••••: 16
https://••••••••••.scania.com/•••/••••/•••••.••••: 16
https://••••••.scania.com/••••/••/: 14
http://•••••••.••.scania.com/••••••/•••••••••/•••••••/•••••.••••: 13
https://••••••.scania.com/: 10
https://••••••••••.scania.com/•••/••••.•••: 10
http://••••-•••.scania.com/•••••.•••: 10
https://••••.scania.com/•••••.•••: 8
https://•••••••.scania.com/•••/••••/•••••.••••: 7
https://••••-••••.scania.com/••••••••••••••••••••••/•••••.••: 6
https://••••-••••.scania.com/••••••••••••••••••••••/•••••.••;••••••••••=••••••••••••••••••••••••••••••••: 6
https://•••••••••.scania.com/•••••: 6
https://••••••••••-•••.scania.com/: 6
https://••••••.••.scania.com/•••••/••••_••: 6
https://••••.scania.com/••••••/•••••••••.••••: 6
https://•••••••.••••••••.••.scania.com/•••: 6
https://•••••••••••.scania.com:••••/••••••/•••••••••••.••••••: 4
•••://•••-••••••••••••••.scania.com: 4
https://••••••••••.scania.com: 4
https://•••••••••.scania.com/••••-••/••••/•••_•••••••/•••••••.•••: 3
https://•••••••••••.scania.com:••••/••••••/•••••••••••.••••••: 3
https://••••••.scania.com/••••••/•••••••••/••••••••••••/••••••••••••: 3
http://••••••••••.••••••.•••.scania.com:••••: 3
https://•••••••••••.scania.com:••••/••••••/•••••••••••.••••••: 2
https://•••••••••.scania.com/•••••/••••••••••/•••••••.••••: 2
https://••••.scania.com/••••••/•••••••••.••••: 2
https://•••.scania.com/•••/••••/•••••••••••••.•••: 2
https://•••.scania.com: 2
http://•••.scania.com/: 1
https://•••••••••••.scania.com/: 1
https://•••••••••.scania.com/••/••••/••••••••••••••••.••: 1
https://•••••••.scania.com: 1
https://•••••••.scania.com/•••••••/••••••/•••••••••••/•••••••••••/•••/••/•••/•••••%••••%•••••%••••••%••••••••/••••%•••.•: 1
https://•••.scania.com/•••••••••••••••••/•••••.••••: 1
https://••••••••••••••••••.scania.com: 1
https://••••.scania.com: 1
https://••••.scania.com/•••••••••/••••••••••••.••••••: 1
https://•••••••.scania.com/••••/••••••/••••/••••••••/••••••-•••••••/••••: 1
https://•••.scania.com/•••••••••••••/••••••••: 1
https://••••••.scania.com/•••••••••••••/••••••••: 1
https://•••-•••-••••.scania.com/••••••/••••••••••••.••••••: 1
https://•••••••.scania.com/••••/••••••/••••/•••••-•••••••/••••••••••••: 1
https://•••••-•••••-•••••.scania.com:••••/•••••••: 1
http://•••.scania.com: 1
http://•••••••••.scania.com: 1
http://••••••••••.••••••.•••.scania.com:••••/•••/•••••••••: 1
https://••••••••.scania.com: 1
https://•••••••••••.scania.com: 1
https://••••••••.scania.com/••••••••-•••/••••.•••: 1
https://••••.scania.com/•••••••/•••••••/•••••••/•••: 1
https://••••.scania.com: 1
https://••••.scania.com/••••••/••••••.••••••: 1

🔐 Utenze users compromesse

🛡️ Antivirus rilevati

360 Total Security: 3
McAfee VirusScan: 2
AVG Antivirus: 1
Avast Antivirus: 3
Not Found: 60
Windows Defender: 33
McAfee Firewall: 2
Kaspersky Total Security: 1
Total AV: 1
None: 1